@tryvitris/website-admin-contracts 0.1.0-alpha.1 → 1.0.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Vitris contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Vitris contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,3 @@
-# Website Admin Contracts
-
-Validated installation manifests, roles, permissions and module contracts for `@tryvitris/website-admin-harness`. Node.js 24+. MIT licensed.
+# Website Admin Contracts
+
+Validated installation manifests, roles, permissions and module contracts for `@tryvitris/website-admin-harness`. Node.js 24+. MIT licensed.

package/dist/billing.d.ts

@@ -0,0 +1,117 @@
+/** Local preview contracts. These are not a production Stripe integration. */
+export declare const billingPermissions: readonly ["billing:read", "billing:customers:write", "billing:catalog:read", "billing:subscriptions:write", "billing:invoices:write", "billing:collect", "billing:connection:manage", "account-billing:read", "account-billing:manage"];
+export interface BillingCustomer {
+    id: string;
+    name: string;
+    contact: string;
+    email: string;
+    initials: string;
+    color: string;
+    websites: string[];
+    note: string;
+}
+export interface BillingPlan {
+    id: string;
+    name: string;
+    description: string;
+    amount: number;
+    interval: 'month' | 'year';
+    features: string[];
+    selfService: boolean;
+}
+export interface BillingSubscription {
+    id: string;
+    customerId: string;
+    planId: string;
+    status: 'active' | 'past_due' | 'trialing' | 'canceled';
+    renewal: string;
+    cancelAtPeriodEnd: boolean;
+    scheduledPlanId: string | null;
+}
+export interface BillingLine {
+    description: string;
+    quantity: number;
+    unitAmount: number;
+}
+export interface BillingInvoice {
+    id: string;
+    customerId: string;
+    number: string;
+    description: string;
+    lines: BillingLine[];
+    status: 'draft' | 'open' | 'paid' | 'void';
+    issued: string;
+    due: string;
+    paidAt: string | null;
+    kind: 'subscription' | 'one_off';
+}
+export interface BillingPayment {
+    id: string;
+    customerId: string;
+    invoiceId: string;
+    amount: number;
+    status: 'succeeded' | 'failed' | 'refunded';
+    date: string;
+}
+export interface BillingActivity {
+    id: string;
+    customerId: string | null;
+    text: string;
+    at: string;
+}
+export interface BillingState {
+    customers: BillingCustomer[];
+    plans: BillingPlan[];
+    subscriptions: BillingSubscription[];
+    invoices: BillingInvoice[];
+    payments: BillingPayment[];
+    activity: BillingActivity[];
+    connection: boolean;
+    card: {
+        brand: string;
+        last4: string;
+        expiry: string;
+    };
+}
+export interface BillingResponse extends BillingState {
+    revision: number;
+    simulated: true;
+    audience: 'seller' | 'customer';
+    customerId: string | null;
+    supplier: string;
+    asOf: string;
+    currency: 'USD';
+}
+export type BillingCommand = {
+    action: 'plan';
+    subscriptionId: string;
+    planId: string;
+    timing: 'renewal' | 'now';
+    reviewed: boolean;
+} | {
+    action: 'cancel' | 'resume';
+    subscriptionId: string;
+    reviewed: boolean;
+} | {
+    action: 'draft';
+    invoiceId?: string;
+    customerId: string;
+    description: string;
+    due: string;
+    lines: BillingLine[];
+} | {
+    action: 'send' | 'void' | 'pay';
+    invoiceId: string;
+    reviewed: boolean;
+} | {
+    action: 'card';
+    reviewed: boolean;
+} | {
+    action: 'connection';
+    connected: boolean;
+};
+export type BillingMutation = BillingCommand & {
+    revision: number;
+    idempotencyKey: string;
+};
+export declare const invoiceTotal: (invoice: Pick<BillingInvoice, "lines">) => number;

