@caelo-cms/shared 0.2.2

package/dist/media.js

@@ -0,0 +1,168 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * Media library — shared primitives.
+ *
+ * Browser-safe: Zod schemas, MIME allowlist, size caps, the variant
+ * convention. Sharp + filesystem adapters live in `@caelo-cms/admin-core`
+ * (server-only). The storage-key shape is stable here so the static
+ * generator's URL rewriter and the admin's iframe resolver agree on
+ * the canonical form `<sha>/<variant>.<ext>`.
+ */
+import { z } from "zod";
+/**
+ * Allowlisted MIME types. Anything outside this set is rejected at the
+ * upload endpoint with `415 Unsupported Media Type`. SVG is allowed
+ * but capped tight to discourage XSS via embedded scripts; the upload
+ * pipeline strips `<script>` and event-handler attributes before
+ * persisting (see {@link sanitizeSvg} in admin-core).
+ */
+export const MEDIA_ALLOWED_MIMES = [
+    "image/jpeg",
+    "image/png",
+    "image/webp",
+    "image/avif",
+    "image/gif",
+    "image/svg+xml",
+    "application/pdf",
+    "video/mp4",
+];
+/** Per-MIME size caps (bytes). Server enforces; client display only. */
+export const MEDIA_SIZE_CAPS = {
+    "image/jpeg": 10 * 1024 * 1024,
+    "image/png": 10 * 1024 * 1024,
+    "image/webp": 10 * 1024 * 1024,
+    "image/avif": 10 * 1024 * 1024,
+    "image/gif": 8 * 1024 * 1024,
+    "image/svg+xml": 1 * 1024 * 1024,
+    "application/pdf": 20 * 1024 * 1024,
+    "video/mp4": 50 * 1024 * 1024,
+};
+/** Hard ceiling on the multipart body. Per-MIME caps narrow further. */
+export const MEDIA_HARD_LIMIT_BYTES = 50 * 1024 * 1024;
+/**
+ * Variant tags. `orig` is always present (re-encoded only for SVG
+ * sanitisation). Image-only WebP variants are emitted at breakpoints
+ * the source can satisfy — a 600px-wide source skips webp-1200 +
+ * webp-1600 entirely.
+ */
+export const MEDIA_VARIANT_TAGS = [
+    "orig",
+    "webp-1600",
+    "webp-1200",
+    "webp-800",
+    "webp-400",
+];
+/** Width-in-pixels target for each WebP variant. */
+export const MEDIA_VARIANT_WIDTHS = {
+    "webp-1600": 1600,
+    "webp-1200": 1200,
+    "webp-800": 800,
+    "webp-400": 400,
+};
+/**
+ * Renderer-agnostic asset URL used in module HTML. Both the SvelteKit
+ * admin endpoint and the static generator's media-pass parse this
+ * shape; the static generator rewrites to `/_assets/...` (or a CDN
+ * URL) at deploy time.
+ *
+ * Format: `/_caelo/media/<asset-id>/<variant>`. The asset id, not the
+ * sha, so URLs survive a re-upload of the same content under a new id.
+ */
+export const MEDIA_URL_PREFIX = "/_caelo/media";
+export function buildMediaUrl(assetId, variant) {
+    return `${MEDIA_URL_PREFIX}/${assetId}/${variant}`;
+}
+// Variant token: `orig`, `webp-<width>`, or `<crop-name>-<width>`. We
+// accept any kebab-case slug so focal-point crop fan-outs like
+// `square-800` and `wide-1200` (added by P7 optimization #2) round-trip
+// without a regex update per crop name.
+const mediaUrlPattern = new RegExp(`${MEDIA_URL_PREFIX}/([0-9a-f-]{36})/([a-z][a-z0-9-]{0,63})`, "g");
+/**
+ * Extract every (assetId, variant) pair referenced in an HTML string.
+ * Used by the post-write usage-tracker and by the static-generator
+ * media-pass. Returns a deduped list to keep callers' work proportional
+ * to unique assets, not raw match count.
