@lamgig/content-schemas 1.0.0 → 1.1.0

package/README.md

@@ -44,8 +44,35 @@ get uniform strictness):
 - Consumers MUST use the tolerant schemas and ignore unknown fields. The forward-compat tests
   in [`test/contract.test.ts`](test/contract.test.ts) enforce exactly this: the v1 tolerant
   schema accepts `full.json` plus an injected unknown optional field and an unknown module key.
-- All three v1 modules (`siteSettings`, `branding`, `menu`) are **required**. Empty states are
-  valid payloads (`menu.categories: []`), never missing keys.
+- The three original v1 modules (`siteSettings`, `branding`, `menu`) are **required**. Empty
+  states are valid payloads (`menu.categories: []`), never missing keys.
+- **`commerce` (added in 1.1.0) is OPTIONAL**, and this is the compatibility rule working
+  rather than an inconsistency: every snapshot published before the module existed lacks the
+  key, and a rollback can make one of those the live payload at any time. `minimal.json` is
+  deliberately kept commerce-free as the pinned example of that shape. A consumer must treat
+  `modules.commerce` as possibly absent — `parsed.modules.commerce?.acceptsOnlineOrders`.
+
+## The `commerce` module (1.1.0)
+
+Online-ordering **configuration**. LamGig does not process orders and stores no provider
+credentials: everything here is a public identifier or a display value, because a published
+payload is world-readable immutable JSON.
+
+| Field | Notes |
+|---|---|
+| `provider` | `'none' \| 'other'` only. A published enum is a consumer-visible commitment, and no provider has been evaluated yet — do not switch on a brand name that is not in this union |
+| `orderingUrl` | optional; **https only** |
+| `locationRef`, `menuRef` | optional public provider identifiers |
+| `currency` | ISO 4217 alpha-3, matching `menu` item prices |
+| `acceptsOnlineOrders` | boolean |
+| `prepTimeMinutes` | optional, 0–240 |
+| `hours` | at most one entry per day, ordered `mon → sun`. A **closed** day is simply ABSENT |
+
+**Two things a consumer must get right.** Times are `HH:MM` in the site's own
+`siteSettings.timezone` and carry no offset. And `closes < opens` is **legal** — it means the
+business closes after midnight — so a renderer that treats it as an error will break on a
+perfectly valid payload. `fixtures/v1/full.json` pins an overnight Friday for exactly that
+reason.
 
 ## Canonical serialization
 

package/dist/{chunk-KBPOR3WL.js → chunk-GUUCVLL3.js}

@@ -10,6 +10,9 @@ var CURRENCY_PATTERN_SOURCE = "^[A-Z]{3}$";
 var CURRENCY_PATTERN = new RegExp(CURRENCY_PATTERN_SOURCE);
 var COUNTRY_PATTERN_SOURCE = "^[A-Z]{2}$";
 var COUNTRY_PATTERN = new RegExp(COUNTRY_PATTERN_SOURCE);
+var COMMERCE_DAYS = ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
+var TIME_24H_PATTERN_SOURCE = "^([01][0-9]|2[0-3]):[0-5][0-9]$";
+var TIME_24H_PATTERN = new RegExp(TIME_24H_PATTERN_SOURCE);
 function isIanaTimeZone(tz) {
   try {
     new Intl.DateTimeFormat("en-US", { timeZone: tz });
@@ -100,18 +103,70 @@ var makeMenuSchema = (o) => o({
 });
 var menuSchemaStrict = makeMenuSchema(strictFactory);
 var menuSchema = makeMenuSchema(tolerantFactory);
+var makeCommerceHoursSchema = (o) => z.array(
+  o({
+    day: z.enum(COMMERCE_DAYS),
+    opens: z.string().regex(TIME_24H_PATTERN),
+    closes: z.string().regex(TIME_24H_PATTERN)
+  })
+).max(7).superRefine((entries, ctx) => {
+  const seen = /* @__PURE__ */ new Set();
+  let previous = -1;
+  entries.forEach((entry, index) => {
+    if (seen.has(entry.day)) {
+      ctx.addIssue({
+        code: "custom",
+        path: [index, "day"],
+        message: `duplicate day "${entry.day}"`
+      });
+    }
+    seen.add(entry.day);
+    const position = COMMERCE_DAYS.indexOf(entry.day);
+    if (position < previous) {
+      ctx.addIssue({
+        code: "custom",
+        path: [index, "day"],
+        message: "hours must be ordered mon \u2192 sun"
+      });
+    }
+    previous = position;
+  });
+});
+var makeCommerceSchema = (o) => o({
+  provider: z.enum(["none", "other"]),
+  /** Where a customer is sent to order. Absent when `provider` is `none`. */
+  orderingUrl: z.url({ protocol: /^https$/ }).max(2048).optional(),
+  /** PUBLIC provider identifiers — never a key, token or secret. */
+  locationRef: z.string().min(1).max(128).optional(),
+  menuRef: z.string().min(1).max(128).optional(),
+  /** Matches `menu` item prices; the DB CHECK mirrors CURRENCY_PATTERN_SOURCE. */
+  currency: z.string().regex(CURRENCY_PATTERN),
+  acceptsOnlineOrders: z.boolean(),
+  /** Quoted preparation time. Meaningless — and normally absent — when ordering is off. */
+  prepTimeMinutes: z.number().int().min(0).max(240).optional(),
+  hours: makeCommerceHoursSchema(o)
+});
+var commerceSchemaStrict = makeCommerceSchema(strictFactory);
+var commerceSchema = makeCommerceSchema(tolerantFactory);
 var makeContentFileSchema = (o) => o({
   schemaVersion: z.literal(1),
   site: o({ id: z.uuid(), slug: z.string().min(1) }),
   publishedAt: z.iso.datetime(),
-  // All three modules REQUIRED; empty states are valid module payloads
+  // The three v1 modules are REQUIRED; empty states are valid module payloads
   // (e.g. menu.categories: []), never missing keys. A new required module is
   // breaking (retained/rollback snapshots won't contain it) — bump
   // SCHEMA_VERSION instead.
+  //
+  // `commerce` is therefore OPTIONAL (phase-7 D-3), and that is not a
+  // stylistic choice: every snapshot published before the module existed
+  // lacks the key, and a ROLLBACK can activate one of those at any time. A
+  // required `commerce` would retroactively invalidate the whole publish
+  // history. See ARCHITECTURE.md § 5 and docs/seams/commerce.md § 1.
   modules: o({
     siteSettings: makeSiteSettingsSchema(o),
     branding: makeBrandingSchema(o),
-    menu: makeMenuSchema(o)
+    menu: makeMenuSchema(o),
+    commerce: makeCommerceSchema(o).optional()
   })
 });
 var contentFileSchemaStrict = makeContentFileSchema(strictFactory);
@@ -172,6 +227,9 @@ export {
   CURRENCY_PATTERN,
   COUNTRY_PATTERN_SOURCE,
   COUNTRY_PATTERN,
+  COMMERCE_DAYS,
+  TIME_24H_PATTERN_SOURCE,
+  TIME_24H_PATTERN,
   isIanaTimeZone,
   siteSettingsSchemaStrict,
   siteSettingsSchema,
@@ -179,8 +237,10 @@ export {
   brandingSchema,
   menuSchemaStrict,
   menuSchema,
+  commerceSchemaStrict,
+  commerceSchema,
   contentFileSchemaStrict,
   contentFileSchema,
   canonicalize
 };
-//# sourceMappingURL=chunk-KBPOR3WL.js.map
+//# sourceMappingURL=chunk-GUUCVLL3.js.map

