@tryvitris/website-harness 1.0.2 → 1.1.0

package/bin/chunks/chunk-GPS3SAGQ.js

@@ -0,0 +1,1020 @@
+import {
+  COOKIE_COMPLIANCE_PATH,
+  beaconJs,
+  compileAllPages,
+  compileSite,
+  defaultTitleFromPath,
+  fileToPath,
+  motionAssetHref,
+  motionJs,
+  parseFrontmatter,
+  robotsTxt,
+  siteCss,
+  siteIslands,
+  sitemapXml
+} from "./chunk-JTXFTNEA.js";
+import {
+  mergeTheme,
+  themeCss
+} from "./chunk-GE6UUEG2.js";
+import {
+  escapeHtml
+} from "./chunk-7FS67SRF.js";
+
+// src/scheduling/management.ts
+var managementJs = String.raw`(() => {
+  const fragment = new URLSearchParams(location.hash.slice(1));
+  let linkToken = fragment.get('token') || '';
+  const intent = fragment.get('intent') === 'cancel' ? 'cancel' : fragment.get('intent') === 'reschedule' ? 'reschedule' : '';
+  if (location.hash || location.search) history.replaceState(null, '', location.pathname);
+  window.addEventListener('hashchange', () => { if (location.hash) location.reload(); });
+  const begin = () => {
+    const root = document.querySelector('[data-vitris-customer-management]');
+    const metadata = document.querySelector('script[data-vitris-customer-config]');
+    if (!root || !metadata) return;
+    root.classList.add('vb');
+    const node = (tag, text, className) => { const el = document.createElement(tag); if (text !== undefined) el.textContent = text; if (className) el.className = className; return el; };
+    let connection;
+    try { connection = JSON.parse(metadata.textContent || ''); if (connection.siteOrigin !== location.origin) throw Error(); }
+    catch { root.append(node('p', 'Appointment management is available on the approved business website.', 'vb-error')); return; }
+    let session = '', appointment, step = 'entry', busy = false, error = '', notice = '', slots = [], selected = null, day = '', revision = 0, appointmentRevision = 0, attempt = null, uncertain = false, downloadUrl = '';
+    const time = at => new Intl.DateTimeFormat('en-US', {timeZone: appointment.timezone, hour:'numeric', minute:'2-digit', timeZoneName:'shortOffset'}).format(new Date(at));
+    const fullDate = at => new Intl.DateTimeFormat('en-US', {timeZone: appointment.timezone, weekday:'short', month:'long', day:'numeric', year:'numeric'}).format(new Date(at));
+    const dateOf = at => { const parts = new Intl.DateTimeFormat('en-US', {timeZone:appointment.timezone, year:'numeric', month:'2-digit', day:'2-digit'}).formatToParts(new Date(at)), get = key => parts.find(p => p.type === key).value; return get('year') + '-' + get('month') + '-' + get('day'); };
+    const addDays = (value, n) => new Date(Date.parse(value + 'T12:00:00Z') + n * 86400000).toISOString().slice(0,10);
+    const dayStart = value => { const target = Date.parse(value + 'T00:00:00Z'); for(let at=target-14*3600000;at<=target+14*3600000;at+=60000) if(dateOf(at)===value) return new Date(at).toISOString(); throw Error('This date is unavailable in the appointment timezone.'); };
+    const api = async (path, body, authenticated = true) => {
+      const response = await fetch(connection.apiOrigin + '/api/booking/v1/manage/' + path, {method:'POST',mode:'cors',credentials:'omit',cache:'no-store',referrerPolicy:'no-referrer',signal:AbortSignal.timeout(25000),headers:{'content-type':'application/json',...(authenticated?{authorization:'Bearer '+session}:{})},body:JSON.stringify(body)});
+      const text = await response.text(); if(text.length>1000000) throw Error('The appointment response could not be verified.');
+      let result;try{result=JSON.parse(text);}catch{throw Error('Appointment management is temporarily unavailable.');}
+      if(!response.ok) throw Object.assign(new Error(typeof result.error==='string'?result.error:'The appointment request failed.'),{status:response.status,code:result.code});
+      return result;
+    };
+    const button = (label, action, primary = false) => {const el=node('button',label,primary?'vb-primary':undefined);el.type='button';el.disabled=busy;el.dataset.focusKey=label;el.addEventListener('click',action);return el;};
+    const changeStep = value => {if(busy||uncertain)return;step=value;error='';notice='';selected=null;render(true);};
+    const detail = (list,label,value) => {const row=node('div');row.append(node('dt',label),node('dd',value));list.append(row);};
+    const price = value => {if(value.amountMinor===null)return value.label || 'Price agreed with the business';const number=new Intl.NumberFormat('en-US',{style:'currency',currency:value.currency}),digits=number.resolvedOptions().maximumFractionDigits || 0;return number.format(value.amountMinor/10**digits);};
+    const exchange = async () => {
+      busy=true;error='';render();
+      try {
+        const result=await api('exchange',{token:linkToken},false);
+        if(result.schemaVersion!==1||result.siteId!==connection.siteId||result.installationId!==connection.installationId||result.siteOrigin!==connection.siteOrigin||typeof result.sessionToken!=='string'||result.appointment?.schemaVersion!==1)throw Error('This appointment connection could not be verified.');
+        session=result.sessionToken;linkToken='';appointment=result.appointment;revision=appointment.scheduleRevision;appointmentRevision=appointment.revision;day=dateOf(appointment.startsAt);
+        step=intent==='cancel'&&appointment.canCancel?'cancel':intent==='reschedule'&&appointment.canReschedule?'reschedule':'details';
+      } catch(failure) {error=failure.message || 'This link is unavailable. Reopen the email or contact the business.';}
+      finally{busy=false;render(true);}
+    };
+    const refresh = async () => {
+      if(busy)return;busy=true;error='';
+      try{const value=await api('appointment',{});if(value.reference!==appointment.reference)throw Error('The appointment response could not be verified.');appointment=value;revision=value.scheduleRevision;appointmentRevision=value.revision;step='details';uncertain=false;attempt=null;slots=[];selected=null;}
+      catch(failure){error=failure.message || 'Reopen the link from your email or contact the business.';}
+      finally{busy=false;render(true);}
+    };
+    const findTimes = async () => {
+      if(busy||uncertain)return;busy=true;error='';notice='Checking available times...';selected=null;render();
+      try{const data=await api('availability',{startsAt:dayStart(day),endsAt:dayStart(addDays(day,1))});if(data.schemaVersion!==1||!Array.isArray(data.slots)||data.slots.length>500)throw Error('The availability response could not be verified.');slots=data.slots.filter(value=>value.startsAt!==appointment.startsAt);revision=data.revision;appointmentRevision=data.appointmentRevision;notice=slots.length?'Choose a new time. Your original appointment stays reserved until the change succeeds.':'No other times are available for this day. Try another date or contact the business.';}
+      catch(failure){error=failure.message || 'Available times could not be loaded.';notice='';slots=[];}
+      finally{busy=false;render();}
+    };
+    const submit = async kind => {
+      if(busy)return;
+      if(!attempt||!uncertain)attempt={kind,body:{idempotencyKey:crypto.randomUUID(),revision,appointmentRevision,...(kind==='reschedule'?{startsAt:selected.startsAt}:{})}};
+      busy=true;error='';notice='Saving your change...';render();
+      try{const result=await api(attempt.kind,attempt.body);if(result.schemaVersion!==1||result.reference!==appointment.reference)throw Error('The appointment response could not be verified.');appointment=result;revision=result.scheduleRevision;appointmentRevision=result.revision;uncertain=false;attempt=null;step='done';notice='Your change is saved in the business calendar.';}
+      catch(failure){error=failure.message || 'The appointment response was interrupted.';notice='';if(!failure.status||failure.status>=500){uncertain=true;error+=' The result may still be pending. Retry this same change; do not start another request.';}else{uncertain=false;attempt=null;if(failure.status===409){step='details';notice='Refresh the appointment before trying another time. Your original appointment has been kept unless the business changed it.';}}}
+      finally{busy=false;render(true);}
+    };
+    function render(focus=false){
+      const focusKey=document.activeElement?.dataset.focusKey;root.replaceChildren();
+      const panel=node('section',undefined,'vb-panel');root.append(panel);
