@drawnagency/primitives 0.1.111 → 0.1.112

package/dist/lib/deck-media-assets.js

@@ -0,0 +1,25 @@
+import "../chunk-JSBRDJBE.js";
+
+// src/lib/deck-media-assets.ts
+function deckMediaAssets(manifest, sizes, provider, allowIds) {
+  const assets = {};
+  for (const [id, item] of Object.entries(manifest.images)) {
+    if (item.hidden) continue;
+    if (allowIds && !allowIds.has(id)) continue;
+    const resolved = provider.resolve(item, sizes);
+    if (!resolved) continue;
+    assets[id] = {
+      src: resolved.src,
+      alt: item.alt,
+      // The manifest always knows the intrinsic size, and supplying it is what
+      // lets the image grid reserve aspect-correct space before a byte loads.
+      width: resolved.width,
+      height: resolved.height,
+      ...resolved.tag === "video" && resolved.poster ? { poster: resolved.poster } : {}
+    };
+  }
+  return assets;
+}
+export {
+  deckMediaAssets
+};

package/dist/lib/deck-media-refs.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Every portal media reference a deck makes, extracted from RAW deck JSON.
+ *
+ * Publish-time GC builds its keep-set from the site's manifests and deletes
+ * every other bucket object (ADR 0002's "GC must learn the decks branch"), so a
+ * deck referencing an asset the editor later removed from portal content would
+ * otherwise have its media deleted underneath it.
+ *
+ * Deliberately untyped and structural rather than a walk over `Deck`: the media
+ * reference union lands with the image/grid components (#31), and this has to
+ * work the day it does without a second change here. It matches the union's
+ * discriminator shape — `{ kind: "portal", id: string }` — wherever it appears
+ * in the tree, at any depth, in any component. Staying schema-free is also what
+ * keeps this module off the deck-schema carrier list (tests/deck/viewer-isolation).
+ */
+/** One reference, with the path an author (or a model) can act on. */
+export interface DeckMediaRefSite {
+    /** `slides[2].layout.media` — the ref object's own path, not its `id` field. */
+    path: string;
+    id: string;
+}
+export declare function deckMediaRefSites(deck: unknown): DeckMediaRefSite[];
+export declare function deckMediaIds(deck: unknown): Set<string>;
+/**
+ * Media references the catalog does not contain — the server-side half of media
+ * grounding (#35).
+ *
+ * The deck schema constrains a media id's CHARSET; only the catalog can say
+ * whether an id exists, so membership is checked here rather than in the schema
+ * (which is also read by the runtime, where no catalog is in hand). One line per
+ * offending reference, in the same `path: message` shape `formatDeckIssues`
+ * produces, so the authoring loop can hand both lists back in one tool_result.
+ */
+export declare function deckUnknownMediaIssues(deck: unknown, catalogIds: ReadonlySet<string>): string[];
+//# sourceMappingURL=deck-media-refs.d.ts.map

package/dist/lib/deck-media-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deck-media-refs.d.ts","sourceRoot":"","sources":["../../src/lib/deck-media-refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAMD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAgBnE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAEvD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAO/F"}

package/dist/lib/deck-media-refs.js

@@ -0,0 +1,36 @@
+import "../chunk-JSBRDJBE.js";
+
+// src/lib/deck-media-refs.ts
+function step(path, key) {
+  return path === "" ? key : `${path}.${key}`;
+}
+function deckMediaRefSites(deck) {
+  const sites = [];
+  const visit = (node, path) => {
+    if (Array.isArray(node)) {
+      node.forEach((item, i) => visit(item, `${path}[${i}]`));
+      return;
+    }
+    if (typeof node !== "object" || node === null) return;
+    const record = node;
+    if (record.kind === "portal" && typeof record.id === "string" && record.id !== "") {
+      sites.push({ path, id: record.id });
+    }
+    for (const [key, value] of Object.entries(record)) visit(value, step(path, key));
+  };
+  visit(deck, "");
+  return sites;
+}
+function deckMediaIds(deck) {
+  return new Set(deckMediaRefSites(deck).map((site) => site.id));
+}
+function deckUnknownMediaIssues(deck, catalogIds) {
+  return deckMediaRefSites(deck).filter((site) => !catalogIds.has(site.id)).map(
+    (site) => `${step(site.path, "id")}: "${site.id}" is not in the portal media catalog \u2014 use only the ids listed under "Media catalog", copied exactly.`
+  );
+}
+export {
+  deckMediaIds,
+  deckMediaRefSites,
+  deckUnknownMediaIssues
+};