package/dist/chunk-GUUCVLL3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { z } from 'zod';\n\n/**\n * Version of the published-JSON contract. Additive changes (new OPTIONAL fields\n * and new OPTIONAL module keys) keep this number; any required addition is\n * breaking and bumps it. The full compatibility rule lives in this package's\n * README. See PLAN.md § Published JSON delivery and phase-2.md T1.5.\n */\nexport const SCHEMA_VERSION = 1;\n\n/** Publisher-enforced ceiling on the canonical payload size (1 MiB). */\nexport const MAX_CONTENT_BYTES = 1_048_576;\n\n// ---------------------------------------------------------------------------\n// Shared value patterns — single source of truth.\n//\n// LOCALE_PATTERN_SOURCE is the EXACT string used by the `site_settings.locale`\n// DB CHECK (supabase/migrations/*_content_site_settings.sql). Contract and\n// database must never disagree (phase-2.md T1.1): v1 supports the named BCP-47\n// subset `ll` or `ll-CC` only (e.g. `en`, `en-US`); script/numeric-region forms\n// (`zh-Hant`, `es-419`) are out of scope — widening later is additive.\n// HEX_COLOR / CURRENCY are likewise mirrored by DB CHECKs on `branding.colors`\n// and `menu_items.price_currency`.\n// ---------------------------------------------------------------------------\n\nexport const LOCALE_PATTERN_SOURCE = '^[a-z]{2}(-[A-Z]{2})?$';\nexport const LOCALE_PATTERN = new RegExp(LOCALE_PATTERN_SOURCE);\n\nexport const HEX_COLOR_PATTERN_SOURCE = '^#[0-9A-Fa-f]{6}$';\nexport const HEX_COLOR_PATTERN = new RegExp(HEX_COLOR_PATTERN_SOURCE);\n\n/** ISO 4217 alpha code shape (mirrored by the `price_currency` DB CHECK). */\nexport const CURRENCY_PATTERN_SOURCE = '^[A-Z]{3}$';\nexport const CURRENCY_PATTERN = new RegExp(CURRENCY_PATTERN_SOURCE);\n\n/** ISO 3166-1 alpha-2 country code shape. */\nexport const COUNTRY_PATTERN_SOURCE = '^[A-Z]{2}$';\nexport const COUNTRY_PATTERN = new RegExp(COUNTRY_PATTERN_SOURCE);\n\n/**\n * Days of the week, in the canonical order `commerce.hours` must be sorted by.\n * The order is part of the contract: a consumer rendering opening hours reads\n * the array straight through, so a payload listing Sunday before Monday would\n * render wrong without being malformed.\n */\nexport const COMMERCE_DAYS = ['mon', 'tue', 'wed', 'thu', 'fri', 'sat', 'sun'] as const;\n\n/**\n * 24-hour `HH:MM`. UNLIKE the four patterns above this one is deliberately NOT\n * mirrored by a DB CHECK: `commerce_settings.hours` is validated at the DB only\n * as \"an array of at most 7\" (see the migration header), and its element shape,\n * time syntax, day uniqueness and ordering are publish-gated here instead. A\n * schema-invalid draft may therefore exist in the table; it cannot be published.\n */\nexport const TIME_24H_PATTERN_SOURCE = '^([01][0-9]|2[0-3]):[0-5][0-9]$';\nexport const TIME_24H_PATTERN = new RegExp(TIME_24H_PATTERN_SOURCE);\n\n/** IANA time zone check via the runtime's own tz database. */\nexport function isIanaTimeZone(tz: string): boolean {\n  try {\n    new Intl.DateTimeFormat('en-US', { timeZone: tz });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Two parse modes from ONE schema definition (phase-2.md T1):\n//\n//   - producer-strict  — `.strict()` everywhere; the dashboard validates its own\n//     output against this before publishing. Unknown keys are defects.\n//   - consumer-tolerant — unknown object keys are STRIPPED and unknown module\n//     keys ignored, so a shipped consumer accepts a v1 payload that later gained\n//     an optional field or a new module key (the additive changes the\n//     compatibility rule promises).\n//\n// zod v4's `.strip()`/`.passthrough()` do NOT recurse into nested objects, so a\n// post-hoc transform of one tree silently leaves nested objects in the original\n// mode. Instead every object in the tree is built through an injected object\n// factory: `z.strictObject` for the strict pair, `z.object` (strips unknown\n// keys) for the tolerant pair. One definition, two instantiations.\n// ---------------------------------------------------------------------------\n\ntype ObjectFactory = <T extends z.ZodRawShape>(shape: T) => z.ZodObject<T>;\n\nconst strictFactory = z.strictObject as ObjectFactory;\nconst tolerantFactory = z.object as ObjectFactory;\n\n// --- siteSettings ----------------------------------------------------------\n\nconst makeSiteSettingsSchema = (o: ObjectFactory) =>\n  o({\n    siteName: z.string().min(1).max(120),\n    tagline: z.string().max(200).optional(),\n    contact: o({\n      email: z.email().optional(),\n      phone: z.string().min(1).optional(),\n      address: o({\n        line1: z.string().min(1),\n        line2: z.string().min(1).optional(),\n        city: z.string().min(1),\n        region: z.string().min(1),\n        postalCode: z.string().min(1),\n        country: z.string().regex(COUNTRY_PATTERN),\n      }).optional(),\n    }),\n    // Explicit known keys (NOT a record): strict rejects unknown platforms,\n    // tolerant strips them — adding a platform later is additive.\n    socialLinks: o({\n      facebook: z.url().optional(),\n      instagram: z.url().optional(),\n      tiktok: z.url().optional(),\n      x: z.url().optional(),\n      youtube: z.url().optional(),\n      yelp: z.url().optional(),\n      google: z.url().optional(),\n    }).optional(),\n    locale: z.string().regex(LOCALE_PATTERN).default('en-US'),\n    timezone: z\n      .string()\n      .min(1)\n      .refine(isIanaTimeZone, 'must be an IANA time zone name')\n      .default('America/Los_Angeles'),\n  });\n\nexport const siteSettingsSchemaStrict = makeSiteSettingsSchema(strictFactory);\nexport const siteSettingsSchema = makeSiteSettingsSchema(tolerantFactory);\n\n// --- branding --------------------------------------------------------------\n\nconst makeBrandingSchema = (o: ObjectFactory) =>\n  o({\n    // Absolute URLs produced by the dashboard's storagePublicUrl builder\n    // (apps/dashboard/src/lib/content-urls.ts). The DB stores storage PATHS;\n    // the publish-time compose maps path -> URL. This package never imports\n    // from the app (dependency direction, phase-2.md T1.7).\n    logoUrl: z.url().optional(),\n    faviconUrl: z.url().optional(),\n    colors: o({\n      primary: z.string().regex(HEX_COLOR_PATTERN),\n      secondary: z.string().regex(HEX_COLOR_PATTERN).optional(),\n      accent: z.string().regex(HEX_COLOR_PATTERN).optional(),\n      background: z.string().regex(HEX_COLOR_PATTERN).optional(),\n      text: z.string().regex(HEX_COLOR_PATTERN).optional(),\n    }),\n    fonts: o({\n      heading: z.string().min(1).optional(),\n      body: z.string().min(1).optional(),\n    }).optional(),\n  });\n\nexport const brandingSchemaStrict = makeBrandingSchema(strictFactory);\nexport const brandingSchema = makeBrandingSchema(tolerantFactory);\n\n// --- menu ------------------------------------------------------------------\n\nconst makeMenuItemSchema = (o: ObjectFactory) =>\n  o({\n    /** Stable DB UUID — identical across publishes (phase-2.md T1.3). */\n    id: z.uuid(),\n    name: z.string().min(1).max(200),\n    description: z.string().max(2000).optional(),\n    price: o({\n      /** Integer minor units (e.g. cents). */\n      amount: z.number().int().min(0),\n      currency: z.string().regex(CURRENCY_PATTERN),\n    }),\n    imageUrl: z.url().optional(),\n    tags: z.array(z.string().min(1)).max(20),\n    sortOrder: z.number().int().min(0).max(100_000),\n    isAvailable: z.boolean(),\n  });\n\nconst makeMenuCategorySchema = (o: ObjectFactory) =>\n  o({\n    id: z.uuid(),\n    name: z.string().min(1).max(200),\n    description: z.string().max(2000).optional(),\n    sortOrder: z.number().int().min(0).max(100_000),\n    items: z.array(makeMenuItemSchema(o)),\n  });\n\nconst makeMenuSchema = (o: ObjectFactory) =>\n  o({\n    /** Archived/deleted entities are simply ABSENT; empty menu = `[]`, never a missing key. */\n    categories: z.array(makeMenuCategorySchema(o)),\n  });\n\nexport const menuSchemaStrict = makeMenuSchema(strictFactory);\nexport const menuSchema = makeMenuSchema(tolerantFactory);\n\n// --- commerce --------------------------------------------------------------\n//\n// Online-ordering CONFIGURATION, never orders and never provider secrets\n// (docs/seams/commerce.md § \"What does NOT go in the module\"): a published\n// payload is world-readable immutable JSON, so a credential written here would\n// be permanent and public. Everything below is a public identifier or a display\n// value.\n//\n// The `provider` enum is `none | other` ONLY (phase-7 D-9). No provider has\n// been selected, and a published enum is a consumer-visible commitment: a\n// consumer that switches on `\"square\"` would be relying on a name the seam says\n// requires an evaluation and a decision record first. Adding a member later is\n// additive for a TOLERANT consumer and breaking for a strict one, which is the\n// right way round.\n//\n// TIMES ARE LOCAL to `siteSettings.timezone` and carry no offset — the site's\n// own clock is what a customer reads on the door. `closes < opens` is LEGAL and\n// means \"closes after midnight\" (docs/seams/commerce.md § 1); a consumer must\n// not treat it as an error.\n\nconst makeCommerceHoursSchema = (o: ObjectFactory) =>\n  z\n    .array(\n      o({\n        day: z.enum(COMMERCE_DAYS),\n        opens: z.string().regex(TIME_24H_PATTERN),\n        closes: z.string().regex(TIME_24H_PATTERN),\n      }),\n    )\n    .max(7)\n    // At most one entry per day, listed in COMMERCE_DAYS order. The DB CHECK\n    // stops at \"an array of at most 7\" (deliberately — see the migration\n    // header), so THIS is the layer that makes `hours` meaningful, and it runs\n    // at publish time rather than at write time.\n    .superRefine((entries, ctx) => {\n      const seen = new Set<string>();\n      let previous = -1;\n      entries.forEach((entry, index) => {\n        if (seen.has(entry.day)) {\n          ctx.addIssue({\n            code: 'custom',\n            path: [index, 'day'],\n            message: `duplicate day \"${entry.day}\"`,\n          });\n        }\n        seen.add(entry.day);\n        const position = COMMERCE_DAYS.indexOf(entry.day);\n        if (position < previous) {\n          ctx.addIssue({\n            code: 'custom',\n            path: [index, 'day'],\n            message: 'hours must be ordered mon → sun',\n          });\n        }\n        previous = position;\n      });\n    });\n\nconst makeCommerceSchema = (o: ObjectFactory) =>\n  o({\n    provider: z.enum(['none', 'other']),\n    /** Where a customer is sent to order. Absent when `provider` is `none`. */\n    orderingUrl: z.url({ protocol: /^https$/ }).max(2048).optional(),\n    /** PUBLIC provider identifiers — never a key, token or secret. */\n    locationRef: z.string().min(1).max(128).optional(),\n    menuRef: z.string().min(1).max(128).optional(),\n    /** Matches `menu` item prices; the DB CHECK mirrors CURRENCY_PATTERN_SOURCE. */\n    currency: z.string().regex(CURRENCY_PATTERN),\n    acceptsOnlineOrders: z.boolean(),\n    /** Quoted preparation time. Meaningless — and normally absent — when ordering is off. */\n    prepTimeMinutes: z.number().int().min(0).max(240).optional(),\n    hours: makeCommerceHoursSchema(o),\n  });\n\nexport const commerceSchemaStrict = makeCommerceSchema(strictFactory);\nexport const commerceSchema = makeCommerceSchema(tolerantFactory);\n\n// --- content file ----------------------------------------------------------\n\nconst makeContentFileSchema = (o: ObjectFactory) =>\n  o({\n    schemaVersion: z.literal(1),\n    site: o({ id: z.uuid(), slug: z.string().min(1) }),\n    publishedAt: z.iso.datetime(),\n    // The three v1 modules are REQUIRED; empty states are valid module payloads\n    // (e.g. menu.categories: []), never missing keys. A new required module is\n    // breaking (retained/rollback snapshots won't contain it) — bump\n    // SCHEMA_VERSION instead.\n    //\n    // `commerce` is therefore OPTIONAL (phase-7 D-3), and that is not a\n    // stylistic choice: every snapshot published before the module existed\n    // lacks the key, and a ROLLBACK can activate one of those at any time. A\n    // required `commerce` would retroactively invalidate the whole publish\n    // history. See ARCHITECTURE.md § 5 and docs/seams/commerce.md § 1.\n    modules: o({\n      siteSettings: makeSiteSettingsSchema(o),\n      branding: makeBrandingSchema(o),\n      menu: makeMenuSchema(o),\n      commerce: makeCommerceSchema(o).optional(),\n    }),\n  });\n\n/** Producer gate: the dashboard validates its own output against this. */\nexport const contentFileSchemaStrict = makeContentFileSchema(strictFactory);\n/** Public consumer schema: tolerant of additive v1 changes. */\nexport const contentFileSchema = makeContentFileSchema(tolerantFactory);\n\nexport type SiteSettings = z.infer<typeof siteSettingsSchemaStrict>;\nexport type Branding = z.infer<typeof brandingSchemaStrict>;\nexport type Menu = z.infer<typeof menuSchemaStrict>;\nexport type MenuCategory = Menu['categories'][number];\nexport type MenuItem = MenuCategory['items'][number];\nexport type Commerce = z.infer<typeof commerceSchemaStrict>;\nexport type CommerceDay = (typeof COMMERCE_DAYS)[number];\nexport type CommerceHours = Commerce['hours'];\nexport type ContentFile = z.infer<typeof contentFileSchemaStrict>;\n\n// ---------------------------------------------------------------------------\n// Canonical serialization (phase-2.md T1.6).\n//\n// Recursively key-sorted JSON with no whitespace, produced by a hand-rolled\n// serializer rather than JSON.stringify over a re-built object — rebuilding\n// depends on JS insertion-order semantics and silently reorders integer-like\n// keys. Determinism here is what makes `hashContent` a byte-equality contract\n// shared by the publisher and every consumer test.\n//\n// Rules (documented in the README):\n//   - arrays keep their order; object keys are sorted with Array.prototype.sort\n//     (code-unit order);\n//   - object properties whose value is `undefined` are omitted (JSON semantics);\n//   - `undefined` anywhere else, non-finite numbers, bigint, functions and\n//     symbols THROW — never silently coerced the way JSON.stringify would.