@samva/markup 0.8.0 → 0.10.0

package/dist/starters/public-handoff.d.ts

@@ -1,164 +0,0 @@
-import { l as Channel } from "../ast-BrDtApwS.js";
-import { r as StarterCategory } from "../catalog-CKuOooB8.js";
-import { TemplateCollectionId, TemplateUseCase } from "./public-gallery.js";
-import { PublicTemplatePreview } from "./public-preview.js";
-import { StarterProject } from "./sources.js";
-import { Result } from "better-result";
-//#region starters/public-handoff.d.ts
-/** The brand a clean-room recreation names, and what its email does. */
-interface TemplateBrandRecreation {
-  readonly brand: string;
-  readonly subject: string;
-}
-/** Where an approved public artifact came from. */
-interface TemplateReferenceProvenance {
-  readonly source: "samva-owned" | "sanitized-synthetic" | "reviewed-public" | "brand-recreation";
-  readonly brandRecreation?: TemplateBrandRecreation;
-  /** Stable identifier in the producing system; never a third-party URL. */
-  readonly referenceId: string;
-  /** Stable ISO-8601 timestamp supplied by the producer. */
-  readonly recordedAt: string;
-}
-interface ApprovedPublicTemplateArtifact {
-  readonly approval: {
-    readonly state: "draft" | "approved" | "rejected";
-    readonly approvedBy: string;
-    /** Stable ISO-8601 timestamp supplied by the owner. */
-    readonly approvedAt: string;
-  };
-  readonly starter: {
-    readonly id: string;
-    readonly channel: Channel;
-    readonly category: StarterCategory;
-    readonly name: string;
-    readonly description: string;
-    readonly variables: ReadonlyArray<string>;
-    readonly source: string;
-    readonly project?: StarterProject;
-  };
-  readonly gallery: {
-    readonly slug: string;
-    readonly useCase: TemplateUseCase;
-    readonly collections: ReadonlyArray<TemplateCollectionId>;
-    readonly relatedTemplates: ReadonlyArray<string>;
-  };
-  readonly preview: PublicTemplatePreview;
-  readonly publicMetadata: {
-    readonly cardTitle: string;
-    readonly cardDescription: string;
-    readonly guidance: ReadonlyArray<string>;
-    readonly variableDescriptions: Readonly<Record<string, string>>;
-    readonly seo: {
-      readonly title: string;
-      readonly description: string;
-    };
-  };
-  readonly provenance: TemplateReferenceProvenance;
-}
-/**
- * A destination-neutral template packet. Gallery and agent callers can use
- * this shape without depending on a Lab corpus or a particular import source.
- */
-interface TemplateReferencePacket {
-  readonly version: 1;
-  readonly starter: ApprovedPublicTemplateArtifact["starter"];
-  readonly gallery: ApprovedPublicTemplateArtifact["gallery"] & {
-    readonly path: `/templates/${string}`;
-  };
-  readonly preview: ApprovedPublicTemplateArtifact["preview"];
-  readonly publicMetadata: ApprovedPublicTemplateArtifact["publicMetadata"];
-  readonly provenance: TemplateReferenceProvenance;
-}
-interface ValidatedPublicTemplateArtifact {
-  readonly starter: Omit<ApprovedPublicTemplateArtifact["starter"], "source" | "project">;
-  readonly source: string;
-  readonly project?: StarterProject;
-  readonly gallery: ApprovedPublicTemplateArtifact["gallery"] & {
-    readonly path: `/templates/${string}`;
-  };
-  readonly preview: ApprovedPublicTemplateArtifact["preview"];
-  readonly publicMetadata: ApprovedPublicTemplateArtifact["publicMetadata"];
-  readonly approval: ApprovedPublicTemplateArtifact["approval"] & {
-    readonly state: "approved";
-  };
-  readonly reference: TemplateReferencePacket;
-}
-type PublicHandoffIssueCode = "approval" | "identity" | "duplicate-id" | "duplicate-slug" | "source" | "font-token" | "channel" | "variables" | "sample-data" | "assets" | "public-metadata" | "provenance" | "reference";
-interface PublicHandoffIssue {
-  readonly artifactId: string;
