@roottale/cms-core 0.69.0 → 0.70.0

package/dist/index.js

@@ -1984,7 +1984,7 @@ function mergeMetadataPatch(current, input) {
 }
 
 // src/metadata-defaults.ts
-import { z as z4 } from "zod";
+import { z as z6 } from "zod";
 
 // src/metadata-text.ts
 import { z as z3 } from "zod";
@@ -2081,113 +2081,30 @@ function formatMetadataText(value, rule, input, name) {
   return text3;
 }
 
-// src/metadata-defaults.ts
-var imageOrigin = z4.string().max(2048).refine((value) => {
-  try {
-    const url = new URL(value);
-    return url.protocol === "https:" && url.origin === value;
-  } catch {
-    return false;
-  }
-}, "\uC774\uBBF8\uC9C0 \uD5C8\uC6A9 \uBAA9\uB85D\uC5D0\uB294 \uACBD\uB85C \uC5C6\uB294 HTTPS origin\uB9CC \uC120\uC5B8\uD569\uB2C8\uB2E4");
-var MetadataDefaultRulesSchema = z4.object({
-  title: MetadataTextRuleSchema.optional(),
-  titleTemplateMaxLength: z4.number().int().min(1).max(1e3).optional(),
-  description: MetadataTextRuleSchema.optional(),
-  /** Code-owned defaults precede site defaults but always follow manual overrides. */
-  defaults: MetadataValuesSchema.optional(),
-  robots: MetadataRobotsPolicySchema.optional(),
-  useFeaturedImage: z4.boolean().optional(),
-  useFirstBodyImage: z4.boolean().optional(),
-  useTermImage: z4.boolean().optional(),
-  imageAltSource: z4.enum(["content", "title"]).optional(),
-  legacyImageSource: z4.literal("legacy-thumbnail").optional(),
-  imageAllowedOrigins: z4.array(imageOrigin).min(1).max(32).optional(),
-  legacyImageAllowedOrigins: z4.array(imageOrigin).min(1).max(32).optional(),
-  normalizeCloudflareImages: z4.boolean().optional(),
-  fallback: MetadataValuesSchema.optional()
-}).strict().refine((rule) => !rule.legacyImageSource || Boolean(rule.legacyImageAllowedOrigins?.length), "\uC774\uC804 \uC774\uBBF8\uC9C0 \uC6D0\uBCF8\uC5D0\uB294 \uD5C8\uC6A9 origin \uC120\uC5B8\uC774 \uD544\uC694\uD569\uB2C8\uB2E4");
-function metadataContentImageUrl(value, normalizeCloudflareImages = false) {
-  if (!normalizeCloudflareImages) return value;
-  try {
-    const url = new URL(value);
-    const [account, id, variant] = url.pathname.split("/").filter(Boolean);
-    if (url.protocol === "https:" && url.hostname === "imagedelivery.net" && account && id && variant) {
-      url.pathname = `/${account}/${id}/lg`;
-      return url.href;
-    }
-  } catch {
-  }
-  return value;
-}
-function legacyImageUrl(value, rule) {
-  if (!value || rule?.legacyImageSource !== "legacy-thumbnail") return void 0;
-  try {
-    const url = new URL(value);
-    if (!rule.legacyImageAllowedOrigins?.includes(url.origin)) return void 0;
-    return readMetadataValues({ ogImage: url.href }).ogImage;
-  } catch {
-    return void 0;
-  }
-}
-function contentCandidateAllowed(value, input, rule) {
-  if (!rule?.imageAllowedOrigins) return true;
-  if (value.startsWith("/") && !value.startsWith("//")) return true;
-  try {
-    const url = new URL(value);
-    if (url.protocol !== "https:") return false;
-    const origins = [...rule.imageAllowedOrigins];
-    if (input.imageBaseUrl) origins.push(new URL(input.imageBaseUrl).origin);
-    return origins.includes(url.origin);
-  } catch {
-    return false;
-  }
-}
-function formatMetadataDefaults(input, declaration) {
-  const dynamic = declaration[input.kind];
-  const rule = dynamic?.defaultRules?.[input.modelKey];
-  const name = cleanMetadataText(input.title, rule?.title);
-  const title = formatMetadataText(input.title, rule?.title, input, name);
-  const template2 = dynamic?.titleTemplates?.[input.modelKey];