+ */
+export function extractMediaRefs(html) {
+    const seen = new Set();
+    const out = [];
+    for (const m of html.matchAll(mediaUrlPattern)) {
+        const key = `${m[1]}/${m[2]}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push({ assetId: m[1], variant: m[2] });
+    }
+    return out;
+}
+// ---------------------------------------------------------------------
+// Zod schemas — exposed at the Query-API boundary.
+// ---------------------------------------------------------------------
+const sha256Schema = z.string().regex(/^[0-9a-f]{64}$/, "must be hex sha256");
+export const mediaUploadInputSchema = z
+    .object({
+    sha256: sha256Schema,
+    originalName: z.string().min(1).max(512),
+    mime: z.enum(MEDIA_ALLOWED_MIMES),
+    sizeBytes: z.number().int().positive(),
+    width: z.number().int().positive().nullable(),
+    height: z.number().int().positive().nullable(),
+    alt: z.string().max(2048).default(""),
+    storageKey: z.string().min(1),
+    /** P7 optimization #3 — stamped by the upload endpoint via getMediaStorageProvider(). */
+    storageProvider: z.string().min(1).max(64).default("local"),
+    variants: z
+        .array(z.object({
+        variant: z.string().min(1).max(64),
+        format: z.string().min(1).max(32),
+        width: z.number().int().positive().nullable(),
+        height: z.number().int().positive().nullable(),
+        sizeBytes: z.number().int().positive(),
+        storageKey: z.string().min(1),
+    }))
+        .min(1),
+})
+    .strict();
+export const mediaListInputSchema = z
+    .object({
+    query: z.string().max(256).optional(),
+    mime: z.enum(MEDIA_ALLOWED_MIMES).optional(),
+    sort: z.enum(["recent", "most_used"]).default("recent"),
+    limit: z.number().int().positive().max(200).default(60),
+    offset: z.number().int().nonnegative().default(0),
+})
+    .strict();
+export const mediaUpdateAltInputSchema = z
+    .object({
+    assetId: z.string().uuid(),
+    alt: z.string().max(2048),
+})
+    .strict();
+export const mediaDeleteInputSchema = z
+    .object({
+    assetId: z.string().uuid(),
+    force: z.boolean().default(false),
+})
+    .strict();
+export const mediaRecordUsageInputSchema = z
+    .object({
+    /** Map of assetId → net delta (positive when added, negative when removed). */
+    deltas: z.record(z.string().uuid(), z.number().int()),
+})
+    .strict();
+export const mediaRecentForAiInputSchema = z
+    .object({
+    limit: z.number().int().positive().max(60).default(30),
+})
+    .strict();
+export const mediaSetCdnInputSchema = z
+    .object({
+    enabled: z.boolean(),
+    threshold: z.number().int().min(1).max(10000),
+})
+    .strict();
+/** Build the canonical storage key for a given asset variant. */
+export function buildStorageKey(sha256, variant, ext) {
+    return `${sha256}/${variant}.${ext}`;
+}
+//# sourceMappingURL=media.js.map

package/dist/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,eAAe;IACf,iBAAiB;IACjB,WAAW;CACH,CAAC;AAGX,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAA8B;IACxD,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC9B,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC7B,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC9B,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC9B,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC5B,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAChC,iBAAiB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACnC,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CAC9B,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,WAAW;IACX,WAAW;IACX,UAAU;IACV,UAAU;CACF,CAAC;AAGX,oDAAoD;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAAqD;IACpF,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,GAAG;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEhD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,OAAwB;IACrE,OAAO,GAAG,gBAAgB,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,sEAAsE;AACtE,+DAA+D;AAC/D,wEAAwE;AACxE,wCAAwC;AACxC,MAAM,eAAe,GAAG,IAAI,MAAM,CAChC,GAAG,gBAAgB,yCAAyC,EAC5D,GAAG,CACJ,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAA2C,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAW,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,mDAAmD;AACnD,wEAAwE;AAExE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,MAAM,EAAE,YAAY;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,yFAAyF;IACzF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3D,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC9B,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,+EAA+E;IAC/E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAyBZ,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,OAAiC,EACjC,GAAW;IAEX,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;AACvC,CAAC"}

package/dist/preview-compose.d.ts

@@ -0,0 +1,84 @@
+export interface ComposeModule {
+    readonly moduleId: string;
+    readonly slug: string;
+    readonly displayName: string;
+    readonly html: string;
+    readonly css: string;
+    readonly js: string;
+}
+export interface ComposeBlock {
+    readonly blockName: string;
+    readonly modules: readonly ComposeModule[];
+}
+/** P6.7.5 — structured sets carried into the composer so nav-menu
+ *  modules render from typed items and theme tokens flow into <head>. */
+export interface ComposeStructuredSets {
+    /** Map keyed by `<kind>/<slug>` (e.g. `nav-menu/header-main`). */
+    readonly byKindSlug: Readonly<Record<string, readonly unknown[]>>;
+}
+/**
+ * P9 — language-selector context. The caller (preview op + static
+ * generator) resolves the current page's per-locale URLs once and
+ * threads them in. The composer renders the selector when a module
+ * slug starts with `language-selector-`.