-  readonly code: PublicHandoffIssueCode;
-  readonly message: string;
-}
-/** Bound authored source before parsing or mounting it. */
-declare const PUBLIC_TEMPLATE_SOURCE_MAX_CHARACTERS = 512000;
-/** Bounds apply to decoded bytes, before evaluation or disk emission. */
-declare const PUBLIC_TEMPLATE_PROJECT_MAX_BYTES: number;
-declare const PUBLIC_TEMPLATE_PROJECT_FILE_MAX_BYTES: number;
-declare const PUBLIC_TEMPLATE_PROJECT_MAX_FILES = 64;
-declare const isSafePublicTemplateProjectPath: (path: string) => boolean;
-/** Reject traversal, collisions, malformed base64 and oversized authored projects. */
-declare const isSafePublicTemplateProject: (project: StarterProject) => boolean;
-/** Digest the complete authored graph independently of caller file ordering. */
-declare const publicTemplateProjectDigest: (project: Pick<StarterProject, "entryPath" | "files">) => Promise<string>;
-declare const isValidTemplateBrandRecreation: (brandRecreation: TemplateBrandRecreation | undefined, project: StarterProject | undefined) => boolean;
-/** Static syntax inventory; loops, branches and component expansion are not evaluated. */
-interface PublicTemplateAuthoredStructure {
-  readonly basis: "authored-jsx";
-  readonly nodes: ReadonlyArray<{
-    readonly tag: string;
-    readonly depth: number;
-    readonly childIndex: number;
-  }>;
-  readonly components: ReadonlyArray<{
-    readonly tag: string;
-    readonly count: number;
-  }>;
-  readonly palette: ReadonlyArray<string>;
-}
-/** Only generic element names and literal class colors survive deidentification. */
-declare const publicTemplateAuthoredStructure: (source: string) => PublicTemplateAuthoredStructure | undefined;
-/**
- * Public imports may only refer to the default email Tailwind font-family tokens. A source may
- * still use the supported `font-*` weight utilities; this check deliberately
- * rejects a new family token instead of creating a corpus font-hosting path.
- */
-declare const unsupportedPublicTemplateFontTokens: (source: string) => ReadonlyArray<string>;
-/**
- * Accept bounded HTTPS URLs, same-origin gallery files under `/templates/assets/`,
- * or the preview's self-contained image data. Live Unsplash, placehold, and
- * assets.example hosts are never safe for public sample data.
- */
-declare const isSafePublicTemplateAsset: (value: string) => boolean;
-/** Normalizes one approved handoff for gallery and future agent consumers. */
-declare const toTemplateReferencePacket: (artifact: ApprovedPublicTemplateArtifact) => TemplateReferencePacket;
-type TemplateReferenceProjection = {
-  readonly kind: "source";
-  readonly relativePath: "starter.tsx";
-  readonly contents: string;
-} | {
-  readonly kind: "project-file";
-  readonly relativePath: `project/${string}`;
-  readonly contents: string;
-  readonly encoding: "utf8" | "base64";
-} | {
-  readonly kind: "catalog" | "gallery" | "preview" | "editorial" | "project";
-  readonly relativePath: `${"catalog" | "gallery" | "preview" | "editorial" | "project"}.json`;
-  readonly contents: string;
-};
-/**
- * Emits legacy projections plus the complete project as deterministic bytes. The importer
- * owns no checked-in destination files; callers choose an explicit output dir.
- */
-declare const emitTemplateReferencePacket: (packet: TemplateReferencePacket) => ReadonlyArray<TemplateReferenceProjection>;
-/**
- * Validates metadata and TSX syntax, never executing the template. The Vite importer
- * verifies schema, fixtures and rendered content before writing projections.
- * Validates explicitly supplied, owner-approved artifacts without filesystem,
- * network, persistence, or discovery. Successful output is a projection for
- * the existing starter, public-gallery, preview, and editorial contracts; this
- * function never registers or publishes it.
