@roottale/cms-core 0.69.0 → 0.70.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @roottale/cms-core
 
+## 0.70.1
+
+## 0.70.0
+
+### Minor Changes
+
+- 49145e4: 콘텐츠 공개·색인 정책의 기존 단일 when 조건을 유지하면서, 공개 필드가 모두 일치하는 all과 모두 일치할 때만 검사를 제외하는 unlessAll을 추가합니다. 각 그룹은 equality 조건 1~4개만 허용하고 중첩하지 않으며, 기존 공개 필드 참조·검사 개수 한도에 포함합니다.
+
+  명시적인 방송 기록 조건이 모두 충족된 경우에만 검수·출연자 조건의 예외를 적용하고, 출처 필수와 강제 검색 제외를 함께 선언하는 공개 예제를 제공합니다. 누락 값과 null은 false로 바꾸지 않으며 관리자 projection·웹훅·FRONT가 같은 정책을 사용합니다.
+
+  글의 공개 영상 필드를 `videoThumbnail: { source: "youtube", field, when? }`로 연결합니다. 선언한 모델에만 안전한 대표 이미지 다음으로 정확한 YouTube ID의 썸네일을 사용하며, 수동 SEO와 기존 무옵션 모델의 이미지 의미는 유지합니다. 같은 공개 필드와 조건을 관리자 자동값·버전·검증과 FRONT 카드/메타데이터에 재사용할 수 있습니다.
+
 ## 0.69.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -83,6 +83,7 @@ __export(src_exports, {
   cmsParagraphSpacing: () => cmsParagraphSpacing,
   collectContentPolicyFieldRefs: () => collectContentPolicyFieldRefs,
   collectContentQueryFieldRefs: () => collectContentQueryFieldRefs,
+  collectMetadataDefaultFieldRefs: () => collectMetadataDefaultFieldRefs,
   contentPolicyBodyText: () => contentPolicyBodyText,
   contentPolicySafeHttpsUrl: () => contentPolicySafeHttpsUrl,
   createFieldBindingResolver: () => createFieldBindingResolver,
@@ -117,6 +118,7 @@ __export(src_exports, {
   mergeMetadataPatch: () => mergeMetadataPatch,
   metadataBodyParagraphs: () => metadataBodyParagraphs,
   metadataContentImageUrl: () => metadataContentImageUrl,
+  metadataVideoThumbnail: () => metadataVideoThumbnail,
   normalizeEmbed: () => normalizeEmbed,
   normalizeHexColor: () => normalizeHexColor,
   normalizeImageAlt: () => normalizeImageAlt,
@@ -2147,7 +2149,7 @@ function mergeMetadataPatch(current, input) {
 }
 
 // src/metadata-defaults.ts
-var import_zod4 = require("zod");
+var import_zod6 = require("zod");
 
 // src/metadata-text.ts
 var import_zod3 = require("zod");
@@ -2244,113 +2246,30 @@ function formatMetadataText(value, rule, input, name) {
   return text3;
 }
 
-// src/metadata-defaults.ts
-var imageOrigin = import_zod4.z.string().max(2048).refine((value) => {
-  try {
-    const url = new URL(value);
-    return url.protocol === "https:" && url.origin === value;
-  } catch {
-    return false;
-  }
-}, "\uC774\uBBF8\uC9C0 \uD5C8\uC6A9 \uBAA9\uB85D\uC5D0\uB294 \uACBD\uB85C \uC5C6\uB294 HTTPS origin\uB9CC \uC120\uC5B8\uD569\uB2C8\uB2E4");
-var MetadataDefaultRulesSchema = import_zod4.z.object({
-  title: MetadataTextRuleSchema.optional(),
-  titleTemplateMaxLength: import_zod4.z.number().int().min(1).max(1e3).optional(),
-  description: MetadataTextRuleSchema.optional(),
-  /** Code-owned defaults precede site defaults but always follow manual overrides. */
-  defaults: MetadataValuesSchema.optional(),
-  robots: MetadataRobotsPolicySchema.optional(),
-  useFeaturedImage: import_zod4.z.boolean().optional(),
-  useFirstBodyImage: import_zod4.z.boolean().optional(),
-  useTermImage: import_zod4.z.boolean().optional(),
-  imageAltSource: import_zod4.z.enum(["content", "title"]).optional(),
-  legacyImageSource: import_zod4.z.literal("legacy-thumbnail").optional(),
-  imageAllowedOrigins: import_zod4.z.array(imageOrigin).min(1).max(32).optional(),
-  legacyImageAllowedOrigins: import_zod4.z.array(imageOrigin).min(1).max(32).optional(),
-  normalizeCloudflareImages: import_zod4.z.boolean().optional(),
-  fallback: MetadataValuesSchema.optional()