package/dist/billing.js

@@ -0,0 +1,7 @@
+// packages/contracts/src/billing.ts
+var billingPermissions = ["billing:read", "billing:customers:write", "billing:catalog:read", "billing:subscriptions:write", "billing:invoices:write", "billing:collect", "billing:connection:manage", "account-billing:read", "account-billing:manage"];
+var invoiceTotal = (invoice) => invoice.lines.reduce((sum, line) => sum + line.quantity * line.unitAmount, 0);
+export {
+  billingPermissions,
+  invoiceTotal
+};

package/dist/client-onboarding.d.ts

@@ -0,0 +1,69 @@
+export declare const clientOnboardingPermissions: readonly ["prospects:read", "prospects:write"];
+export interface OnboardingField {
+    id: string;
+    label: string;
+    required: boolean;
+    value: string;
+    kind?: 'text' | 'textarea' | 'tel' | 'url';
+    section?: 'business' | 'website';
+    help?: string;
+}
+export interface OnboardingTemplate {
+    id: string;
+    name: string;
+    businessType: string;
+    title: string;
+    intro: string;
+    message: string;
+    fields: OnboardingField[];
+    requiresPayment: boolean;
+    revision: number;
+    updatedAt: string | null;
+    source: 'starter' | 'saved';
+}
+export interface OnboardingConfig {
+    templateId?: string;
+    templateName?: string;
+    templateRevision?: number;
+    title: string;
+    intro: string;
+}
+export interface OnboardingDraft {
+    name?: string;
+    fields?: OnboardingField[];
+    step?: 'business' | 'website' | 'account';
+    savedAt?: string;
+}
+export interface Prospect {
+    id: string;
+    business: string;
+    name: string;
+    email: string;
+    previewUrl: string;
+    message: string;
+    status: 'draft' | 'invited' | 'expired' | 'active' | 'revoked';
+    createdAt: string;
+    invitedAt: string | null;
+    expiresAt: string | null;
+    activatedAt: string | null;
+    feedback: string;
+    feedbackAt: string | null;
+    fields: OnboardingField[];
+    requiresPayment: boolean;
+    paymentStatus: 'not_requested' | 'pending' | 'demo_complete';
+    onboarding?: OnboardingConfig;
+}
+export interface ProspectWorkspace {
+    rows: Prospect[];
+    templates: OnboardingTemplate[];
+    localOnly: true;
+    delivery: 'copy-link';
+}
+export type ProspectPortal = Pick<Prospect, 'business' | 'name' | 'email' | 'previewUrl' | 'message' | 'feedback' | 'feedbackAt' | 'fields' | 'requiresPayment' | 'paymentStatus'> & {
+    onboarding?: Pick<OnboardingConfig, 'title' | 'intro'>;
+    draft?: OnboardingDraft;
+    inviteId?: string;
+};
+export declare function normalizeOnboardingFields(value: unknown): OnboardingField[] | null;
+export declare function onboardingFieldError(field: OnboardingField): string | null;
+export declare function onboardingAnswersMatch(answers: OnboardingField[], original: OnboardingField[], complete?: boolean): boolean;