- */
-declare const validatePublicTemplateHandoff: (artifacts: ReadonlyArray<ApprovedPublicTemplateArtifact>) => Result<ReadonlyArray<ValidatedPublicTemplateArtifact>, ReadonlyArray<PublicHandoffIssue>>;
-//#endregion
-export { ApprovedPublicTemplateArtifact, PUBLIC_TEMPLATE_PROJECT_FILE_MAX_BYTES, PUBLIC_TEMPLATE_PROJECT_MAX_BYTES, PUBLIC_TEMPLATE_PROJECT_MAX_FILES, PUBLIC_TEMPLATE_SOURCE_MAX_CHARACTERS, PublicHandoffIssue, PublicHandoffIssueCode, PublicTemplateAuthoredStructure, TemplateBrandRecreation, TemplateReferencePacket, TemplateReferenceProjection, TemplateReferenceProvenance, ValidatedPublicTemplateArtifact, emitTemplateReferencePacket, isSafePublicTemplateAsset, isSafePublicTemplateProject, isSafePublicTemplateProjectPath, isValidTemplateBrandRecreation, publicTemplateAuthoredStructure, publicTemplateProjectDigest, toTemplateReferencePacket, unsupportedPublicTemplateFontTokens, validatePublicTemplateHandoff };
-//# sourceMappingURL=public-handoff.d.ts.map

package/dist/starters/public-handoff.js

@@ -1,361 +0,0 @@
-import { n as isObject } from "../guards-eV1qLbf2.js";
-import { EMAIL_ELEMENTS } from "../email/elements.js";
-import { starterCatalog } from "../starters.js";
-import { publicTemplates, templateCollections } from "./public-gallery.js";
-import { Result } from "better-result";
-import { parse } from "@babel/parser";
-//#region starters/public-handoff.ts
-const SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-const ISO_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
-const MAX_HTTPS_ASSET_LENGTH = 2048;
-const MAX_DATA_IMAGE_ASSET_LENGTH = 32768;
-const DATA_IMAGE = /^data:image\/(?:avif|gif|jpeg|png|svg\+xml|webp)(?:;charset=[a-z0-9-]+)?(?:;base64)?,[^\r\n]+$/i;
-const PUBLIC_TEMPLATE_ASSET_PATH = /^\/templates\/assets\/[A-Za-z0-9][A-Za-z0-9._-]*\.(?:jpe?g|png|webp)$/;
-const BLOCKED_PUBLIC_ASSET = /(?:unsplash|placehold|assets\.example)/i;
-/** A sample value is non-empty when every string in it is, and no list or object is empty. */
-const nonEmptySample = (value) => {
-	if (typeof value === "string") return nonEmpty(value);
-	if (Array.isArray(value)) return value.length > 0 && value.every(nonEmptySample);
-	if (isObject(value)) {
-		const values = Object.values(value);
-		return values.length > 0 && values.every(nonEmptySample);
-	}
-	return true;
-};
-const isTemplateReferenceProvenanceSource = (value) => value === "samva-owned" || value === "sanitized-synthetic" || value === "reviewed-public" || value === "brand-recreation";
-/** Bound authored source before parsing or mounting it. */
-const PUBLIC_TEMPLATE_SOURCE_MAX_CHARACTERS = 512e3;
-/** Bounds apply to decoded bytes, before evaluation or disk emission. */
-const PUBLIC_TEMPLATE_PROJECT_MAX_BYTES = 8388608;
-const PUBLIC_TEMPLATE_PROJECT_FILE_MAX_BYTES = 2097152;
-const PUBLIC_TEMPLATE_PROJECT_MAX_FILES = 64;
-const isSafePublicTemplateProjectPath = (path) => path.length <= 240 && path.split("/").every((part) => /^[A-Za-z0-9_][A-Za-z0-9._-]*$/.test(part) && part !== "." && part !== ".." && part !== "node_modules");
-/** Reject traversal, collisions, malformed base64 and oversized authored projects. */
-const isSafePublicTemplateProject = (project) => {
-	if (!isSafePublicTemplateProjectPath(project.entryPath) || !project.entryPath.endsWith(".tsx") || !/^[a-f0-9]{64}$/.test(project.digest) || project.files.length === 0 || project.files.length > 64) return false;
-	const paths = /* @__PURE__ */ new Set();
-	let total = 0;
-	for (const file of project.files) {
-		if (!isSafePublicTemplateProjectPath(file.path) || paths.has(file.path.toLowerCase())) return false;
-		paths.add(file.path.toLowerCase());
-		let bytes;
-		if (file.encoding === "utf8") {
-			if (file.content.length > 512e3) return false;
-			bytes = new TextEncoder().encode(file.content).length;
-		} else if (file.encoding === "base64") {
-			if (file.content.length > Math.ceil(2097152 / 3) * 4 || file.content.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(file.content)) return false;
-			if (btoa(atob(file.content)) !== file.content) return false;
-			bytes = file.content.length / 4 * 3 - (file.content.endsWith("==") ? 2 : file.content.endsWith("=") ? 1 : 0);
-		} else return false;
-		if (bytes > 2097152) return false;
-		total += bytes;
-		if (total > 8388608) return false;
-	}
-	for (const path of paths) if (path.split("/").slice(0, -1).some((_, index, parts) => paths.has(parts.slice(0, index + 1).join("/")))) return false;
