@drawnagency/primitives 0.1.113 → 0.1.115

package/README.md

@@ -25,4 +25,4 @@ import type { AuthProvider } from "@drawnagency/primitives/auth";
 
 ## Part of the Drawn Portal Framework
 
-Built by [Drawn Agency](https://drawnagency.com). See [@drawnagency/core](https://www.npmjs.com/package/@drawnagency/core) for the full framework.
+Built by [Drawn Agency](https://drawn.agency). See [@drawnagency/core](https://www.npmjs.com/package/@drawnagency/core) for the full framework.

package/dist/auth/cookies.d.ts

@@ -27,6 +27,45 @@ export interface AudienceClaims {
  */
 export declare function verifyAudienceClaims(token: string): Promise<AudienceClaims | null>;
 export declare function verifyAudienceToken(token: string): Promise<string | null>;
+export declare const IMPERSONATION_COOKIE = "bp-impersonate";
+export declare const IMPERSONATION_MAX_AGE_SECONDS: number;
+/** The audience someone is viewing the site as (#61). */
+export interface ImpersonationClaims {
+    audience: string;
+    displayName: string;
+    isDefault: boolean;
+}
+/**
+ * The login an impersonation rides on: an editor session, or a sign-in under
+ * the site's DEFAULT audience (the client, who can also see Audience Details).
+ * No other viewer can impersonate.
+ */
+export type Impersonator = {
+    kind: "editor";
+    userId: string | null;
+} | {
+    kind: "audience";
+    audience: string;
+    username: string | null;
+};
+/**
+ * Who may impersonate on this request. An editor session wins over an audience
+ * cookie when a browser carries both, matching how every route resolves them.
+ */
+export declare function impersonatorFor(session: Session | null, audience: AudienceClaims | null): Impersonator | null;
+export declare function signImpersonationToken(target: ImpersonationClaims, by: Impersonator): Promise<string>;
+/**
+ * Claims of an impersonation token, or null unless it is validly signed,
+ * unexpired, and minted by this exact login: the same editor (by userId), or
+ * the same default-audience sign-in (audience + username). That binding is what
+ * stops an impersonation outliving its login on a shared browser. Password-mode
+ * editors have no per-user id, so there the binding is "any password-mode
+ * editor session".
+ */
+export declare function verifyImpersonationClaims(token: string, impersonator: Impersonator): Promise<ImpersonationClaims | null>;
+export declare function setImpersonationCookie(cookies: CookieLike, token: string, isProduction: boolean): void;
+/** Paired with `setImpersonationCookie` so the path cannot drift — see `clearSessionCookie`. */
+export declare function clearImpersonationCookie(cookies: CookieLike): void;
 export declare function setSessionCookie(cookies: CookieLike, token: string, isProduction: boolean): void;
 /**
  * Clear the editor session cookie. Paired with `setSessionCookie` so the `path`

package/dist/auth/cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/auth/cookies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGnD,eAAO,MAAM,cAAc,eAAe,CAAC;AAC3C,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,eAAO,MAAM,uBAAuB,QAAe,CAAC;AAMpD,eAAO,MAAM,wBAAwB,QAAe,CAAC;AAErD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAWxE;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAe/E;AAMD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,SAAS,UAAQ,EACjB,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAcxF;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE/E;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,OAAO,GACpB,IAAI,CAQN;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAE5D"}
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/auth/cookies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGnD,eAAO,MAAM,cAAc,eAAe,CAAC;AAC3C,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,eAAO,MAAM,uBAAuB,QAAe,CAAC;AAMpD,eAAO,MAAM,wBAAwB,QAAe,CAAC;AAErD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAWxE;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAe/E;AAMD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,SAAS,UAAQ,EACjB,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAcxF;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE/E;AAED,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AACrD,eAAO,MAAM,6BAA6B,QAAU,CAAC;AAErD,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEpE;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,YAAY,GAAG,IAAI,CAI7G;AAyBD,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAY3G;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAiBrC;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,IAAI,CAQtG;AAED,gGAAgG;AAChG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAElE;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,OAAO,GACpB,IAAI,CAQN;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAE5D"}