+ */
+export interface ComposeLanguageSelector {
+    readonly availableLocales: ReadonlyArray<{
+        code: string;
+        displayName: string;
+        href: string;
+        isCurrent: boolean;
+    }>;
+}
+export interface ComposeInput {
+    readonly templateHtml: string;
+    readonly templateCss: string;
+    readonly blocks: readonly ComposeBlock[];
+    readonly structuredSets?: ComposeStructuredSets;
+    readonly languageSelector?: ComposeLanguageSelector;
+}
+export interface ComposeOutput {
+    readonly html: string;
+    readonly replacedSlots: readonly string[];
+    readonly missingSlots: readonly string[];
+}
+export declare function composePagePreview(input: ComposeInput): ComposeOutput;
+export declare function tagModuleId(html: string, moduleId: string): string;
+/**
+ * P6.7.6 — layout-aware composer. Runs the template composer first,
+ * extracts the resulting body content, then renders the layout HTML
+ * substituting:
+ *   - `<caelo-slot name="content">` → the body of the rendered template
+ *   - other layout blocks (header / footer / etc.) → concatenated HTML
+ *     from `layoutBlocks` (per-block module attachments)
+ *
+ * Per CLAUDE.md §2 no-fallbacks: validates the layout has the required
+ * `<caelo-slot name="content">` slot before rendering. Throws
+ * `ComposeError` if the layout is malformed so callers (preview op +
+ * static generator) surface it as a structured failure rather than
+ * silently emitting broken HTML.
+ */
+export interface ComposeLayoutBlock {
+    readonly blockName: string;
+    readonly modules: readonly ComposeModule[];
+}
+export interface ComposeWithLayoutInput extends ComposeInput {
+    readonly layoutHtml: string;
+    readonly layoutCss: string;
+    readonly layoutBlocks: readonly ComposeLayoutBlock[];
+    /** Optional layout slug carried into ComposeError messages. */
+    readonly layoutSlug?: string;
+}
+/**
+ * Typed failure for the layout-aware composer. Use `kind` to dispatch:
+ *   - `layout-missing-content`: the layout HTML lacks
+ *     `<caelo-slot name="content">…</caelo-slot>` so the page body has
+ *     nowhere to land.
+ */
+export declare class ComposeError extends Error {
+    readonly kind: "layout-missing-content";
+    readonly layoutSlug: string | undefined;
+    constructor(kind: "layout-missing-content", message: string, layoutSlug?: string);
+}
+export declare function composePageWithLayout(input: ComposeWithLayoutInput): ComposeOutput;
+//# sourceMappingURL=preview-compose.d.ts.map

package/dist/preview-compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-compose.d.ts","sourceRoot":"","sources":["../src/preview-compose.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED;yEACyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC;CACnE;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CACrD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAYD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CA8DrE;AA2HD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUlE;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACrD,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;gBAC5B,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAMjF;AAkCD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB,GAAG,aAAa,CAwHlF"}

package/dist/preview-compose.js

@@ -0,0 +1,385 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * Compose a page's HTML from its template + module references.
+ *
+ * The composed output is what the admin preview iframe renders. Production
+ * static-gen (P6) will reuse this same composer once Astro is wired up, so the
+ * function is pure and dependency-free — no DB calls, no IO. The Query API op
+ * does the loads and hands the data here.