\n// ---------------------------------------------------------------------------\n\nexport function canonicalize(payload: unknown): string {\n  const out = serialize(payload);\n  if (out === undefined) {\n    throw new TypeError('canonicalize: payload itself serializes to nothing (undefined)');\n  }\n  return out;\n}\n\nfunction serialize(value: unknown): string | undefined {\n  if (value === undefined) return undefined;\n  if (value === null) return 'null';\n  switch (typeof value) {\n    case 'string':\n    case 'boolean':\n      return JSON.stringify(value);\n    case 'number':\n      if (!Number.isFinite(value)) {\n        throw new TypeError(`canonicalize: non-finite number ${String(value)}`);\n      }\n      return JSON.stringify(value);\n    case 'object':\n      break;\n    default:\n      throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);\n  }\n  if (Array.isArray(value)) {\n    const parts = value.map((entry) => {\n      const s = serialize(entry);\n      if (s === undefined) {\n        throw new TypeError('canonicalize: undefined array element');\n      }\n      return s;\n    });\n    return `[${parts.join(',')}]`;\n  }\n  const record = value as Record<string, unknown>;\n  const keys = Object.keys(record).sort();\n  const parts: string[] = [];\n  for (const key of keys) {\n    const s = serialize(record[key]);\n    if (s === undefined) continue; // undefined property -> omitted key\n    parts.push(`${JSON.stringify(key)}:${s}`);\n  }\n  return `{${parts.join(',')}}`;\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAQX,IAAM,iBAAiB;AAGvB,IAAM,oBAAoB;AAc1B,IAAM,wBAAwB;AAC9B,IAAM,iBAAiB,IAAI,OAAO,qBAAqB;AAEvD,IAAM,2BAA2B;AACjC,IAAM,oBAAoB,IAAI,OAAO,wBAAwB;AAG7D,IAAM,0BAA0B;AAChC,IAAM,mBAAmB,IAAI,OAAO,uBAAuB;AAG3D,IAAM,yBAAyB;AAC/B,IAAM,kBAAkB,IAAI,OAAO,sBAAsB;AAQzD,IAAM,gBAAgB,CAAC,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK;AAStE,IAAM,0BAA0B;AAChC,IAAM,mBAAmB,IAAI,OAAO,uBAAuB;AAG3D,SAAS,eAAe,IAAqB;AAClD,MAAI;AACF,QAAI,KAAK,eAAe,SAAS,EAAE,UAAU,GAAG,CAAC;AACjD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqBA,IAAM,gBAAgB,EAAE;AACxB,IAAM,kBAAkB,EAAE;AAI1B,IAAM,yBAAyB,CAAC,MAC9B,EAAE;AAAA,EACA,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACtC,SAAS,EAAE;AAAA,IACT,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,IAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAClC,SAAS,EAAE;AAAA,MACT,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACvB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACtB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACxB,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MAC5B,SAAS,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,IAC3C,CAAC,EAAE,SAAS;AAAA,EACd,CAAC;AAAA;AAAA;AAAA,EAGD,aAAa,EAAE;AAAA,IACb,UAAU,EAAE,IAAI,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,IAAI,EAAE,SAAS;AAAA,IAC5B,QAAQ,EAAE,IAAI,EAAE,SAAS;AAAA,IACzB,GAAG,EAAE,IAAI,EAAE,SAAS;AAAA,IACpB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,IAC1B,MAAM,EAAE,IAAI,EAAE,SAAS;AAAA,IACvB,QAAQ,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3B,CAAC,EAAE,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE,QAAQ,OAAO;AAAA,EACxD,UAAU,EACP,OAAO,EACP,IAAI,CAAC,EACL,OAAO,gBAAgB,gCAAgC,EACvD,QAAQ,qBAAqB;AAClC,CAAC;AAEI,IAAM,2BAA2B,uBAAuB,aAAa;AACrE,IAAM,qBAAqB,uBAAuB,eAAe;AAIxE,IAAM,qBAAqB,CAAC,MAC1B,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,IAAI,EAAE,SAAS;AAAA,EAC7B,QAAQ,EAAE;AAAA,IACR,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IAC3C,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,IACxD,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,IACrD,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,IACzD,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,EACrD,CAAC;AAAA,EACD,OAAO,EAAE;AAAA,IACP,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IACpC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,CAAC,EAAE,SAAS;AACd,CAAC;AAEI,IAAM,uBAAuB,mBAAmB,aAAa;AAC7D,IAAM,iBAAiB,mBAAmB,eAAe;AAIhE,IAAM,qBAAqB,CAAC,MAC1B,EAAE;AAAA;AAAA,EAEA,IAAI,EAAE,KAAK;AAAA,EACX,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE;AAAA;AAAA,IAEP,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IAC9B,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EAC7C,CAAC;AAAA,EACD,UAAU,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE;AAAA,EACvC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAO;AAAA,EAC9C,aAAa,EAAE,QAAQ;AACzB,CAAC;AAEH,IAAM,yBAAyB,CAAC,MAC9B,EAAE;AAAA,EACA,IAAI,EAAE,KAAK;AAAA,EACX,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAO;AAAA,EAC9C,OAAO,EAAE,MAAM,mBAAmB,CAAC,CAAC;AACtC,CAAC;AAEH,IAAM,iBAAiB,CAAC,MACtB,EAAE;AAAA;AAAA,EAEA,YAAY,EAAE,MAAM,uBAAuB,CAAC,CAAC;AAC/C,CAAC;AAEI,IAAM,mBAAmB,eAAe,aAAa;AACrD,IAAM,aAAa,eAAe,eAAe;AAsBxD,IAAM,0BAA0B,CAAC,MAC/B,EACG;AAAA,EACC,EAAE;AAAA,IACA,KAAK,EAAE,KAAK,aAAa;AAAA,IACzB,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,IACxC,QAAQ,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EAC3C,CAAC;AACH,EACC,IAAI,CAAC,EAKL,YAAY,CAAC,SAAS,QAAQ;AAC7B,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,WAAW;AACf,UAAQ,QAAQ,CAAC,OAAO,UAAU;AAChC,QAAI,KAAK,IAAI,MAAM,GAAG,GAAG;AACvB,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,OAAO,KAAK;AAAA,QACnB,SAAS,kBAAkB,MAAM,GAAG;AAAA,MACtC,CAAC;AAAA,IACH;AACA,SAAK,IAAI,MAAM,GAAG;AAClB,UAAM,WAAW,cAAc,QAAQ,MAAM,GAAG;AAChD,QAAI,WAAW,UAAU;AACvB,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,OAAO,KAAK;AAAA,QACnB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,eAAW;AAAA,EACb,CAAC;AACH,CAAC;AAEL,IAAM,qBAAqB,CAAC,MAC1B,EAAE;AAAA,EACA,UAAU,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;AAAA;AAAA,EAElC,aAAa,EAAE,IAAI,EAAE,UAAU,UAAU,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAE/D,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAE7C,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EAC3C,qBAAqB,EAAE,QAAQ;AAAA;AAAA,EAE/B,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC3D,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAEI,IAAM,uBAAuB,mBAAmB,aAAa;AAC7D,IAAM,iBAAiB,mBAAmB,eAAe;AAIhE,IAAM,wBAAwB,CAAC,MAC7B,EAAE;AAAA,EACA,eAAe,EAAE,QAAQ,CAAC;AAAA,EAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACjD,aAAa,EAAE,IAAI,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW5B,SAAS,EAAE;AAAA,IACT,cAAc,uBAAuB,CAAC;AAAA,IACtC,UAAU,mBAAmB,CAAC;AAAA,IAC9B,MAAM,eAAe,CAAC;AAAA,IACtB,UAAU,mBAAmB,CAAC,EAAE,SAAS;AAAA,EAC3C,CAAC;AACH,CAAC;AAGI,IAAM,0BAA0B,sBAAsB,aAAa;AAEnE,IAAM,oBAAoB,sBAAsB,eAAe;AA6B/D,SAAS,aAAa,SAA0B;AACrD,QAAM,MAAM,UAAU,OAAO;AAC7B,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,UAAU,gEAAgE;AAAA,EACtF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAAoC;AACrD,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,UAAU,KAAM,QAAO;AAC3B,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAA,IACL,KAAK;AACH,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,KAAK;AACH,UAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,cAAM,IAAI,UAAU,mCAAmC,OAAO,KAAK,CAAC,EAAE;AAAA,MACxE;AACA,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,KAAK;AACH;AAAA,IACF;AACE,YAAM,IAAI,UAAU,2CAA2C,OAAO,KAAK,EAAE;AAAA,EACjF;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAMA,SAAQ,MAAM,IAAI,CAAC,UAAU;AACjC,YAAM,IAAI,UAAU,KAAK;AACzB,UAAI,MAAM,QAAW;AACnB,cAAM,IAAI,UAAU,uCAAuC;AAAA,MAC7D;AACA,aAAO;AAAA,IACT,CAAC;AACD,WAAO,IAAIA,OAAM,KAAK,GAAG,CAAC;AAAA,EAC5B;AACA,QAAM,SAAS;AACf,QAAM,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK;AACtC,QAAM,QAAkB,CAAC;AACzB,aAAW,OAAO,MAAM;AACtB,UAAM,IAAI,UAAU,OAAO,GAAG,CAAC;AAC/B,QAAI,MAAM,OAAW;AACrB,UAAM,KAAK,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,CAAC,EAAE;AAAA,EAC1C;AACA,SAAO,IAAI,MAAM,KAAK,GAAG,CAAC;AAC5B;","names":["parts"]}