package/dist/auth/index.js

@@ -13,13 +13,13 @@ import {
   verifyAudienceClaims,
   verifyAudienceToken,
   verifySessionToken
-} from "../chunk-SW6PCQQD.js";
+} from "../chunk-KQA772WQ.js";
 import {
   isSameOriginRequest,
   requireSessionSecret,
   safeNextPath
-} from "../chunk-S2L3BPLS.js";
-import "../chunk-WKZ7OENC.js";
+} from "../chunk-7SX42OP4.js";
+import "../chunk-BQ5TZZUE.js";
 import "../chunk-JSBRDJBE.js";
 export {
   AUDIENCE_COOKIE,

package/dist/chunk-4WQ36ZP7.js

@@ -0,0 +1,83 @@
+import {
+  diagnosticsCollector
+} from "./chunk-GNF6KFQ7.js";
+
+// src/lib/tags.ts
+function reconcileTags(entries, sections) {
+  return reconcileTagsReport(entries, sections).entries;
+}
+function reconcileTagsReport(entries, sections) {
+  const report = diagnosticsCollector();
+  const entryList = Array.isArray(entries) ? entries : [];
+  const validIds = new Set(sections && typeof sections === "object" ? Object.keys(sections) : []);
+  const seenTagIds = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const entry of entryList) {
+    if (!entry || typeof entry !== "object") continue;
+    if (typeof entry.id !== "string" || entry.id === "") continue;
+    if (seenTagIds.has(entry.id)) {
+      report.add("duplicate-id", entry.id);
+      continue;
+    }
+    seenTagIds.add(entry.id);
+    const claimed = Array.isArray(entry.sectionIds) ? entry.sectionIds : [];
+    const sectionIds = [];
+    for (const id of claimed) {
+      if (typeof id !== "string") continue;
+      if (!validIds.has(id)) report.add("dangling", id);
+      else if (sectionIds.includes(id)) report.add("duplicate-member", id);
+      else sectionIds.push(id);
+    }
+    result.push({ id: entry.id, label: typeof entry.label === "string" ? entry.label : "", sectionIds });
+  }
+  return { entries: result, diagnostics: report.list() };
+}
+function siteTags(index) {
+  return reconcileTags(index.tags ?? [], index.sections);
+}
+function tagDisplayLabel(label) {
+  return label || "Untitled tag";
+}
+function mergeTags(args) {
+  const { base, local, remote } = args;
+  if (remote === void 0) return local?.map((t) => ({ ...t, sectionIds: [...t.sectionIds] }));
+  if (base === void 0 || local === void 0) return remote.map((t) => ({ ...t, sectionIds: [...t.sectionIds] }));
+  const firstById = (tags) => {
+    const byId = /* @__PURE__ */ new Map();
+    for (const t of tags) if (!byId.has(t.id)) byId.set(t.id, t);
+    return byId;
+  };
+  const baseById = firstById(base);
+  const localById = firstById(local);
+  const remoteIds = new Set(remote.map((t) => t.id));
+  const result = [];
+  for (const r of remote) {
+    const b = baseById.get(r.id);
+    const l = localById.get(r.id);
+    if (b && !l) continue;
+    const members = [...r.sectionIds];
+    let label = r.label;
+    if (b && l) {
+      if (l.label !== b.label) label = l.label;
+      for (const id of l.sectionIds) if (!b.sectionIds.includes(id) && !members.includes(id)) members.push(id);
+      for (const id of b.sectionIds) {
+        if (l.sectionIds.includes(id)) continue;
+        const at = members.indexOf(id);
+        if (at !== -1) members.splice(at, 1);
+      }
+    }
+    result.push({ id: r.id, label, sectionIds: members });
+  }
+  for (const l of local) {
+    if (!remoteIds.has(l.id) && !baseById.has(l.id)) result.push({ ...l, sectionIds: [...l.sectionIds] });
+  }
+  return result;
+}
+
+export {
+  reconcileTags,
+  reconcileTagsReport,
+  siteTags,
+  tagDisplayLabel,
+  mergeTags
+};

package/dist/{chunk-REDDTTGJ.js → chunk-4Y2JQQZL.js}

@@ -21,7 +21,25 @@ var NavFileSchema = z.object({
   entries: z.array(NavEntrySchema)
 });
 