-}).strict().refine((rule) => !rule.legacyImageSource || Boolean(rule.legacyImageAllowedOrigins?.length), "\uC774\uC804 \uC774\uBBF8\uC9C0 \uC6D0\uBCF8\uC5D0\uB294 \uD5C8\uC6A9 origin \uC120\uC5B8\uC774 \uD544\uC694\uD569\uB2C8\uB2E4");
-function metadataContentImageUrl(value, normalizeCloudflareImages = false) {
-  if (!normalizeCloudflareImages) return value;
-  try {
-    const url = new URL(value);
-    const [account, id, variant] = url.pathname.split("/").filter(Boolean);
-    if (url.protocol === "https:" && url.hostname === "imagedelivery.net" && account && id && variant) {
-      url.pathname = `/${account}/${id}/lg`;
-      return url.href;
-    }
-  } catch {
-  }
-  return value;
-}
-function legacyImageUrl(value, rule) {
-  if (!value || rule?.legacyImageSource !== "legacy-thumbnail") return void 0;
-  try {
-    const url = new URL(value);
-    if (!rule.legacyImageAllowedOrigins?.includes(url.origin)) return void 0;
-    return readMetadataValues({ ogImage: url.href }).ogImage;
-  } catch {
-    return void 0;
-  }
-}
-function contentCandidateAllowed(value, input, rule) {
-  if (!rule?.imageAllowedOrigins) return true;
-  if (value.startsWith("/") && !value.startsWith("//")) return true;
-  try {
-    const url = new URL(value);
-    if (url.protocol !== "https:") return false;
-    const origins = [...rule.imageAllowedOrigins];
-    if (input.imageBaseUrl) origins.push(new URL(input.imageBaseUrl).origin);
-    return origins.includes(url.origin);
-  } catch {
-    return false;
-  }
-}
-function formatMetadataDefaults(input, declaration) {
-  const dynamic = declaration[input.kind];
-  const rule = dynamic?.defaultRules?.[input.modelKey];
-  const name = cleanMetadataText(input.title, rule?.title);
-  const title = formatMetadataText(input.title, rule?.title, input, name);
-  const template2 = dynamic?.titleTemplates?.[input.modelKey];
-  const templatedTitle = title && template2 ? template2.replace("%s", () => title) : title;
-  const finalTitle = templatedTitle && rule?.titleTemplateMaxLength && templatedTitle.length > rule.titleTemplateMaxLength ? title : templatedTitle;
-  const description = formatMetadataText(input.description, rule?.description, input, name);
-  const bodyImage = input.firstBodyImage && (input.firstBodyImage.startsWith("https://") || /^\/(?!\/)/u.test(input.firstBodyImage)) ? input.firstBodyImage : void 0;
-  const featuredImage = (input.kind === "terms" ? rule?.useTermImage : rule?.useFeaturedImage) === false ? void 0 : input.featuredImage;
-  const candidateImage = featuredImage || (rule?.useFirstBodyImage ? bodyImage : void 0) || legacyImageUrl(input.legacyImage, rule);
-  const ogImage = candidateImage && contentCandidateAllowed(candidateImage, input, rule) ? readMetadataValues({ ogImage: metadataContentImageUrl(candidateImage, rule?.normalizeCloudflareImages) }).ogImage : void 0;
-  return {
-    ...readMetadataValues(rule?.defaults),
-    ...finalTitle ? { title: finalTitle } : {},
-    ...description ? { description } : {},
-    ...ogImage ? { ogImage } : {}
-  };
-}
-
-// src/post-body-source.ts
-function resolvePostBodySource(bodyHtml) {
-  if (typeof bodyHtml !== "string") return { kind: "json" };
-  const trimmed = bodyHtml.trim();
-  if (trimmed.length === 0) return { kind: "json" };
-  const sanitized = sanitizeHtml(trimmed);
-  const visible = /<(?:img|hr|br|iframe|video|audio)\b/i.test(sanitized) || sanitized.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim().length > 0;
-  return visible ? { kind: "html", html: sanitized } : { kind: "json" };