package/dist/client-onboarding.js

@@ -0,0 +1,35 @@
+// packages/contracts/src/client-onboarding.ts
+var clientOnboardingPermissions = ["prospects:read", "prospects:write"];
+function normalizeOnboardingFields(value) {
+  if (!Array.isArray(value) || value.length > 10) return null;
+  const result = [];
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return null;
+    const f = item;
+    if (typeof f.id !== "string" || !/^[\w-]{1,60}$/.test(f.id) || result.some((v) => v.id === f.id) || typeof f.label !== "string" || !f.label.trim() || f.label.trim().length > 80 || typeof f.required !== "boolean" || typeof f.value !== "string" || f.value.trim().length > 1e3 || f.kind !== void 0 && !["text", "textarea", "tel", "url"].includes(String(f.kind)) || f.section !== void 0 && !["business", "website"].includes(String(f.section)) || f.help !== void 0 && (typeof f.help !== "string" || f.help.length > 180)) return null;
+    result.push({ id: f.id, label: f.label.trim(), required: f.required, value: f.value.trim(), ...f.kind ? { kind: f.kind } : {}, ...f.section ? { section: f.section } : {}, ...f.help ? { help: String(f.help).trim() } : {} });
+  }
+  return result;
+}
+function onboardingFieldError(field) {
+  if (!field.value.trim()) return field.required ? "Please complete this field." : null;
+  if (field.kind === "tel" && field.value.replace(/[^0-9]/g, "").length < 5) return "Enter a phone number.";
+  if (field.kind === "url") {
+    try {
+      const u = new URL(field.value);
+      if (!["http:", "https:"].includes(u.protocol) || !u.hostname.includes(".") || u.username || u.password) return "Enter a complete website URL.";
+    } catch {
+      return "Enter a complete website URL, including https://.";
+    }
+  }
+  return null;
+}
+function onboardingAnswersMatch(answers, original, complete = false) {
+  return answers.length === original.length && original.every((f) => answers.some((a) => a.id === f.id && a.label === f.label && a.required === f.required && (a.kind || "text") === (f.kind || "text") && (a.section || "business") === (f.section || "business") && (a.help || "") === (f.help || "") && (!complete || !onboardingFieldError(a))));
+}
+export {
+  clientOnboardingPermissions,
+  normalizeOnboardingFields,
+  onboardingAnswersMatch,
+  onboardingFieldError
+};

package/dist/client-portfolio.d.ts

@@ -0,0 +1,64 @@
+import type { AnalyticsRow, AnalyticsResponse } from './index.ts';
+export declare const clientPortfolioPermissions: readonly ["clients:read", "client-changes:request", "client-releases:publish"];
+export type PortfolioStatus = 'requested' | 'in_progress' | 'preview_ready' | 'queued' | 'published' | 'failed' | 'canceled';
+export interface PortfolioClient {
+    id: string;
+    name: string;
+    contact: string;
+    sector: string;
+}
+export interface PortfolioWebsite {
+    id: string;
+    clientId: string;
+    name: string;
+    origin: string;
+    initials: string;
+    color: string;
+    connection: 'healthy' | 'unavailable' | 'not_configured';
+    lastSuccess: string | null;
+    rows: AnalyticsRow[];
+    previousRows: AnalyticsRow[];
+    source?: 'synthetic' | 'connected' | 'not-connected';
+    message?: string;
+    windows?: Partial<Record<'14' | '30', AnalyticsResponse>>;
+    /** Verified collector activation, independent of padded/reporting-window rows. */
+    trackingStartedAt?: string;
+}
+export interface PortfolioChange {
+    id: string;
+    websiteId: string;
+    title: string;
+    request: string;
+    status: PortfolioStatus;
+    candidate: string | null;
+    createdAt: string;
+    updatedAt: string;
+    idempotencyKey: string;
+    history: {
+        label: string;
+        at: string;
+    }[];
+    checks: {
+        label: string;
+        result: 'simulated' | 'failed';
+    }[];
+    receipt: {
+        id: string;
+        candidate: string;
+        publishedAt: string;
+        simulated: true;
+    } | null;
+}
+export interface PortfolioState {
+    clients: PortfolioClient[];
+    websites: PortfolioWebsite[];
+    changes: PortfolioChange[];
+    runnerOnline: boolean;
+}
+export interface PortfolioResponse extends PortfolioState {
+    revision: number;
+    simulated: true;
+    analyticsMode?: 'live';
+}
+export type PortfolioAction = 'start' | 'prepare' | 'fail' | 'retry' | 'cancel' | 'queue' | 'publish';
+export declare function isTrackingTimestamp(value: unknown): value is string;