+      const title=step==='entry'?'View your appointment':step==='cancel'?'Cancel this appointment?':step==='reschedule'?'Choose a new time':step==='review'?'Review the new appointment time':step==='done'?(appointment.status==='cancelled'?'Appointment cancelled':appointment.status==='pending_approval'?'Request time changed':'Appointment rescheduled'):'Your appointment';
+      const heading=node('h2',title);heading.tabIndex=-1;panel.append(heading);
+      if(error){const el=node('p',error,'vb-error');el.setAttribute('role','alert');panel.append(el);}
+      if(notice){const el=node('p',notice,'vb-notice');el.setAttribute('role','status');panel.append(el);}
+      if(step==='entry'){
+        panel.append(node('p','This private link can view or change only the appointment named in your email. No appointment is changed by opening this page.'));
+        if(linkToken)panel.append(button(busy?'Opening...':'View appointment',()=>{void exchange();},true));else panel.append(node('p','Open a valid link from your appointment email. If the link expired, contact the business.'));
+      }else if(appointment){
+        const list=node('dl');detail(list,'Service',appointment.serviceName);detail(list,'Current time',fullDate(appointment.startsAt)+' · '+time(appointment.startsAt));detail(list,'Location',appointment.locationName);detail(list,'Staff',appointment.providerName);detail(list,'Price',price(appointment.price));detail(list,'Status',appointment.status.replaceAll('_',' '));panel.append(list);
+        if(appointment.status==='pending_approval')panel.append(node('p','This request is still waiting for business approval. Changing its time does not confirm it.','vb-notice'));
+        if(appointment.policyText)panel.append(node('h3','Booking policy'),node('p',appointment.policyText,'vb-policy'));
+        if(step==='details'){
+          if(appointment.cancellationDeadline)panel.append(node('p','Online cancellation deadline: '+fullDate(appointment.cancellationDeadline)+' · '+time(appointment.cancellationDeadline),'vb-hint'));
+          if(appointment.rescheduleDeadline)panel.append(node('p','Online rescheduling deadline: '+fullDate(appointment.rescheduleDeadline)+' · '+time(appointment.rescheduleDeadline),'vb-hint'));
+          const actions=node('div',undefined,'vb-actions');if(appointment.canCancel)actions.append(button('Cancel appointment',()=>changeStep('cancel')));if(appointment.canReschedule)actions.append(button('Reschedule appointment',()=>changeStep('reschedule'),true));actions.append(button('Refresh appointment',()=>{void refresh();}));panel.append(actions);
+          if(!appointment.canCancel||!appointment.canReschedule)panel.append(node('p','Some online changes are unavailable or their notice deadline has passed. Contact the business for help.','vb-hint'));
+        }else if(step==='cancel'){
+          panel.append(node('p','Cancelling releases this appointment time. This action takes effect only after you confirm.'));
+          const actions=node('div',undefined,'vb-actions');if(!uncertain)actions.append(button('Keep appointment',()=>changeStep('details')));actions.append(button(busy?'Cancelling...':uncertain?'Retry same change':'Confirm cancellation',()=>{void submit('cancel');},true));panel.append(actions);
+        }else if(step==='reschedule'){
+          panel.append(node('p','Your original time remains reserved until the new time is saved. Staff, location, duration and price stay the same.','vb-notice'));
+          const input=node('input');input.type='date';input.value=day;input.min=dateOf(Date.now());input.max=dateOf(Date.now()+appointment.horizonDays*86400000);input.disabled=busy;input.dataset.focusKey='new-date';input.addEventListener('change',()=>{if(input.value){day=input.value;slots=[];selected=null;error='';notice='';render();}});const label=node('label');label.append(node('span','New appointment date'),input);panel.append(label,button('Find new times',()=>{void findTimes();}));
+          const group=node('div',undefined,'vb-times');group.setAttribute('aria-label','Available new times');for(const value of slots){const b=button(time(value.startsAt),()=>{selected=value;render();});b.dataset.focusKey=value.startsAt;b.setAttribute('aria-pressed',String(selected?.startsAt===value.startsAt));group.append(b);}panel.append(group);
+          const actions=node('div',undefined,'vb-actions'),next=button('Review new time',()=>{step='review';render(true);},true);next.disabled=!selected||busy;actions.append(button('Keep current time',()=>changeStep('details')),next);panel.append(actions);
+        }else if(step==='review'){
+          panel.append(node('h3','New time'),node('p',fullDate(selected.startsAt)+' · '+time(selected.startsAt)));
+          const actions=node('div',undefined,'vb-actions');if(!uncertain)actions.append(button('Choose another time',()=>changeStep('reschedule')));actions.append(button(busy?'Saving...':uncertain?'Retry same change':'Confirm new time',()=>{void submit('reschedule');},true));panel.append(actions);
+        }else if(step==='done'){
+          panel.append(node('p','Reference: '+appointment.reference,'vb-reference'));
+          if(downloadUrl)URL.revokeObjectURL(downloadUrl);downloadUrl=URL.createObjectURL(new Blob([appointment.calendar.content],{type:'text/calendar;charset=utf-8'}));const link=node('a','Download updated calendar file (.ics)');link.href=downloadUrl;link.download='appointment.ics';panel.append(link,node('p','Imported calendar files are snapshots and may need to be updated manually.','vb-hint'));
+          if(appointment.status!=='cancelled')panel.append(button('View appointment details',()=>changeStep('details')));
+        }
+      }
+      if(focus)heading.focus();else if(focusKey)root.querySelector('[data-focus-key="'+CSS.escape(focusKey)+'"]')?.focus({preventScroll:true});
+    }
+    render();
+    window.addEventListener('beforeunload',event=>{if(uncertain||busy){event.preventDefault();event.returnValue='';}});
+  };
+  if(document.readyState==='loading')document.addEventListener('DOMContentLoaded',begin,{once:true});else begin();
+})();`;
+
+// src/scheduling/config.ts
+function schedulingConnection(value) {
+  if (value === void 0) return;
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw Error("Invalid scheduling connection");
+  const v = value;
+  if (Object.keys(v).some((k) => !["version", "enabled", "apiOrigin", "siteId", "installationId", "route"].includes(k)) || v.version !== 1 || typeof v.enabled !== "boolean") throw Error("Invalid scheduling connection fields");
+  const id = (x) => typeof x === "string" && /^[a-zA-Z0-9_-]{1,100}$/.test(x);
+  if (!id(v.siteId) || !id(v.installationId)) throw Error("Scheduling requires the exact public site and installation identity");
+  const apiOrigin = bookingOrigin(v.apiOrigin), route = v.route ?? "/book";
+  if (typeof route !== "string" || !/^\/[a-zA-Z0-9_-]+(?:\/[a-zA-Z0-9_-]+)*$/.test(route) || ["/api", "/assets", "/media"].some((p) => route === p || route.startsWith(p + "/"))) throw Error("Invalid booking route");
+  return { version: 1, enabled: v.enabled, apiOrigin, siteId: v.siteId, installationId: v.installationId, route };
+}
+function bookingOrigin(value) {
+  if (typeof value !== "string") throw Error("Scheduling requires an exact origin");
+  const url = new URL(value), local = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+  if (url.origin !== value || url.username || url.password || url.protocol !== "https:" && !(local && url.protocol === "http:")) throw Error("Scheduling requires HTTPS or an explicit loopback origin");
+  return value;
+}
+function bookingPage(name) {
+  return `<header class="vb-site-header"><a href="/">${escapeHtml(name)}</a></header><main class="vb-page"><p class="vb-eyebrow">APPOINTMENTS</p><h1>Book an appointment</h1><p>Choose a service and a time that works for you.</p><div data-vitris-booking></div></main>`;
+}
+
+// src/scheduling/widget.ts
+var bookingJs = `(function initializeBooking() {
+  const root = document.querySelector("[data-vitris-booking]");
+  if (!root) return;
+  const metadata = document.querySelector("script[data-vitris-booking-config]");
+  if (!metadata) return;
+  root.classList.add("vb");
+  const node = (tag, text, className) => {
+    const el = document.createElement(tag);
+    if (text !== void 0) el.textContent = text;
+    if (className) el.className = className;
+    return el;
+  };
+  const notice = (text) => {
+    const el = node("p", text, "vb-notice");
+    el.setAttribute("role", "status");
+    return el;
+  };
+  let connection;
+  try {
+    connection = JSON.parse(metadata.textContent || "");
+    if (connection.siteOrigin !== location.origin) throw Error();