-	return project.files.some((file) => file.path === project.entryPath && file.encoding === "utf8");
-};
-/** Digest the complete authored graph independently of caller file ordering. */
-const publicTemplateProjectDigest = async (project) => {
-	const serialized = JSON.stringify({
-		entryPath: project.entryPath,
-		files: [...project.files].sort((a, b) => a.path.localeCompare(b.path)).map(({ path, content, encoding }) => ({
-			path,
-			content,
-			encoding
-		}))
-	});
-	const bytes = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(serialized)));
-	return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-};
-const isValidTemplateBrandRecreation = (brandRecreation, project) => brandRecreation !== void 0 && project !== void 0 && brandRecreation.brand.trim().length > 0 && brandRecreation.subject.trim().length > 0;
-const PUBLIC_TEMPLATE_FONT_TOKENS = /* @__PURE__ */ new Set([
-	"sans",
-	"serif",
-	"mono"
-]);
-const FONT_WEIGHT_TOKENS = /* @__PURE__ */ new Set([
-	"thin",
-	"extralight",
-	"light",
-	"normal",
-	"medium",
-	"semibold",
-	"bold",
-	"extrabold",
-	"black"
-]);
-const parsePublicTemplateSource = (source) => {
-	if (source.length === 0 || source.length > 512e3) return void 0;
-	try {
-		const parsed = parse(source, {
-			sourceType: "module",
-			plugins: ["typescript", "jsx"]
-		});
-		return parsed.program.body.some((node) => node.type === "ExportDefaultDeclaration") ? parsed : void 0;
-	} catch {
-		return;
-	}
-};
-const PUBLIC_COMPONENT_TAGS = /* @__PURE__ */ new Set([
-	...Object.keys(EMAIL_ELEMENTS),
-	"Email",
-	"Section",
-	"Columns",
-	"Column",
-	"Button",
-	"Spacer",
-	"Divider",
-	"Image",
-	"Link"
-]);
-/** Only generic element names and literal class colors survive deidentification. */
-const publicTemplateAuthoredStructure = (source) => {
-	const parsed = parsePublicTemplateSource(source);
-	if (parsed === void 0) return void 0;
-	const nodes = [];
-	const counts = /* @__PURE__ */ new Map();
-	const palette = /* @__PURE__ */ new Set();
-	const siblings = /* @__PURE__ */ new Map();
-	const walk = (value, depth) => {
-		if (Array.isArray(value)) {
-			for (const item of value) walk(item, depth);
-			return;
-		}
-		if (!isObject(value)) return;
-		let childDepth = depth;
-		if (value.type === "JSXElement") {
-			const opening = value.openingElement;
-			if (!isObject(opening)) return;
-			const name = opening.name;
-			const tag = isObject(name) && typeof name.name === "string" && PUBLIC_COMPONENT_TAGS.has(name.name) ? name.name : "Component";
-			const childIndex = siblings.get(depth) ?? 0;
-			siblings.set(depth, childIndex + 1);
-			siblings.set(depth + 1, 0);
-			if (nodes.length < 200) nodes.push({
-				tag,
-				depth,
-				childIndex
-			});
-			counts.set(tag, (counts.get(tag) ?? 0) + 1);
-			if (Array.isArray(opening.attributes)) for (const attribute of opening.attributes) {
-				if (!isObject(attribute) || !isObject(attribute.name) || attribute.name.name !== "className") continue;
-				const literal = attribute.value;
-				if (!isObject(literal) || literal.type !== "StringLiteral" || typeof literal.value !== "string") continue;
-				for (const match of literal.value.matchAll(/#([a-f0-9]{8}|[a-f0-9]{6}|[a-f0-9]{3})(?=[^a-f0-9]|$)/gi)) if (palette.size < 24) palette.add(`#${match[1].toLowerCase()}`);
-			}
-			childDepth += 1;
-		}
-		for (const [key, child] of Object.entries(value)) {
-			if ([
-				"loc",
-				"comments",
-				"leadingComments",
-				"trailingComments",
-				"innerComments",
-				"extra",
-				"tokens"
-			].includes(key)) continue;
-			walk(child, childDepth);
-		}
-	};
-	walk(parsed.program, 0);
-	return {
-		basis: "authored-jsx",
-		nodes,
-		components: [...counts].sort(([a], [b]) => a.localeCompare(b)).slice(0, 64).map(([tag, count]) => ({
-			tag,
-			count
-		})),
-		palette: [...palette].sort()
-	};
-};
-const sortedUnique = (values) => [...new Set(values)].sort();
-const sameStrings = (left, right) => JSON.stringify(sortedUnique(left)) === JSON.stringify(sortedUnique(right));
-const nonEmpty = (value) => value.trim().length > 0;
-const issue = (artifactId, code, message) => ({
-	artifactId,
-	code,
-	message
-});
-/**
-* Public imports may only refer to the default email Tailwind font-family tokens. A source may
-* still use the supported `font-*` weight utilities; this check deliberately
-* rejects a new family token instead of creating a corpus font-hosting path.