package/dist/hash.js

@@ -1,6 +1,6 @@
 import {
   canonicalize
-} from "./chunk-KBPOR3WL.js";
+} from "./chunk-GUUCVLL3.js";
 
 // src/hash.ts
 import { createHash } from "crypto";

package/dist/index.d.ts

@@ -19,6 +19,22 @@ declare const CURRENCY_PATTERN: RegExp;
 /** ISO 3166-1 alpha-2 country code shape. */
 declare const COUNTRY_PATTERN_SOURCE = "^[A-Z]{2}$";
 declare const COUNTRY_PATTERN: RegExp;
+/**
+ * Days of the week, in the canonical order `commerce.hours` must be sorted by.
+ * The order is part of the contract: a consumer rendering opening hours reads
+ * the array straight through, so a payload listing Sunday before Monday would
+ * render wrong without being malformed.
+ */
+declare const COMMERCE_DAYS: readonly ["mon", "tue", "wed", "thu", "fri", "sat", "sun"];
+/**
+ * 24-hour `HH:MM`. UNLIKE the four patterns above this one is deliberately NOT
+ * mirrored by a DB CHECK: `commerce_settings.hours` is validated at the DB only
+ * as "an array of at most 7" (see the migration header), and its element shape,
+ * time syntax, day uniqueness and ordering are publish-gated here instead. A
+ * schema-invalid draft may therefore exist in the table; it cannot be published.
+ */
+declare const TIME_24H_PATTERN_SOURCE = "^([01][0-9]|2[0-3]):[0-5][0-9]$";
+declare const TIME_24H_PATTERN: RegExp;
 /** IANA time zone check via the runtime's own tz database. */
 declare function isIanaTimeZone(tz: string): boolean;
 declare const siteSettingsSchemaStrict: z.ZodObject<{
@@ -153,6 +169,64 @@ declare const menuSchema: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+declare const commerceSchemaStrict: z.ZodObject<{
+    provider: z.ZodEnum<{
+        none: "none";
+        other: "other";
+    }>;
+    /** Where a customer is sent to order. Absent when `provider` is `none`. */
+    orderingUrl: z.ZodOptional<z.ZodURL>;
+    /** PUBLIC provider identifiers — never a key, token or secret. */
+    locationRef: z.ZodOptional<z.ZodString>;
+    menuRef: z.ZodOptional<z.ZodString>;
+    /** Matches `menu` item prices; the DB CHECK mirrors CURRENCY_PATTERN_SOURCE. */
+    currency: z.ZodString;
+    acceptsOnlineOrders: z.ZodBoolean;
+    /** Quoted preparation time. Meaningless — and normally absent — when ordering is off. */
+    prepTimeMinutes: z.ZodOptional<z.ZodNumber>;
+    hours: z.ZodArray<z.ZodObject<{
+        day: z.ZodEnum<{
+            mon: "mon";
+            tue: "tue";
+            wed: "wed";
+            thu: "thu";
+            fri: "fri";
+            sat: "sat";
+            sun: "sun";
+        }>;
+        opens: z.ZodString;
+        closes: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const commerceSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        none: "none";
+        other: "other";
+    }>;
+    /** Where a customer is sent to order. Absent when `provider` is `none`. */
+    orderingUrl: z.ZodOptional<z.ZodURL>;
+    /** PUBLIC provider identifiers — never a key, token or secret. */
+    locationRef: z.ZodOptional<z.ZodString>;
+    menuRef: z.ZodOptional<z.ZodString>;
+    /** Matches `menu` item prices; the DB CHECK mirrors CURRENCY_PATTERN_SOURCE. */
+    currency: z.ZodString;
+    acceptsOnlineOrders: z.ZodBoolean;
+    /** Quoted preparation time. Meaningless — and normally absent — when ordering is off. */
+    prepTimeMinutes: z.ZodOptional<z.ZodNumber>;
+    hours: z.ZodArray<z.ZodObject<{
+        day: z.ZodEnum<{
+            mon: "mon";
+            tue: "tue";
+            wed: "wed";
+            thu: "thu";
+            fri: "fri";
+            sat: "sat";
+            sun: "sun";
+        }>;
+        opens: z.ZodString;
+        closes: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 /** Producer gate: the dashboard validates its own output against this. */
 declare const contentFileSchemaStrict: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
@@ -228,6 +302,35 @@ declare const contentFileSchemaStrict: z.ZodObject<{
                 }, z.core.$strip>>;
             }, z.core.$strip>>;
         }, z.core.$strip>;
+        commerce: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<{
+                none: "none";
+                other: "other";
+            }>;
+            /** Where a customer is sent to order. Absent when `provider` is `none`. */
+            orderingUrl: z.ZodOptional<z.ZodURL>;
+            /** PUBLIC provider identifiers — never a key, token or secret. */
+            locationRef: z.ZodOptional<z.ZodString>;
+            menuRef: z.ZodOptional<z.ZodString>;
+            /** Matches `menu` item prices; the DB CHECK mirrors CURRENCY_PATTERN_SOURCE. */
+            currency: z.ZodString;
+            acceptsOnlineOrders: z.ZodBoolean;
+            /** Quoted preparation time. Meaningless — and normally absent — when ordering is off. */
+            prepTimeMinutes: z.ZodOptional<z.ZodNumber>;
+            hours: z.ZodArray<z.ZodObject<{
+                day: z.ZodEnum<{
+                    mon: "mon";
+                    tue: "tue";
+                    wed: "wed";
+                    thu: "thu";
+                    fri: "fri";
+                    sat: "sat";
+                    sun: "sun";
+                }>;
+                opens: z.ZodString;
+                closes: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
 /** Public consumer schema: tolerant of additive v1 changes. */
@@ -305,6 +408,35 @@ declare const contentFileSchema: z.ZodObject<{
                 }, z.core.$strip>>;
             }, z.core.$strip>>;
         }, z.core.$strip>;
+        commerce: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<{
+                none: "none";
+                other: "other";
+            }>;
+            /** Where a customer is sent to order. Absent when `provider` is `none`. */
+            orderingUrl: z.ZodOptional<z.ZodURL>;
+            /** PUBLIC provider identifiers — never a key, token or secret. */
+            locationRef: z.ZodOptional<z.ZodString>;
+            menuRef: z.ZodOptional<z.ZodString>;
+            /** Matches `menu` item prices; the DB CHECK mirrors CURRENCY_PATTERN_SOURCE. */
+            currency: z.ZodString;
+            acceptsOnlineOrders: z.ZodBoolean;
+            /** Quoted preparation time. Meaningless — and normally absent — when ordering is off. */
+            prepTimeMinutes: z.ZodOptional<z.ZodNumber>;
+            hours: z.ZodArray<z.ZodObject<{
+                day: z.ZodEnum<{
+                    mon: "mon";
+                    tue: "tue";
+                    wed: "wed";
+                    thu: "thu";
+                    fri: "fri";
+                    sat: "sat";
+                    sun: "sun";
+                }>;
+                opens: z.ZodString;
+                closes: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
 type SiteSettings = z.infer<typeof siteSettingsSchemaStrict>;
@@ -312,7 +444,10 @@ type Branding = z.infer<typeof brandingSchemaStrict>;
 type Menu = z.infer<typeof menuSchemaStrict>;
 type MenuCategory = Menu['categories'][number];
 type MenuItem = MenuCategory['items'][number];
+type Commerce = z.infer<typeof commerceSchemaStrict>;
+type CommerceDay = (typeof COMMERCE_DAYS)[number];
+type CommerceHours = Commerce['hours'];
 type ContentFile = z.infer<typeof contentFileSchemaStrict>;
 declare function canonicalize(payload: unknown): string;
 