package/dist/client-portfolio.js

@@ -0,0 +1,9 @@
+// packages/contracts/src/client-portfolio.ts
+var clientPortfolioPermissions = ["clients:read", "client-changes:request", "client-releases:publish"];
+function isTrackingTimestamp(value) {
+  return typeof value === "string" && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
+}
+export {
+  clientPortfolioPermissions,
+  isTrackingTimestamp
+};

package/dist/index.d.ts

@@ -1,6 +1,11 @@
+export * from './billing.js';
+export * from './stripe-billing.js';
+export * from './client-portfolio.js';
+export * from './client-onboarding.js';
+export * from './scheduling.js';
 export declare const contractVersion = 1;
 export declare const coreSections: readonly ["overview", "leads", "analytics", "settings", "access", "activity"];
-export declare const permissions: readonly ["leads:read", "leads:write", "analytics:read", "settings:write", "access:read", "activity:read", "tasks:read", "tasks:write"];
+export declare const permissions: readonly ["leads:read", "leads:write", "analytics:read", "settings:write", "access:read", "access:write", "activity:read", "tasks:read", "tasks:write", "appointments:read", "appointments:write", "availability:write", "scheduling:configure", "calendar-connections:manage", "clients:read", "client-changes:request", "client-releases:publish", "prospects:read", "prospects:write", "billing:read", "billing:customers:write", "billing:catalog:read", "billing:subscriptions:write", "billing:invoices:write", "billing:collect", "billing:connection:manage", "account-billing:read", "account-billing:manage"];
 export type Permission = typeof permissions[number];
 export type Role = 'owner' | 'administrator' | 'editor' | 'analyst';
 export declare const roles: Record<Role, readonly Permission[]>;
@@ -24,14 +29,171 @@ export interface AdminManifest {
         origin: string;
         tenantId: string;
     };
+    theme?: WebsiteTheme;
 }
+export declare const websiteColorKeys: readonly ["colorBg", "colorText", "colorMuted", "colorAccent", "colorAccentText", "colorSurface", "colorSurface2", "colorBorder", "colorFocus"];
+export type WebsiteTheme = Partial<Record<typeof websiteColorKeys[number], string>>;
+export declare function isThemeColor(value: unknown): value is string;
+export declare function isWebsiteTheme(value: unknown): value is WebsiteTheme;
 export interface ModuleDefinition {
+    ui?: 'stripe-billing' | 'stripe-account';
     id: string;
     version: number;
     label: string;
     permission: Permission;
     description: string;
 }
+export interface User {
+    id: string;
+    email: string;
+    role: Role;
+}
+export interface BootstrapResponse {
+    manifest: AdminManifest;
+    user: User | null;
+    passwordLogin: boolean;
+    localDemo: boolean;
+    connected: boolean;
+    modules: ModuleDefinition[];
+    capabilities: string[];
+    theme?: WebsiteTheme | null;
+    themeStatus?: 'website' | 'installation' | 'unavailable' | 'default';
+    accountAuth?: AccountCapabilities;
+    emailLoginConfigured?: boolean;
+    privateLocalSignIn?: boolean;
+}
+export type DataSource = 'synthetic' | 'connected' | 'not-connected';
+export interface LeadRow {
+    id: string;
+    name: string;
+    email: string;
+    message: string;
+    status: string;
+    created_at: string;
+    source?: string | null;
+    phone?: string | null;
+    fields_json?: string | null;
+    notification_policy?: string | null;
+    notification_status?: string | null;
+    notification_error?: string | null;
+    followUp?: LeadFollowUp;
+}
+export interface LeadFollowUp {
+    assignedTo: string | null;
+    dueDate: string | null;
+    notes: string;
+    completed: boolean;