-*/
-const unsupportedPublicTemplateFontTokens = (source) => {
-	const unsupported = /* @__PURE__ */ new Set();
-	for (const match of source.matchAll(/\bclassName\s*=\s*(["'])(.*?)\1/gs)) for (const className of (match[2] ?? "").split(/\s+/)) {
-		if (!className.startsWith("font-")) continue;
-		const token = className.slice(5);
-		if (!PUBLIC_TEMPLATE_FONT_TOKENS.has(token) && !FONT_WEIGHT_TOKENS.has(token)) unsupported.add(token);
-	}
-	return [...unsupported].sort();
-};
-/**
-* Accept bounded HTTPS URLs, same-origin gallery files under `/templates/assets/`,
-* or the preview's self-contained image data. Live Unsplash, placehold, and
-* assets.example hosts are never safe for public sample data.
-*/
-const isSafePublicTemplateAsset = (value) => {
-	if (value.includes("..") || BLOCKED_PUBLIC_ASSET.test(value)) return false;
-	if (value.startsWith("data:")) return value.length <= MAX_DATA_IMAGE_ASSET_LENGTH && DATA_IMAGE.test(value);
-	if (PUBLIC_TEMPLATE_ASSET_PATH.test(value)) return value.length <= MAX_HTTPS_ASSET_LENGTH;
-	const url = URL.parse(value);
-	return value.length <= MAX_HTTPS_ASSET_LENGTH && url?.protocol === "https:" && url.hostname.length > 0 && url.username.length === 0 && url.password.length === 0;
-};
-/** Normalizes one approved handoff for gallery and future agent consumers. */
-const toTemplateReferencePacket = (artifact) => ({
-	version: 1,
-	starter: artifact.starter,
-	gallery: {
-		...artifact.gallery,
-		path: `/templates/${artifact.gallery.slug}`
-	},
-	preview: artifact.preview,
-	publicMetadata: artifact.publicMetadata,
-	provenance: artifact.provenance
-});
-const jsonProjection = (kind, value) => ({
-	kind,
-	relativePath: `${kind}.json`,
-	contents: `${JSON.stringify(value, null, 2)}\n`
-});
-/**
-* Emits legacy projections plus the complete project as deterministic bytes. The importer
-* owns no checked-in destination files; callers choose an explicit output dir.
-*/
-const emitTemplateReferencePacket = (packet) => {
-	const project = packet.starter.project;
-	if (project !== void 0 && (!isSafePublicTemplateProject(project) || project.files.find((file) => file.path === project.entryPath)?.content !== packet.starter.source)) throw new Error("Invalid public template project");
-	if (packet.provenance.source === "brand-recreation" && !isValidTemplateBrandRecreation(packet.provenance.brandRecreation, project)) throw new Error("Invalid public template brand recreation attribution");
-	return [
-		...project === void 0 ? [] : [jsonProjection("project", {
-			...project,
-			files: [...project.files].sort((a, b) => a.path.localeCompare(b.path))
-		}), ...[...project.files].sort((a, b) => a.path.localeCompare(b.path)).map((file) => ({
-			kind: "project-file",
-			relativePath: `project/${file.path}`,
-			contents: file.content,
-			encoding: file.encoding
-		}))],
-		{
-			kind: "source",
-			relativePath: "starter.tsx",
-			contents: packet.starter.source
-		},
-		jsonProjection("catalog", {
-			id: packet.starter.id,
-			channel: packet.starter.channel,
-			category: packet.starter.category,
-			name: packet.starter.name,
-			description: packet.starter.description,
-			variables: packet.starter.variables
-		}),
-		jsonProjection("gallery", {
-			starterId: packet.starter.id,
-			...packet.gallery,
-			provenance: packet.provenance
-		}),
-		jsonProjection("preview", packet.preview),
-		jsonProjection("editorial", {
-			cardTitle: packet.publicMetadata.cardTitle,
-			cardDescription: packet.publicMetadata.cardDescription,
-			guidance: packet.publicMetadata.guidance,
-			variables: packet.publicMetadata.variableDescriptions,
-			seo: packet.publicMetadata.seo
-		})
-	];
-};
-/**
-* Validates metadata and TSX syntax, never executing the template. The Vite importer
-* verifies schema, fixtures and rendered content before writing projections.
-* Validates explicitly supplied, owner-approved artifacts without filesystem,
-* network, persistence, or discovery. Successful output is a projection for
-* the existing starter, public-gallery, preview, and editorial contracts; this
-* function never registers or publishes it.