+ *
+ * Output shape:
+ *   1. `<caelo-slot name="X">` blocks have their inner HTML replaced by the
+ *      concatenated module HTML for block X (in `position` order).
+ *   2. All module CSS is concatenated into a single
+ *      `<style data-source="modules">` injected before `</head>` — template
+ *      stays the source of truth for `<head>`; we just append.
+ *   3. All module JS is concatenated into a single
+ *      `<script defer data-source="modules">` injected before `</body>`.
+ *   4. Template CSS is injected ahead of module CSS so module rules can
+ *      override template defaults via specificity.
+ *
+ * The composer never escapes module HTML — modules ARE the place where raw
+ * HTML lives (CMS_REQUIREMENTS §3.1). Templates ARE the place where the
+ * `<head>` skeleton lives. Sandboxing happens one layer up (preview iframe in
+ * the admin; in P11, plugin Web Components inside Shadow DOM).
+ */
+import { applySlotReplacements, extractInnerOfTopLevelContentSlot, listSlotNames, } from "./preview-scanner.js";
+import { renderLanguageSelector } from "./structured-sets.js";
+const HEAD_CLOSE_RE = /<\/head\s*>/i;
+const BODY_CLOSE_RE = /<\/body\s*>/i;
+function injectBefore(source, marker, fragment) {
+    const m = marker.exec(source);
+    if (!m)
+        return source + fragment; // template lacks the tag — append as fallback
+    const idx = m.index;
+    return source.slice(0, idx) + fragment + source.slice(idx);
+}
+export function composePagePreview(input) {
+    const contentByName = new Map();
+    const allCss = [];
+    const allJs = [];
+    // Template CSS first so module CSS can override it via source-order specificity.
+    if (input.templateCss.trim().length > 0)
+        allCss.push(input.templateCss);
+    for (const block of input.blocks) {
+        // P6.7 — tag every module's outermost element with
+        // `data-caelo-module-id="<uuid>"` so the live-edit overlay's iframe
+        // hover affordances can identify the clicked module.
+        //
+        // P6.7.5 — modules whose slug matches a `nav-menu/<slug>` set get
+        // their HTML replaced by a fresh render of the menu items. That's
+        // what makes a slug change update every menu without touching
+        // module HTML.
+        const renderedModuleHtml = block.modules.map((m) => {
+            const navMenuItems = lookupNavMenuItems(m.slug, input.structuredSets);
+            const langSelector = lookupLanguageSelector(m.slug, input);
+            let baseHtml;
+            if (navMenuItems !== null) {
+                baseHtml = renderNavMenuHtml(navMenuItems);
+            }
+            else if (langSelector !== null) {
+                baseHtml = langSelector;
+            }
+            else {
+                baseHtml = m.html;
+            }
+            return tagModuleId(baseHtml, m.moduleId);
+        });
+        const html = renderedModuleHtml.join("\n");
+        contentByName.set(block.blockName, html);
+        for (const m of block.modules) {
+            if (m.css.trim().length > 0)
+                allCss.push(m.css);
+            if (m.js.trim().length > 0)
+                allJs.push(m.js);
+        }
+    }
+    const replaced = applySlotReplacements(input.templateHtml, { contentByName });
+    let html = replaced.html;
+    // P6.7.5 — theme tokens become CSS custom properties on :root. Goes
+    // first so module CSS can `var(--color-primary)` and override.
+    const themeCss = renderThemeCss(input.structuredSets);
+    if (themeCss !== null) {
+        const styleTag = `<style data-source="theme">${themeCss}</style>`;
+        html = injectBefore(html, HEAD_CLOSE_RE, styleTag);
+    }
+    if (allCss.length > 0) {
+        const styleTag = `<style data-source="modules">\n${allCss.join("\n")}\n</style>`;
+        html = injectBefore(html, HEAD_CLOSE_RE, styleTag);
+    }
+    if (allJs.length > 0) {
+        const scriptTag = `<script defer data-source="modules">\n${allJs.join("\n")}\n</script>`;
+        html = injectBefore(html, BODY_CLOSE_RE, scriptTag);
+    }
+    return {
+        html,
+        replacedSlots: replaced.replacedSlots,
+        missingSlots: replaced.missingSlots,
+    };
+}
+/**
+ * Insert `data-caelo-module-id="<id>"` into the first opening tag of
+ * the module's HTML. Idempotent — re-tagging an already-tagged module
+ * is a no-op. Comments / DOCTYPE / leading whitespace before the first
+ * tag are tolerated. Modules that have no opening tag (pure text)
+ * return unchanged because there's nothing to attach to.