-  const templatedTitle = title && template2 ? template2.replace("%s", () => title) : title;
-  const finalTitle = templatedTitle && rule?.titleTemplateMaxLength && templatedTitle.length > rule.titleTemplateMaxLength ? title : templatedTitle;
-  const description = formatMetadataText(input.description, rule?.description, input, name);
-  const bodyImage = input.firstBodyImage && (input.firstBodyImage.startsWith("https://") || /^\/(?!\/)/u.test(input.firstBodyImage)) ? input.firstBodyImage : void 0;
-  const featuredImage = (input.kind === "terms" ? rule?.useTermImage : rule?.useFeaturedImage) === false ? void 0 : input.featuredImage;
-  const candidateImage = featuredImage || (rule?.useFirstBodyImage ? bodyImage : void 0) || legacyImageUrl(input.legacyImage, rule);
-  const ogImage = candidateImage && contentCandidateAllowed(candidateImage, input, rule) ? readMetadataValues({ ogImage: metadataContentImageUrl(candidateImage, rule?.normalizeCloudflareImages) }).ogImage : void 0;
-  return {
-    ...readMetadataValues(rule?.defaults),
-    ...finalTitle ? { title: finalTitle } : {},
-    ...description ? { description } : {},
-    ...ogImage ? { ogImage } : {}
-  };
-}
-
-// src/post-body-source.ts
-function resolvePostBodySource(bodyHtml) {
-  if (typeof bodyHtml !== "string") return { kind: "json" };
-  const trimmed = bodyHtml.trim();
-  if (trimmed.length === 0) return { kind: "json" };
-  const sanitized = sanitizeHtml(trimmed);
-  const visible = /<(?:img|hr|br|iframe|video|audio)\b/i.test(sanitized) || sanitized.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim().length > 0;
-  return visible ? { kind: "html", html: sanitized } : { kind: "json" };
-}
-
 // src/content-policy-schema.ts
-import { z as z5 } from "zod";
-var ContentPolicyFieldNameSchema = z5.string().min(1).max(64).regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "prototype" && !Object.hasOwn(Object.prototype, name));
-var ContentPolicyScalarSchema = z5.union([
-  z5.string().max(2048),
-  z5.number().finite(),
-  z5.boolean(),
-  z5.null()
+import { z as z4 } from "zod";
+var ContentPolicyFieldNameSchema = z4.string().min(1).max(64).regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "prototype" && !Object.hasOwn(Object.prototype, name));
+var ContentPolicyScalarSchema = z4.union([
+  z4.string().max(2048),
+  z4.number().finite(),
+  z4.boolean(),
+  z4.null()
 ]);
-var ContentPolicyWhenSchema = z5.object({
+var contentPolicyEquality = z4.object({
   field: ContentPolicyFieldNameSchema,
   equals: ContentPolicyScalarSchema
 }).strict();
-var ContentPolicyInternalPathSchema = z5.string().min(1).max(2048).refine((path) => {
+var ContentPolicyWhenSchema = z4.union([
+  contentPolicyEquality,
+  z4.object({
+    all: z4.array(contentPolicyEquality).min(1).max(4).optional(),
+    unlessAll: z4.array(contentPolicyEquality).min(1).max(4).optional()
+  }).strict().refine(
+    (when2) => when2.all !== void 0 || when2.unlessAll !== void 0,
+    "\uCF58\uD150\uCE20 \uC870\uAC74\uC5D0\uB294 all \uB610\uB294 unlessAll \uADF8\uB8F9\uC774 \uD544\uC694\uD569\uB2C8\uB2E4"
+  )
+]);
+var ContentPolicyInternalPathSchema = z4.string().min(1).max(2048).refine((path) => {
   if (!path.startsWith("/") || path.startsWith("//") || /[\\?#\u0000-\u0020\u007f]/u.test(path)) return false;
   try {
     return path.split("/").every((part, index) => {
@@ -2201,17 +2118,17 @@ var ContentPolicyInternalPathSchema = z5.string().min(1).max(2048).refine((path)
 }, "\uCF58\uD150\uCE20 \uACBD\uB85C\uB294 \uC548\uC804\uD55C \uC0AC\uC774\uD2B8 \uB0B4\uBD80 \uACBD\uB85C\uC5EC\uC57C \uD569\uB2C8\uB2E4");