-*/
-const validatePublicTemplateHandoff = (artifacts) => {
-	const issues = [];
-	const existingIds = new Set(starterCatalog.map((starter) => starter.id));
-	const existingSlugs = new Set(publicTemplates.map((template) => template.slug));
-	const suppliedIds = /* @__PURE__ */ new Set();
-	const suppliedSlugs = /* @__PURE__ */ new Set();
-	const allKnownIds = /* @__PURE__ */ new Set([...publicTemplates.map((template) => template.starterId), ...artifacts.map((artifact) => artifact.starter.id)]);
-	const knownCollections = new Set(templateCollections.map((collection) => collection.id));
-	for (const artifact of artifacts) {
-		const id = artifact.starter.id;
-		if (artifact.approval.state !== "approved" || !nonEmpty(artifact.approval.approvedBy) || !ISO_TIMESTAMP.test(artifact.approval.approvedAt)) issues.push(issue(id, "approval", "owner approval and an ISO-8601 approval timestamp are required"));
-		if (artifact.provenance === void 0 || !isTemplateReferenceProvenanceSource(artifact.provenance.source) || !nonEmpty(artifact.provenance.referenceId) || !ISO_TIMESTAMP.test(artifact.provenance.recordedAt)) issues.push(issue(id, "provenance", "provenance requires a supported source, identifier, and ISO-8601 timestamp"));
-		if (!SLUG.test(id) || !SLUG.test(artifact.gallery.slug)) issues.push(issue(id, "identity", "starter id and canonical slug must be lowercase kebab-case"));
-		if (existingIds.has(id) || suppliedIds.has(id)) issues.push(issue(id, "duplicate-id", `starter id "${id}" is already present`));
-		if (existingSlugs.has(artifact.gallery.slug) || suppliedSlugs.has(artifact.gallery.slug)) issues.push(issue(id, "duplicate-slug", `canonical slug "${artifact.gallery.slug}" is already present`));
-		suppliedIds.add(id);
-		suppliedSlugs.add(artifact.gallery.slug);
-		const project = artifact.starter.project;
-		if (project !== void 0 && (!isSafePublicTemplateProject(project) || project.files.find((file) => file.path === project.entryPath)?.content !== artifact.starter.source)) issues.push(issue(id, "source", "project must contain safe bounded unique files and the matching UTF-8 entry source"));
-		if (artifact.provenance?.source === "brand-recreation" && !isValidTemplateBrandRecreation(artifact.provenance.brandRecreation, project)) issues.push(issue(id, "provenance", "brand recreations require a complete project, a referenced brand, and its email subject"));
-		if (parsePublicTemplateSource(artifact.starter.source) === void 0) issues.push(issue(id, "source", "source must be a bounded TSX module with a default export; execution is verified by the importer"));
-		if (artifact.starter.channel !== "email") issues.push(issue(id, "channel", "public template source must be an executable email"));
-		if (new Set(artifact.starter.variables).size !== artifact.starter.variables.length || artifact.starter.variables.some((value) => !nonEmpty(value))) issues.push(issue(id, "variables", "declared input fields must be non-empty and unique"));
-		const unsupportedFontTokens = unsupportedPublicTemplateFontTokens(artifact.starter.source);
-		if (unsupportedFontTokens.length > 0) issues.push(issue(id, "font-token", `unsupported public font token: ${unsupportedFontTokens.join(", ")}`));
-		const declaredVariables = new Set(artifact.starter.variables);
-		const undeclaredSample = Object.keys(artifact.preview.sampleData).filter((variable) => !declaredVariables.has(variable));
-		if (undeclaredSample.length > 0) issues.push(issue(id, "sample-data", `sample data supplies undeclared variables: ${sortedUnique(undeclaredSample).join(", ")}`));
-		if (Object.values(artifact.preview.sampleData).some((value) => !nonEmptySample(value))) issues.push(issue(id, "sample-data", "sample data values must be non-empty"));
-		const assetVariables = artifact.preview.assets.map((asset) => asset.variable);
-		if (new Set(assetVariables).size !== assetVariables.length) issues.push(issue(id, "assets", "asset variable references must be unique"));
-		for (const asset of artifact.preview.assets) {
-			const value = artifact.preview.sampleData[asset.variable];
-			if (!artifact.starter.variables.includes(asset.variable)) issues.push(issue(id, "assets", `asset "${asset.variable}" is not a declared starter variable`));
-			if (typeof value !== "string" || !isSafePublicTemplateAsset(value)) issues.push(issue(id, "assets", `asset "${asset.variable}" must reference a bounded HTTPS, /templates/assets, or data:image sample URL`));