+  } catch {
+    root.append(notice("Booking is available on the approved business website. This preview is not connected."));
+    return;
+  }
+  let catalog, step = 0, serviceId = "", locationId = "", providerId = "", day = "", slot = null, slots = [], revision = 0, busy = false, requestSerial = 0, error = "", status = "", customer = { name: "", email: "", phone: "" }, accepted = false, challengeToken = "", challengeId, receipt, company = "", attemptKey = "", attemptPayload = "", uncertain = false;
+  let objectUrl = "";
+  const api = async (path, data) => {
+    const response = await fetch(connection.apiOrigin + "/api/booking/v1" + path, { mode: "cors", credentials: "omit", cache: "no-store", referrerPolicy: "no-referrer", signal: AbortSignal.timeout(25e3), ...data === void 0 ? {} : { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(data) } });
+    const text = await response.text();
+    if (text.length > 1e6) throw Error("The booking response could not be verified.");
+    let result;
+    try {
+      result = JSON.parse(text);
+    } catch {
+      throw Error("Booking is temporarily unavailable. Please contact the business.");
+    }
+    if (!response.ok) {
+      const failure = Object.assign(new Error(typeof result.error === "string" ? result.error : "Booking could not be completed."), { status: response.status, code: result.code });
+      throw failure;
+    }
+    return result;
+  };
+  const service = () => catalog.services.find((s) => s.id === serviceId);
+  const place = () => catalog.locations.find((l) => l.id === locationId);
+  const dateOf = (at, zone) => {
+    const parts = new Intl.DateTimeFormat("en-US", { timeZone: zone, year: "numeric", month: "2-digit", day: "2-digit" }).formatToParts(new Date(at)), get = (key) => parts.find((p) => p.type === key).value;
+    return get("year") + "-" + get("month") + "-" + get("day");
+  };
+  const addDays = (value, count) => new Date(Date.parse(value + "T12:00:00Z") + count * 864e5).toISOString().slice(0, 10);
+  const dayStart = (value, zone) => {
+    const target = Date.parse(value + "T00:00:00Z");
+    for (let at = target - 14 * 36e5; at <= target + 14 * 36e5; at += 6e4) if (dateOf(at, zone) === value) return new Date(at).toISOString();
+    throw Error("This date is unavailable in the selected timezone.");
+  };
+  const time = (at, zone) => new Intl.DateTimeFormat("en-US", { timeZone: zone, hour: "numeric", minute: "2-digit", timeZoneName: "shortOffset" }).format(new Date(at));
+  const fullDate = (at, zone) => new Intl.DateTimeFormat("en-US", { timeZone: zone, weekday: "short", month: "long", day: "numeric", year: "numeric" }).format(new Date(at));
+  const price = (value) => {
+    if (value.amountMinor === null) return value.label || "Price agreed with the business";
+    try {
+      const options2 = new Intl.NumberFormat("en-US", { style: "currency", currency: value.currency }), digits = options2.resolvedOptions().maximumFractionDigits ?? 2;
+      return options2.format(value.amountMinor / 10 ** digits);
+    } catch {
+      return value.label;
+    }
+  };
+  const button = (label, action, primary = false) => {
+    const el = node("button", label, primary ? "vb-primary" : void 0);
+    el.type = "button";
+    el.dataset.focusKey = label;
+    el.disabled = busy;
+    el.addEventListener("click", action);
+    return el;
+  };
+  const field = (label, input) => {
+    const el = node("label");
+    input.dataset.focusKey = label;
+    el.append(node("span", label), input);
+    return el;
+  };
+  const detail = (list, label, value) => {
+    const row = node("div");
+    row.append(node("dt", label), node("dd", value));
+    list.append(row);
+  };
+  const move = (next) => {
+    if (busy || uncertain) return;
+    step = next;
+    error = "";
+    status = "";
+    render(true);
+  };
+  const clearTimes = () => {
+    requestSerial++;
+    slots = [];
+    slot = null;
+    revision = 0;
+    status = "";
+    error = "";
+    attemptKey = "";
+    accepted = false;
+  };
+  const options = (select, items, value, all) => {
+    if (all) {
+      const opt = node("option", all);
+      opt.value = "";
+      select.append(opt);
+    }
+    for (const item of items) {
+      const opt = node("option", item.name);
+      opt.value = item.id;
+      select.append(opt);
+    }
+    select.value = value;
+  };
+  const cleanupChallenge = () => {
+    if (challengeId) {
+      window.turnstile?.remove(challengeId);
+      challengeId = void 0;
+    }
+    challengeToken = "";
+  };
+  const errorBlock = () => {
+    const el = node("p", error, "vb-error");
+    el.setAttribute("role", "alert");
+    return el;
+  };
+  const showSummary = (panel) => {
+    const disclosure = node("details");
+    disclosure.open = window.matchMedia("(min-width:761px)").matches;
+    disclosure.append(node("summary", "Your appointment"));
+    const list = node("dl"), s = service();
+    if (s) {
+      detail(list, "Service", s.name);
+      detail(list, "Duration", s.durationMinutes + " minutes");
+      detail(list, "Price", price(s.price));
+      detail(list, "Confirmation", s.bookingMode === "approval" ? "Business approval required" : "Confirmed when booked");
+    }
+    if (place()) detail(list, "Location", place().name);
+    if (slot) {
+      detail(list, "Time", fullDate(slot.startsAt, place().timezone) + " \\xB7 " + time(slot.startsAt, place().timezone));
+      detail(list, "Staff", catalog.providers.find((p) => p.id === slot.providerId)?.name || "Available staff");
+    }
+    disclosure.append(list);
+    panel.append(disclosure);
+  };
+  const normalizeSelection = () => {
+    const s = service();
+    if (!s) return;
+    const places = catalog.locations.filter((l) => s.locationIds.includes(l.id));
+    if (!places.some((p) => p.id === locationId)) locationId = places[0]?.id || "";
+    const staff = catalog.providers.filter((p) => s.providerIds.includes(p.id) && p.locationIds.includes(locationId));
+    if (!catalog.allowProviderChoice || !staff.some((p) => p.id === providerId)) providerId = staff.length === 1 ? staff[0].id : "";
+    if (!day && place()) day = dateOf(Date.now() + catalog.minNoticeMinutes * 6e4, place().timezone);
+  };
+  const loadTimes = async (lookAhead = false) => {
+    if (busy || uncertain) return;
+    busy = true;
+    slot = null;
+    error = "";
+    status = "Checking availability\\u2026";
+    const serial = ++requestSerial;
+    render();
+    try {
+      const zone = place().timezone, params = new URLSearchParams({ serviceId, locationId, startsAt: dayStart(day, zone), endsAt: dayStart(addDays(day, lookAhead ? 6 : 1), zone), ...providerId ? { providerId } : {} });
+      const data = await api("/availability?" + params);
+      if (serial !== requestSerial) return;
+      if (data.schemaVersion !== 1 || data.siteId !== connection.siteId || !Array.isArray(data.slots) || data.slots.length > 500 || !Number.isSafeInteger(data.revision)) throw Error("The availability response could not be verified.");
+      if (!data.terms || typeof data.policyText !== "string" || !data.location) throw Error("This service changed. Reload services before booking.");
+      const old = JSON.stringify(service());
+      Object.assign(service(), data.terms);
+      Object.assign(place(), data.location);
+      if (catalog.policyText !== data.policyText) accepted = false;
+      catalog.policyText = data.policyText;
+      slots = data.slots;
+      revision = data.revision;
+      status = slots.length ? \`\${slots.length} available \${slots.length === 1 ? "time" : "times"}. \${zone}.\` : "No available times for this date. Try another day.";
+      if (old !== JSON.stringify(service())) status += " Service details have changed; review the current price and duration.";
+      if (data.truncated) status += " Showing the first available times; narrow the date or staff selection.";
+    } catch (failure) {
+      if (serial === requestSerial) {
+        slots = [];
+        error = failure instanceof Error ? failure.message : "Availability could not be loaded.";
+        status = "";
+      }
+    } finally {
+      if (serial === requestSerial) {
+        busy = false;
+        render();
+      }
+    }
+  };
+  const mountChallenge = async (container) => {
+    if (catalog.challenge.kind === "local-fixture") {
+      container.append(notice("Local simulation: the security challenge is bypassed only for this isolated loopback preview."));
+      return;
+    }
+    try {
+      const win = window;
