@tryvitris/website-harness 1.0.2 → 1.1.0

package/docs/SCHEDULING.md

@@ -0,0 +1,67 @@
+# Standard website booking
+
+This unreleased source adds a standard customer booking page backed by the business admin's authoritative appointments. The flow is service, optional location/staff, time, contact details, policy/review, then confirmation or an approval-pending receipt. Both admin and website bookings use the same availability calculations, native resource reservations and calendar export queue.
+
+This slice supports **test bookings only**. Customer emails, calendar attachments and private cancellation/rescheduling links are now implemented. Local emails are captured; sending requires explicit admin/provider setup and allowed test recipients. Production activation, deposits and structured address/intake remain later work. Published admin `0.1.0-alpha.1` does not contain these routes; release and pin compatible packages before installation. No deployment, publication or remote migration is performed by this feature.
+
+## Connection
+
+The compatible admin must enable scheduling, apply migrations through `0006_public_booking.sql`, configure staff/hours, select Test mode, publish services and provide customer policy text in Booking settings. Read its packaged `agent/refs/public-booking.md` for exact Origin, server enablement, Turnstile, rate limits and calendar setup.
+
+Retain existing `launch.json` fields and add public metadata:
+
+```json
+{
+  "publicOrigin": "https://www.BUSINESS.example",
+  "scheduling": {
+    "version": 1,
+    "enabled": true,
+    "apiOrigin": "https://admin.BUSINESS.example",
+    "siteId": "EXACT_ADMIN_SITE_ID",
+    "installationId": "EXACT_ADMIN_INSTALLATION_ID",
+    "route": "/book"
+  }
+}
+```
+
+Use exact HTTPS origins without paths/trailing slashes, or explicitly configured loopback HTTP for isolated acceptance. Never include admin/provider credentials. The compiler rejects unknown connection fields, unsafe routes and collisions with an authored booking route.
+
+Build normally with the compatible `vitris-build --site .`. The compiler generates the booking route if absent. To author its surrounding layout, create that route with exactly one `<div data-vitris-booking></div>`. An existing route without the marker is a conflict; authored content is never replaced silently. Preserve the component's standard internal layout and interaction contract. It uses approved site color/font tokens; agents compose surrounding content and links.
+
+Add header and service actions linking to `/book`, optionally `/book?service=VERIFIED_SERVICE_ID`. Keep existing external booking links until the replacement is reviewed. Inline/modal booking is not implemented. Only the booking route receives its content-addressed component assets; sites without scheduling receive no booking runtime.
+
+## Behavior and limits
+
+The component reads services, prices, staff, policy and availability dynamically from admin. These operational changes need no website rebuild. It checks schema, site/installation identity and exact website origin. A production-connected build served on an unapproved preview host refuses to connect; use an explicit loopback connection for local testing.
+
+Public routes are `/api/booking/v1/catalog`, `/availability` and `/appointments` on the admin origin, using exact-origin CORS and `credentials:omit`. They grant no admin authority and expose no customer records, staff accounts, private resources, internal availability or external event contents. Guest commands use their own transactional ledger, not an impersonated staff account. Bookings do not become leads or analytics enquiries automatically.
+
+Times use the location's IANA timezone, with explicit offsets. A time is unreserved until committed. Current price/policy accompany availability; changed selections conflict rather than silently charging or showing obsolete terms. Required calendars refresh before commit. Native reservations, receipt, guest history and captured jobs commit together. Instant services confirm immediately; approval requests reserve time until their recorded deadline. Calendar failures after commitment retain the native appointment and durable export job.
+
+The UI preserves details after conflicts. Uncertain responses offer Retry same booking with the same in-memory UUID/content. Do not close an uncertain request and create another; contact the business if that page is lost. Receipts describe the original acceptance and are not current appointment-management authority. No customer data or retry authority is persisted in browser storage. Booking works independently of optional analytics consent.
+
+Receipts offer an `.ics` snapshot. Importing it does not provide ongoing sync or external busy-time access. Email state distinguishes capture, queued work, blocked/uncertain sending and provider acceptance; acceptance does not prove inbox delivery. Customer-site services requiring structured addresses are excluded until that intake capability is implemented.