-		}
-		const metadata = artifact.publicMetadata;
-		const metadataStrings = [
-			artifact.starter.name,
-			artifact.starter.description,
-			artifact.preview.subject,
-			artifact.preview.preheader,
-			metadata.cardTitle,
-			metadata.cardDescription,
-			metadata.seo.title,
-			metadata.seo.description,
-			...metadata.guidance,
-			...Object.values(metadata.variableDescriptions)
-		];
-		if (metadata.guidance.length === 0 || metadataStrings.some((value) => !nonEmpty(value))) issues.push(issue(id, "public-metadata", "public metadata fields must be non-empty"));
-		if (!sameStrings(Object.keys(metadata.variableDescriptions), artifact.starter.variables)) issues.push(issue(id, "public-metadata", "variable descriptions must cover every declared variable exactly"));
-		if (new Set(artifact.gallery.collections).size !== artifact.gallery.collections.length) issues.push(issue(id, "reference", "collection references must be unique"));
-		for (const collectionId of artifact.gallery.collections) if (!knownCollections.has(collectionId)) issues.push(issue(id, "reference", `collection "${collectionId}" is invalid`));
-		if (new Set(artifact.gallery.relatedTemplates).size !== artifact.gallery.relatedTemplates.length) issues.push(issue(id, "reference", "related template references must be unique"));
-		for (const relatedId of artifact.gallery.relatedTemplates) if (relatedId === id || !allKnownIds.has(relatedId)) issues.push(issue(id, "reference", `related template "${relatedId}" is invalid`));
-	}
-	if (issues.length > 0) return Result.err(issues);
-	return Result.ok(artifacts.map((artifact) => {
-		const reference = toTemplateReferencePacket(artifact);
-		return {
-			approval: {
-				...artifact.approval,
-				state: "approved"
-			},
-			starter: {
-				id: artifact.starter.id,
-				channel: artifact.starter.channel,
-				category: artifact.starter.category,
-				name: artifact.starter.name,
-				description: artifact.starter.description,
-				variables: artifact.starter.variables
-			},
-			source: artifact.starter.source,
-			...artifact.starter.project === void 0 ? {} : { project: artifact.starter.project },
-			gallery: reference.gallery,
-			preview: artifact.preview,
-			publicMetadata: artifact.publicMetadata,
-			reference
-		};
-	}));
-};
-//#endregion
-export { PUBLIC_TEMPLATE_PROJECT_FILE_MAX_BYTES, PUBLIC_TEMPLATE_PROJECT_MAX_BYTES, PUBLIC_TEMPLATE_PROJECT_MAX_FILES, PUBLIC_TEMPLATE_SOURCE_MAX_CHARACTERS, emitTemplateReferencePacket, isSafePublicTemplateAsset, isSafePublicTemplateProject, isSafePublicTemplateProjectPath, isValidTemplateBrandRecreation, publicTemplateAuthoredStructure, publicTemplateProjectDigest, toTemplateReferencePacket, unsupportedPublicTemplateFontTokens, validatePublicTemplateHandoff };
-
-//# sourceMappingURL=public-handoff.js.map

package/dist/starters/public-preview-artifacts.d.ts

@@ -1,43 +0,0 @@
-import { t as EmailStarterId } from "../catalog-CKuOooB8.js";
-import { PublicTemplate } from "./public-gallery.js";
-import { PreviewQuality } from "./public-preview.js";
-import { Result } from "better-result";
-//#region starters/public-preview-artifacts.d.ts
-type PreviewSurface = "card" | "detail" | "og";
-type PreviewViewport = "desktop" | "mobile";
-type PreviewColorScheme = "light" | "dark";
-interface PublicTemplateRenderInput {
-  readonly name: `${string}.${PreviewSurface}.${PreviewViewport}.${PreviewColorScheme}.html`;
-  readonly surface: PreviewSurface;
-  readonly viewport: PreviewViewport;
-  readonly colorScheme: PreviewColorScheme;
-  readonly width: number;
-  readonly height: number;
-  readonly html: string;
-}
-interface PublicTemplatePreviewArtifact {
-  readonly starterId: EmailStarterId;
-  readonly slug: string;
-  readonly subject: string;
-  readonly preheader: string;
-  readonly quality: PreviewQuality;
-  readonly source: string;
-  readonly html: string;
-  /** The delivered plain-text alternative of the same executed fixture. */
-  readonly text: string;
-  readonly assets: ReadonlyArray<string>;
-  readonly renders: ReadonlyArray<PublicTemplateRenderInput>;
-}
-interface PreviewArtifactBuildIssue {
-  readonly starterId: EmailStarterId;
-  readonly message: string;
-}
-/** Build one static preview artifact without loading the editor runtime or performing I/O. */
-declare const buildPublicTemplatePreviewArtifact: (template: PublicTemplate) => Result<PublicTemplatePreviewArtifact, PreviewArtifactBuildIssue>;