-export { type Branding, COUNTRY_PATTERN, COUNTRY_PATTERN_SOURCE, CURRENCY_PATTERN, CURRENCY_PATTERN_SOURCE, type ContentFile, HEX_COLOR_PATTERN, HEX_COLOR_PATTERN_SOURCE, LOCALE_PATTERN, LOCALE_PATTERN_SOURCE, MAX_CONTENT_BYTES, type Menu, type MenuCategory, type MenuItem, SCHEMA_VERSION, type SiteSettings, brandingSchema, brandingSchemaStrict, canonicalize, contentFileSchema, contentFileSchemaStrict, isIanaTimeZone, menuSchema, menuSchemaStrict, siteSettingsSchema, siteSettingsSchemaStrict };
+export { type Branding, COMMERCE_DAYS, COUNTRY_PATTERN, COUNTRY_PATTERN_SOURCE, CURRENCY_PATTERN, CURRENCY_PATTERN_SOURCE, type Commerce, type CommerceDay, type CommerceHours, type ContentFile, HEX_COLOR_PATTERN, HEX_COLOR_PATTERN_SOURCE, LOCALE_PATTERN, LOCALE_PATTERN_SOURCE, MAX_CONTENT_BYTES, type Menu, type MenuCategory, type MenuItem, SCHEMA_VERSION, type SiteSettings, TIME_24H_PATTERN, TIME_24H_PATTERN_SOURCE, brandingSchema, brandingSchemaStrict, canonicalize, commerceSchema, commerceSchemaStrict, contentFileSchema, contentFileSchemaStrict, isIanaTimeZone, menuSchema, menuSchemaStrict, siteSettingsSchema, siteSettingsSchemaStrict };

package/dist/index.js

@@ -1,4 +1,5 @@
 import {
+  COMMERCE_DAYS,
   COUNTRY_PATTERN,
   COUNTRY_PATTERN_SOURCE,
   CURRENCY_PATTERN,
@@ -9,9 +10,13 @@ import {
   LOCALE_PATTERN_SOURCE,
   MAX_CONTENT_BYTES,
   SCHEMA_VERSION,
+  TIME_24H_PATTERN,
+  TIME_24H_PATTERN_SOURCE,
   brandingSchema,
   brandingSchemaStrict,
   canonicalize,
+  commerceSchema,
+  commerceSchemaStrict,
   contentFileSchema,
   contentFileSchemaStrict,
   isIanaTimeZone,
@@ -19,8 +24,9 @@ import {
   menuSchemaStrict,
   siteSettingsSchema,
   siteSettingsSchemaStrict
-} from "./chunk-KBPOR3WL.js";
+} from "./chunk-GUUCVLL3.js";
 export {
+  COMMERCE_DAYS,
   COUNTRY_PATTERN,
   COUNTRY_PATTERN_SOURCE,
   CURRENCY_PATTERN,
@@ -31,9 +37,13 @@ export {
   LOCALE_PATTERN_SOURCE,
   MAX_CONTENT_BYTES,
   SCHEMA_VERSION,
+  TIME_24H_PATTERN,
+  TIME_24H_PATTERN_SOURCE,
   brandingSchema,
   brandingSchemaStrict,
   canonicalize,
+  commerceSchema,
+  commerceSchemaStrict,
   contentFileSchema,
   contentFileSchemaStrict,
   isIanaTimeZone,

package/fixtures/v1/full.json

@@ -126,6 +126,23 @@
           ]
         }
       ]
+    },
+    "commerce": {
+      "provider": "other",
+      "orderingUrl": "https://order.example.com/pho-palace",
+      "locationRef": "loc-charlotte-tryon",
+      "menuRef": "menu-dinner-2026",
+      "currency": "USD",
+      "acceptsOnlineOrders": true,
+      "prepTimeMinutes": 25,
+      "hours": [
+        { "day": "mon", "opens": "11:00", "closes": "21:00" },
+        { "day": "tue", "opens": "11:00", "closes": "21:00" },
+        { "day": "wed", "opens": "11:00", "closes": "21:00" },
+        { "day": "thu", "opens": "11:00", "closes": "21:00" },
+        { "day": "fri", "opens": "11:00", "closes": "01:30" },
+        { "day": "sat", "opens": "10:00", "closes": "01:30" }
+      ]
     }
   }
 }

package/fixtures/v1/hashes.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "Checked-in hashContent() snapshots of the v1 fixtures — the serialization-determinism contract. If a test fails against these, the canonical serialization or a fixture changed; BOTH are locked decisions (phase-2.md T1.6/T1.8). Regenerate only with founder sign-off.",
-  "full.json": "sha256:34c778b74dc2ae260830ee072bdc3c197229f76f28b58775a61c57ab55abf3ef",
+  "_comment": "Checked-in hashContent() snapshots of the v1 fixtures — the serialization-determinism contract. If a test fails against these, the canonical serialization or a fixture changed; BOTH are locked decisions (phase-2.md T1.6/T1.8). Regenerate only with founder sign-off. REGENERATED ONCE, 2026-08-25: full.json gained the optional `commerce` module (phase-7 Slice 2), signed off in the proposal's Slice 2 line — 'full.json fixture ... publish fixtures and hash updates'. minimal.json is UNCHANGED and must stay so: commerce is optional, so the minimal payload never carries it.",
+  "full.json": "sha256:30bd220fda88f5dd511cd0c05fe888e9abad4f5e5946b398aade99ba8d3c8a08",
   "minimal.json": "sha256:7b4ebc88bf2c17e1182a7e89fe994c3a38f70e0e638b37a0caa662f0c7e8db22"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lamgig/content-schemas",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "The LamGig published-JSON contract: Zod schemas, canonical serialization, and fixtures for consuming content published by the LamGig platform.",
   "keywords": [
     "lamgig",