+
+## Confirmation emails and customer management
+
+Review admin migration 0007 and its packaged `agent/refs/customer-notifications.md`. In Booking settings, explicitly enable customer emails and customer links, and set cancellation/rescheduling notice. Rules are snapshotted for new appointments. Local capture mode never sends mail; Send mode requires a separate restricted Cloudflare Email Service binding, sender/domain setup, a notification encryption key ring and an explicit test-recipient allowlist. These are server values, never website metadata.
+
+The compiler generates the standard management page at the booking route plus `/manage` (normally `/book/manage`). An authored page there needs exactly one `data-vitris-customer-management` mount. Its indexing is forced off, it omits the harness beacon/web analytics, and its first head script removes URL fragments before other scripts. Avoid custom analytics or third-party scripts on this private route. Set the admin's `BOOKING_MANAGE_PATH` to the exact generated path for a custom booking route.
+
+Email links contain appointment-only capabilities in fragments. Opening a link does not change the appointment; the customer explicitly opens its details and confirms a cancellation or replacement time. A short-lived bearer session and retry proof stay only in memory. Neither links nor sessions belong in query strings, referrers, logs or browser persistence. Links can be reopened until expiry; after a session expires, use the original valid email link. Changing recipients or closing an appointment revokes authority.
+
+Customer rescheduling keeps service, staff, location, price, duration and approval rules, and checks current availability/calendar state. Pending approval stays pending with its original deadline. Failed replacements retain the original reservation. Changes use revisions and idempotency, including recovery from a lost cancellation response after access is revoked. Pausing new booking still permits eligible cancellation; rescheduling respects the scheduling pause. Expired or unavailable links direct the customer to contact the business; public email recovery/resend is not implemented.
+
+The admin Customer emails tab previews captured messages and calendar attachments. It can review blocked/unknown sends; unknown sends require explicit acknowledgment before retry because they may already have been accepted. Captured messages never turn into sent messages merely by changing settings. Sender/domain and actual inbox acceptance remain separate from local fixtures.
+
+Outside the explicitly isolated loopback fixture, Turnstile is mandatory. The component loads the official script at review with action `booking`; the server verifies success, action and hostname. Configure any CSP to allow the booking API for `connect-src` and Turnstile scripts/frames per [Cloudflare's CSP guidance](https://developers.cloudflare.com/turnstile/reference/content-security-policy/). Review real challenge execution separately from fixtures.
+
+## Local acceptance
+
+With sibling `website-admin-harness` and `vitris-harness` sources, run `npm run booking:preview` from the admin repository. Customer booking is **http://localhost:4392/book**; admin is **http://localhost:4391/#scheduling** (Open local demo). Both share real local workerd/D1 with explicitly simulated Google/Outlook HTTP. The loopback challenge fixture is labeled, and no real email/account is connected. Data resets on shutdown. Its shared IP allows five new attempts/hour; restarting resets ephemeral rate records.
+
+Run website `npm run typecheck`, `npm test`, and `npm run verify:package`; run admin `npm run check`. Paired Chromium acceptance requires both source checkouts and proves guest booking appears in admin and the simulated calendar, duplicate/lost-response recovery, approval, current terms, empty states, mobile/keyboard behavior and accessibility. The admin check also installs packed packages outside both workspaces for a separate browser flow. Neither suite silently skips this integration when the sibling source is absent. Keep evidence ignored.
+
+Real OAuth/challenge acceptance, notification onboarding, production mode, schema backup/recovery and customer rollout require separate reviewed releases and deployment authorization. A simulated receipt is not proof of deployed readiness.