 var field = { field: ContentPolicyFieldNameSchema };
 var scalarChecks = [
-  z5.object({ ...field, op: z5.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
-  z5.object({ ...field, op: z5.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
-  z5.object({ ...field, op: z5.literal("oneOf"), values: z5.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: z5.boolean().optional() }).strict(),
-  z5.object({ ...field, op: z5.literal("text") }).strict(),
-  z5.object({ ...field, op: z5.literal("date") }).strict(),
-  z5.object({ ...field, op: z5.literal("safeHttps") }).strict(),
-  z5.object({ ...field, op: z5.literal("allowedPath"), paths: z5.array(ContentPolicyInternalPathSchema).min(1).max(512) }).strict()
+  z4.object({ ...field, op: z4.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
+  z4.object({ ...field, op: z4.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
+  z4.object({ ...field, op: z4.literal("oneOf"), values: z4.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: z4.boolean().optional() }).strict(),
+  z4.object({ ...field, op: z4.literal("text") }).strict(),
+  z4.object({ ...field, op: z4.literal("date") }).strict(),
+  z4.object({ ...field, op: z4.literal("safeHttps") }).strict(),
+  z4.object({ ...field, op: z4.literal("allowedPath"), paths: z4.array(ContentPolicyInternalPathSchema).min(1).max(512) }).strict()
 ];
-var ContentPolicyScalarCheckSchema = z5.discriminatedUnion("op", scalarChecks);
+var ContentPolicyScalarCheckSchema = z4.discriminatedUnion("op", scalarChecks);
 var when = { when: ContentPolicyWhenSchema.optional() };
-var ContentPolicyCheckSchema = z5.discriminatedUnion("op", [
+var ContentPolicyCheckSchema = z4.discriminatedUnion("op", [
   scalarChecks[0].extend(when),
   scalarChecks[1].extend(when),
   scalarChecks[2].extend(when),
@@ -2219,26 +2136,26 @@ var ContentPolicyCheckSchema = z5.discriminatedUnion("op", [
   scalarChecks[4].extend(when),
   scalarChecks[5].extend(when),
   scalarChecks[6].extend(when),
-  z5.object({ ...field, ...when, op: z5.literal("some"), checks: z5.array(ContentPolicyScalarCheckSchema).min(1).max(8) }).strict(),
-  z5.object({
+  z4.object({ ...field, ...when, op: z4.literal("some"), checks: z4.array(ContentPolicyScalarCheckSchema).min(1).max(8) }).strict(),
+  z4.object({
     ...when,
-    op: z5.literal("bodyContent"),
-    allowExcerpt: z5.boolean().optional(),
-    allowFeaturedImage: z5.boolean().optional(),
-    additionalUrl: z5.object({ ...field, ...when }).strict().optional()
+    op: z4.literal("bodyContent"),
+    allowExcerpt: z4.boolean().optional(),
+    allowFeaturedImage: z4.boolean().optional(),
+    additionalUrl: z4.object({ ...field, ...when }).strict().optional()
   }).strict(),
-  z5.object({ ...when, op: z5.literal("bodyText") }).strict()
+  z4.object({ ...when, op: z4.literal("bodyText") }).strict()
 ]);
-var contentPolicy = z5.object({
-  visibility: z5.array(ContentPolicyCheckSchema).max(24),
-  indexing: z5.array(ContentPolicyCheckSchema).max(24),
-  pathSegmentFormat: z5.literal("lower-kebab").optional()
+var contentPolicy = z4.object({
+  visibility: z4.array(ContentPolicyCheckSchema).max(24),
+  indexing: z4.array(ContentPolicyCheckSchema).max(24),
+  pathSegmentFormat: z4.literal("lower-kebab").optional()
 }).strict();
 var ContentPolicySchema = contentPolicy.superRefine((policy, ctx) => {
   const refs = collectContentPolicyFieldRefs(policy);