+ *
+ * Exported so callers (admin preview endpoint, static generator,
+ * tests) can reuse the same logic.
+ */
+/**
+ * P6.7.5 — return the items for a `nav-menu/<slug>` set when a module's
+ * slug starts with `nav-menu-`. Returns null when the module is not a
+ * nav menu (so the composer falls back to its stored HTML).
+ *
+ * Convention: a module slug `nav-menu-header-main` resolves to
+ * structuredSets[`nav-menu/header-main`].
+ */
+function lookupNavMenuItems(moduleSlug, sets) {
+    if (!sets)
+        return null;
+    const prefix = "nav-menu-";
+    if (!moduleSlug.startsWith(prefix))
+        return null;
+    const setSlug = moduleSlug.slice(prefix.length);
+    const items = sets.byKindSlug[`nav-menu/${setSlug}`];
+    return items ?? null;
+}
+/**
+ * P9 — return rendered language-selector HTML when a module's slug
+ * starts with `language-selector-`. The set's items act as overrides
+ * (relabel a locale, hide one); the available-locale list comes from
+ * the caller via `input.languageSelector`. Returns null when the
+ * module is not a language selector.
+ *
+ * Convention: a module slug `language-selector-header` resolves to
+ * structuredSets[`language-selector/header`] for overrides, and the
+ * rendered HTML lists every locale that has a published variant of
+ * the current page.
+ */
+function lookupLanguageSelector(moduleSlug, input) {
+    const prefix = "language-selector-";
+    if (!moduleSlug.startsWith(prefix))
+        return null;
+    if (!input.languageSelector || input.languageSelector.availableLocales.length === 0) {
+        return null;
+    }
+    const setSlug = moduleSlug.slice(prefix.length);
+    const overridesUnknown = input.structuredSets?.byKindSlug[`language-selector/${setSlug}`];
+    const overrides = Array.isArray(overridesUnknown)
+        ? overridesUnknown
+        : undefined;
+    return renderLanguageSelector({
+        availableLocales: input.languageSelector.availableLocales,
+        overrides,
+    });
+}
+function escapeAttr(s) {
+    return s
+        .replace(/&/g, "&amp;")
+        .replace(/"/g, "&quot;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+function escapeText(s) {
+    return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+/**
+ * Render a nav-menu's typed items into HTML. Recursively handles
+ * children for submenus. Plain `<nav><ul><li>` so site CSS can theme
+ * it via the `caelo-nav-menu` class.
+ */
+function renderNavMenuHtml(items) {
+    const safeItems = items.filter((it) => {
+        if (!it || typeof it !== "object")
+            return false;
+        const o = it;
+        return typeof o.label === "string" && typeof o.href === "string";
+    });
+    return `<nav class="caelo-nav-menu"><ul>${safeItems.map(renderNavItem).join("")}</ul></nav>`;
+}
+function renderNavItem(item) {
+    const target = item.target === "_blank" ? ' target="_blank" rel="noopener"' : "";
+    const inner = item.children && item.children.length > 0
+        ? `<ul>${item.children.map(renderNavItem).join("")}</ul>`
+        : "";
+    return `<li><a href="${escapeAttr(item.href)}"${target}>${escapeText(item.label)}</a>${inner}</li>`;
+}
+/**
+ * Render the theme/site set's tokens as `:root { --token: value; }` CSS.
+ * Returns null when no theme is configured so the composer skips
+ * injecting an empty <style> tag.