+// src/schemas/tags.ts
+import { z as z2 } from "zod";
+var TagEntrySchema = z2.object({
+  id: z2.string().min(1),
+  /** May be blank — agent-authored files can omit it; UI falls back to "Untitled tag". */
+  label: z2.string().catch(""),
+  // Everything but `id` repairs rather than rejects. A rejected entry marks the
+  // read degraded, and a degraded tags.json refuses EVERY tags write until
+  // someone fixes the file by hand — far too heavy a price for one blank id in
+  // one tag's list, which reconcileTags would drop anyway.
+  sectionIds: z2.array(z2.unknown()).catch([]).transform((ids) => ids.filter((id) => typeof id === "string" && id !== ""))
+});
+var TagsFileSchema = z2.object({
+  tags: z2.array(TagEntrySchema)
+});
+
 export {
   NavEntrySchema,
-  NavFileSchema
+  NavFileSchema,
+  TagEntrySchema,
+  TagsFileSchema
 };

package/dist/chunk-5GFACGSN.js

@@ -0,0 +1,6 @@
+// src/lib/reference-type.ts
+var REFERENCE_TYPE = "reference";
+
+export {
+  REFERENCE_TYPE
+};

package/dist/{chunk-AHALSCQH.js → chunk-67P34WNW.js}

@@ -1,100 +1,50 @@
 import {
   documentOptionsSchema
 } from "./chunk-4TZJZU2T.js";
+import {
+  MediaConfigSchema
+} from "./chunk-APIJPTFG.js";
 import {
   FontNameSchema,
   HexColorSchema
-} from "./chunk-GGXZZ77Z.js";
-
-// src/schemas/media.ts
-import { z } from "zod";
-var VariantSchema = z.object({
-  width: z.number().int().positive(),
-  height: z.number().int().positive(),
-  size: z.number().int().nonnegative()
-});
-var MediaFolderSchema = z.object({
-  name: z.string().min(1),
-  parentId: z.string().nullable()
-  // null = root
-});
-var MediaItemSchema = z.object({
-  id: z.string(),
-  hash: z.string(),
-  kind: z.enum(["image", "animated", "video"]),
-  originalName: z.string(),
-  width: z.number().int().positive(),
-  height: z.number().int().positive(),
-  mimeType: z.string(),
-  size: z.number().int().nonnegative(),
-  folder: z.string(),
-  variants: z.array(VariantSchema),
-  alt: z.string().default(""),
-  // Where the original bytes live. "github" = committed to the repo (images,
-  // small loops); "assets" = large original in the AssetStore bucket. Legacy
-  // manifests have no field — default keeps them on the git path.
-  storage: z.enum(["github", "assets"]).default("github"),
-  // Public CDN URL for assets-backed originals, baked at upload time so
-  // resolution needs no env access in the browser or at SSR.
-  url: z.string().optional(),
-  // Seconds; videos only. Informational (library UI).
-  duration: z.number().positive().optional(),
-  // Display folder (MediaFolderSchema key). Absent = root/unfiled. NOT the
-  // git storage dir — that's `folder` above, which never changes.
-  folderId: z.string().optional(),
-  // System-generated assets (e.g. the Phase 3 social-preview raster) set this
-  // so the media-library UI can exclude them. Absent on all user uploads.
-  hidden: z.boolean().optional()
-});
-var ImageManifestSchema = z.object({
-  images: z.record(z.string(), MediaItemSchema),
-  folders: z.record(z.string(), MediaFolderSchema).default({})
-});
-var MediaConfigSchema = z.object({
-  sizes: z.array(z.number()).default([640, 1080, 1920]),
-  maxFileSize: z.number().default(5242880),
-  quality: z.number().min(1).max(100).default(85),
-  // Per-file cap for bucket-backed video uploads (bytes). The git-path cap is
-  // maxFileSize; anything between the two routes to the AssetStore.
-  maxAssetSize: z.number().default(209715200)
-});
+} from "./chunk-AASEGXNT.js";
 
 // src/schemas/site-config.ts
-import { z as z2 } from "zod";
+import { z } from "zod";
 
 // src/lib/corner-radius.ts
 var CORNER_RADIUS_OPTIONS = ["none", "small", "medium", "large"];
 