+      if (!win.turnstile) await new Promise((resolve, reject) => {
+        let script = document.querySelector("script[data-booking-turnstile]");
+        if (!script) {
+          script = node("script");
+          script.src = "https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit";
+          script.async = true;
+          script.dataset.bookingTurnstile = "";
+          document.head.append(script);
+        }
+        script.addEventListener("load", () => resolve(), { once: true });
+        script.addEventListener("error", () => reject(Error("The security check could not load. Please retry or contact the business.")), { once: true });
+      });
+      if (!container.isConnected || step !== 3) return;
+      challengeId = win.turnstile.render(container, { sitekey: catalog.challenge.siteKey, action: "booking", callback: (value) => {
+        challengeToken = value;
+      }, "expired-callback": () => {
+        challengeToken = "";
+      }, "error-callback": () => {
+        challengeToken = "";
+      } });
+    } catch (failure) {
+      if (container.isConnected) container.append(errorBlockMessage(failure instanceof Error ? failure.message : "Security check unavailable."));
+    }
+  };
+  const errorBlockMessage = (text) => {
+    const el = node("p", text, "vb-error");
+    el.setAttribute("role", "alert");
+    return el;
+  };
+  const submit = async () => {
+    if (busy) return;
+    if (!accepted) {
+      error = "Accept the booking policy before booking.";
+      render();
+      return;
+    }
+    if (catalog.challenge.kind === "turnstile" && !challengeToken) {
+      error = "Complete the security check before booking.";
+      const existing = root.querySelector("[role=alert]");
+      if (existing) existing.textContent = error;
+      else root.querySelector(".vb-panel")?.append(errorBlock());
+      return;
+    }
+    const content = { revision, serviceId, locationId, providerId: slot.providerId, startsAt: slot.startsAt, customer, acceptedPolicy: true };
+    const payload = JSON.stringify(content);
+    if (!attemptKey || attemptPayload !== payload) {
+      attemptKey = crypto.randomUUID();
+      attemptPayload = payload;
+    }
+    busy = true;
+    error = "";
+    status = "Saving your appointment\\u2026";
+    const token = challengeToken;
+    render();
+    try {
+      const result = await api("/appointments", { ...content, idempotencyKey: attemptKey, challengeToken: token, company });
+      if (result.schemaVersion !== 1 || result.siteId !== connection.siteId || !["confirmed", "pending_approval"].includes(result.status) || typeof result.reference !== "string" || typeof result.calendar?.content !== "string") throw Error("The booking response could not be verified. Keep this page open and retry the same booking.");
+      receipt = result;
+      uncertain = false;
+      step = 4;
+      status = "";
+    } catch (failure) {
+      const f = failure;
+      error = f.message || "The booking response was interrupted.";
+      status = "";
+      if (!f.status || f.status >= 500) {
+        uncertain = true;
+        error += " Your result may still be pending. Retry this same booking; do not create another appointment.";
+      } else {
+        uncertain = false;
+        if (f.status === 409) {
+          step = 1;
+          slot = null;
+          slots = [];
+          revision = 0;
+          attemptKey = "";
+    accepted = false;
+          status = "Your details are saved. Find available times again.";
+        } else if (f.status === 400 && String(f.code).startsWith("challenge")) {
+          challengeToken = "";
+        }
+      }
+    } finally {
+      busy = false;
+      render(true);
+    }
+  };
+  function render(focus = false) {
+    const focusKey = document.activeElement?.dataset.focusKey;
+    cleanupChallenge();
+    root.replaceChildren();
+    root.append(notice(catalog.emailMode === "send" ? "TEST BOOKING - Emails use the configured sender and allowed test recipients." : catalog.emailMode === "disabled" ? "TEST BOOKING - Customer emails are not enabled. Keep your booking reference." : "TEST BOOKING - This preview stores appointments in the admin calendar. Customer emails are captured, not sent."));
+    const progress = node("ol", void 0, "vb-steps");
+    progress.setAttribute("aria-label", "Booking progress");
+    ["Service", "Time", "Your details", "Review", "Receipt"].forEach((name, index) => {
+      const item = node("li", index + 1 + ". " + name);
+      if (index === step) item.setAttribute("aria-current", "step");
+      progress.append(item);
+    });
+    root.append(progress);
+    const layout = node("div", void 0, "vb-layout"), panel = node("section", void 0, "vb-panel"), summary = node("aside", void 0, "vb-panel vb-summary");
+    summary.setAttribute("aria-label", "Appointment summary");
+    layout.append(panel, summary);
+    root.append(layout);
+    showSummary(summary);
+    const heading = node("h2", ["Choose a service", "Choose a time", "Your details", "Review your appointment", receipt?.status === "pending_approval" ? "Request received" : "Appointment confirmed"][step]);
+    heading.tabIndex = -1;
+    panel.append(heading);
+    if (error) panel.append(errorBlock());
+    if (status) {
+      const live = node("p", status);
+      live.setAttribute("role", "status");
+      panel.append(live);
+    }
+    if (step === 0) {
+      if (!catalog.services.length) {
+        panel.append(node("p", "No services are available for online booking. Please contact the business."));
+        return;
+      }
+      const group = node("fieldset"), legend = node("legend", "Available services"), list = node("div", void 0, "vb-services");
+      group.append(legend, list);
+      for (const s of catalog.services) {
+        const radio = node("input");
+        radio.type = "radio";
+        radio.name = "booking-service";
+        radio.dataset.focusKey = "service-" + s.id;
+        radio.value = s.id;
+        radio.checked = s.id === serviceId;
+        radio.addEventListener("change", () => {
+          serviceId = s.id;
+          clearTimes();
+          normalizeSelection();
+          render();
+        });
+        const label = node("label", void 0, "vb-service"), copy = node("span");
+        copy.append(node("strong", s.name), node("small", s.durationMinutes + " minutes \\xB7 " + price(s.price)), node("small", s.bookingMode === "approval" ? "Requires business approval" : "Immediate confirmation"));
+        label.append(radio, copy);
+        list.append(label);
+      }
+      panel.append(group, button("Choose a time", () => {
+        normalizeSelection();
+        move(1);
+      }, true));
+    } else if (step === 1) {
+      const s = service(), grid = node("div", void 0, "vb-grid"), places = catalog.locations.filter((l) => s.locationIds.includes(l.id));
+      if (places.length > 1) {
+        const select = node("select");
+        options(select, places, locationId);
+        select.disabled = busy || uncertain;
+        select.addEventListener("change", () => {
+          locationId = select.value;
+          day = "";
+          clearTimes();
+          normalizeSelection();
+          render();
+        });
+        grid.append(field("Location", select));
+      }
+      const staff = catalog.providers.filter((p) => s.providerIds.includes(p.id) && p.locationIds.includes(locationId));
+      if (catalog.allowProviderChoice && staff.length > 1) {
+        const select = node("select");
+        options(select, staff, providerId, "Any available staff");
+        select.disabled = busy || uncertain;
+        select.addEventListener("change", () => {
+          providerId = select.value;
+          clearTimes();
+          render();
+        });
+        grid.append(field("Staff preference", select));
+      }
+      const date = node("input");
+      date.type = "date";
+      date.required = true;
+      date.value = day;
+      date.min = dateOf(Date.now(), place().timezone);
+      date.max = dateOf(Date.now() + catalog.horizonDays * 864e5, place().timezone);
+      date.disabled = busy || uncertain;
+      date.addEventListener("change", () => {
+        if (date.value) {
+          day = date.value;
+          clearTimes();
+          render();
+        }
+      });
+      grid.append(field("Appointment date", date));
+      panel.append(grid, node("p", "Times are shown in " + place().timezone + ". A time is reserved only after booking.", "vb-hint"), button(busy ? "Checking times\\u2026" : "Find available times", () => {