-  if (refs.length > 64) ctx.addIssue({ code: z5.ZodIssueCode.custom, message: "\uCF58\uD150\uCE20 \uC815\uCC45\uC740 \uACF5\uAC1C \uD544\uB4DC 64\uAC1C\uAE4C\uC9C0 \uCC38\uC870\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4" });
+  if (refs.length > 64) ctx.addIssue({ code: z4.ZodIssueCode.custom, message: "\uCF58\uD150\uCE20 \uC815\uCC45\uC740 \uACF5\uAC1C \uD544\uB4DC 64\uAC1C\uAE4C\uC9C0 \uCC38\uC870\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4" });
   for (const ref of refs) {
-    if ((ref.children?.length ?? 0) > 8) ctx.addIssue({ code: z5.ZodIssueCode.custom, message: `\uBC18\uBCF5 \uD544\uB4DC ${ref.name}\uC758 \uC790\uC2DD \uCC38\uC870\uB294 8\uAC1C\uAE4C\uC9C0 \uD5C8\uC6A9\uD569\uB2C8\uB2E4` });
+    if ((ref.children?.length ?? 0) > 8) ctx.addIssue({ code: z4.ZodIssueCode.custom, message: `\uBC18\uBCF5 \uD544\uB4DC ${ref.name}\uC758 \uC790\uC2DD \uCC38\uC870\uB294 8\uAC1C\uAE4C\uC9C0 \uD5C8\uC6A9\uD569\uB2C8\uB2E4` });
   }
 });
 function collectContentPolicyFieldRefs(policy) {
@@ -2248,17 +2165,43 @@ function collectContentPolicyFieldRefs(policy) {
     for (const child of children) names.add(child);
     refs.set(name, names);
   };
+  const addWhen = (when2) => {
+    if (!when2) return;
+    if ("field" in when2) add(when2.field);
+    else for (const condition of [...when2.all ?? [], ...when2.unlessAll ?? []]) add(condition.field);
+  };
   for (const check of [...policy.visibility, ...policy.indexing]) {
-    if (check.when) add(check.when.field);
+    addWhen(check.when);
     if ("field" in check) add(check.field, check.op === "some" ? check.checks.map((child) => child.field) : []);
     if (check.op === "bodyContent" && check.additionalUrl) {
       add(check.additionalUrl.field);
-      if (check.additionalUrl.when) add(check.additionalUrl.when.field);
+      addWhen(check.additionalUrl.when);
     }
   }
   return [...refs].map(([name, children]) => ({ name, ...children.size ? { children: [...children] } : {} }));
 }
 
+// src/content-policy-condition.ts
+function matchesContentPolicyWhen(when2, fields) {
+  if (!when2) return true;
+  const matches = ({ field: field3, equals }) => {
+    const value = Object.hasOwn(fields, field3) ? fields[field3] : void 0;
+    return value === equals;
+  };
+  if ("field" in when2) return matches(when2);
+  return (when2.all?.every(matches) ?? true) && !(when2.unlessAll?.every(matches) ?? false);
+}
+
+// src/post-body-source.ts
+function resolvePostBodySource(bodyHtml) {
+  if (typeof bodyHtml !== "string") return { kind: "json" };
+  const trimmed = bodyHtml.trim();
+  if (trimmed.length === 0) return { kind: "json" };
+  const sanitized = sanitizeHtml(trimmed);
+  const visible = /<(?:img|hr|br|iframe|video|audio)\b/i.test(sanitized) || sanitized.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim().length > 0;
+  return visible ? { kind: "html", html: sanitized } : { kind: "json" };
+}
+
 // src/content-policy.ts
 var text2 = (value) => typeof value === "string" ? value.trim() : "";
 var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -2321,9 +2264,6 @@ function matchesContentScalarCheck(check, fields) {
       return check.paths.includes(text2(value));
   }
 }
-function matchesWhen(when2, fields) {
-  return !when2 || fieldValue(fields, when2.field) === when2.equals;
-}
 function bodyFacts(post) {
   const jsonText = contentPolicyBodyText(post.bodyJson);
   const source = resolvePostBodySource(post.bodyHtml);
@@ -2331,7 +2271,7 @@ function bodyFacts(post) {
   return { jsonText, html, text: source.kind === "html" ? html.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim() : jsonText };
 }
