# Changelog

All notable changes to Ty Clifford's Content Management System are documented here.

## 2026-07-05

### Added

- Added `api.php` for `.env` username/password authenticated remote management of content, media uploads, and comments.
- Added a native AppKit macOS 12+ client under `macclient/` for editing posts/pages, uploading media, moderating comments, local autosave, and optional remote draft autosave.
- Added Mac client post/page list pagination with configurable per-page counts.
- Added Mac client media pagination plus native image preview and audio/video playback.
- Added Mac client editor spell-check and auto-correct options.
- Added a Mac client Update action for saving existing posts/pages without changing their current draft/published status.
- Added a declared shortcode parser with PHP-array/JSON configuration, including `[youtube=<id>]` and `[video poster=<poster> file=<file>]`.
- Added `lone-embed.php` as the generated HTML5 video player target for video shortcodes.

### Changed

- Simplified API and Mac client authentication to `.env` username/password only, removing token-based auth.
- Fixed Mac client resizing, maximized editor text reflow, startup layout refresh, guarded undo/redo behavior, keyboard focus traversal, and standard Command-key shortcuts including Settings and Update.
- Fixed Mac client Update so edited Markdown is read from the live text storage and stale save responses no longer overwrite the editor.
- Expanded the API content save endpoint to accept `markdown`, `content`, or `body` payload fields for editor content.
- Blocked direct web access to `.env` and the `macclient/` source folder through `.htaccess`, with matching `.env` protection in the local PHP router.

## 2026-07-04

### Added

- Created a fresh PHP, SQLite, JSON, and Markdown blog CMS with Bludit-style `bl-content/pages/<slug>/index.txt` content folders.
- Added pretty URL routing through `.htaccess`, RSS feed output, sitemap output, search, pagination, categories, tags, archives, static pages, and social link rendering.
- Added a dark-neon default theme with visitor-selectable light mode and accent colors: green, blue, red, pink, purple, and orange.
- Added CLI content management through `cli/blog.php` for creating, updating, deleting, listing, rebuilding, moderating comments, editing site settings, managing social links, and reading stats summaries.
- Added SQLite-backed comments with moderation, captcha, and honeypot protection.
- Added human-readable CSV visit stats designed for spreadsheet import.
- Added subdirectory install support through `base_path`, `base_url`, route parsing, and base-aware URL generation.
- Added `cli/import-bludit.php` for importing Bludit content from a local server directory, preserving publish dates, modified dates, static pages, statuses, categories, tags, authors, cover metadata, page order, uploads, page-local files, and best-effort comments.
- Added trusted post/page rendering for raw HTML, iframes, JavaScript, and executable PHP inside Markdown `.txt` content.

### Changed

- Replaced the previous Bludit application tree with a purpose-built CMS while keeping copy-friendly Bludit-style content storage.
- Updated default branding to Ty Clifford's Content Management System.
- Expanded pagination controls to show Previous, up to 10 page numbers around the current page, Next, and a per-page summary.

### Verified

- Smoke-tested core routes, feed, sitemap, search, static pages, assets, comments, stats, and subdirectory loading with the local FrankenPHP runtime.
- Tested the Bludit importer with a synthetic local Bludit directory, including dry-run and real import cleanup.