+        void loadTimes();
+      }));
+      const times = node("div", void 0, "vb-times");
+      times.setAttribute("aria-label", "Available times");
+      const seen = /* @__PURE__ */ new Set();
+      for (const value of slots) {
+        if (!providerId && seen.has(value.startsAt)) continue;
+        seen.add(value.startsAt);
+        const label = time(value.startsAt, place().timezone), b = button(label, () => {
+          slot = value;
+          render();
+        });
+        b.dataset.focusKey = value.startsAt + "-" + value.providerId;
+        b.setAttribute("aria-pressed", String(slot?.startsAt === value.startsAt && slot.providerId === value.providerId));
+        b.setAttribute("aria-label", fullDate(value.startsAt, place().timezone) + " at " + label);
+        b.append(node("small", fullDate(value.startsAt, place().timezone)));
+        times.append(b);
+      }
+      panel.append(times);
+      if (!slots.length && !busy) panel.append(button("Look ahead six days", () => {
+        void loadTimes(true);
+      }));
+      const actions = node("div", void 0, "vb-actions"), next = button("Continue to your details", () => move(2), true);
+      next.disabled = !slot || busy;
+      actions.append(button("Back to services", () => move(0)), next);
+      panel.append(actions);
+    } else if (step === 2) {
+      const form = node("form");
+      for (const [key, label, type, autocomplete] of [["name", "Full name", "text", "name"], ["email", "Email address", "email", "email"], ["phone", "Phone number (optional)", "tel", "tel"]]) {
+        const input = node("input");
+        input.name = key;
+        input.type = type;
+        input.autocomplete = autocomplete;
+        input.required = key !== "phone";
+        input.maxLength = key === "email" ? 254 : key === "name" ? 160 : 40;
+        input.value = customer[key];
+        input.addEventListener("input", () => {
+          customer[key] = input.value;
+        });
+        form.append(field(label, input));
+      }
+      const hidden = node("div", void 0, "vb-honey");
+      hidden.setAttribute("aria-hidden", "true");
+      const honey = node("input");
+      honey.name = "company";
+      honey.tabIndex = -1;
+      honey.autocomplete = "off";
+      honey.addEventListener("input", () => {
+        company = honey.value;
+      });
+      hidden.append(field("Leave this field empty", honey));
+      form.append(hidden, node("p", "Your details are used to arrange this appointment. See the test email mode above before submitting.", "vb-hint"));
+      const actions = node("div", void 0, "vb-actions"), next = button("Review appointment", () => {
+      }, true);
+      next.type = "submit";
+      actions.append(button("Back to times", () => move(1)), next);
+      form.append(actions);
+      form.addEventListener("submit", (event) => {
+        event.preventDefault();
+        if (form.reportValidity()) {
+          customer = { name: customer.name.trim(), email: customer.email.trim(), phone: customer.phone.trim() };
+          move(3);
+        }
+      });
+      panel.append(form);
+    } else if (step === 3) {
+      const list = node("dl");
+      detail(list, "Customer", customer.name);
+      detail(list, "Email", customer.email);
+      if (customer.phone) detail(list, "Phone", customer.phone);
+      panel.append(list, node("h3", "Booking policy"), node("p", catalog.policyText, "vb-policy"));
+      if(catalog.customerManagement){const m=catalog.customerManagement;panel.append(node("p","Online cancellation notice: "+m.cancellationCutoffMinutes+" minutes. Online rescheduling notice: "+m.rescheduleCutoffMinutes+" minutes. Zero permits changes until the appointment starts.","vb-hint"));}
+      const check = node("input");
+      check.type = "checkbox";
+      check.checked = accepted;
+      check.disabled = busy || uncertain;
+      check.addEventListener("change", () => {
+        accepted = check.checked;
+      });
+      const label = node("label", void 0, "vb-check");
+      label.append(check, node("span", "I have read and accept the booking policy."));
+      panel.append(label);
+      if (!busy) {
+        const challenge = node("div");
+        panel.append(challenge);
+        void mountChallenge(challenge);
+      }
+      const actions = node("div", void 0, "vb-actions");
+      if (!uncertain) actions.append(button("Back to your details", () => move(2)));
+      actions.append(button(busy ? "Booking\\u2026" : uncertain ? "Retry same booking" : service().bookingMode === "approval" ? "Request appointment" : "Confirm appointment", () => {
+        void submit();
+      }, true));
+      panel.append(actions);
+    } else if (receipt) {
+      const pending = receipt.status === "pending_approval";
+      panel.append(node("p", pending ? "The business needs to approve your request. Your time is held until the approval deadline. This request is not yet confirmed." : "Your appointment is saved in the business calendar.", "vb-status"));
+      const list = node("dl");
+      detail(list, "Service", receipt.serviceName);
+      detail(list, "When", fullDate(receipt.startsAt, receipt.timezone) + " \\xB7 " + time(receipt.startsAt, receipt.timezone));
+      detail(list, "Location", receipt.locationName);
+      detail(list, "Staff", receipt.providerName);
+      detail(list, "Price", price(receipt.price));
+      if (receipt.expiresAt) detail(list, "Approval deadline", fullDate(receipt.expiresAt, receipt.timezone) + " \\xB7 " + time(receipt.expiresAt, receipt.timezone));
+      panel.append(list, node("p", "Booking reference", "vb-hint"), node("p", receipt.reference, "vb-reference"), node("p", "Keep this reference. " + (receipt.emailStatus === "captured" ? "Your test email is captured in the admin Customer emails inbox. Its private links can cancel or reschedule this appointment." : receipt.emailStatus === "accepted" ? "Your email was accepted by the email provider. Check your inbox for private cancellation and rescheduling links." : receipt.emailStatus === "blocked" || receipt.emailStatus === "unknown" ? "Your appointment is saved, but the email needs attention. Contact the business if you do not receive it." : (catalog.emailMode === "disabled" ? "Customer emails are not enabled. Contact the business for appointment changes." : "Open your appointment email for cancellation and rescheduling links. Email delivery may still be pending.")) + "", "vb-hint"));
+      if (objectUrl) URL.revokeObjectURL(objectUrl);
+      objectUrl = URL.createObjectURL(new Blob([receipt.calendar.content], { type: "text/calendar;charset=utf-8" }));
+      const link = node("a", "Download calendar file (.ics)");
+      link.href = objectUrl;
+      link.download = "appointment.ics";
+      panel.append(link, node("p", "A calendar file adds a copy to your calendar. It does not keep your calendar synchronized.", "vb-hint"));
+    }
+    if (focus) heading.focus({ preventScroll: false });
+    else if (focusKey) root.querySelector('[data-focus-key="' + CSS.escape(focusKey) + '"]')?.focus({ preventScroll: true });
+  }
+  root.append(notice("Loading available services\\u2026"));
+  void api("/catalog").then((data) => {
+    if (data.schemaVersion !== 1 || data.siteId !== connection.siteId || data.installationId !== connection.installationId || data.siteOrigin !== connection.siteOrigin || data.mode !== "test" || !Array.isArray(data.services) || data.services.length > 128 || !Array.isArray(data.providers) || !Array.isArray(data.locations) || !["local-fixture", "turnstile"].includes(data.challenge?.kind)) throw Error("This website booking connection could not be verified. Please contact the business.");
+    catalog = data;
+    serviceId = new URL(location.href).searchParams.get("service") || data.services[0]?.id || "";
+    if (!data.services.some((s) => s.id === serviceId)) serviceId = data.services[0]?.id || "";
+    normalizeSelection();
+    render();
+  }).catch((failure) => {
+    root.replaceChildren(errorBlockMessage(failure instanceof Error ? failure.message : "Booking is unavailable."));
+    root.append(button("Try loading services again", () => location.reload()));
+  });
+  window.addEventListener("beforeunload", (event) => {
+    if (uncertain || busy && step === 3) {
+      event.preventDefault();
+      event.returnValue = "";
+    }
+  });
+})();`;
+
+// src/scheduling/styles.ts
+var bookingCss = `