package/dist/chunk-KBPOR3WL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { z } from 'zod';\n\n/**\n * Version of the published-JSON contract. Additive changes (new OPTIONAL fields\n * and new OPTIONAL module keys) keep this number; any required addition is\n * breaking and bumps it. The full compatibility rule lives in this package's\n * README. See PLAN.md § Published JSON delivery and phase-2.md T1.5.\n */\nexport const SCHEMA_VERSION = 1;\n\n/** Publisher-enforced ceiling on the canonical payload size (1 MiB). */\nexport const MAX_CONTENT_BYTES = 1_048_576;\n\n// ---------------------------------------------------------------------------\n// Shared value patterns — single source of truth.\n//\n// LOCALE_PATTERN_SOURCE is the EXACT string used by the `site_settings.locale`\n// DB CHECK (supabase/migrations/*_content_site_settings.sql). Contract and\n// database must never disagree (phase-2.md T1.1): v1 supports the named BCP-47\n// subset `ll` or `ll-CC` only (e.g. `en`, `en-US`); script/numeric-region forms\n// (`zh-Hant`, `es-419`) are out of scope — widening later is additive.\n// HEX_COLOR / CURRENCY are likewise mirrored by DB CHECKs on `branding.colors`\n// and `menu_items.price_currency`.\n// ---------------------------------------------------------------------------\n\nexport const LOCALE_PATTERN_SOURCE = '^[a-z]{2}(-[A-Z]{2})?$';\nexport const LOCALE_PATTERN = new RegExp(LOCALE_PATTERN_SOURCE);\n\nexport const HEX_COLOR_PATTERN_SOURCE = '^#[0-9A-Fa-f]{6}$';\nexport const HEX_COLOR_PATTERN = new RegExp(HEX_COLOR_PATTERN_SOURCE);\n\n/** ISO 4217 alpha code shape (mirrored by the `price_currency` DB CHECK). */\nexport const CURRENCY_PATTERN_SOURCE = '^[A-Z]{3}$';\nexport const CURRENCY_PATTERN = new RegExp(CURRENCY_PATTERN_SOURCE);\n\n/** ISO 3166-1 alpha-2 country code shape. */\nexport const COUNTRY_PATTERN_SOURCE = '^[A-Z]{2}$';\nexport const COUNTRY_PATTERN = new RegExp(COUNTRY_PATTERN_SOURCE);\n\n/** IANA time zone check via the runtime's own tz database. */\nexport function isIanaTimeZone(tz: string): boolean {\n  try {\n    new Intl.DateTimeFormat('en-US', { timeZone: tz });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Two parse modes from ONE schema definition (phase-2.md T1):\n//\n//   - producer-strict  — `.strict()` everywhere; the dashboard validates its own\n//     output against this before publishing. Unknown keys are defects.\n//   - consumer-tolerant — unknown object keys are STRIPPED and unknown module\n//     keys ignored, so a shipped consumer accepts a v1 payload that later gained\n//     an optional field or a new module key (the additive changes the\n//     compatibility rule promises).\n//\n// zod v4's `.strip()`/`.passthrough()` do NOT recurse into nested objects, so a\n// post-hoc transform of one tree silently leaves nested objects in the original\n// mode. Instead every object in the tree is built through an injected object\n// factory: `z.strictObject` for the strict pair, `z.object` (strips unknown\n// keys) for the tolerant pair. One definition, two instantiations.\n// ---------------------------------------------------------------------------\n\ntype ObjectFactory = <T extends z.ZodRawShape>(shape: T) => z.ZodObject<T>;\n\nconst strictFactory = z.strictObject as ObjectFactory;\nconst tolerantFactory = z.object as ObjectFactory;\n\n// --- siteSettings ----------------------------------------------------------\n\nconst makeSiteSettingsSchema = (o: ObjectFactory) =>\n  o({\n    siteName: z.string().min(1).max(120),\n    tagline: z.string().max(200).optional(),\n    contact: o({\n      email: z.email().optional(),\n      phone: z.string().min(1).optional(),\n      address: o({\n        line1: z.string().min(1),\n        line2: z.string().min(1).optional(),\n        city: z.string().min(1),\n        region: z.string().min(1),\n        postalCode: z.string().min(1),\n        country: z.string().regex(COUNTRY_PATTERN),\n      }).optional(),\n    }),\n    // Explicit known keys (NOT a record): strict rejects unknown platforms,\n    // tolerant strips them — adding a platform later is additive.\n    socialLinks: o({\n      facebook: z.url().optional(),\n      instagram: z.url().optional(),\n      tiktok: z.url().optional(),\n      x: z.url().optional(),\n      youtube: z.url().optional(),\n      yelp: z.url().optional(),\n      google: z.url().optional(),\n    }).optional(),\n    locale: z.string().regex(LOCALE_PATTERN).default('en-US'),\n    timezone: z\n      .string()\n      .min(1)\n      .refine(isIanaTimeZone, 'must be an IANA time zone name')\n      .default('America/Los_Angeles'),\n  });\n\nexport const siteSettingsSchemaStrict = makeSiteSettingsSchema(strictFactory);\nexport const siteSettingsSchema = makeSiteSettingsSchema(tolerantFactory);\n\n// --- branding --------------------------------------------------------------\n\nconst makeBrandingSchema = (o: ObjectFactory) =>\n  o({\n    // Absolute URLs produced by the dashboard's storagePublicUrl builder\n    // (apps/dashboard/src/lib/content-urls.ts). The DB stores storage PATHS;\n    // the publish-time compose maps path -> URL. This package never imports\n    // from the app (dependency direction, phase-2.md T1.7).\n    logoUrl: z.url().optional(),\n    faviconUrl: z.url().optional(),\n    colors: o({\n      primary: z.string().regex(HEX_COLOR_PATTERN),\n      secondary: z.string().regex(HEX_COLOR_PATTERN).optional(),\n      accent: z.string().regex(HEX_COLOR_PATTERN).optional(),\n      background: z.string().regex(HEX_COLOR_PATTERN).optional(),\n      text: z.string().regex(HEX_COLOR_PATTERN).optional(),\n    }),\n    fonts: o({\n      heading: z.string().min(1).optional(),\n      body: z.string().min(1).optional(),\n    }).optional(),\n  });\n\nexport const brandingSchemaStrict = makeBrandingSchema(strictFactory);\nexport const brandingSchema = makeBrandingSchema(tolerantFactory);\n\n// --- menu ------------------------------------------------------------------\n\nconst makeMenuItemSchema = (o: ObjectFactory) =>\n  o({\n    /** Stable DB UUID — identical across publishes (phase-2.md T1.3). */\n    id: z.uuid(),\n    name: z.string().min(1).max(200),\n    description: z.string().max(2000).optional(),\n    price: o({\n      /** Integer minor units (e.g. cents). */\n      amount: z.number().int().min(0),\n      currency: z.string().regex(CURRENCY_PATTERN),\n    }),\n    imageUrl: z.url().optional(),\n    tags: z.array(z.string().min(1)).max(20),\n    sortOrder: z.number().int().min(0).max(100_000),\n    isAvailable: z.boolean(),\n  });\n\nconst makeMenuCategorySchema = (o: ObjectFactory) =>\n  o({\n    id: z.uuid(),\n    name: z.string().min(1).max(200),\n    description: z.string().max(2000).optional(),\n    sortOrder: z.number().int().min(0).max(100_000),\n    items: z.array(makeMenuItemSchema(o)),\n  });\n\nconst makeMenuSchema = (o: ObjectFactory) =>\n  o({\n    /** Archived/deleted entities are simply ABSENT; empty menu = `[]`, never a missing key. */\n    categories: z.array(makeMenuCategorySchema(o)),\n  });\n\nexport const menuSchemaStrict = makeMenuSchema(strictFactory);\nexport const menuSchema = makeMenuSchema(tolerantFactory);\n\n// --- content file ----------------------------------------------------------\n\nconst makeContentFileSchema = (o: ObjectFactory) =>\n  o({\n    schemaVersion: z.literal(1),\n    site: o({ id: z.uuid(), slug: z.string().min(1) }),\n    publishedAt: z.iso.datetime(),\n    // All three modules REQUIRED; empty states are valid module payloads\n    // (e.g. menu.categories: []), never missing keys. A new required module is\n    // breaking (retained/rollback snapshots won't contain it) — bump\n    // SCHEMA_VERSION instead.