+ */
+function renderThemeCss(sets) {
+    if (!sets)
+        return null;
+    const items = sets.byKindSlug["theme/site"];
+    if (!items || items.length === 0)
+        return null;
+    const tokens = items.filter((it) => {
+        if (!it || typeof it !== "object")
+            return false;
+        const o = it;
+        return typeof o.token === "string" && typeof o.value === "string";
+    });
+    if (tokens.length === 0)
+        return null;
+    return `:root{${tokens.map((t) => `--${t.token}: ${t.value};`).join("")}}`;
+}
+export function tagModuleId(html, moduleId) {
+    if (!html)
+        return html;
+    const firstOpen = /<([a-zA-Z][a-zA-Z0-9-]*)\b([^>]*)>/;
+    const m = firstOpen.exec(html);
+    if (!m)
+        return html;
+    // Already tagged?
+    const tagAttrs = m[2] ?? "";
+    if (/\sdata-caelo-module-id\s*=/.test(tagAttrs))
+        return html;
+    const replaced = `<${m[1]}${tagAttrs} data-caelo-module-id="${moduleId}">`;
+    return html.slice(0, m.index) + replaced + html.slice(m.index + m[0].length);
+}
+/**
+ * Typed failure for the layout-aware composer. Use `kind` to dispatch:
+ *   - `layout-missing-content`: the layout HTML lacks
+ *     `<caelo-slot name="content">…</caelo-slot>` so the page body has
+ *     nowhere to land.
+ */
+export class ComposeError extends Error {
+    kind;
+    layoutSlug;
+    constructor(kind, message, layoutSlug) {
+        super(message);
+        this.name = "ComposeError";
+        this.kind = kind;
+        this.layoutSlug = layoutSlug;
+    }
+}
+const BODY_OPEN_RE = /<body\b[^>]*>/i;
+/**
+ * Extract the inner body HTML from a fully rendered template document.
+ * If the template HTML has no <body> (legacy fragment templates), the
+ * whole composed string is returned as-is — the layout's
+ * `<caelo-slot name="content">` becomes a generic mount point and the
+ * layout owns <html><head><body>.
+ *
+ * Legacy templates often wrap their slot in `<body><caelo-slot
+ * name="content">…</caelo-slot></body>` — peel off the redundant
+ * `<caelo-slot>` so we don't end up with the layout's own slot
+ * containing yet another `<caelo-slot>`. The peel uses the same
+ * htmlparser2 Parser as `applySlotReplacements` so quoting / attribute
+ * ordering / whitespace variations are handled uniformly (the previous
+ * regex silently fell through on `name='content'`, attr reordering,
+ * etc., producing nested-slot output).
+ */
+function extractBodyInner(composedHtml) {
+    const open = BODY_OPEN_RE.exec(composedHtml);
+    const close = BODY_CLOSE_RE.exec(composedHtml);
+    let inner;
+    if (!open || !close || close.index < open.index) {
+        inner = composedHtml;
+    }
+    else {
+        const start = open.index + open[0].length;
+        inner = composedHtml.slice(start, close.index);
+    }
+    const peeled = extractInnerOfTopLevelContentSlot(inner);
+    return peeled ?? inner;
+}
+export function composePageWithLayout(input) {
+    // No-fallbacks (CLAUDE.md §2): validate the layout declares a
+    // `content` slot up-front, before rendering. The htmlparser2-based
+    // walk handles attribute quoting / ordering uniformly; a layout
+    // without the slot is a misconfiguration that must surface to the
+    // caller, not silently emit a body-less page.
+    if (!listSlotNames(input.layoutHtml).includes("content")) {
+        const slug = input.layoutSlug ?? "(unknown)";
+        throw new ComposeError("layout-missing-content", `layout "${slug}" is missing the required \`<caelo-slot name="content">\` slot — fix via /security/layouts`, input.layoutSlug);
+    }
+    // CSS / JS aggregation order: layout (ground) → template (overrides
+    // layout) → modules (highest specificity). The array's source order
+    // drives cascade order in the emitted <style> tag, so we push in
+    // priority sequence rather than mixing push + unshift (which is
+    // brittle and reads as a bug).