+.vb-site-header{max-width:71rem;margin:0 auto;padding:1.4rem 1.5rem;border-bottom:1px solid var(--color-border,#c3cfd3)}.vb-site-header a{font-family:var(--font-body,system-ui);font-weight:650;text-decoration:none;color:var(--color-text,#1d3340)}.vb-page{max-width:71rem;margin:0 auto;padding:2.5rem 1.5rem 4rem}.vb-page>h1{font-size:clamp(2rem,4vw,3rem);line-height:1.1;margin:.5rem 0 1rem}.vb-page>.vb-eyebrow{margin:0}.vb .vb-summary summary{font-family:inherit;font-size:1.1rem;font-weight:650;cursor:pointer}.vb h2,.vb h3{font-family:inherit}
+
+.vb{--vb-accent:var(--color-accent,#234957);--vb-accent-text:var(--color-accent-text,#fff);color:var(--color-text,#172c36);font-family:var(--font-body,system-ui);font-size:1rem;line-height:1.5;max-width:68rem;margin:2rem auto;isolation:isolate}.vb *{box-sizing:border-box}.vb [hidden]{display:none!important}.vb h2{font-size:1.65rem;line-height:1.25;margin:0 0 .6rem}.vb h3{font-size:1.15rem;margin:.2rem 0}.vb p{margin:.5rem 0 1rem}.vb button,.vb input,.vb select{font:inherit}.vb button,.vb input,.vb select{min-height:48px}.vb button{border:1px solid var(--color-border,#bdc8cd);background:var(--color-surface,#fff);color:inherit;border-radius:var(--radius,8px);padding:.7rem 1rem;cursor:pointer;text-align:center}.vb button:disabled{opacity:.55;cursor:wait}.vb .vb-primary{background:var(--vb-accent);color:var(--vb-accent-text);border-color:var(--vb-accent)}.vb button:hover:not(:disabled){filter:brightness(.96)}.vb :focus-visible{outline:3px solid var(--color-focus,#246c9a);outline-offset:3px}.vb fieldset{min-width:0;border:0;padding:0;margin:0 0 1.5rem}.vb legend{font-size:1.1rem;font-weight:650;margin-bottom:.8rem}.vb input:not([type=checkbox]):not([type=radio]),.vb select{width:100%;border:1px solid var(--color-border,#a8bbc2);border-radius:var(--radius,8px);background:var(--color-bg,#fff);color:inherit;padding:.75rem}.vb label{display:grid;gap:.4rem;margin-bottom:1rem}.vb .vb-check{display:flex;align-items:flex-start;gap:.7rem}.vb .vb-check input{min-height:24px;width:24px;flex:0 0 auto;margin-top:.1rem;accent-color:var(--vb-accent)}.vb .vb-steps{display:flex;gap:1.2rem;list-style:none;padding:0 0 1.1rem;margin:0 0 1.5rem;border-bottom:1px solid var(--color-border,#c7d2d6);flex-wrap:wrap}.vb .vb-steps li{color:var(--color-muted,#50636c)}.vb .vb-steps [aria-current=step]{color:var(--color-text,#172c36);font-weight:700}.vb .vb-layout{display:grid;grid-template-columns:minmax(0,1fr) 19rem;gap:2rem}.vb .vb-panel{background:var(--color-surface,#fff);border:1px solid var(--color-border,#c7d2d6);border-radius:var(--radius-lg,12px);padding:1.6rem;min-width:0}.vb .vb-summary{height:max-content}.vb .vb-services{display:grid;gap:.8rem}.vb .vb-service{display:grid;grid-template-columns:24px minmax(0,1fr);align-items:start;border:1px solid var(--color-border,#c7d2d6);border-radius:var(--radius,8px);padding:1rem;gap:.7rem;margin:0}.vb .vb-service:has(input:checked){border-color:var(--vb-accent);box-shadow:inset 0 0 0 1px var(--vb-accent)}.vb .vb-service input{width:20px;min-height:24px;margin:.15rem 0;accent-color:var(--vb-accent)}.vb .vb-service strong,.vb .vb-service small{display:block;overflow-wrap:anywhere}.vb .vb-service small{font-size:.9rem;margin-top:.25rem}.vb .vb-grid{display:grid;grid-template-columns:1fr 1fr;gap:1rem}.vb .vb-times{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:.6rem;margin:1.3rem 0}.vb .vb-times button{padding:.8rem .4rem}.vb .vb-times button[aria-pressed=true]{background:var(--vb-accent);color:var(--vb-accent-text);border-color:var(--vb-accent)}.vb .vb-times small{display:block;font-size:.8rem}.vb .vb-actions{display:flex;justify-content:space-between;gap:.8rem;margin-top:1.4rem;flex-wrap:wrap}.vb .vb-notice{padding:.8rem 1rem;background:var(--color-surface-2,#eef3f5);border-left:3px solid var(--vb-accent);margin-bottom:1.5rem;font-size:.92rem}.vb .vb-error{border-left:3px solid #aa3c34;padding:.8rem 1rem;background:var(--color-surface,#fff);margin:.8rem 0;overflow-wrap:anywhere}.vb .vb-policy{white-space:pre-wrap;overflow-wrap:anywhere}.vb dl{margin:.8rem 0}.vb dl div{padding:.7rem 0;border-bottom:1px solid var(--color-border,#dce2e5)}.vb dt{font-size:.85rem;opacity:.8}.vb dd{margin:.2rem 0 0;overflow-wrap:anywhere}.vb .vb-status{font-size:.9rem;font-weight:600;letter-spacing:.04em}.vb .vb-reference{font: .85rem ui-monospace,monospace;overflow-wrap:anywhere}.vb .vb-honey{position:absolute;left:-10000px;width:1px;height:1px;overflow:hidden}.vb .vb-hint{font-size:.9rem}.vb-eyebrow{font-size:.8rem;letter-spacing:.13em;font-weight:700}@media(max-width:760px){.vb .vb-layout{grid-template-columns:1fr;gap:1rem}.vb .vb-summary{order:-1}.vb .vb-summary dl div{display:inline-block;margin-right:1.4rem;border:0;padding:.2rem 0}.vb .vb-panel{padding:1.2rem}.vb .vb-steps{gap:.8rem;font-size:.85rem}.vb .vb-times{grid-template-columns:repeat(2,minmax(0,1fr))}.vb .vb-grid{grid-template-columns:1fr}.vb .vb-actions button{flex:1}}@media(prefers-reduced-motion:reduce){.vb *{scroll-behavior:auto!important;transition:none!important;animation:none!important}}
+`;
+
+// src/build/index.ts
+import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { join, relative } from "node:path";
+import { createHash } from "node:crypto";
+
+// src/forms/frontend.ts
+import { parseFragment } from "parse5";
+
+// src/forms/config.ts
+var safeId = (s) => typeof s === "string" && /^[a-zA-Z0-9_-]{1,80}$/.test(s);
+var safeEmail = (s) => {
+  if (typeof s !== "string" || s.length > 254 || !/^[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,63}$/.test(s)) return false;
+  const [local, domain] = s.split("@");
+  return !!local && local.length <= 64 && !local.startsWith(".") && !local.endsWith(".") && !local.includes("..") && !!domain && domain.split(".").every((label) => label.length <= 63 && /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/.test(label));
+};
+function approvedOrigin(value) {
+  const u = new URL(value);
+  if (u.origin !== value || u.hostname.includes("*") || u.username || u.password || u.protocol !== "https:" && !(u.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(u.hostname))) throw new Error("Expected exact HTTPS origin (HTTP only on loopback)");
+  return u.origin;
+}
+function validateFormConfig(value) {
+  const c = value;
+  if (!c || !safeId(c.id) || !["disabled", "test", "live"].includes(c.mode)) throw new Error("Invalid form ID or mode");
+  if (!Array.isArray(c.origins) || !c.origins.length || c.origins.length > 10 || new Set(c.origins).size !== c.origins.length) throw new Error("One to ten unique exact origins required");
+  c.origins.forEach(approvedOrigin);
+  if (c.mode === "live" && c.origins.some((o) => new URL(o).protocol !== "https:" || ["localhost", "127.0.0.1", "[::1]"].includes(new URL(o).hostname))) throw new Error("Live forms cannot approve loopback origins");
+  if (!Array.isArray(c.fields) || !c.fields.length || c.fields.length > 32 || new Set(c.fields.map((f) => f.name)).size !== c.fields.length) throw new Error("One to 32 unique fields required");
+  const reserved = /* @__PURE__ */ new Set(["form_id", "tenant_id", "idempotency_key", "page_path", "vid", "company_url", "cf-turnstile-response", "recipients", "to", "from", "sender"]);
+  const maps = /* @__PURE__ */ new Set();
+  for (const f of c.fields) {
+    if (!safeId(f.name) || reserved.has(f.name) || !["text", "email", "tel", "textarea", "select", "checkbox", "radio"].includes(f.type) || !Number.isInteger(f.maxLength) || f.maxLength < 1 || f.maxLength > 8e3 || f.minLength !== void 0 && (!Number.isInteger(f.minLength) || f.minLength < 0 || f.minLength > f.maxLength) || f.label !== void 0 && (typeof f.label !== "string" || f.label.length > 200) || f.required !== void 0 && typeof f.required !== "boolean") throw new Error("Invalid field schema");
+    if (f.map !== void 0) {
+      if (!["name", "email", "phone", "message"].includes(f.map) || maps.has(f.map)) throw new Error("Invalid or duplicate mapping");
+      maps.add(f.map);
+    }
+    if ((["select", "checkbox", "radio"].includes(f.type) || f.options !== void 0) && (!Array.isArray(f.options) || !f.options.length || f.options.length > 40 || f.options.some((s) => typeof s !== "string" || !s || s.length > f.maxLength) || new Set(f.options).size !== f.options.length)) throw new Error("Choice fields need bounded options");
+  }
+  if (!c.fields.some((f) => f.map === "email" && f.type === "email" && f.required)) throw new Error("A required visitor email mapping is needed");
+  if (!Array.isArray(c.recipients) || c.recipients.length > 5 || c.recipients.some((r) => !safeEmail(r)) || new Set(c.recipients).size !== c.recipients.length) throw new Error("Invalid notification recipients");