package/dist/lib/deck-tool.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The `update_deck` tool the deck-chat loop hands the model (#35, ADR 0001).
+ *
+ * The input schema is DERIVED from `DeckSchema` rather than written out, so the
+ * contract cannot drift from what the server will actually accept: every
+ * `.describe()` in the deck schema IS the LLM's documentation, and a field
+ * added there reaches the model on the next request with no second edit here.
+ *
+ * Emitted INLINE (zod's default `reused: "inline"`), not with `$defs`/`$ref`.
+ * The ref form is less than half the bytes, but names every shared node
+ * `__schema7`, which puts the layout and component descriptions an indirection
+ * away from the slot that uses them. The tool block sits in the cached prefix
+ * (tools precede `system`, and the corpus block carries the cache breakpoint),
+ * so the size is paid once per conversation while the legibility is paid on
+ * every turn.
+ */
+export declare const UPDATE_DECK_TOOL_NAME = "update_deck";
+export interface DeckToolDefinition {
+    name: string;
+    description: string;
+    /** JSON Schema; the tool's input IS the whole deck. */
+    input_schema: Record<string, unknown>;
+}
+export declare function updateDeckTool(): DeckToolDefinition;
+//# sourceMappingURL=deck-tool.d.ts.map

package/dist/lib/deck-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deck-tool.d.ts","sourceRoot":"","sources":["../../src/lib/deck-tool.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AA8CD,wBAAgB,cAAc,IAAI,kBAAkB,CAenD"}

package/dist/lib/deck-tool.js

@@ -0,0 +1,58 @@
+import {
+  DECK_COMPONENT_TYPES,
+  DECK_LAYOUT_TYPES,
+  DECK_MAX_SLIDES,
+  DECK_SCHEMA_VERSION,
+  DeckSchema
+} from "../chunk-VAYZJKVR.js";
+import "../chunk-JSBRDJBE.js";
+
+// src/lib/deck-tool.ts
+import { z } from "zod";
+var UPDATE_DECK_TOOL_NAME = "update_deck";
+var VOCABULARY = [
+  `Layouts (a slide uses exactly one, and \`type\` must be one of these ${DECK_LAYOUT_TYPES.length}): ${DECK_LAYOUT_TYPES.map((t) => `\`${t}\``).join(", ")}.`,
+  "- `centeredText` \u2014 a title card. Slot: `content` (one Component). Optional `background`: `base` or `brand`.",
+  "- `fullBleedImage` \u2014 the image IS the slide. Takes `media` directly, plus an optional `overlay` panel whose `content` must be a `richText` Component. It has no other slots.",
+  "- `columnSplit` \u2014 two slots, `left` and `right`, each one Component, at a `ratio` of `1-2` or `2-1`.",
+  "",
+  `Components (what fills a Layout slot; \`type\` must be one of these ${DECK_COMPONENT_TYPES.length}): ${DECK_COMPONENT_TYPES.map((t) => `\`${t}\``).join(", ")}.`,
+  "- `richText` \u2014 kicker / heading / subheading / paragraphs / bullets. Text only; no media.",
+  "- `image` \u2014 one `media` reference and an optional caption.",
+  "- `imageGrid` \u2014 two to twelve `items`, each with its own `media`.",
+  "- `video` \u2014 one `media` reference.",
+  "",
+  "There is nothing else. A `type` outside those lists is rejected, and so is a slot a Layout does not have \u2014 do not invent `body`, `columns`, `slots` or `children`."
+].join("\n");
+var DESCRIPTION = [
+  "Replace the ENTIRE deck with a new version. This is how every change to the deck is made \u2014 adding a slide, rewriting a line, reordering, or building the deck from nothing.",
+  "",
+  VOCABULARY,
+  "",
+  "Rules:",
+  "- Emit the COMPLETE deck every time, including slides you are not changing. There is no patch or partial form: whatever you send becomes the deck, and anything you leave out is deleted.",
+  `- Keep \`id\` exactly as it is in the current deck, and keep \`schemaVersion\` at ${DECK_SCHEMA_VERSION}.`,
+  "- Reuse a slide's existing `id` when that slide survives the edit, so revisions stay diffable. Give a genuinely new slide a new lowercase-hyphen id that no other slide uses.",
+  "- Every `media` reference must be a portal media id copied exactly from the Media catalog in your instructions. Never invent one, and never use a filename, path or URL.",
+  `- At most ${DECK_MAX_SLIDES} slides.`,
+  "",
+  "Say what you changed in your reply text; do not restate the deck JSON there."
+].join("\n");
+function updateDeckTool() {
+  const schema = z.toJSONSchema(DeckSchema, {
+    // `io: "input"` is what makes fields with defaults optional — under
+    // "output" the model would be told `background` is required. `unrepresentable
+    // : "any"` is for the superRefines (duplicate slide ids, the "a richText
+    // needs some content" rule); they are enforced server-side by parseDeck,
+    // and their messages are what a failed turn gets handed back.
+    target: "draft-2020-12",
+    io: "input",
+    unrepresentable: "any"
+  });
+  delete schema.$schema;
+  return { name: UPDATE_DECK_TOOL_NAME, description: DESCRIPTION, input_schema: schema };
+}
+export {
+  UPDATE_DECK_TOOL_NAME,
+  updateDeckTool
+};