+    const cssParts = [];
+    const jsParts = [];
+    if (input.layoutCss.trim().length > 0)
+        cssParts.push(input.layoutCss);
+    if (input.templateCss.trim().length > 0)
+        cssParts.push(input.templateCss);
+    // 1. Render the page modules into the template (slot replacement only;
+    //    no head/body manipulation here — that belongs to the layout).
+    const templateContentByName = new Map();
+    for (const block of input.blocks) {
+        const renderedModuleHtml = block.modules.map((m) => {
+            const navMenuItems = lookupNavMenuItems(m.slug, input.structuredSets);
+            const langSelector = lookupLanguageSelector(m.slug, input);
+            let baseHtml;
+            if (navMenuItems !== null) {
+                baseHtml = renderNavMenuHtml(navMenuItems);
+            }
+            else if (langSelector !== null) {
+                baseHtml = langSelector;
+            }
+            else {
+                baseHtml = m.html;
+            }
+            return tagModuleId(baseHtml, m.moduleId);
+        });
+        templateContentByName.set(block.blockName, renderedModuleHtml.join("\n"));
+        for (const m of block.modules) {
+            if (m.css.trim().length > 0)
+                cssParts.push(m.css);
+            if (m.js.trim().length > 0)
+                jsParts.push(m.js);
+        }
+    }
+    const renderedTemplate = applySlotReplacements(input.templateHtml, {
+        contentByName: templateContentByName,
+    });
+    const innerBody = extractBodyInner(renderedTemplate.html);
+    // 2. Build per-layout-block contents (header / footer / etc.) +
+    //    aggregate their CSS/JS at module specificity (already higher
+    //    than layout/template because the layout/template parts went
+    //    in first above).
+    const layoutContentByName = new Map();
+    layoutContentByName.set("content", innerBody);
+    for (const block of input.layoutBlocks) {
+        if (block.blockName === "content")
+            continue; // reserved for the page body
+        const renderedModuleHtml = block.modules.map((m) => {
+            const navMenuItems = lookupNavMenuItems(m.slug, input.structuredSets);
+            const langSelector = lookupLanguageSelector(m.slug, input);
+            let baseHtml;
+            if (navMenuItems !== null) {
+                baseHtml = renderNavMenuHtml(navMenuItems);
+            }
+            else if (langSelector !== null) {
+                baseHtml = langSelector;
+            }
+            else {
+                baseHtml = m.html;
+            }
+            return tagModuleId(baseHtml, m.moduleId);
+        });
+        layoutContentByName.set(block.blockName, renderedModuleHtml.join("\n"));
+        for (const m of block.modules) {
+            if (m.css.trim().length > 0)
+                cssParts.push(m.css);
+            if (m.js.trim().length > 0)
+                jsParts.push(m.js);
+        }
+    }
+    // 3. Render the layout HTML, substituting all named slots.
+    const replaced = applySlotReplacements(input.layoutHtml, {
+        contentByName: layoutContentByName,
+    });
+    let html = replaced.html;
+    const themeCss = renderThemeCss(input.structuredSets);
+    if (themeCss !== null) {
+        html = injectBefore(html, HEAD_CLOSE_RE, `<style data-source="theme">${themeCss}</style>`);
+    }
+    if (cssParts.length > 0) {
+        html = injectBefore(html, HEAD_CLOSE_RE, `<style data-source="modules">\n${cssParts.join("\n")}\n</style>`);
+    }
+    if (jsParts.length > 0) {
+        html = injectBefore(html, BODY_CLOSE_RE, `<script defer data-source="modules">\n${jsParts.join("\n")}\n</script>`);
+    }
+    // De-duplicate slot accounting across both passes — the template's
+    // `content` slot and the layout's `content` slot are conceptually the
+    // same surface to a caller asking "did content get filled?".
+    const replacedSet = new Set([
+        ...renderedTemplate.replacedSlots,
+        ...replaced.replacedSlots,
+    ]);
+    const missingSet = new Set([...renderedTemplate.missingSlots, ...replaced.missingSlots]);
+    for (const name of replacedSet)
+        missingSet.delete(name);
+    return {
+        html,
+        replacedSlots: [...replacedSet],
+        missingSlots: [...missingSet],
+    };
+}
+//# sourceMappingURL=preview-compose.js.map