-}
-
 // src/content-policy-schema.ts
-var import_zod5 = require("zod");
-var ContentPolicyFieldNameSchema = import_zod5.z.string().min(1).max(64).regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "prototype" && !Object.hasOwn(Object.prototype, name));
-var ContentPolicyScalarSchema = import_zod5.z.union([
-  import_zod5.z.string().max(2048),
-  import_zod5.z.number().finite(),
-  import_zod5.z.boolean(),
-  import_zod5.z.null()
+var import_zod4 = require("zod");
+var ContentPolicyFieldNameSchema = import_zod4.z.string().min(1).max(64).regex(/^[A-Za-z_][A-Za-z0-9_]*$/).refine((name) => name !== "prototype" && !Object.hasOwn(Object.prototype, name));
+var ContentPolicyScalarSchema = import_zod4.z.union([
+  import_zod4.z.string().max(2048),
+  import_zod4.z.number().finite(),
+  import_zod4.z.boolean(),
+  import_zod4.z.null()
 ]);
-var ContentPolicyWhenSchema = import_zod5.z.object({
+var contentPolicyEquality = import_zod4.z.object({
   field: ContentPolicyFieldNameSchema,
   equals: ContentPolicyScalarSchema
 }).strict();
-var ContentPolicyInternalPathSchema = import_zod5.z.string().min(1).max(2048).refine((path) => {
+var ContentPolicyWhenSchema = import_zod4.z.union([
+  contentPolicyEquality,
+  import_zod4.z.object({
+    all: import_zod4.z.array(contentPolicyEquality).min(1).max(4).optional(),
+    unlessAll: import_zod4.z.array(contentPolicyEquality).min(1).max(4).optional()
+  }).strict().refine(
+    (when2) => when2.all !== void 0 || when2.unlessAll !== void 0,
+    "\uCF58\uD150\uCE20 \uC870\uAC74\uC5D0\uB294 all \uB610\uB294 unlessAll \uADF8\uB8F9\uC774 \uD544\uC694\uD569\uB2C8\uB2E4"
+  )
+]);
+var ContentPolicyInternalPathSchema = import_zod4.z.string().min(1).max(2048).refine((path) => {
   if (!path.startsWith("/") || path.startsWith("//") || /[\\?#\u0000-\u0020\u007f]/u.test(path)) return false;
   try {
     return path.split("/").every((part, index) => {
@@ -2364,17 +2283,17 @@ var ContentPolicyInternalPathSchema = import_zod5.z.string().min(1).max(2048).re
 }, "\uCF58\uD150\uCE20 \uACBD\uB85C\uB294 \uC548\uC804\uD55C \uC0AC\uC774\uD2B8 \uB0B4\uBD80 \uACBD\uB85C\uC5EC\uC57C \uD569\uB2C8\uB2E4");
 var field = { field: ContentPolicyFieldNameSchema };
 var scalarChecks = [
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("oneOf"), values: import_zod5.z.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: import_zod5.z.boolean().optional() }).strict(),
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("text") }).strict(),
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("date") }).strict(),
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("safeHttps") }).strict(),
-  import_zod5.z.object({ ...field, op: import_zod5.z.literal("allowedPath"), paths: import_zod5.z.array(ContentPolicyInternalPathSchema).min(1).max(512) }).strict()
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("oneOf"), values: import_zod4.z.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: import_zod4.z.boolean().optional() }).strict(),
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("text") }).strict(),
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("date") }).strict(),
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("safeHttps") }).strict(),
+  import_zod4.z.object({ ...field, op: import_zod4.z.literal("allowedPath"), paths: import_zod4.z.array(ContentPolicyInternalPathSchema).min(1).max(512) }).strict()
 ];
-var ContentPolicyScalarCheckSchema = import_zod5.z.discriminatedUnion("op", scalarChecks);