+  if (!c.turnstile || typeof c.turnstile.sitekey !== "string" || !/^[a-zA-Z0-9_-]{1,100}$/.test(c.turnstile.sitekey) || !safeId(c.turnstile.secretRef) || !safeId(c.turnstile.action) || c.turnstile.action.length > 32) throw new Error("Invalid Turnstile configuration");
+  return c;
+}
+
+// src/forms/frontend.ts
+function inspectForms(html) {
+  const inventory = [];
+  const walk = (node, visit) => {
+    if ("tagName" in node) visit(node);
+    if ("childNodes" in node) node.childNodes.forEach((n) => walk(n, visit));
+  };
+  walk(parseFragment(html), (form) => {
+    if (form.tagName !== "form") return;
+    const fields = [], unsupported = [];
+    let eligible = form.attrs.some((a) => a.name === "data-lead-form");
+    if (form.attrs.some((a) => ["data-lead-custom", "data-no-enhance"].includes(a.name))) unsupported.push("Custom submission handler needs explicit migration");
+    walk(form, (el) => {
+      const attr = (name2) => el.attrs.find((a) => a.name === name2)?.value;
+      if (attr("data-vitrisid") === "emailSendButton") eligible = true;
+      if (!["input", "textarea", "select"].includes(el.tagName)) return;
+      const name = attr("name"), type = el.tagName === "input" ? attr("type") || "text" : el.tagName;
+      if (["hidden", "submit", "button", "reset"].includes(type)) {
+        if (type === "hidden" && name && !["vid", "page_path", "company_url", "form_id", "tenant_id", "idempotency_key", "cf-turnstile-response"].includes(name)) unsupported.push(`Unmapped hidden field: ${name}`);
+        return;
+      }
+      if (!name || !safeId(name) || !["text", "email", "tel", "textarea", "select", "checkbox", "radio"].includes(type)) {
+        unsupported.push(`Unsupported field: ${name || "(unnamed)"} (${type})`);
+        return;
+      }
+      if (attr("multiple") !== void 0 && type !== "checkbox") unsupported.push(`Unsupported multiple field: ${name}`);
+      const options = [];
+      if (type === "select") walk(el, (opt) => {
+        if (opt.tagName === "option") {
+          const value = opt.attrs.find((a) => a.name === "value")?.value ?? opt.childNodes.filter((n) => "value" in n).map((n) => n.value).join("");
+          if (value) options.push(value);
+        }
+      });
+      if (type === "checkbox" || type === "radio") options.push(attr("value") || "on");
+      const old = fields.find((f) => f.name === name);
+      if (old) {
+        if (old.type === type && ["checkbox", "radio"].includes(type)) {
+          old.options.push(...options);
+          old.required = old.required || attr("required") !== void 0;
+        } else unsupported.push(`Duplicate field: ${name}`);
+        return;
+      }
+      fields.push({ name, type, label: attr("aria-label") || name, required: attr("required") !== void 0, minLength: Number(attr("minlength") || 0), maxLength: Math.min(8e3, Number(attr("maxlength") || (type === "textarea" ? 8e3 : 255))), ...["select", "checkbox", "radio"].includes(type) ? { options } : {}, ...["name", "email", "message", "phone"].includes(name) ? { map: name } : ["number", "telephone", "phone_number", "phoneNumber"].includes(name) ? { map: "phone" } : {} });
+    });
+    inventory.push({ index: inventory.length, eligible, fields, unsupported });
+  });
+  return inventory;
+}
+function connectForms(html, backend, pagePath, forms) {
+  const bindings = forms.filter((f) => f.pagePath === pagePath);
+  if (!bindings.length) return html;
+  approvedOrigin(backend);
+  const inventory = inspectForms(html);
+  const seen = /* @__PURE__ */ new Set();
+  for (const f of bindings) {
+    const index = f.index ?? 0, item = inventory[index];
+    if (!safeId(f.id) || !safeId(f.action) || f.action.length > 32 || !/^[a-zA-Z0-9_-]{1,100}$/.test(f.sitekey) || !item || !item.eligible || item.unsupported.length || seen.has(index)) throw new Error(`Cannot connect ${pagePath} form ${index}: ${item?.unsupported.join(", ") || "explicit contact-form marker and valid unique binding required"}`);
+    seen.add(index);
+  }
+  const located = [];
+  const walk = (node) => {
+    if ("tagName" in node && node.tagName === "form") located.push(node);
+    if ("childNodes" in node) node.childNodes.forEach(walk);
+  };
+  walk(parseFragment(html, { sourceCodeLocationInfo: true }));
+  const edits = [];
+  for (const binding of bindings) {
+    const form = located[binding.index ?? 0], location = form.sourceCodeLocation;
+    if (!location?.startTag || !location.endTag) throw new Error("Unclosed contact form requires source repair");
+    const start = location.startTag.startOffset, end = location.endTag.endOffset;
+    let open = html.slice(start, location.startTag.endOffset);
+    const remove = /* @__PURE__ */ new Set(["action", "method", "novalidate", "data-preserve-forms", "data-vitris-form", "data-vitris-sitekey", "data-vitris-action", "data-vitris-enhanced", "data-lead-form"]);
+    for (const [name, span] of Object.entries(location.attrs || {}).sort((a, b) => b[1].startOffset - a[1].startOffset)) if (remove.has(name)) open = open.slice(0, span.startOffset - start) + open.slice(span.endOffset - start);
+    let inner = html.slice(location.startTag.endOffset, location.endTag.startOffset);
+    const inputs = [];
+    const collect = (node) => {
+      if ("tagName" in node && node.tagName === "input") inputs.push(node);
+      if ("childNodes" in node) node.childNodes.forEach(collect);
+    };
+    collect(form);
+    for (const input of inputs.sort((a, b) => (b.sourceCodeLocation?.startOffset || 0) - (a.sourceCodeLocation?.startOffset || 0))) {
+      const name = input.attrs.find((a) => a.name === "name")?.value;
+      if (["form_id", "idempotency_key", "cf-turnstile-response"].includes(name || "") && input.sourceCodeLocation) {
+        const s = input.sourceCodeLocation.startOffset - location.startTag.endOffset, e = input.sourceCodeLocation.endOffset - location.startTag.endOffset;
+        inner = inner.slice(0, s) + inner.slice(e);
+      }
+    }
+    const has = (name) => inputs.some((input) => input.attrs.some((a) => a.name === "name" && a.value === name));
+    open = open.replace(/>$/, ` method="post" action="${escapeHtml(backend)}/api/leads?form_id=${binding.id}" data-lead-form data-vitris-enhanced data-preserve-forms="live" data-vitris-form="${binding.id}" data-vitris-sitekey="${binding.sitekey}" data-vitris-action="${binding.action}">`);
+    const value = `${open}<input type="hidden" name="form_id" value="${binding.id}">${has("page_path") ? "" : `<input type="hidden" name="page_path" value="${escapeHtml(pagePath)}">`}${has("company_url") ? "" : '<input type="hidden" name="company_url" value="">'}${inner}<noscript><p>This form needs JavaScript and a security check. Please use the listed contact details.</p></noscript>${html.slice(location.endTag.startOffset, end)}`;
+    edits.push({ start, end, value });
+  }
+  for (const edit of edits.sort((a, b) => b.start - a.start)) html = html.slice(0, edit.start) + edit.value + html.slice(edit.end);
+  return html;
+}
+
+// src/build/index.ts
+async function walkHtmlFiles(dir, base = dir) {
+  const out = [];
+  let entries;
+  try {
+    entries = await readdir(dir, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const entry of entries) {
+    const full = join(dir, entry.name);
+    if (entry.isDirectory()) {
+      out.push(...await walkHtmlFiles(full, base));
+    } else if (entry.isFile() && entry.name.endsWith(".html")) {
+      out.push(relative(base, full).replace(/\\/g, "/"));
+    }
+  }
+  return out;
+}
+async function loadSiteCatalog(siteDir) {
+  const catalog = {};
+  try {
+    const entries = await readdir(join(siteDir, "components"), { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      const name = String(entry.name);
+      const dir = join(siteDir, "components", name);
+      let html;
+      let css;
+      try {
+        html = await readFile(join(dir, "template.html"), "utf8");
+        css = await readFile(join(dir, "styles.css"), "utf8");
+      } catch {
+        continue;
+      }
+      let island = null;
+      try {
+        island = await readFile(join(dir, "island.js"), "utf8");
+      } catch {
+        island = null;
+      }
+      catalog[name] = { html, css, island };
+    }
+  } catch {
+    return catalog;
+  }
+  return catalog;
+}
+async function loadSitePages(siteDir) {
+  const pagesDir = join(siteDir, "pages");
+  const files = await walkHtmlFiles(pagesDir);
+  const pages = [];
+  for (const file of files.sort()) {
+    const raw = await readFile(join(pagesDir, file), "utf8");