 function matchesCheck(check, post, fields, getBody) {
-  if (!matchesWhen(check.when, fields)) return true;
+  if (!matchesContentPolicyWhen(check.when, fields)) return true;
   if (check.op === "some") {
     const value = fieldValue(fields, check.field);
     return Array.isArray(value) && value.some((item) => {
@@ -2342,7 +2282,7 @@ function matchesCheck(check, post, fields, getBody) {
   if (check.op === "bodyText") return Boolean(getBody().text);
   if (check.op === "bodyContent") {
     const body = getBody();
-    return Boolean(body.jsonText || body.html || check.allowExcerpt && text2(post.excerpt) || check.allowFeaturedImage && contentPolicySafeHttpsUrl(post.featuredImageUrl) || check.additionalUrl && matchesWhen(check.additionalUrl.when, fields) && contentPolicySafeHttpsUrl(fieldValue(fields, check.additionalUrl.field)));
+    return Boolean(body.jsonText || body.html || check.allowExcerpt && text2(post.excerpt) || check.allowFeaturedImage && contentPolicySafeHttpsUrl(post.featuredImageUrl) || check.additionalUrl && matchesContentPolicyWhen(check.additionalUrl.when, fields) && contentPolicySafeHttpsUrl(fieldValue(fields, check.additionalUrl.field)));
   }
   return matchesContentScalarCheck(check, fields);
 }
@@ -2389,21 +2329,151 @@ function evaluateContentPolicy(policy, post, options = {}) {
   };
 }
 
+// src/metadata-video-thumbnail.ts
+import { z as z5 } from "zod";
+var MetadataVideoThumbnailRuleSchema = z5.object({
+  source: z5.literal("youtube"),
+  field: ContentPolicyFieldNameSchema,
+  when: ContentPolicyWhenSchema.optional()
+}).strict();
+function metadataVideoThumbnail(rule, fields) {
+  if (!rule || !matchesContentPolicyWhen(rule.when, fields ?? {})) return void 0;
+  const value = fields && Object.hasOwn(fields, rule.field) ? fields[rule.field] : void 0;
+  const safe = contentPolicySafeHttpsUrl(value);
+  if (!safe) return void 0;
+  const url = new URL(safe);
+  const id = url.hostname === "youtu.be" ? url.pathname.slice(1) : ["www.youtube.com", "youtube.com", "m.youtube.com"].includes(url.hostname) ? url.pathname === "/watch" ? url.searchParams.get("v") : url.pathname.match(/^\/(?:shorts|embed)\/([^/]+)$/)?.[1] : null;
+  return /^[a-zA-Z0-9_-]{11}$/.test(id ?? "") ? `https://i.ytimg.com/vi/${id}/hqdefault.jpg` : void 0;
+}
+
+// src/metadata-default-fields.ts
+function collectMetadataDefaultFieldRefs(rule) {
+  const fields = /* @__PURE__ */ new Set();
+  const video = rule?.videoThumbnail;
+  if (video) {
+    fields.add(video.field);
+    if (video.when) {
+      if ("field" in video.when) fields.add(video.when.field);
+      else for (const condition of [...video.when.all ?? [], ...video.when.unlessAll ?? []]) fields.add(condition.field);
+    }
+  }
+  for (const text3 of [rule?.title, rule?.description]) {
+    if (text3?.source !== "template") continue;
+    for (const match of (text3.template ?? "").matchAll(/\{\{field:([a-zA-Z][a-zA-Z0-9_-]{0,159})\}\}/gu)) fields.add(match[1]);
+  }
+  return [...fields].map((name) => ({ name }));
+}
+
+// src/metadata-defaults.ts
+var imageOrigin = z6.string().max(2048).refine((value) => {
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && url.origin === value;
+  } catch {
+    return false;
+  }
+}, "\uC774\uBBF8\uC9C0 \uD5C8\uC6A9 \uBAA9\uB85D\uC5D0\uB294 \uACBD\uB85C \uC5C6\uB294 HTTPS origin\uB9CC \uC120\uC5B8\uD569\uB2C8\uB2E4");
+var MetadataDefaultRulesSchema = z6.object({
+  title: MetadataTextRuleSchema.optional(),
+  titleTemplateMaxLength: z6.number().int().min(1).max(1e3).optional(),
+  description: MetadataTextRuleSchema.optional(),