+var ContentPolicyScalarCheckSchema = import_zod4.z.discriminatedUnion("op", scalarChecks);
 var when = { when: ContentPolicyWhenSchema.optional() };
-var ContentPolicyCheckSchema = import_zod5.z.discriminatedUnion("op", [
+var ContentPolicyCheckSchema = import_zod4.z.discriminatedUnion("op", [
   scalarChecks[0].extend(when),
   scalarChecks[1].extend(when),
   scalarChecks[2].extend(when),
@@ -2382,26 +2301,26 @@ var ContentPolicyCheckSchema = import_zod5.z.discriminatedUnion("op", [
   scalarChecks[4].extend(when),
   scalarChecks[5].extend(when),
   scalarChecks[6].extend(when),
-  import_zod5.z.object({ ...field, ...when, op: import_zod5.z.literal("some"), checks: import_zod5.z.array(ContentPolicyScalarCheckSchema).min(1).max(8) }).strict(),
-  import_zod5.z.object({
+  import_zod4.z.object({ ...field, ...when, op: import_zod4.z.literal("some"), checks: import_zod4.z.array(ContentPolicyScalarCheckSchema).min(1).max(8) }).strict(),
+  import_zod4.z.object({
     ...when,
-    op: import_zod5.z.literal("bodyContent"),
-    allowExcerpt: import_zod5.z.boolean().optional(),
-    allowFeaturedImage: import_zod5.z.boolean().optional(),
-    additionalUrl: import_zod5.z.object({ ...field, ...when }).strict().optional()
+    op: import_zod4.z.literal("bodyContent"),
+    allowExcerpt: import_zod4.z.boolean().optional(),
+    allowFeaturedImage: import_zod4.z.boolean().optional(),
+    additionalUrl: import_zod4.z.object({ ...field, ...when }).strict().optional()
   }).strict(),
-  import_zod5.z.object({ ...when, op: import_zod5.z.literal("bodyText") }).strict()
+  import_zod4.z.object({ ...when, op: import_zod4.z.literal("bodyText") }).strict()
 ]);
-var contentPolicy = import_zod5.z.object({
-  visibility: import_zod5.z.array(ContentPolicyCheckSchema).max(24),
-  indexing: import_zod5.z.array(ContentPolicyCheckSchema).max(24),
-  pathSegmentFormat: import_zod5.z.literal("lower-kebab").optional()
+var contentPolicy = import_zod4.z.object({
+  visibility: import_zod4.z.array(ContentPolicyCheckSchema).max(24),
+  indexing: import_zod4.z.array(ContentPolicyCheckSchema).max(24),
+  pathSegmentFormat: import_zod4.z.literal("lower-kebab").optional()
 }).strict();
 var ContentPolicySchema = contentPolicy.superRefine((policy, ctx) => {
   const refs = collectContentPolicyFieldRefs(policy);
-  if (refs.length > 64) ctx.addIssue({ code: import_zod5.z.ZodIssueCode.custom, message: "\uCF58\uD150\uCE20 \uC815\uCC45\uC740 \uACF5\uAC1C \uD544\uB4DC 64\uAC1C\uAE4C\uC9C0 \uCC38\uC870\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4" });
+  if (refs.length > 64) ctx.addIssue({ code: import_zod4.z.ZodIssueCode.custom, message: "\uCF58\uD150\uCE20 \uC815\uCC45\uC740 \uACF5\uAC1C \uD544\uB4DC 64\uAC1C\uAE4C\uC9C0 \uCC38\uC870\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4" });
   for (const ref of refs) {
-    if ((ref.children?.length ?? 0) > 8) ctx.addIssue({ code: import_zod5.z.ZodIssueCode.custom, message: `\uBC18\uBCF5 \uD544\uB4DC ${ref.name}\uC758 \uC790\uC2DD \uCC38\uC870\uB294 8\uAC1C\uAE4C\uC9C0 \uD5C8\uC6A9\uD569\uB2C8\uB2E4` });
+    if ((ref.children?.length ?? 0) > 8) ctx.addIssue({ code: import_zod4.z.ZodIssueCode.custom, message: `\uBC18\uBCF5 \uD544\uB4DC ${ref.name}\uC758 \uC790\uC2DD \uCC38\uC870\uB294 8\uAC1C\uAE4C\uC9C0 \uD5C8\uC6A9\uD569\uB2C8\uB2E4` });
   }
 });
 function collectContentPolicyFieldRefs(policy) {
@@ -2411,17 +2330,43 @@ function collectContentPolicyFieldRefs(policy) {