package/dist/lib/index-ops.js

@@ -11,13 +11,13 @@ import {
   setGroupStartCollapsed,
   slugifyPageSlug,
   uniquePageSlug
-} from "../chunk-OTDA6KWL.js";
+} from "../chunk-VLPELTPI.js";
 import {
   IndexSchema,
   PageStatusSchema,
   RESERVED_SLUGS,
   SLUG_RE
-} from "../chunk-UVIYI4J6.js";
+} from "../chunk-HSXMOS5Q.js";
 import "../chunk-4TZJZU2T.js";
 import "../chunk-GGXZZ77Z.js";
 import "../chunk-JSBRDJBE.js";

package/dist/lib/index.js

@@ -5,7 +5,6 @@ import {
   contrastColor,
   contrastRatio,
   deriveContrast,
-  formatTimestamp,
   gridColsClass,
   loadSiteContent,
   loadStaticSiteContent,
@@ -18,8 +17,11 @@ import {
   safeRedirect,
   suggestAccessibleOn,
   wcagLevel
-} from "../chunk-VCCNKTFD.js";
+} from "../chunk-OGGZ5AXT.js";
 import "../chunk-FRVO75DK.js";
+import {
+  formatTimestamp
+} from "../chunk-MM7KZS5C.js";
 import {
   curatedIcons,
   getIcon
@@ -31,18 +33,17 @@ import {
   navChangeEvent
 } from "../chunk-4RNF2DRG.js";
 import {
-  ensureSanitizer,
   generateNavLinks,
-  sanitizeHtml,
   toSectionId
-} from "../chunk-RA5IOFPY.js";
+} from "../chunk-DNY72JZN.js";
+import "../chunk-CXZ5YJG4.js";
+import {
+  ensureSanitizer,
+  sanitizeHtml
+} from "../chunk-QQ3S3P5P.js";
 import {
   cn
 } from "../chunk-7EOSDFS3.js";
-import "../chunk-S2L3BPLS.js";
-import {
-  env
-} from "../chunk-WKZ7OENC.js";
 import {
   audiencePasses,
   groupDisplayLabel,
@@ -50,9 +51,15 @@ import {
   navEntries,
   pagesInNavOrder,
   reconcileNav
-} from "../chunk-OTDA6KWL.js";
+} from "../chunk-VLPELTPI.js";
+import "../chunk-S2L3BPLS.js";
+import {
+  env
+} from "../chunk-WKZ7OENC.js";
 import "../chunk-REDDTTGJ.js";
 import "../chunk-DMCGN5AS.js";
+import "../chunk-HSXMOS5Q.js";
+import "../chunk-4TZJZU2T.js";
 import {
   clearRegistry,
   createRegistry,
@@ -64,8 +71,6 @@ import {
   registerSchema,
   registerSection
 } from "../chunk-FTPETWXE.js";
-import "../chunk-UVIYI4J6.js";
-import "../chunk-4TZJZU2T.js";
 import "../chunk-GGXZZ77Z.js";
 import "../chunk-NSCT3AMV.js";
 import "../chunk-JSBRDJBE.js";