+    const { meta, body } = parseFrontmatter(raw);
+    const path = fileToPath(file);
+    pages.push({
+      path,
+      file,
+      title: meta.title || defaultTitleFromPath(path),
+      description: meta.description,
+      indexing: path === "/404" ? "noindex" : meta.indexing === "noindex" || meta.indexing === "index" ? meta.indexing : void 0,
+      lang: meta.lang,
+      body
+    });
+  }
+  return pages;
+}
+async function loadSiteDir(dir) {
+  const site = JSON.parse(await readFile(join(dir, "site.json"), "utf8"));
+  let theme = {};
+  try {
+    theme = JSON.parse(await readFile(join(dir, "theme", "defaults.json"), "utf8"));
+  } catch {
+    theme = {};
+  }
+  const pages = await loadSitePages(dir);
+  const catalog = await loadSiteCatalog(dir);
+  return { site, theme, pages, catalog };
+}
+async function buildSite(input) {
+  const backendOrigin = input.backendOrigin || input.kernelOrigin || "";
+  const theme = mergeTheme(input.theme);
+  const themeHref = input.themeHref ?? "/theme.css";
+  const envName = process.env.VITRIS_SITE_ENVIRONMENT;
+  const site = envName === "preview" || envName === "production" ? { ...input.site, environment: envName } : input.site;
+  const scheduling = schedulingConnection(input.scheduling);
+  const booking = scheduling?.enabled ? scheduling : void 0;
+  const pages = input.pages.map((page) => ({ ...page }));
+  if (booking) {
+    bookingOrigin(input.publicOrigin);
+    const existing = pages.find((page) => page.path === booking.route);
+    if (existing && !/data-vitris-booking(?:[\s=>])/.test(existing.body)) throw new Error("The booking route already exists. Add the standard data-vitris-booking mount explicitly or choose another route.");
+    if (!existing) pages.push({ path: booking.route, file: booking.route.slice(1) + "/index.html", title: "Book an appointment", indexing: "noindex", body: bookingPage(site.name) });
+    const manageRoute = booking.route + "/manage";
+    const management = pages.find((page) => page.path === manageRoute);
+    if (management && !/data-vitris-customer-management(?:[\s=>])/.test(management.body)) throw new Error("The customer management route already exists. Add its standard mount or choose another booking route.");
+    if (management) management.indexing = "noindex";
+    else pages.push({ path: manageRoute, file: manageRoute.slice(1) + "/index.html", title: "Manage your appointment", indexing: "noindex", body: `<header class="vb-site-header"><a href="/">${escapeHtml(site.name)}</a></header><main class="vb-page"><p class="vb-eyebrow">APPOINTMENTS</p><h1>Manage your appointment</h1><div data-vitris-customer-management></div></main>` });
+    for (const page of pages) if (page.path !== booking.route && /data-vitris-booking(?:[\s=>])/.test(page.body)) throw new Error("The standard booking mount belongs only on the configured booking route.");
+  } else if (pages.some((page) => /data-vitris-booking(?:[\s=>])/.test(page.body))) throw new Error("A booking mount requires an explicit scheduling connection");
+  const compiled = compileAllPages(site, pages, input.catalog, backendOrigin);
+  const pageAssets = {};
+  const routeAssets = /* @__PURE__ */ new Map();
+  const asset = (body, ext) => {
+    const path = `/assets/immutable/${createHash("sha256").update(body).digest("hex")}.${ext}`;
+    routeAssets.set(path, body);
+    return path;
+  };
+  for (const page of compiled) {
+    const js = siteIslands([page], input.catalog);
+    pageAssets[page.path] = { css: asset(siteCss([page], input.catalog, site), "css"), js: js ? asset(js, "js") : null };
+  }
+  if (backendOrigin) pageAssets[COOKIE_COMPLIANCE_PATH] = { css: asset(siteCss([], input.catalog, site), "css"), js: null };
+  const files = compileSite({
+    site,
+    pages,
+    catalog: input.catalog,
+    kernelOrigin: backendOrigin,
+    themeHref,
+    publicOrigin: input.publicOrigin,
+    pageAssets,
+    webAnalyticsToken: input.webAnalyticsToken
+  }, compiled);
+  const bookingScript = booking ? asset(bookingJs, "js") : void 0;
+  const bookingStyle = booking ? asset(bookingCss, "css") : void 0;
+  const managementScript = booking ? asset(managementJs, "js") : void 0;
+  const written = [];
+  await mkdir(input.outDir, { recursive: true });
+  await mkdir(join(input.outDir, "assets/immutable"), { recursive: true });
+  for (const [path, body] of routeAssets) {
+    await writeFile(join(input.outDir, path.slice(1)), body, "utf8");
+    written.push(path.slice(1));
+  }
+  for (const file of files) {
+    const rel = file.path === "/" ? "index.html" : `${file.path.replace(/^\//, "").replace(/\/$/, "")}/index.html`;
+    const dest = join(input.outDir, rel);
+    await mkdir(join(dest, ".."), { recursive: true });
+    let html = connectForms(file.html, backendOrigin, file.path, input.forms || []);
+    if (booking && file.path === booking.route) {
+      const config = JSON.stringify({ apiOrigin: booking.apiOrigin, siteId: booking.siteId, installationId: booking.installationId, siteOrigin: input.publicOrigin }).replaceAll("<", "\\u003c");
+      if ((html.match(/data-vitris-booking(?:[\s=>])/g) || []).length !== 1) throw new Error("Use exactly one standard booking mount");
+      html = html.replace("</head>", `<link rel="stylesheet" href="${bookingStyle}"></head>`).replace("</body>", `<script type="application/json" data-vitris-booking-config>${config}</script><script src="${bookingScript}" defer></script></body>`);
+      html = html.replace(/<div([^>]*data-vitris-booking[^>]*)><\/div>/, `<div$1><noscript>Booking requires JavaScript. Please contact ${escapeHtml(site.name)} to arrange an appointment.</noscript></div>`);
+    }
+    if (booking && file.path === booking.route + "/manage") {
+      const config = JSON.stringify({ apiOrigin: booking.apiOrigin, siteId: booking.siteId, installationId: booking.installationId, siteOrigin: input.publicOrigin }).replaceAll("<", "\\u003c");
+      if ((html.match(/data-vitris-customer-management(?:[\s=>])/g) || []).length !== 1) throw new Error("Use exactly one customer management mount");
+      html = html.replace(/<script\b[^>]*src="[^"]*(?:beacon\.js|static\.cloudflareinsights\.com\/beacon\.min\.js)"[^>]*><\/script>/g, "");
+      html = html.replace("<head>", `<head><meta name="referrer" content="no-referrer"><script type="application/json" data-vitris-customer-config>${config}</script><script src="${managementScript}"></script>`).replace("</head>", `<link rel="stylesheet" href="${bookingStyle}"></head>`);
+      html = html.replace(/<div([^>]*data-vitris-customer-management[^>]*)><\/div>/, "<div$1><noscript>Appointment management requires JavaScript. Please contact the business.</noscript></div>");
+    }
+    await writeFile(dest, html, "utf8");
+    written.push(rel);
+  }
+  await writeFile(join(input.outDir, "site.css"), siteCss(compiled, input.catalog, site), "utf8");
+  await writeFile(join(input.outDir, "theme.css"), themeCss(theme, site.typography), "utf8");
+  if (backendOrigin) {
+    await writeFile(join(input.outDir, "beacon.js"), beaconJs, "utf8");
+    written.push("beacon.js");
+  }
+  await writeFile(join(input.outDir, "robots.txt"), robotsTxt(input.publicOrigin), "utf8");
+  await writeFile(
+    join(input.outDir, "sitemap.xml"),
+    sitemapXml(
+      compiled.map((p) => p.path),
+      input.publicOrigin,
+      [COOKIE_COMPLIANCE_PATH, ...site.indexing === "noindex" ? compiled.map((page) => page.path) : compiled.filter((page) => page.indexing === "noindex").map((page) => page.path)],
+      Boolean(backendOrigin)
+    ),
+    "utf8"
+  );
+  const islands = siteIslands(compiled, input.catalog);
+  if (islands) await writeFile(join(input.outDir, "islands.js"), islands, "utf8");
+  if (compiled.some((page) => page.usesMotion)) {
+    await writeFile(join(input.outDir, motionAssetHref.slice(1)), motionJs, "utf8");
+    written.push(motionAssetHref.slice(1));
+  }
+  if (islands) written.push("islands.js");
+  written.push("site.css", "theme.css", "robots.txt", "sitemap.xml");
+  return written;
+}
+async function fetchLiveContent(kernelOrigin, slug, token) {
+  const res = await fetch(`${kernelOrigin.replace(/\/$/, "")}/api/deploy/${encodeURIComponent(slug)}`, {
+    headers: { authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) return null;
+  return await res.json();
+}
+
+export {
+  safeId,
+  approvedOrigin,
+  validateFormConfig,
+  inspectForms,
+  connectForms,
+  loadSiteCatalog,
+  loadSitePages,
+  loadSiteDir,
+  buildSite,
+  fetchLiveContent
+};