     for (const child of children) names.add(child);
     refs.set(name, names);
   };
+  const addWhen = (when2) => {
+    if (!when2) return;
+    if ("field" in when2) add(when2.field);
+    else for (const condition of [...when2.all ?? [], ...when2.unlessAll ?? []]) add(condition.field);
+  };
   for (const check of [...policy.visibility, ...policy.indexing]) {
-    if (check.when) add(check.when.field);
+    addWhen(check.when);
     if ("field" in check) add(check.field, check.op === "some" ? check.checks.map((child) => child.field) : []);
     if (check.op === "bodyContent" && check.additionalUrl) {
       add(check.additionalUrl.field);
-      if (check.additionalUrl.when) add(check.additionalUrl.when.field);
+      addWhen(check.additionalUrl.when);
     }
   }
   return [...refs].map(([name, children]) => ({ name, ...children.size ? { children: [...children] } : {} }));
 }
 
+// src/content-policy-condition.ts
+function matchesContentPolicyWhen(when2, fields) {
+  if (!when2) return true;
+  const matches = ({ field: field3, equals }) => {
+    const value = Object.hasOwn(fields, field3) ? fields[field3] : void 0;
+    return value === equals;
+  };
+  if ("field" in when2) return matches(when2);
+  return (when2.all?.every(matches) ?? true) && !(when2.unlessAll?.every(matches) ?? false);
+}
+
+// src/post-body-source.ts
+function resolvePostBodySource(bodyHtml) {
+  if (typeof bodyHtml !== "string") return { kind: "json" };
+  const trimmed = bodyHtml.trim();
+  if (trimmed.length === 0) return { kind: "json" };
+  const sanitized = sanitizeHtml(trimmed);
+  const visible = /<(?:img|hr|br|iframe|video|audio)\b/i.test(sanitized) || sanitized.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim().length > 0;
+  return visible ? { kind: "html", html: sanitized } : { kind: "json" };
+}
+
 // src/content-policy.ts
 var text2 = (value) => typeof value === "string" ? value.trim() : "";
 var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -2484,9 +2429,6 @@ function matchesContentScalarCheck(check, fields) {
       return check.paths.includes(text2(value));
   }
 }
-function matchesWhen(when2, fields) {
-  return !when2 || fieldValue(fields, when2.field) === when2.equals;
-}
 function bodyFacts(post) {
   const jsonText = contentPolicyBodyText(post.bodyJson);
   const source = resolvePostBodySource(post.bodyHtml);
@@ -2494,7 +2436,7 @@ function bodyFacts(post) {
   return { jsonText, html, text: source.kind === "html" ? html.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim() : jsonText };
 }
 function matchesCheck(check, post, fields, getBody) {
-  if (!matchesWhen(check.when, fields)) return true;
+  if (!matchesContentPolicyWhen(check.when, fields)) return true;
   if (check.op === "some") {
     const value = fieldValue(fields, check.field);
     return Array.isArray(value) && value.some((item) => {
@@ -2505,7 +2447,7 @@ function matchesCheck(check, post, fields, getBody) {
   if (check.op === "bodyText") return Boolean(getBody().text);
   if (check.op === "bodyContent") {
     const body = getBody();
-    return Boolean(body.jsonText || body.html || check.allowExcerpt && text2(post.excerpt) || check.allowFeaturedImage && contentPolicySafeHttpsUrl(post.featuredImageUrl) || check.additionalUrl && matchesWhen(check.additionalUrl.when, fields) && contentPolicySafeHttpsUrl(fieldValue(fields, check.additionalUrl.field)));