+  /** Code-owned defaults precede site defaults but always follow manual overrides. */
+  defaults: MetadataValuesSchema.optional(),
+  robots: MetadataRobotsPolicySchema.optional(),
+  useFeaturedImage: z6.boolean().optional(),
+  videoThumbnail: MetadataVideoThumbnailRuleSchema.optional(),
+  useFirstBodyImage: z6.boolean().optional(),
+  useTermImage: z6.boolean().optional(),
+  imageAltSource: z6.enum(["content", "title"]).optional(),
+  legacyImageSource: z6.literal("legacy-thumbnail").optional(),
+  imageAllowedOrigins: z6.array(imageOrigin).min(1).max(32).optional(),
+  legacyImageAllowedOrigins: z6.array(imageOrigin).min(1).max(32).optional(),
+  normalizeCloudflareImages: z6.boolean().optional(),
+  fallback: MetadataValuesSchema.optional()
+}).strict().refine((rule) => !rule.legacyImageSource || Boolean(rule.legacyImageAllowedOrigins?.length), "\uC774\uC804 \uC774\uBBF8\uC9C0 \uC6D0\uBCF8\uC5D0\uB294 \uD5C8\uC6A9 origin \uC120\uC5B8\uC774 \uD544\uC694\uD569\uB2C8\uB2E4").superRefine((rule, context) => {
+  if (!rule.videoThumbnail) return;
+  const refs = collectMetadataDefaultFieldRefs(rule);
+  if (refs.length > 64) context.addIssue({ code: z6.ZodIssueCode.custom, message: "\uC601\uC0C1 \uC790\uB3D9\uAC12\uC740 \uACF5\uAC1C \uD544\uB4DC 64\uAC1C\uAE4C\uC9C0 \uCC38\uC870\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4" });
+  for (const { name } of refs) {
+    if (!ContentPolicyFieldNameSchema.safeParse(name).success) context.addIssue({
+      code: z6.ZodIssueCode.custom,
+      message: "\uC601\uC0C1 \uC790\uB3D9\uAC12\uC758 \uD14D\uC2A4\uD2B8\xB7\uC870\uAC74\uC740 \uC548\uC804\uD55C \uACF5\uAC1C \uD544\uB4DC \uC774\uB984\uC744 \uC0AC\uC6A9\uD569\uB2C8\uB2E4"
+    });
+  }
+});
+function metadataContentImageUrl(value, normalizeCloudflareImages = false) {
+  if (!normalizeCloudflareImages) return value;
+  try {
+    const url = new URL(value);
+    const [account, id, variant] = url.pathname.split("/").filter(Boolean);
+    if (url.protocol === "https:" && url.hostname === "imagedelivery.net" && account && id && variant) {
+      url.pathname = `/${account}/${id}/lg`;
+      return url.href;
+    }
+  } catch {
+  }
+  return value;
+}
+function legacyImageUrl(value, rule) {
+  if (!value || rule?.legacyImageSource !== "legacy-thumbnail") return void 0;
+  try {
+    const url = new URL(value);
+    if (!rule.legacyImageAllowedOrigins?.includes(url.origin)) return void 0;
+    return readMetadataValues({ ogImage: url.href }).ogImage;
+  } catch {
+    return void 0;
+  }
+}
+function contentCandidateAllowed(value, input, rule) {
+  if (!rule?.imageAllowedOrigins) return true;
+  if (value.startsWith("/") && !value.startsWith("//")) return true;
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "https:") return false;
+    const origins = [...rule.imageAllowedOrigins];
+    if (input.imageBaseUrl) origins.push(new URL(input.imageBaseUrl).origin);
+    return origins.includes(url.origin);
+  } catch {
+    return false;
+  }
+}
+function formatMetadataDefaults(input, declaration) {
+  const dynamic = declaration[input.kind];
+  const rule = dynamic?.defaultRules?.[input.modelKey];
+  const name = cleanMetadataText(input.title, rule?.title);
+  const title = formatMetadataText(input.title, rule?.title, input, name);
+  const template2 = dynamic?.titleTemplates?.[input.modelKey];
+  const templatedTitle = title && template2 ? template2.replace("%s", () => title) : title;
+  const finalTitle = templatedTitle && rule?.titleTemplateMaxLength && templatedTitle.length > rule.titleTemplateMaxLength ? title : templatedTitle;