\n    modules: o({\n      siteSettings: makeSiteSettingsSchema(o),\n      branding: makeBrandingSchema(o),\n      menu: makeMenuSchema(o),\n    }),\n  });\n\n/** Producer gate: the dashboard validates its own output against this. */\nexport const contentFileSchemaStrict = makeContentFileSchema(strictFactory);\n/** Public consumer schema: tolerant of additive v1 changes. */\nexport const contentFileSchema = makeContentFileSchema(tolerantFactory);\n\nexport type SiteSettings = z.infer<typeof siteSettingsSchemaStrict>;\nexport type Branding = z.infer<typeof brandingSchemaStrict>;\nexport type Menu = z.infer<typeof menuSchemaStrict>;\nexport type MenuCategory = Menu['categories'][number];\nexport type MenuItem = MenuCategory['items'][number];\nexport type ContentFile = z.infer<typeof contentFileSchemaStrict>;\n\n// ---------------------------------------------------------------------------\n// Canonical serialization (phase-2.md T1.6).\n//\n// Recursively key-sorted JSON with no whitespace, produced by a hand-rolled\n// serializer rather than JSON.stringify over a re-built object — rebuilding\n// depends on JS insertion-order semantics and silently reorders integer-like\n// keys. Determinism here is what makes `hashContent` a byte-equality contract\n// shared by the publisher and every consumer test.\n//\n// Rules (documented in the README):\n//   - arrays keep their order; object keys are sorted with Array.prototype.sort\n//     (code-unit order);\n//   - object properties whose value is `undefined` are omitted (JSON semantics);\n//   - `undefined` anywhere else, non-finite numbers, bigint, functions and\n//     symbols THROW — never silently coerced the way JSON.stringify would.\n// ---------------------------------------------------------------------------\n\nexport function canonicalize(payload: unknown): string {\n  const out = serialize(payload);\n  if (out === undefined) {\n    throw new TypeError('canonicalize: payload itself serializes to nothing (undefined)');\n  }\n  return out;\n}\n\nfunction serialize(value: unknown): string | undefined {\n  if (value === undefined) return undefined;\n  if (value === null) return 'null';\n  switch (typeof value) {\n    case 'string':\n    case 'boolean':\n      return JSON.stringify(value);\n    case 'number':\n      if (!Number.isFinite(value)) {\n        throw new TypeError(`canonicalize: non-finite number ${String(value)}`);\n      }\n      return JSON.stringify(value);\n    case 'object':\n      break;\n    default:\n      throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);\n  }\n  if (Array.isArray(value)) {\n    const parts = value.map((entry) => {\n      const s = serialize(entry);\n      if (s === undefined) {\n        throw new TypeError('canonicalize: undefined array element');\n      }\n      return s;\n    });\n    return `[${parts.join(',')}]`;\n  }\n  const record = value as Record<string, unknown>;\n  const keys = Object.keys(record).sort();\n  const parts: string[] = [];\n  for (const key of keys) {\n    const s = serialize(record[key]);\n    if (s === undefined) continue; // undefined property -> omitted key\n    parts.push(`${JSON.stringify(key)}:${s}`);\n  }\n  return `{${parts.join(',')}}`;\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAQX,IAAM,iBAAiB;AAGvB,IAAM,oBAAoB;AAc1B,IAAM,wBAAwB;AAC9B,IAAM,iBAAiB,IAAI,OAAO,qBAAqB;AAEvD,IAAM,2BAA2B;AACjC,IAAM,oBAAoB,IAAI,OAAO,wBAAwB;AAG7D,IAAM,0BAA0B;AAChC,IAAM,mBAAmB,IAAI,OAAO,uBAAuB;AAG3D,IAAM,yBAAyB;AAC/B,IAAM,kBAAkB,IAAI,OAAO,sBAAsB;AAGzD,SAAS,eAAe,IAAqB;AAClD,MAAI;AACF,QAAI,KAAK,eAAe,SAAS,EAAE,UAAU,GAAG,CAAC;AACjD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqBA,IAAM,gBAAgB,EAAE;AACxB,IAAM,kBAAkB,EAAE;AAI1B,IAAM,yBAAyB,CAAC,MAC9B,EAAE;AAAA,EACA,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACtC,SAAS,EAAE;AAAA,IACT,OAAO,EAAE,MAAM,EAAE,SAAS;AAAA,IAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAClC,SAAS,EAAE;AAAA,MACT,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACvB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,MAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACtB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACxB,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MAC5B,SAAS,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,IAC3C,CAAC,EAAE,SAAS;AAAA,EACd,CAAC;AAAA;AAAA;AAAA,EAGD,aAAa,EAAE;AAAA,IACb,UAAU,EAAE,IAAI,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,IAAI,EAAE,SAAS;AAAA,IAC5B,QAAQ,EAAE,IAAI,EAAE,SAAS;AAAA,IACzB,GAAG,EAAE,IAAI,EAAE,SAAS;AAAA,IACpB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,IAC1B,MAAM,EAAE,IAAI,EAAE,SAAS;AAAA,IACvB,QAAQ,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3B,CAAC,EAAE,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE,QAAQ,OAAO;AAAA,EACxD,UAAU,EACP,OAAO,EACP,IAAI,CAAC,EACL,OAAO,gBAAgB,gCAAgC,EACvD,QAAQ,qBAAqB;AAClC,CAAC;AAEI,IAAM,2BAA2B,uBAAuB,aAAa;AACrE,IAAM,qBAAqB,uBAAuB,eAAe;AAIxE,IAAM,qBAAqB,CAAC,MAC1B,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,EAC1B,YAAY,EAAE,IAAI,EAAE,SAAS;AAAA,EAC7B,QAAQ,EAAE;AAAA,IACR,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IAC3C,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,IACxD,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,IACrD,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,IACzD,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,EACrD,CAAC;AAAA,EACD,OAAO,EAAE;AAAA,IACP,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IACpC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,CAAC,EAAE,SAAS;AACd,CAAC;AAEI,IAAM,uBAAuB,mBAAmB,aAAa;AAC7D,IAAM,iBAAiB,mBAAmB,eAAe;AAIhE,IAAM,qBAAqB,CAAC,MAC1B,EAAE;AAAA;AAAA,EAEA,IAAI,EAAE,KAAK;AAAA,EACX,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,OAAO,EAAE;AAAA;AAAA,IAEP,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IAC9B,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EAC7C,CAAC;AAAA,EACD,UAAU,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE;AAAA,EACvC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAO;AAAA,EAC9C,aAAa,EAAE,QAAQ;AACzB,CAAC;AAEH,IAAM,yBAAyB,CAAC,MAC9B,EAAE;AAAA,EACA,IAAI,EAAE,KAAK;AAAA,EACX,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EAC3C,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAO;AAAA,EAC9C,OAAO,EAAE,MAAM,mBAAmB,CAAC,CAAC;AACtC,CAAC;AAEH,IAAM,iBAAiB,CAAC,MACtB,EAAE;AAAA;AAAA,EAEA,YAAY,EAAE,MAAM,uBAAuB,CAAC,CAAC;AAC/C,CAAC;AAEI,IAAM,mBAAmB,eAAe,aAAa;AACrD,IAAM,aAAa,eAAe,eAAe;AAIxD,IAAM,wBAAwB,CAAC,MAC7B,EAAE;AAAA,EACA,eAAe,EAAE,QAAQ,CAAC;AAAA,EAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACjD,aAAa,EAAE,IAAI,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK5B,SAAS,EAAE;AAAA,IACT,cAAc,uBAAuB,CAAC;AAAA,IACtC,UAAU,mBAAmB,CAAC;AAAA,IAC9B,MAAM,eAAe,CAAC;AAAA,EACxB,CAAC;AACH,CAAC;AAGI,IAAM,0BAA0B,sBAAsB,aAAa;AAEnE,IAAM,oBAAoB,sBAAsB,eAAe;AA0B/D,SAAS,aAAa,SAA0B;AACrD,QAAM,MAAM,UAAU,OAAO;AAC7B,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,UAAU,gEAAgE;AAAA,EACtF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAAoC;AACrD,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,UAAU,KAAM,QAAO;AAC3B,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AAAA,IACL,KAAK;AACH,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,KAAK;AACH,UAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,cAAM,IAAI,UAAU,mCAAmC,OAAO,KAAK,CAAC,EAAE;AAAA,MACxE;AACA,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,KAAK;AACH;AAAA,IACF;AACE,YAAM,IAAI,UAAU,2CAA2C,OAAO,KAAK,EAAE;AAAA,EACjF;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAMA,SAAQ,MAAM,IAAI,CAAC,UAAU;AACjC,YAAM,IAAI,UAAU,KAAK;AACzB,UAAI,MAAM,QAAW;AACnB,cAAM,IAAI,UAAU,uCAAuC;AAAA,MAC7D;AACA,aAAO;AAAA,IACT,CAAC;AACD,WAAO,IAAIA,OAAM,KAAK,GAAG,CAAC;AAAA,EAC5B;AACA,QAAM,SAAS;AACf,QAAM,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK;AACtC,QAAM,QAAkB,CAAC;AACzB,aAAW,OAAO,MAAM;AACtB,UAAM,IAAI,UAAU,OAAO,GAAG,CAAC;AAC/B,QAAI,MAAM,OAAW;AACrB,UAAM,KAAK,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,CAAC,EAAE;AAAA,EAC1C;AACA,SAAO,IAAI,MAAM,KAAK,GAAG,CAAC;AAC5B;","names":["parts"]}