+    return Boolean(body.jsonText || body.html || check.allowExcerpt && text2(post.excerpt) || check.allowFeaturedImage && contentPolicySafeHttpsUrl(post.featuredImageUrl) || check.additionalUrl && matchesContentPolicyWhen(check.additionalUrl.when, fields) && contentPolicySafeHttpsUrl(fieldValue(fields, check.additionalUrl.field)));
   }
   return matchesContentScalarCheck(check, fields);
 }
@@ -2552,21 +2494,151 @@ function evaluateContentPolicy(policy, post, options = {}) {
   };
 }
 
+// src/metadata-video-thumbnail.ts
+var import_zod5 = require("zod");
+var MetadataVideoThumbnailRuleSchema = import_zod5.z.object({
+  source: import_zod5.z.literal("youtube"),
+  field: ContentPolicyFieldNameSchema,
+  when: ContentPolicyWhenSchema.optional()
+}).strict();
+function metadataVideoThumbnail(rule, fields) {
+  if (!rule || !matchesContentPolicyWhen(rule.when, fields ?? {})) return void 0;
+  const value = fields && Object.hasOwn(fields, rule.field) ? fields[rule.field] : void 0;
+  const safe = contentPolicySafeHttpsUrl(value);
+  if (!safe) return void 0;
+  const url = new URL(safe);
+  const id = url.hostname === "youtu.be" ? url.pathname.slice(1) : ["www.youtube.com", "youtube.com", "m.youtube.com"].includes(url.hostname) ? url.pathname === "/watch" ? url.searchParams.get("v") : url.pathname.match(/^\/(?:shorts|embed)\/([^/]+)$/)?.[1] : null;
+  return /^[a-zA-Z0-9_-]{11}$/.test(id ?? "") ? `https://i.ytimg.com/vi/${id}/hqdefault.jpg` : void 0;
+}
+
+// src/metadata-default-fields.ts
+function collectMetadataDefaultFieldRefs(rule) {
+  const fields = /* @__PURE__ */ new Set();
+  const video = rule?.videoThumbnail;
+  if (video) {
+    fields.add(video.field);
+    if (video.when) {
+      if ("field" in video.when) fields.add(video.when.field);
+      else for (const condition of [...video.when.all ?? [], ...video.when.unlessAll ?? []]) fields.add(condition.field);
+    }
+  }
+  for (const text3 of [rule?.title, rule?.description]) {
+    if (text3?.source !== "template") continue;
+    for (const match of (text3.template ?? "").matchAll(/\{\{field:([a-zA-Z][a-zA-Z0-9_-]{0,159})\}\}/gu)) fields.add(match[1]);
+  }
+  return [...fields].map((name) => ({ name }));
+}
+
+// src/metadata-defaults.ts
+var imageOrigin = import_zod6.z.string().max(2048).refine((value) => {
+  try {
+    const url = new URL(value);
+    return url.protocol === "https:" && url.origin === value;
+  } catch {
+    return false;
+  }
+}, "\uC774\uBBF8\uC9C0 \uD5C8\uC6A9 \uBAA9\uB85D\uC5D0\uB294 \uACBD\uB85C \uC5C6\uB294 HTTPS origin\uB9CC \uC120\uC5B8\uD569\uB2C8\uB2E4");
+var MetadataDefaultRulesSchema = import_zod6.z.object({
+  title: MetadataTextRuleSchema.optional(),
+  titleTemplateMaxLength: import_zod6.z.number().int().min(1).max(1e3).optional(),
+  description: MetadataTextRuleSchema.optional(),
+  /** Code-owned defaults precede site defaults but always follow manual overrides. */
+  defaults: MetadataValuesSchema.optional(),
+  robots: MetadataRobotsPolicySchema.optional(),
+  useFeaturedImage: import_zod6.z.boolean().optional(),
+  videoThumbnail: MetadataVideoThumbnailRuleSchema.optional(),
+  useFirstBodyImage: import_zod6.z.boolean().optional(),
+  useTermImage: import_zod6.z.boolean().optional(),
+  imageAltSource: import_zod6.z.enum(["content", "title"]).optional(),
+  legacyImageSource: import_zod6.z.literal("legacy-thumbnail").optional(),
+  imageAllowedOrigins: import_zod6.z.array(imageOrigin).min(1).max(32).optional(),
+  legacyImageAllowedOrigins: import_zod6.z.array(imageOrigin).min(1).max(32).optional(),