+  const description = formatMetadataText(input.description, rule?.description, input, name);
+  const bodyImage = input.firstBodyImage && (input.firstBodyImage.startsWith("https://") || /^\/(?!\/)/u.test(input.firstBodyImage)) ? input.firstBodyImage : void 0;
+  const rawFeaturedImage = (input.kind === "terms" ? rule?.useTermImage : rule?.useFeaturedImage) === false ? void 0 : input.featuredImage;
+  const featuredImage = rule?.videoThumbnail ? contentPolicySafeHttpsUrl(rawFeaturedImage) : rawFeaturedImage;
+  const candidateImage = featuredImage || (input.kind === "posts" ? metadataVideoThumbnail(rule?.videoThumbnail, input.fields) : void 0) || (rule?.useFirstBodyImage ? bodyImage : void 0) || legacyImageUrl(input.legacyImage, rule);
+  const ogImage = candidateImage && contentCandidateAllowed(candidateImage, input, rule) ? readMetadataValues({ ogImage: metadataContentImageUrl(candidateImage, rule?.normalizeCloudflareImages) }).ogImage : void 0;
+  return {
+    ...readMetadataValues(rule?.defaults),
+    ...finalTitle ? { title: finalTitle } : {},
+    ...description ? { description } : {},
+    ...ogImage ? { ogImage } : {}
+  };
+}
+
 // src/content-query.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 var field2 = { field: ContentPolicyFieldNameSchema };
-var ContentQueryFilterSchema = z6.discriminatedUnion("op", [
-  z6.object({ ...field2, op: z6.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
-  z6.object({ ...field2, op: z6.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
-  z6.object({ ...field2, op: z6.literal("oneOf"), values: z6.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: z6.boolean().optional() }).strict()
+var ContentQueryFilterSchema = z7.discriminatedUnion("op", [
+  z7.object({ ...field2, op: z7.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
+  z7.object({ ...field2, op: z7.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
+  z7.object({ ...field2, op: z7.literal("oneOf"), values: z7.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: z7.boolean().optional() }).strict()
 ]);
-var ContentQuerySchema = z6.object({
-  modelKeys: z6.array(z6.string().min(1).max(100).regex(/^[a-z][a-z0-9_-]*$/)).min(1).max(16),
-  filters: z6.array(ContentQueryFilterSchema).max(8).optional(),
-  scope: z6.enum(["currentTerm", "currentPath"]).optional(),
+var ContentQuerySchema = z7.object({
+  modelKeys: z7.array(z7.string().min(1).max(100).regex(/^[a-z][a-z0-9_-]*$/)).min(1).max(16),
+  filters: z7.array(ContentQueryFilterSchema).max(8).optional(),
+  scope: z7.enum(["currentTerm", "currentPath"]).optional(),
   pinnedField: ContentPolicyFieldNameSchema.optional(),
-  pageSize: z6.number().int().min(1).max(100),
-  requireItems: z6.boolean().optional()
+  pageSize: z7.number().int().min(1).max(100),
+  requireItems: z7.boolean().optional()
 }).strict();
 function collectContentQueryFieldRefs(query) {
   return [.../* @__PURE__ */ new Set([...(query.filters ?? []).map((filter) => filter.field), ...query.pinnedField ? [query.pinnedField] : []])].map((name) => ({ name }));
@@ -2582,6 +2652,7 @@ export {
   cmsParagraphSpacing,
   collectContentPolicyFieldRefs,
   collectContentQueryFieldRefs,
+  collectMetadataDefaultFieldRefs,
   contentPolicyBodyText,
   contentPolicySafeHttpsUrl,
   createFieldBindingResolver,
@@ -2616,6 +2687,7 @@ export {
   mergeMetadataPatch,
   metadataBodyParagraphs,
   metadataContentImageUrl,
+  metadataVideoThumbnail,
   normalizeEmbed,
   normalizeHexColor,
   normalizeImageAlt,