Replace Zola with a std-only Rust generator, deployed by GitHub Pages actions

.dockerignore

@@ -0,0 +1,12 @@
+# An allowlist: the build sees only what the Dockerfile copies, never .git, target/ or public/.
+*
+!Cargo.toml
+!Cargo.lock
+!clippy.toml
+!rust-toolchain.toml
+!crates
+!content
+!layouts
+!site.yaml
+!urls.txt
+!static

.gemini/settings.json

@@ -0,0 +1,5 @@
+{
+  "context": {
+    "fileName": "AGENTS.md"
+  }
+}

.github/dependabot.yml

@@ -0,0 +1,29 @@
+# Pull requests that keep the pinned versions current: each week, the actions, whose pins are
+# commits with their version in a comment on the same line, in one pull request; and the Docker
+# image with rust-toolchain.toml in another. The two name the same Rust (ci.yml fails when they
+# differ), so they form one group, and a Rust release bumps both in one pull request.
+version: 2
+
+multi-ecosystem-groups:
+  rust:
+    schedule:
+      interval: "weekly"
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions:
+        patterns: ["*"]
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    patterns: ["*"]
+    multi-ecosystem-group: "rust"
+
+  - package-ecosystem: "rust-toolchain"
+    directory: "/"
+    patterns: ["*"]
+    multi-ecosystem-group: "rust"

.github/workflows/ci.yml

@@ -0,0 +1,62 @@
+name: ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  generator:
+    # The checks run inside the pinned Docker image, so the runner only has to provide Docker.
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Cargo.lock lists only crates of this repository
+        run: |
+          test -f Cargo.lock
+          if grep -n '^source = ' Cargo.lock; then
+            echo "::error file=Cargo.lock::Cargo.lock lists a crate from a registry or git; the generator uses the Rust standard library only"
+            exit 1
+          fi
+      - name: The Dockerfile and rust-toolchain.toml name the same Rust
+        run: |
+          image=$(sed -n 's/^FROM rust:\([0-9.]*\)-.*/\1/p' Dockerfile)
+          channel=$(sed -n 's/^channel = "\([0-9.]*\)"$/\1/p' rust-toolchain.toml)
+          echo "Dockerfile: rust:${image}; rust-toolchain.toml: ${channel}"
+          if [ -z "$image" ] || [ "$image" != "$channel" ]; then
+            echo "::error file=Dockerfile::the FROM tag names Rust ${image:-?} and rust-toolchain.toml names ${channel:-?}; bump both together"
+            exit 1
+          fi
+      - name: Format, lint, test and build in Docker, then check the pages
+        # Each error of `edu check`, `file:line:col: error: …` after the step and time of the build,
+        # is also written as an annotation, which GitHub shows on that line of the pull request.
+        run: |
+          set -o pipefail
+          docker build --progress=plain --target check . 2>&1 | sed -E '
+            p
+            s/^#[0-9]+ [0-9.]+ //
+            /^[^: ]+:[0-9]+:[0-9]+: error: /!d
+            s/%/%25/g
+            s/^([^:]+):([0-9]+):([0-9]+): error: (.*)$/::error file=\1,line=\2,col=\3::\4/'
+      # A preview for the reviewers of a pull request: the site with its drafts, as a download.
+      - name: Build the site with its drafts
+        if: github.event_name == 'pull_request'
+        run: docker build --progress=plain --target preview -o preview .
+      - name: Attach the site to the checks of the pull request
+        if: github.event_name == 'pull_request'
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: site-preview
+          path: preview/
+          retention-days: 7
+          if-no-files-found: error

.github/workflows/deploy.yml

@@ -0,0 +1,56 @@
+# Checks and builds the site in Docker, then publishes it with GitHub Pages, at the address that
+# Pages gives: rust-edu.org, or the Pages site of a fork. It runs on each push to main, and by hand
+# under Actions → Deploy to GitHub Pages → Run workflow. It needs Settings → Pages → Source set to
+# "GitHub Actions".
+name: Deploy to GitHub Pages
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+# One deploy at a time, and none stopped halfway.
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      contents: read
+      pages: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Ask Pages for the address of the site
+        id: pages
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
+      - name: Check and build the site for that address in Docker
+        env:
+          BASE_URL: ${{ steps.pages.outputs.base_url }}
+        run: docker build --progress=plain --target site --build-arg BASE_URL="$BASE_URL" -o site .
+      - name: Hand the site to Pages
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
+        with:
+          path: site/
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Publish the site
+        id: deployment
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1