package/dist/lib/nav.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nav.d.ts","sourceRoot":"","sources":["../../src/lib/nav.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAG9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAchD;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,aAAa,EAAE,EACzB,QAAQ,CAAC,EAAE,eAAe,GACzB,OAAO,EAAE,CA8DX;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED;;qBAEqB;AACrB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;iFACiF;AACjF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,EAAE,CAAC;CACpB;AAED;2CAC2C;AAC3C,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,MAAM,MAAM,YAAY,GAAG,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CAAC,GAAG,YAAY,GAAG,eAAe,CAAC;AAE7F,MAAM,WAAW,OAAO;IACtB,+DAA+D;IAC/D,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,iFAAiF;IACjF,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAMD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,KAAK,EAAE,SAAS,CAAC;IACjB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;2BAKuB;IACvB,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;CAC5B,GAAG,OAAO,CAkEV"}
+{"version":3,"file":"nav.d.ts","sourceRoot":"","sources":["../../src/lib/nav.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAI9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAchD;AAqBD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,aAAa,EAAE,EACzB,QAAQ,CAAC,EAAE,eAAe,GACzB,OAAO,EAAE,CA8DX;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED;;qBAEqB;AACrB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;iFACiF;AACjF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,EAAE,CAAC;CACpB;AAED;2CAC2C;AAC3C,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,MAAM,MAAM,YAAY,GAAG,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CAAC,GAAG,YAAY,GAAG,eAAe,CAAC;AAE7F,MAAM,WAAW,OAAO;IACtB,+DAA+D;IAC/D,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,iFAAiF;IACjF,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAMD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,KAAK,EAAE,SAAS,CAAC;IACjB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;2BAKuB;IACvB,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;CAC5B,GAAG,OAAO,CAkEV"}

package/dist/media/index.js

@@ -18,15 +18,15 @@ import {
   resolveMedia,
   sanitizeMediaName,
   setMediaProvider
-} from "../chunk-XQMDWXD6.js";
-import "../chunk-OTDA6KWL.js";
+} from "../chunk-P3ZNCHW7.js";
+import "../chunk-VLPELTPI.js";
 import {
   ImageManifestSchema,
   MediaConfigSchema,
   MediaFolderSchema,
   MediaItemSchema,
   VariantSchema
-} from "../chunk-UVIYI4J6.js";
+} from "../chunk-HSXMOS5Q.js";
 import "../chunk-4TZJZU2T.js";
 import "../chunk-GGXZZ77Z.js";
 import "../chunk-JSBRDJBE.js";

package/dist/schemas/deck-meta.d.ts

@@ -0,0 +1,85 @@
+import { z } from "zod";
+/**
+ * `decks/{deckId}/meta.json` — the sidecar beside a published deck on the
+ * Decks Branch (ADR 0002). It carries everything a listing needs, so the list
+ * route never reads a single `deck.json`.
+ *
+ * Ownership is dual-identity from day one (feasibility decision 9): a viewer
+ * credential, an editor session, or — on env-mode standalone portals, which
+ * have no named credentials — the audience alone. Retrofitting that later
+ * would mean rewriting every deck's meta.
+ */
+/** Bumped when the sidecar's shape changes in a way old readers can't parse. */
+export declare const DECK_META_SCHEMA_VERSION = 1;
+/**
+ * Who owns a deck. `viewer` is the normal case (ownership is credential-keyed);
+ * `editor` covers a deck an agency editor built; `audience` is the env-mode
+ * standalone degradation, where a shared per-audience password means there is
+ * no person to attribute to.
+ */
+export declare const DeckOwnerSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"viewer">;
+    username: z.ZodString;
+    audience: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"editor">;
+    userId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"audience">;
+    audience: z.ZodString;
+}, z.core.$strip>], "kind">;
+/**
+ * Deliberately a LOOSE object: grants and the Public Link token land in later
+ * tickets (#36/#37), and a portal running an older package version must not
+ * silently strip fields it doesn't know when it rewrites this file. This is the
+ * same failure mode the nav sidecar exists to avoid — with unknown keys
+ * preserved, an old writer round-trips them instead of deleting them.
+ */
+export declare const DeckMetaSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodString;
+    /** Mirrors deck.title so a listing needs no deck body. */
+    title: z.ZodString;
+    /** Mirrors deck.slides.length, for the same reason. */
+    slideCount: z.ZodNumber;
+    owner: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"viewer">;
+        username: z.ZodString;
+        audience: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"editor">;
+        userId: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"audience">;
+        audience: z.ZodString;
+    }, z.core.$strip>], "kind">;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    /**
+     * Bucket hashes this deck's media resolved to when it was published, and the
+     * whole reason publish-time GC can protect them (ADR 0002).
+     *
+     * A deck references media by MANIFEST ID, and an id is only resolvable to a
+     * bucket hash while the manifest still carries the entry — which is exactly
+     * what stops being true in the case the keep-set exists for: the editor
+     * removes the media from the library, the entry goes, and the object then
+     * looks unreferenced to every reader. Resolving at publish time and recording
+     * the answer here is what survives that. Absent when the deck references no
+     * bucket-backed media, which is every deck until the media components land.
+     */
+    assetHashes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$loose>;
+export type DeckOwner = z.infer<typeof DeckOwnerSchema>;
+export type DeckMeta = z.infer<typeof DeckMetaSchema>;
+export type DeckMetaParseResult = {
+    ok: true;
+    meta: DeckMeta;
+} | {
+    ok: false;
+    errors: string[];
+};
+/** Parse an untrusted meta sidecar, reporting every problem at once. */
+export declare function parseDeckMeta(input: unknown): DeckMetaParseResult;
+/** Pretty-printed with a trailing newline, matching every other repo-stored JSON. */
+export declare function serializeDeckMeta(meta: DeckMeta): string;
+//# sourceMappingURL=deck-meta.d.ts.map