 // src/schemas/site-config.ts
-var StatusSchema = z2.enum(["draft", "live", "archived", "published"]).transform(
+var StatusSchema = z.enum(["draft", "live", "archived", "published"]).transform(
   (val) => val === "published" ? "live" : val
 );
-var SectionMetaSchema = z2.object({
-  type: z2.string(),
+var SectionMetaSchema = z.object({
+  type: z.string(),
   status: StatusSchema,
-  access: z2.array(z2.string())
+  access: z.array(z.string())
 });
 var RESERVED_SLUGS = ["edit", "api", "login", "set-password", "404", "present", "print", "audiences", "decks"];
 var PARSE_REJECTED_SLUGS = ["edit", "api", "login", "set-password", "404"];
-var PageStatusSchema = z2.enum(["live", "archived"]);
-var PageSchema = z2.object({
-  id: z2.string().min(1),
-  title: z2.string(),
-  slug: z2.string(),
-  isHome: z2.boolean(),
-  showInNav: z2.boolean(),
+var PageStatusSchema = z.enum(["live", "archived"]);
+var PageSchema = z.object({
+  id: z.string().min(1),
+  title: z.string(),
+  slug: z.string(),
+  isHome: z.boolean(),
+  showInNav: z.boolean(),
   status: PageStatusSchema,
-  access: z2.array(z2.string()),
-  order: z2.array(z2.string()),
+  access: z.array(z.string()),
+  order: z.array(z.string()),
   document: documentOptionsSchema.optional()
 });
 var SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-var RawIndexSchema = z2.object({
-  siteId: z2.string(),
-  order: z2.array(z2.string()).optional(),
-  pages: z2.array(PageSchema).optional(),
-  sections: z2.record(z2.string(), SectionMetaSchema),
-  lastModified: z2.string().nullable().optional()
+var RawIndexSchema = z.object({
+  siteId: z.string(),
+  order: z.array(z.string()).optional(),
+  pages: z.array(PageSchema).optional(),
+  sections: z.record(z.string(), SectionMetaSchema),
+  lastModified: z.string().nullable().optional()
 });
 function normalizeRawIndex(data) {
   if (data.pages && data.pages.length > 0) {
@@ -124,34 +74,34 @@ function normalizeRawIndex(data) {
     lastModified: data.lastModified ?? null
   };
 }
-var CanonicalIndexSchema = z2.object({
-  siteId: z2.string(),
-  pages: z2.array(PageSchema),
-  sections: z2.record(z2.string(), SectionMetaSchema),
-  lastModified: z2.string().nullable().optional()
+var CanonicalIndexSchema = z.object({
+  siteId: z.string(),
+  pages: z.array(PageSchema),
+  sections: z.record(z.string(), SectionMetaSchema),
+  lastModified: z.string().nullable().optional()
 }).superRefine((data, ctx) => {
   const homes = data.pages.filter((p) => p.isHome);
   if (homes.length !== 1) {
-    ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "Exactly one page must be the home page" });
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: "Exactly one page must be the home page" });
   }
   if (homes[0]?.status === "archived") {
-    ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "The home page cannot be archived" });
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: "The home page cannot be archived" });
   }
   if (homes[0] && homes[0].slug !== "") {
-    ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "The home page slug must be empty" });
+    ctx.addIssue({ code: z.ZodIssueCode.custom, message: "The home page slug must be empty" });
   }
   const seenSlugs = /* @__PURE__ */ new Set();
   for (const p of data.pages) {
     if (!p.isHome) {
       if (!SLUG_RE.test(p.slug)) {
-        ctx.addIssue({ code: z2.ZodIssueCode.custom, message: `Invalid slug "${p.slug}"` });
+        ctx.addIssue({ code: z.ZodIssueCode.custom, message: `Invalid slug "${p.slug}"` });
       }
       if (PARSE_REJECTED_SLUGS.includes(p.slug)) {
-        ctx.addIssue({ code: z2.ZodIssueCode.custom, message: `Slug "${p.slug}" is reserved` });
+        ctx.addIssue({ code: z.ZodIssueCode.custom, message: `Slug "${p.slug}" is reserved` });
       }
     }
     if (seenSlugs.has(p.slug)) {
-      ctx.addIssue({ code: z2.ZodIssueCode.custom, message: `Duplicate slug "${p.slug}"` });
+      ctx.addIssue({ code: z.ZodIssueCode.custom, message: `Duplicate slug "${p.slug}"` });
     }
     seenSlugs.add(p.slug);
   }
@@ -166,21 +116,21 @@ var CanonicalIndexSchema = z2.object({
   const duplicated = [...counts].filter(([, n]) => n > 1).map(([id]) => id);
   if (duplicated.length > 0) {
     ctx.addIssue({
-      code: z2.ZodIssueCode.custom,
+      code: z.ZodIssueCode.custom,
       message: `Section id(s) appear in more than one page order: ${fmtIds(duplicated)}`
     });
   }
   const orderedNotInSections = [...fromPagesSet].filter((id) => !sectionSet.has(id));
   if (orderedNotInSections.length > 0) {