+    revision: number;
+    updatedAt: string | null;
+}
+export interface LeadPagination {
+    version: 1;
+    total: number;
+    newCount: number;
+    nextCursor: string | null;
+}
+export interface LeadTeamMember {
+    id: string;
+    email: string;
+}
+export declare function isLeadFollowUp(value: unknown): value is LeadFollowUp;
+export declare function isLeadPagination(value: unknown): value is LeadPagination;
+export declare const analyticsMetricKeys: readonly ["sessions", "bounces", "engaged", "duration_ms", "leave_count", "scroll_25", "scroll_50", "scroll_75", "scroll_100", "converts_form", "converts_tel", "converts_mailto", "converts_maps", "engage_nav", "engage_btn", "engage_img", "engage_carousel"];
+export declare const analyticsBreakdownKeys: readonly ["top_paths_json", "top_refs_json", "channels_json", "devices_json", "hours_json", "top_engage_json"];
+export type AnalyticsMetric = 'views' | 'visitors' | 'enquiries' | typeof analyticsMetricKeys[number];
+export type AnalyticsBreakdown = typeof analyticsBreakdownKeys[number];
+export interface AnalyticsItem {
+    key: string;
+    n: number;
+}
+export type AnalyticsRow = {
+    day: string;
+    views: number;
+    visitors: number;
+    enquiries: number;
+} & Partial<Record<typeof analyticsMetricKeys[number], number>> & Partial<Record<AnalyticsBreakdown, string>>;
+export interface LeadsResponse {
+    rows: LeadRow[];
+    source: DataSource;
+    writable?: boolean;
+    message?: string;
+    mode?: string;
+    followUpsEnabled?: boolean;
+    pagination?: LeadPagination;
+    truncated?: boolean;
+}
+export interface AnalyticsResponse {
+    rows: AnalyticsRow[];
+    previousRows?: AnalyticsRow[];
+    source: DataSource;
+    timezone: string;
+    days: number;
+    generatedAt?: string;
+}
+export interface SettingsResponse {
+    notification_email: string;
+    revision: number;
+}
+export interface AccessRow extends User {
+    active: number;
+}
+export interface AccountCapabilities {
+    enabled: boolean;
+    emailReady: boolean;
+    setupAvailable: boolean;
+    emailVerified: boolean;
+    canInvite: boolean;
+}
+export interface AccountAction {
+    purpose: 'owner' | 'invite' | 'verify' | 'reset';
+    email: string;
+    expiresAt: number;
+    business: string;
+}
+export interface TeamInvitation {
+    id: string;
+    email: string;
+    role: string;
+    expiresAt: number;
+    status: 'accepted' | 'canceled' | 'expired' | 'pending';
+    delivery: 'pending' | 'sending' | 'sent' | 'failed' | 'superseded';
+}
+export interface AccessResponse extends RowsResponse<AccessRow & {
+    email_verified_at?: number | null;
+}> {
+    invitations?: TeamInvitation[];
+    accountAuth?: AccountCapabilities;
+}
+export interface ActivityRow {
+    id: string;
+    actor: string;
+    action: string;
+    created_at: string;
+}
+export interface TaskRow {
+    id: string;
+    title: string;
+    done: number;
+}
+export interface RowsResponse<T> {
+    rows: T[];
+    message?: string;
+}
+export interface ModuleRow {
+    id?: string;
+    title?: string;
+    name?: string;
+}
+export interface MutationResponse {
+    ok: true;
+}
+export interface AuthRequestResponse {
+    ok: true;
+    message: string;
+}
+export declare function isObject(value: unknown): value is Record<string, unknown>;
+export declare function isLeadRow(value: unknown): value is LeadRow;
+export declare function isAnalyticsRow(value: unknown): value is AnalyticsRow;
 export declare const workQueueModule: ModuleDefinition;
 export declare function isLoopback(origin: string): boolean;
 export declare function parseManifest(value: unknown): AdminManifest;