package/dist/schemas/deck-meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deck-meta.d.ts","sourceRoot":"","sources":["../../src/schemas/deck-meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;2BAgB1B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,cAAc;;;IAGzB,0DAA0D;;IAE1D,uDAAuD;;;;;;;;;;;;;;;IAKvD;;;;;;;;;;;OAWG;;iBAEH,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEjG,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAGjE;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAExD"}

package/dist/schemas/deck-meta.js

@@ -0,0 +1,64 @@
+import {
+  DeckIdSchema,
+  formatDeckIssues
+} from "../chunk-VAYZJKVR.js";
+import "../chunk-JSBRDJBE.js";
+
+// src/schemas/deck-meta.ts
+import { z } from "zod";
+var DECK_META_SCHEMA_VERSION = 1;
+var DeckOwnerSchema = z.discriminatedUnion("kind", [
+  z.object({
+    kind: z.literal("viewer"),
+    /** The `viewer_credentials` username — the person-level key. */
+    username: z.string().min(1).max(200),
+    /** The audience that credential signed in as, for editor-side context. */
+    audience: z.string().min(1).max(200)
+  }),
+  z.object({
+    kind: z.literal("editor"),
+    userId: z.string().min(1).max(200)
+  }),
+  z.object({
+    kind: z.literal("audience"),
+    audience: z.string().min(1).max(200)
+  })
+]);
+var DeckMetaSchema = z.looseObject({
+  schemaVersion: z.literal(DECK_META_SCHEMA_VERSION),
+  id: DeckIdSchema,
+  /** Mirrors deck.title so a listing needs no deck body. */
+  title: z.string().min(1).max(120),
+  /** Mirrors deck.slides.length, for the same reason. */
+  slideCount: z.number().int().min(1),
+  owner: DeckOwnerSchema,
+  createdAt: z.iso.datetime(),
+  updatedAt: z.iso.datetime(),
+  /**
+   * Bucket hashes this deck's media resolved to when it was published, and the
+   * whole reason publish-time GC can protect them (ADR 0002).
+   *
+   * A deck references media by MANIFEST ID, and an id is only resolvable to a
+   * bucket hash while the manifest still carries the entry — which is exactly
+   * what stops being true in the case the keep-set exists for: the editor
+   * removes the media from the library, the entry goes, and the object then
+   * looks unreferenced to every reader. Resolving at publish time and recording
+   * the answer here is what survives that. Absent when the deck references no
+   * bucket-backed media, which is every deck until the media components land.
+   */
+  assetHashes: z.array(z.string().min(1)).optional()
+});
+function parseDeckMeta(input) {
+  const result = DeckMetaSchema.safeParse(input);
+  return result.success ? { ok: true, meta: result.data } : { ok: false, errors: formatDeckIssues(result.error) };
+}
+function serializeDeckMeta(meta) {
+  return JSON.stringify(meta, null, 2) + "\n";
+}
+export {
+  DECK_META_SCHEMA_VERSION,
+  DeckMetaSchema,
+  DeckOwnerSchema,
+  parseDeckMeta,
+  serializeDeckMeta
+};