     ctx.addIssue({
-      code: z2.ZodIssueCode.custom,
+      code: z.ZodIssueCode.custom,
       message: `Section id(s) in a page order but missing from sections{}: ${fmtIds(orderedNotInSections)}`
     });
   }
   const sectionsNotOrdered = sectionKeys.filter((id) => !fromPagesSet.has(id));
   if (sectionsNotOrdered.length > 0) {
     ctx.addIssue({
-      code: z2.ZodIssueCode.custom,
+      code: z.ZodIssueCode.custom,
       message: `Section id(s) in sections{} but not in any page order: ${fmtIds(sectionsNotOrdered)}`
     });
   }
@@ -189,60 +139,60 @@ var IndexSchema = RawIndexSchema.transform(normalizeRawIndex).pipe(CanonicalInde
 function normalizeSiteIndex(raw) {
   return IndexSchema.parse(raw);
 }
-var ChatbotTaskIdSchema = z2.string().min(1).max(32).regex(
+var ChatbotTaskIdSchema = z.string().min(1).max(32).regex(
   /^[a-z0-9](?:[a-z0-9_-]*[a-z0-9])?$/,
   "Task id must be lowercase letters, numbers, dashes, or underscores"
 );
-var ChatbotTaskSchema = z2.object({
+var ChatbotTaskSchema = z.object({
   id: ChatbotTaskIdSchema,
-  label: z2.string().min(1).max(60),
-  prompt: z2.string().max(4e3),
+  label: z.string().min(1).max(60),
+  prompt: z.string().max(4e3),
   // Audience names allowed to see this task; [] = all — same semantics as SectionMeta.access.
-  access: z2.array(z2.string()).default([])
+  access: z.array(z.string()).default([])
 });
-var ChatbotConfigSchema = z2.object({
-  enabled: z2.boolean().default(false),
+var ChatbotConfigSchema = z.object({
+  enabled: z.boolean().default(false),
   // Assistant display name shown in the widget header and used in the system
   // prompt. Blank falls back to "Portal Assistant" (resolveChatbotName).
-  name: z2.string().max(60).default("Portal Assistant"),
+  name: z.string().max(60).default("Portal Assistant"),
   // Per-audience name overrides, keyed by audience name — same inert-when-
   // deselected semantics as audiencePrompts.
-  audienceNames: z2.record(z2.string(), z2.string().max(60)).default({}),
+  audienceNames: z.record(z.string(), z.string().max(60)).default({}),
   // Brand-flavored waiting phrases, shown (with "…" appended) while the
   // assistant streams no text yet. Empty = the widget's "Thinking…" default.
-  thinkingPhrases: z2.array(z2.string().max(80)).max(30).default([]),
-  systemPrompt: z2.string().max(8e3).default(""),
+  thinkingPhrases: z.array(z.string().max(80)).max(30).default([]),
+  systemPrompt: z.string().max(8e3).default(""),
   // Audience names the widget is shown to — strict opt-in: [] = no viewer
   // sees it (editors always can via /edit). Gates: [...slug].astro + /api/chat.
-  audiences: z2.array(z2.string()).default([]),
+  audiences: z.array(z.string()).default([]),
   // Per-audience prompt overlays, keyed by audience name. Appended AFTER the
   // base systemPrompt, and ONLY for requests whose session audience matches
   // (or an editor's explicit test-panel simulation) — enforced in
   // assembleBrandChat. Keys are not validated against the audience list:
   // entries for deselected/renamed audiences are inert (strict opt-in means
   // those audiences cannot chat at all).
-  audiencePrompts: z2.record(z2.string(), z2.string().max(8e3)).default({}),
-  tasks: z2.array(ChatbotTaskSchema).max(20).default([])
+  audiencePrompts: z.record(z.string(), z.string().max(8e3)).default({}),
+  tasks: z.array(ChatbotTaskSchema).max(20).default([])
 }).superRefine((cfg, ctx) => {
   const seen = /* @__PURE__ */ new Set();
   for (const t of cfg.tasks) {
     if (seen.has(t.id)) {
-      ctx.addIssue({ code: z2.ZodIssueCode.custom, message: `Duplicate task id "${t.id}"` });
+      ctx.addIssue({ code: z.ZodIssueCode.custom, message: `Duplicate task id "${t.id}"` });
     }
     seen.add(t.id);
   }
 });
-var DeckBuilderConfigSchema = z2.object({
+var DeckBuilderConfigSchema = z.object({
   // Audience names whose members may CREATE decks — a Deck Creator. Strict
   // opt-in exactly like chatbot.audiences: [] = no viewer may build a deck.
   // Editors are super-admins over decks and are never gated by this list.
   // Gates: [...slug].astro's FAB, /decks, and POST /api/decks (canCreateDeck).
-  audiences: z2.array(z2.string()).default([]).describe(
+  audiences: z.array(z.string()).default([]).describe(
     "Audience names allowed to create decks in the Deck Builder. Strict opt-in \u2014 an empty list means no viewer can. Editors always can."
   )
 });
-var SiteConfigSchema = z2.object({
-  siteName: z2.string().default("Brand Portal"),
+var SiteConfigSchema = z.object({