+  normalizeCloudflareImages: import_zod6.z.boolean().optional(),
+  fallback: MetadataValuesSchema.optional()
+}).strict().refine((rule) => !rule.legacyImageSource || Boolean(rule.legacyImageAllowedOrigins?.length), "\uC774\uC804 \uC774\uBBF8\uC9C0 \uC6D0\uBCF8\uC5D0\uB294 \uD5C8\uC6A9 origin \uC120\uC5B8\uC774 \uD544\uC694\uD569\uB2C8\uB2E4").superRefine((rule, context) => {
+  if (!rule.videoThumbnail) return;
+  const refs = collectMetadataDefaultFieldRefs(rule);
+  if (refs.length > 64) context.addIssue({ code: import_zod6.z.ZodIssueCode.custom, message: "\uC601\uC0C1 \uC790\uB3D9\uAC12\uC740 \uACF5\uAC1C \uD544\uB4DC 64\uAC1C\uAE4C\uC9C0 \uCC38\uC870\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4" });
+  for (const { name } of refs) {
+    if (!ContentPolicyFieldNameSchema.safeParse(name).success) context.addIssue({
+      code: import_zod6.z.ZodIssueCode.custom,
+      message: "\uC601\uC0C1 \uC790\uB3D9\uAC12\uC758 \uD14D\uC2A4\uD2B8\xB7\uC870\uAC74\uC740 \uC548\uC804\uD55C \uACF5\uAC1C \uD544\uB4DC \uC774\uB984\uC744 \uC0AC\uC6A9\uD569\uB2C8\uB2E4"
+    });
+  }
+});
+function metadataContentImageUrl(value, normalizeCloudflareImages = false) {
+  if (!normalizeCloudflareImages) return value;
+  try {
+    const url = new URL(value);
+    const [account, id, variant] = url.pathname.split("/").filter(Boolean);
+    if (url.protocol === "https:" && url.hostname === "imagedelivery.net" && account && id && variant) {
+      url.pathname = `/${account}/${id}/lg`;
+      return url.href;
+    }
+  } catch {
+  }
+  return value;
+}
+function legacyImageUrl(value, rule) {
+  if (!value || rule?.legacyImageSource !== "legacy-thumbnail") return void 0;
+  try {
+    const url = new URL(value);
+    if (!rule.legacyImageAllowedOrigins?.includes(url.origin)) return void 0;
+    return readMetadataValues({ ogImage: url.href }).ogImage;
+  } catch {
+    return void 0;
+  }
+}
+function contentCandidateAllowed(value, input, rule) {
+  if (!rule?.imageAllowedOrigins) return true;
+  if (value.startsWith("/") && !value.startsWith("//")) return true;
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "https:") return false;
+    const origins = [...rule.imageAllowedOrigins];
+    if (input.imageBaseUrl) origins.push(new URL(input.imageBaseUrl).origin);
+    return origins.includes(url.origin);
+  } catch {
+    return false;
+  }
+}
+function formatMetadataDefaults(input, declaration) {
+  const dynamic = declaration[input.kind];
+  const rule = dynamic?.defaultRules?.[input.modelKey];
+  const name = cleanMetadataText(input.title, rule?.title);
+  const title = formatMetadataText(input.title, rule?.title, input, name);
+  const template2 = dynamic?.titleTemplates?.[input.modelKey];
+  const templatedTitle = title && template2 ? template2.replace("%s", () => title) : title;
+  const finalTitle = templatedTitle && rule?.titleTemplateMaxLength && templatedTitle.length > rule.titleTemplateMaxLength ? title : templatedTitle;
+  const description = formatMetadataText(input.description, rule?.description, input, name);
+  const bodyImage = input.firstBodyImage && (input.firstBodyImage.startsWith("https://") || /^\/(?!\/)/u.test(input.firstBodyImage)) ? input.firstBodyImage : void 0;
+  const rawFeaturedImage = (input.kind === "terms" ? rule?.useTermImage : rule?.useFeaturedImage) === false ? void 0 : input.featuredImage;
+  const featuredImage = rule?.videoThumbnail ? contentPolicySafeHttpsUrl(rawFeaturedImage) : rawFeaturedImage;