+
+Business-configurable reminder emails are managed by the admin harness in Booking settings. It supports up to three lead times and reuses the confirmation sender, calendar attachments and customer-management page. Reminder eligibility follows current business settings and confirmed appointment status; no website credentials or new website component are required. See the admin packaged `agent/refs/customer-notifications.md` and additive migration 0008 for setup and missed-reminder behavior.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryvitris/website-harness",
-  "version": "1.0.2",
+  "version": "1.1.0",
   "description": "Vitris agent harness for building and verifying customer websites, with a static compiler, media tools, and optional Cloudflare backend.",
   "type": "module",
   "exports": {
@@ -107,6 +107,7 @@
     "design-system/knowledge",
     "docs/CLI.md",
     "docs/ADMIN.md",
+    "docs/SCHEDULING.md",
     "docs/DISTRIBUTION.md",
     "docs/ENGINE.md",
     "docs/CLOUDFLARE.md",
@@ -150,7 +151,7 @@
     "typecheck": "tsc --noEmit",
     "test:admin": "node --experimental-strip-types --test src/admin-integration.test.ts",
     "verify:admin": "node --experimental-strip-types scripts/verify-admin.ts",
-    "test": "node --experimental-strip-types --test --test-concurrency=2 src/admin-integration.test.ts src/icons.test.ts src/template-icon-migration.test.ts src/engine.test.ts src/upgrade.test.ts src/hosting.test.ts src/render.test.ts src/analytics.test.ts src/cookie-compliance.test.ts src/schema.test.ts src/patch.test.ts src/jobs.test.ts src/onboard.test.ts src/github-preview.test.ts src/agent.test.ts src/workflow.test.ts src/design-run.test.ts src/creative-profile.test.ts src/creative-efficiency.test.ts src/refine.test.ts src/refine-document-checks.test.ts src/critic-calibration.test.ts src/cli.test.ts src/jev.test.ts src/lifecycle.test.ts src/theme-lifecycle-policy.test.ts src/template-adaptation.test.ts src/adaptation-checkpoint.test.ts src/template-motion.test.ts src/template-motion-browser.test.ts src/experience-browser.test.ts src/jev-capabilities.test.ts src/jev-phase8.test.ts src/jev-prepilot.test.ts src/jev-phase0.test.ts src/jev-sept20.test.ts src/trace.test.ts src/cursor-hook.test.ts src/design-intelligence.test.ts src/design-context-integration.test.ts src/package-bin.test.ts src/knowledge-layers.test.ts src/launch-preflight.test.ts src/page-transfer.test.ts src/worker-publish.test.ts src/worker-preview.test.ts src/worker-security.test.ts src/harness-upgrades.test.ts src/stock-media.test.ts src/harness-distribution.test.ts src/storyboard-media.test.ts src/added-media.test.ts src/lead-forms.test.ts src/composition.test.ts src/reference-library.test.ts src/art-direction.test.ts src/scroll-motion.test.ts src/scroll-motion-browser.test.ts src/artistic-motion-browser.test.ts src/page-composition.test.ts src/reference-quality.test.ts src/production-quality.test.ts src/browser-focus.test.ts src/browser-work-queue.test.ts src/quality-subject.test.ts src/preview-cli.test.ts src/theme-selection.test.ts src/site-inputs.test.ts src/fieldwell.test.ts src/still-field.test.ts src/current-craft.test.ts src/copper-chair.test.ts src/clearline.test.ts src/template-cloud.test.ts src/contact-forms.test.ts src/contact-forms-operations.test.ts src/contact-forms-browser.test.ts src/preserve.test.ts src/release-safety.test.ts src/performance-media.test.ts src/lighthouse-browser.test.ts src/browser-timeout.test.ts src/browser-output-contract.test.ts src/template-motion-snapshot.test.ts src/typography.test.ts",