+  siteName: z.string().default("Brand Portal"),
   primaryColor: HexColorSchema.default("#009ca6"),
   primaryContrast: HexColorSchema.default("#f0f0f0"),
   // Dark-mode overrides for the brand primary / accent. Only applied when
@@ -251,31 +201,31 @@ var SiteConfigSchema = z2.object({
   // CSS light-dark() function (see lib/theme-vars.ts).
   primaryColorDark: HexColorSchema.nullable().default(null),
   primaryContrastDark: HexColorSchema.nullable().default(null),
-  darkMode: z2.enum(["light", "dark", "optional"]).default("light"),
+  darkMode: z.enum(["light", "dark", "optional"]).default("light"),
   // Maps to the --radius-outer design token (see lib/corner-radius.ts);
   // defaults so pre-existing site-config.json files keep parsing.
-  cornerRadius: z2.enum(CORNER_RADIUS_OPTIONS).default("medium"),
+  cornerRadius: z.enum(CORNER_RADIUS_OPTIONS).default("medium"),
   headingFont: FontNameSchema.default("system-ui"),
   bodyFont: FontNameSchema.default("system-ui"),
-  uppercaseHeadings: z2.boolean().default(true),
-  uppercaseSubheadings: z2.boolean().default(true),
-  uppercaseNavHeadings: z2.boolean().default(true),
-  googleFontsUrl: z2.string().refine((url) => url.startsWith("https://fonts.googleapis.com/"), "Must be a Google Fonts URL").nullable().default(null),
+  uppercaseHeadings: z.boolean().default(true),
+  uppercaseSubheadings: z.boolean().default(true),
+  uppercaseNavHeadings: z.boolean().default(true),
+  googleFontsUrl: z.string().refine((url) => url.startsWith("https://fonts.googleapis.com/"), "Must be a Google Fonts URL").nullable().default(null),
   // Favicon stored as a data URL (SVG/PNG, small) so it travels with
   // site-config.json — no media manifest or CDN round-trip needed.
-  favicon: z2.string().refine((v) => v.startsWith("data:image/"), "Favicon must be an image data URL").nullable().default(null),
+  favicon: z.string().refine((v) => v.startsWith("data:image/"), "Favicon must be an image data URL").nullable().default(null),
   // Optional site logo, stored as media-library references (so it participates
   // in usage tracking + GC protection, and its resolved URL is reusable for the
   // Phase 3 social-preview image). Every field defaults so pre-existing
   // site-config.json files keep parsing.
-  logo: z2.object({
-    light: z2.object({ imageId: z2.string() }),
-    dark: z2.object({ imageId: z2.string() }).nullable().default(null),
-    invertInDark: z2.boolean().default(false),
-    showInNav: z2.boolean().default(true),
+  logo: z.object({
+    light: z.object({ imageId: z.string() }),
+    dark: z.object({ imageId: z.string() }).nullable().default(null),
+    invertInDark: z.boolean().default(false),
+    showInNav: z.boolean().default(true),
     // A nav logo stands in for the site name by default; the toggle is for
     // wordmark-less logos that still need the name spelled out.
-    hideTitle: z2.boolean().default(true)
+    hideTitle: z.boolean().default(true)
   }).nullable().default(null),
   media: MediaConfigSchema.default(MediaConfigSchema.parse({})),
   // Composed social-preview raster, stored as a media-library reference so it
@@ -284,17 +234,17 @@ var SiteConfigSchema = z2.object({
   // (the /api/media route only serves exact generated-variant widths), so the
   // og:image URL + dimensions are correct. Defaults null so pre-existing
   // configs keep parsing and sites without a preview emit no og:image tags.
-  previewImage: z2.object({
-    imageId: z2.string(),
-    width: z2.number().int().positive(),
-    height: z2.number().int().positive(),
+  previewImage: z.object({
+    imageId: z.string(),
+    width: z.number().int().positive(),
+    height: z.number().int().positive(),
     // Compose-logic version that produced this raster. Pre-existing rasters
     // (and manifests written before this field) default to 0, which is below
     // any current PREVIEW_COMPOSE_VERSION, so the editor regenerates them.
-    version: z2.number().int().nonnegative().default(0)
+    version: z.number().int().nonnegative().default(0)
   }).nullable().default(null),
   // Optional site description → og:description + <meta name="description">.
-  description: z2.string().max(300).nullable().default(null),
+  description: z.string().max(300).nullable().default(null),
   // Brand chatbot config (editor-owned; the platform kill switch lives in the
   // sites table, not here). Every field defaults so pre-existing
   // site-config.json files keep parsing.
@@ -305,11 +255,6 @@ var SiteConfigSchema = z2.object({
 });
 