+  const candidateImage = featuredImage || (input.kind === "posts" ? metadataVideoThumbnail(rule?.videoThumbnail, input.fields) : void 0) || (rule?.useFirstBodyImage ? bodyImage : void 0) || legacyImageUrl(input.legacyImage, rule);
+  const ogImage = candidateImage && contentCandidateAllowed(candidateImage, input, rule) ? readMetadataValues({ ogImage: metadataContentImageUrl(candidateImage, rule?.normalizeCloudflareImages) }).ogImage : void 0;
+  return {
+    ...readMetadataValues(rule?.defaults),
+    ...finalTitle ? { title: finalTitle } : {},
+    ...description ? { description } : {},
+    ...ogImage ? { ogImage } : {}
+  };
+}
+
 // src/content-query.ts
-var import_zod6 = require("zod");
+var import_zod7 = require("zod");
 var field2 = { field: ContentPolicyFieldNameSchema };
-var ContentQueryFilterSchema = import_zod6.z.discriminatedUnion("op", [
-  import_zod6.z.object({ ...field2, op: import_zod6.z.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
-  import_zod6.z.object({ ...field2, op: import_zod6.z.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
-  import_zod6.z.object({ ...field2, op: import_zod6.z.literal("oneOf"), values: import_zod6.z.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: import_zod6.z.boolean().optional() }).strict()
+var ContentQueryFilterSchema = import_zod7.z.discriminatedUnion("op", [
+  import_zod7.z.object({ ...field2, op: import_zod7.z.literal("equals"), value: ContentPolicyScalarSchema }).strict(),
+  import_zod7.z.object({ ...field2, op: import_zod7.z.literal("notEquals"), value: ContentPolicyScalarSchema }).strict(),
+  import_zod7.z.object({ ...field2, op: import_zod7.z.literal("oneOf"), values: import_zod7.z.array(ContentPolicyScalarSchema).min(1).max(16), allowEmpty: import_zod7.z.boolean().optional() }).strict()
 ]);
-var ContentQuerySchema = import_zod6.z.object({
-  modelKeys: import_zod6.z.array(import_zod6.z.string().min(1).max(100).regex(/^[a-z][a-z0-9_-]*$/)).min(1).max(16),
-  filters: import_zod6.z.array(ContentQueryFilterSchema).max(8).optional(),
-  scope: import_zod6.z.enum(["currentTerm", "currentPath"]).optional(),
+var ContentQuerySchema = import_zod7.z.object({
+  modelKeys: import_zod7.z.array(import_zod7.z.string().min(1).max(100).regex(/^[a-z][a-z0-9_-]*$/)).min(1).max(16),
+  filters: import_zod7.z.array(ContentQueryFilterSchema).max(8).optional(),
+  scope: import_zod7.z.enum(["currentTerm", "currentPath"]).optional(),
   pinnedField: ContentPolicyFieldNameSchema.optional(),
-  pageSize: import_zod6.z.number().int().min(1).max(100),
-  requireItems: import_zod6.z.boolean().optional()
+  pageSize: import_zod7.z.number().int().min(1).max(100),
+  requireItems: import_zod7.z.boolean().optional()
 }).strict();
 function collectContentQueryFieldRefs(query) {
   return [.../* @__PURE__ */ new Set([...(query.filters ?? []).map((filter) => filter.field), ...query.pinnedField ? [query.pinnedField] : []])].map((name) => ({ name }));
@@ -2746,6 +2818,7 @@ function normalizeRedirectTarget(raw) {
   cmsParagraphSpacing,
   collectContentPolicyFieldRefs,
   collectContentQueryFieldRefs,
+  collectMetadataDefaultFieldRefs,
   contentPolicyBodyText,
   contentPolicySafeHttpsUrl,
   createFieldBindingResolver,
@@ -2780,6 +2853,7 @@ function normalizeRedirectTarget(raw) {
   mergeMetadataPatch,
   metadataBodyParagraphs,
   metadataContentImageUrl,
+  metadataVideoThumbnail,
   normalizeEmbed,
   normalizeHexColor,
   normalizeImageAlt,