-/** Build only the requested canonical subset, preserving manifest order and aggregated failures. */
-declare const buildPublicTemplatePreviewArtifactsFor: (templates: ReadonlyArray<PublicTemplate>) => Result<ReadonlyArray<PublicTemplatePreviewArtifact>, ReadonlyArray<PreviewArtifactBuildIssue>>;
-/** Build the complete canonical public gallery. */
-declare const buildPublicTemplatePreviewArtifacts: () => Result<readonly PublicTemplatePreviewArtifact[], readonly PreviewArtifactBuildIssue[]>;
-//#endregion
-export { PreviewArtifactBuildIssue, PreviewColorScheme, PreviewSurface, PreviewViewport, PublicTemplatePreviewArtifact, PublicTemplateRenderInput, buildPublicTemplatePreviewArtifact, buildPublicTemplatePreviewArtifacts, buildPublicTemplatePreviewArtifactsFor };
-//# sourceMappingURL=public-preview-artifacts.d.ts.map

package/dist/starters/public-preview-artifacts.js

@@ -1,104 +0,0 @@
-import { starterCatalog } from "../starters.js";
-import { registerPublicCorpusEntry } from "./corpus.js";
-import { publicTemplates } from "./public-gallery.js";
-import { starterEmailAssets, starterEmailFixtures, starterModuleSource } from "./sources.js";
-import { publicTemplatePreviews } from "./public-preview.js";
-import { Result } from "better-result";
-//#region starters/public-preview-artifacts.ts
-const renderFrames = [
-	{
-		surface: "card",
-		viewport: "desktop",
-		width: 600,
-		height: 760
-	},
-	{
-		surface: "card",
-		viewport: "mobile",
-		width: 390,
-		height: 680
-	},
-	{
-		surface: "detail",
-		viewport: "desktop",
-		width: 720,
-		height: 900
-	},
-	{
-		surface: "detail",
-		viewport: "mobile",
-		width: 390,
-		height: 844
-	},
-	{
-		surface: "og",
-		viewport: "desktop",
-		width: 1200,
-		height: 630
-	}
-];
-const renderInputs = (slug, html) => renderFrames.flatMap((frame) => ["light", "dark"].map((colorScheme) => ({
-	...frame,
-	colorScheme,
-	name: `${slug}.${frame.surface}.${frame.viewport}.${colorScheme}.html`,
-	html
-})));
-/** Build one static preview artifact without loading the editor runtime or performing I/O. */
-const buildPublicTemplatePreviewArtifact = (template) => {
-	const registration = registerPublicCorpusEntry({
-		id: template.starterId,
-		corpus: template.corpus,
-		facets: template.facets
-	});
-	if (Result.isError(registration)) return Result.err({
-		starterId: template.starterId,
-		message: `public corpus registration failed: ${registration.error.message}`
-	});
-	const source = starterModuleSource(template.starterId);
-	const fixture = starterEmailFixtures[template.starterId]?.default;
-	const starter = starterCatalog.find((entry) => entry.id === template.starterId);
-	const preview = publicTemplatePreviews[template.starterId];
-	if (source === void 0 || starter === void 0 || fixture === void 0) return Result.err({
-		starterId: template.starterId,
-		message: "canonical starter source is missing"
-	});
-	const sampleData = fixture.input;
-	const assets = new Set(starterEmailAssets[template.starterId]);
-	for (const asset of preview.assets) {
-		const value = sampleData[asset.variable];
-		if (typeof value !== "string") return Result.err({
-			starterId: template.starterId,
-			message: `sample data is missing a string asset: ${asset.variable}`
-		});
-		assets.add(value);
-	}
-	return Result.ok({
-		starterId: template.starterId,
-		slug: template.slug,
-		subject: fixture.subject,
-		preheader: fixture.preheader,
-		quality: preview.quality,
-		source,
-		html: fixture.html,
-		text: fixture.text,
-		assets: [...assets],
-		renders: renderInputs(template.slug, fixture.html)
-	});
-};
-/** Build only the requested canonical subset, preserving manifest order and aggregated failures. */
-const buildPublicTemplatePreviewArtifactsFor = (templates) => {
-	const artifacts = [];
-	const issues = [];
-	for (const template of templates) {
-		const artifact = buildPublicTemplatePreviewArtifact(template);
-		if (Result.isOk(artifact)) artifacts.push(artifact.value);
-		else issues.push(artifact.error);
-	}
-	return issues.length > 0 ? Result.err(issues) : Result.ok(artifacts);
-};
-/** Build the complete canonical public gallery. */
-const buildPublicTemplatePreviewArtifacts = () => buildPublicTemplatePreviewArtifactsFor(publicTemplates);
-//#endregion
-export { buildPublicTemplatePreviewArtifact, buildPublicTemplatePreviewArtifacts, buildPublicTemplatePreviewArtifactsFor };
-
-//# sourceMappingURL=public-preview-artifacts.js.map