package/dist/index.js

@@ -1,17 +1,72 @@
-// packages/contracts/src/index.ts
-var contractVersion = 1;
-var coreSections = ["overview", "leads", "analytics", "settings", "access", "activity"];
-var permissions = ["leads:read", "leads:write", "analytics:read", "settings:write", "access:read", "activity:read", "tasks:read", "tasks:write"];
-var roles = {
+import { schedulingPermissions } from "./scheduling.js";
+import { clientPortfolioPermissions } from "./client-portfolio.js";
+import { clientOnboardingPermissions } from "./client-onboarding.js";
+import { billingPermissions } from "./billing.js";
+export * from "./billing.js";
+export * from "./stripe-billing.js";
+export * from "./client-portfolio.js";
+export * from "./client-onboarding.js";
+export * from "./scheduling.js";
+const contractVersion = 1;
+const coreSections = ["overview", "leads", "analytics", "settings", "access", "activity"];
+const permissions = ["leads:read", "leads:write", "analytics:read", "settings:write", "access:read", "access:write", "activity:read", "tasks:read", "tasks:write", ...schedulingPermissions, ...clientPortfolioPermissions, ...clientOnboardingPermissions, ...billingPermissions];
+const roles = {
   owner: permissions,
-  administrator: permissions,
+  administrator: permissions.filter((p) => p !== "access:write" && !clientPortfolioPermissions.includes(p) && !clientOnboardingPermissions.includes(p) && !billingPermissions.includes(p)),
   editor: ["leads:read", "leads:write", "activity:read", "tasks:read", "tasks:write"],
   analyst: ["analytics:read", "activity:read"]
 };
 function can(role, permission) {
   return roles[role]?.includes(permission) ?? false;
 }
-var workQueueModule = {
+const websiteColorKeys = ["colorBg", "colorText", "colorMuted", "colorAccent", "colorAccentText", "colorSurface", "colorSurface2", "colorBorder", "colorFocus"];
+function isThemeColor(value) {
+  if (typeof value !== "string" || value.length > 100) return false;
+  if (/^#(?:[\da-f]{3}|[\da-f]{4}|[\da-f]{6}|[\da-f]{8})$/i.test(value)) return true;
+  const match = value.match(/^(rgb|rgba|hsl|hsla)\(([^()]+)\)$/i);
+  if (!match) return false;
+  const parts = match[2].trim().split(/[\s,/]+/);
+  if (parts.length < 3 || parts.length > 4) return false;
+  const numeric = (part, max) => /^\d+(?:\.\d+)?%?$/.test(part) && parseFloat(part) >= 0 && parseFloat(part) <= (part.endsWith("%") ? 100 : max);
+  const components = match[1].toLowerCase().startsWith("rgb") ? parts.slice(0, 3).every((p) => numeric(p, 255)) : /^[+-]?\d+(?:\.\d+)?(?:deg)?$/.test(parts[0]) && parts.slice(1, 3).every((p) => p.endsWith("%") && numeric(p, 100));
+  return components && (parts.length === 3 || numeric(parts[3], 1));
+}
+function isWebsiteTheme(value) {
+  return isObject(value) && Object.keys(value).length > 0 && Object.entries(value).every(([key, color]) => websiteColorKeys.includes(key) && isThemeColor(color));
+}
+function isLeadFollowUp(value) {
+  if (!isObject(value)) return false;
+  return (value.assignedTo === null || typeof value.assignedTo === "string" && value.assignedTo.length > 0 && value.assignedTo.length <= 100) && (value.dueDate === null || typeof value.dueDate === "string" && /^\d{4}-\d{2}-\d{2}$/.test(value.dueDate) && Number.isFinite(Date.parse(value.dueDate + "T00:00:00Z")) && (/* @__PURE__ */ new Date(value.dueDate + "T00:00:00Z")).toISOString().slice(0, 10) === value.dueDate) && typeof value.notes === "string" && value.notes.length <= 3e3 && typeof value.completed === "boolean" && Number.isSafeInteger(value.revision) && Number(value.revision) >= 0 && (value.updatedAt === null || typeof value.updatedAt === "string");
+}