 export {
-  VariantSchema,
-  MediaFolderSchema,
-  MediaItemSchema,
-  ImageManifestSchema,
-  MediaConfigSchema,
   StatusSchema,
   SectionMetaSchema,
   RESERVED_SLUGS,

package/dist/{chunk-S2L3BPLS.js → chunk-7SX42OP4.js}

@@ -1,6 +1,6 @@
 import {
   env
-} from "./chunk-WKZ7OENC.js";
+} from "./chunk-BQ5TZZUE.js";
 
 // src/auth/security.ts
 function requireSessionSecret() {

package/dist/{chunk-GGXZZ77Z.js → chunk-AASEGXNT.js}

@@ -26,7 +26,7 @@ var TextLineSchema = z.discriminatedUnion("type", [
 var BaseMediaRef = z.object({
   imageId: z.string().default("").describe("Media-library id of the image/video asset."),
   caption: z.union([z.string(), z.array(z.string())]).optional().describe("Optional caption: a single string, or multiple lines as an array of strings."),
-  background: z.string().optional().describe("Optional CSS background color/value shown behind a transparent image."),
+  background: z.string().optional().describe("Legacy; not rendered. For a backdrop behind a media section's image, use the section's options.background."),
   invertFrom: z.string().optional().describe("Optional CSS color; the image inverts when the page background matches it (e.g. for dark-mode logo swaps)."),
   border: z.boolean().optional().describe("When true, draw a border around the media."),
   objectFit: z.enum(["cover", "contain"]).optional().describe("How the image fills its box: 'contain' (fit whole image) or 'cover' (fill and crop).")
@@ -59,6 +59,22 @@ var MediaReferenceSchema = z.discriminatedUnion("type", [
 ]);
 var SingleMediaReferenceSchema = z.discriminatedUnion("type", [ImageRef, VideoRef]);
 var HexColorSchema = z.string().regex(/^#[0-9a-fA-F]{6}$/, "must be a 6-digit hex color");
+var ImageBackgroundSurfaceSchema = z.enum(["none", "light", "dark"]);
+var ImageBackgroundSchema = z.discriminatedUnion("mode", [
+  z.object({
+    mode: z.literal("theme").describe("Pick a site surface separately for light and dark mode."),
+    light: ImageBackgroundSurfaceSchema.describe(
+      "Backdrop in light mode: 'none', the site's light surface, or its dark surface."
+    ),
+    dark: ImageBackgroundSurfaceSchema.describe(
+      "Backdrop in dark mode: 'none', the site's light surface, or its dark surface."
+    )
+  }),
+  z.object({
+    mode: z.literal("custom").describe("Use one custom color in both modes."),
+    color: HexColorSchema.describe("One backdrop color for both light and dark mode, as a 6-digit hex.")
+  })
+]);
 var FontNameSchema = z.string().max(120).regex(/^[a-zA-Z0-9 ,'"-]+$/, "contains invalid font-name characters");
 
 export {
@@ -66,5 +82,6 @@ export {
   MediaReferenceSchema,
   SingleMediaReferenceSchema,
   HexColorSchema,
+  ImageBackgroundSchema,
   FontNameSchema
 };