.gitignore

@@ -1 +1,5 @@
-public/
+public/
+public.tmp/
+/target
+preview/
+/site/

AGENTS.md

@@ -0,0 +1,67 @@
+# Instructions for AI coding agents
+
+This repository is the source of <https://rust-edu.org/>. Its pages are Markdown files, and a small static site
+generator, written in Rust with only the standard library, builds them.
+
+Read these before you change anything:
+
+- [README.md](README.md): how to run the site and how the generator works.
+- [docs/editing.md](docs/editing.md): where each page lives, the keys of a page's header, and the Markdown that the
+  site accepts.
+
+`CLAUDE.md` and `.gemini/settings.json` only point to this file, so add new instructions here.
+
+## Commands
+
+| Command | What it does |
+|---|---|
+| `make check` | Checks format and lint, runs the tests, and checks every page and link. It must pass before a change is done. |
+| `make ci` | Runs the same checks in CI's pinned Docker image, and builds the site twice to see that both builds are the same. It needs Docker. |
+| `make serve` | Serves the site with its drafts at <http://127.0.0.1:1111>, and builds it again on a reload after a change. It runs until stopped, so start it in the background. |
+
+An error of the page check names the file, line and column of the mistake, usually with a hint. Fix the cause; do not
+weaken a check or a test to make it pass.
+
+## Where things are
+
+| Path | What it holds |
+|---|---|
+| `content/` | The pages, one Markdown file each, and the files they link to, such as PDFs |
+| `layouts/` | The HTML layout of each kind of page |
+| `static/` | `style.css` and the images |
+| `site.yaml` | The site's address, title and description, and the menu, next-step (`hero`) and footer links |
+| `urls.txt` | The addresses that other sites may link to |
+| `crates/` | The generator: `yaml`, `markdown`, `template` and `site`, which has the `edu` binary |
+| `docs/`, `research/` | The editing guide, and the generator's plan and research notes |
+| `public/`, `site/`, `preview/` | Build output, ignored by git. Never edit it. |
+
+## Pages
+
+- Pages have no HTML. Use only the Markdown that `docs/editing.md` lists; the check stops at anything else.
+- `content/` and `static/` hold only the types of file that `docs/editing.md` lists, and no symbolic links.
+- Before you move or remove a page or file, look for its address in `urls.txt`. Keep the old address of a page with
+  an `_index.md` that has `redirect_to`, or delete its line on purpose.
+
+## Generator
+
+- **Standard library only.** Do not add a crate. CI fails when `Cargo.lock` lists a crate from a registry or git.
+- **No `unsafe`.** The workspace forbids it.
+- **No panics on input.** Return an error instead of calling `unwrap`, `expect` or `panic!`. Only tests may call them.
+- **Strict parsers.** Each parser accepts only the subset of YAML, Markdown or the template language that the site
+  uses, and rejects anything else with `file:line:col` and a hint. Do not skip or guess at input it does not know.
+- **Enums over strings.** Model a closed set of cases as an enum and match every variant. Do not match on marker
+  strings or read the same bytes a second time, and give error kinds their own variants, not `&'static str` tags. A
+  `_` arm is fine only where the input is open text being parsed.
+- **Stable Markdown output.** `crates/markdown/tests/golden/` holds the expected HTML of the site's pages. Change it
+  only when the output is meant to change.
+- **Tests with each change.** Each crate has a `tests/` folder, and `crates/site/tests/sites/` holds small example
+  sites.
+
+## Build and deploy
+
+- A push to `main` publishes the site. Make each change on a branch and propose it in a pull request.
+- `rust-toolchain.toml` and the `FROM` tag of the `Dockerfile` name the same Rust. Change them together; CI fails
+  when they differ.
+- `.dockerignore` is an allowlist and the `Dockerfile` copies paths by name, so a new top-level file or folder that
+  the build needs has to be added to both.
+- The GitHub Actions are pinned by commit and the Docker image by digest. Keep them pinned.

CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

Cargo.toml

@@ -0,0 +1,38 @@
+[workspace]
+resolver = "3"
+members = [
+    "crates/markdown",
+    "crates/site",
+    "crates/template",
+    "crates/yaml",
+]
+
+[workspace.dependencies]
+edu-markdown = { path = "crates/markdown" }
+edu-template = { path = "crates/template" }
+edu-yaml = { path = "crates/yaml" }
+
+[workspace.package]
+version = "0.1.0"
+edition = "2024"
+rust-version = "1.99.1"
+license = "CC0-1.0"
+publish = false
+
+[workspace.lints.rust]
+unsafe_code = "forbid"
+
+[workspace.lints.clippy]
+unwrap_used = "warn"
+expect_used = "warn"
+panic = "warn"
+todo = "warn"
+unimplemented = "warn"
+dbg_macro = "warn"
+print_stdout = "warn"
+mod_module_files = "warn"
+wildcard_imports = "warn"
+enum_glob_use = "warn"
+cast_possible_truncation = "warn"
+cast_sign_loss = "warn"
+cast_possible_wrap = "warn"