+function isLeadPagination(value) {
+  return isObject(value) && value.version === 1 && [value.total, value.newCount].every((n) => Number.isSafeInteger(n) && Number(n) >= 0) && (value.nextCursor === null || typeof value.nextCursor === "string" && value.nextCursor.length <= 4096);
+}
+const analyticsMetricKeys = ["sessions", "bounces", "engaged", "duration_ms", "leave_count", "scroll_25", "scroll_50", "scroll_75", "scroll_100", "converts_form", "converts_tel", "converts_mailto", "converts_maps", "engage_nav", "engage_btn", "engage_img", "engage_carousel"];
+const analyticsBreakdownKeys = ["top_paths_json", "top_refs_json", "channels_json", "devices_json", "hours_json", "top_engage_json"];
+function isObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isLeadRow(value) {
+  if (!isObject(value)) return false;
+  return ["id", "name", "email", "message", "status", "created_at"].every((key) => typeof value[key] === "string") && ["source", "phone", "fields_json", "notification_policy", "notification_status", "notification_error"].every((key) => value[key] === void 0 || value[key] === null || typeof value[key] === "string") && (value.followUp === void 0 || isLeadFollowUp(value.followUp));
+}
+function isAnalyticsRow(value) {
+  if (!isObject(value) || typeof value.day !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(value.day)) return false;
+  const count = (n) => typeof n === "number" && Number.isSafeInteger(n) && n >= 0;
+  if (!["views", "visitors", "enquiries"].every((key) => count(value[key])) || !analyticsMetricKeys.every((key) => value[key] === void 0 || count(value[key]))) return false;
+  return analyticsBreakdownKeys.every((key) => {
+    const raw = value[key];
+    if (raw === void 0) return true;
+    if (typeof raw !== "string" || raw.length > 1e5) return false;
+    try {
+      const items = JSON.parse(raw);
+      return Array.isArray(items) && items.length <= 200 && items.every((item) => isObject(item) && typeof item.key === "string" && item.key.length <= 300 && count(item.n) && (key !== "hours_json" || /^(?:[0-9]|1[0-9]|2[0-3])$/.test(item.key)));
+    } catch {
+      return false;
+    }
+  });
+}
+const workQueueModule = {
   id: "work-queue",
   version: 1,
   label: "Work queue",
@@ -49,6 +104,7 @@ function parseManifest(value) {
   if (!Array.isArray(v.modules) || v.modules.length > 20) throw new Error("Invalid modules");
   const modules = v.modules.map((x) => id(x, "module ID"));
   if (new Set(modules).size !== modules.length) throw new Error("Duplicate module");
+  if (v.theme !== void 0 && !isWebsiteTheme(v.theme)) throw new Error("Invalid website theme colors");
   let backend;
   if (v.backend !== void 0) {
     const b = object(v.backend);
@@ -65,7 +121,8 @@ function parseManifest(value) {
     site: { id: id(site.id, "site ID"), name: text(site.name, "site name"), origin: origin(site.origin, "website origin") },
     adminOrigin: origin(v.adminOrigin, "admin origin"),
     modules,
-    ...backend ? { backend } : {}
+    ...backend ? { backend } : {},
+    ...v.theme ? { theme: v.theme } : {}
   };
 }
 function validateModules(manifest, modules) {
@@ -79,13 +136,23 @@ function validateModules(manifest, modules) {
   for (const enabled of manifest.modules) if (!ids.has(enabled)) throw new Error(`Module ${enabled} is not installed`);
 }
 export {
+  analyticsBreakdownKeys,
+  analyticsMetricKeys,
   can,
   contractVersion,
   coreSections,
+  isAnalyticsRow,
+  isLeadFollowUp,
+  isLeadPagination,
+  isLeadRow,
   isLoopback,
+  isObject,
+  isThemeColor,
+  isWebsiteTheme,
   parseManifest,
   permissions,
   roles,
   validateModules,
+  websiteColorKeys,
   workQueueModule
 };