+    "test": "node --experimental-strip-types --test --test-concurrency=2 src/admin-integration.test.ts src/icons.test.ts src/template-icon-migration.test.ts src/engine.test.ts src/upgrade.test.ts src/hosting.test.ts src/render.test.ts src/analytics.test.ts src/cookie-compliance.test.ts src/schema.test.ts src/patch.test.ts src/jobs.test.ts src/onboard.test.ts src/github-preview.test.ts src/agent.test.ts src/workflow.test.ts src/design-run.test.ts src/creative-profile.test.ts src/creative-efficiency.test.ts src/refine.test.ts src/refine-document-checks.test.ts src/critic-calibration.test.ts src/cli.test.ts src/jev.test.ts src/lifecycle.test.ts src/theme-lifecycle-policy.test.ts src/template-adaptation.test.ts src/adaptation-checkpoint.test.ts src/template-motion.test.ts src/template-motion-browser.test.ts src/experience-browser.test.ts src/jev-capabilities.test.ts src/jev-phase8.test.ts src/jev-prepilot.test.ts src/jev-phase0.test.ts src/jev-sept20.test.ts src/trace.test.ts src/cursor-hook.test.ts src/design-intelligence.test.ts src/design-context-integration.test.ts src/package-bin.test.ts src/knowledge-layers.test.ts src/launch-preflight.test.ts src/page-transfer.test.ts src/worker-publish.test.ts src/worker-preview.test.ts src/worker-security.test.ts src/harness-upgrades.test.ts src/stock-media.test.ts src/harness-distribution.test.ts src/storyboard-media.test.ts src/added-media.test.ts src/lead-forms.test.ts src/composition.test.ts src/reference-library.test.ts src/art-direction.test.ts src/scroll-motion.test.ts src/scroll-motion-browser.test.ts src/artistic-motion-browser.test.ts src/page-composition.test.ts src/reference-quality.test.ts src/production-quality.test.ts src/browser-focus.test.ts src/browser-work-queue.test.ts src/quality-subject.test.ts src/preview-cli.test.ts src/theme-selection.test.ts src/site-inputs.test.ts src/fieldwell.test.ts src/still-field.test.ts src/current-craft.test.ts src/copper-chair.test.ts src/clearline.test.ts src/template-cloud.test.ts src/contact-forms.test.ts src/contact-forms-operations.test.ts src/contact-forms-browser.test.ts src/preserve.test.ts src/release-safety.test.ts src/performance-media.test.ts src/lighthouse-browser.test.ts src/browser-timeout.test.ts src/browser-output-contract.test.ts src/template-motion-snapshot.test.ts src/typography.test.ts src/scheduling.test.ts",
     "eval:jev": "node --experimental-strip-types scripts/eval-jev.ts",
     "benchmark": "node --experimental-strip-types scripts/benchmark.ts",
     "refresh-agent": "node --experimental-strip-types scripts/refresh-agent.ts",
@@ -195,8 +196,8 @@
   },
   "dependencies": {
     "@axe-core/playwright": "4.11.0",
-    "@tryvitris/website-admin-contracts": "0.1.0-alpha.1",
-    "@tryvitris/website-admin-harness": "0.1.0-alpha.1",
+    "@tryvitris/website-admin-contracts": "0.1.0-alpha.2",
+    "@tryvitris/website-admin-harness": "0.1.0-alpha.2",
     "@typesafe-ai/sdk": "^0.6.0",
     "blake3-wasm": "^2.1.5",
     "chrome-launcher": "1.2.1",

package/bin/chunks/chunk-NMTFSWPK.js

@@ -1,332 +0,0 @@
-import {
-  COOKIE_COMPLIANCE_PATH,
-  beaconJs,
-  compileAllPages,
-  compileSite,
-  defaultTitleFromPath,
-  fileToPath,
-  motionAssetHref,
-  motionJs,
-  parseFrontmatter,
-  robotsTxt,
-  siteCss,
-  siteIslands,
-  sitemapXml
-} from "./chunk-JTXFTNEA.js";
-import {
-  mergeTheme,
-  themeCss
-} from "./chunk-GE6UUEG2.js";
-import {
-  escapeHtml
-} from "./chunk-7FS67SRF.js";
-
-// src/build/index.ts
-import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
-import { join, relative } from "node:path";
-import { createHash } from "node:crypto";
-
-// src/forms/frontend.ts
-import { parseFragment } from "parse5";
-
-// src/forms/config.ts
-var safeId = (s) => typeof s === "string" && /^[a-zA-Z0-9_-]{1,80}$/.test(s);
-var safeEmail = (s) => {
-  if (typeof s !== "string" || s.length > 254 || !/^[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,63}$/.test(s)) return false;
-  const [local, domain] = s.split("@");
-  return !!local && local.length <= 64 && !local.startsWith(".") && !local.endsWith(".") && !local.includes("..") && !!domain && domain.split(".").every((label) => label.length <= 63 && /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/.test(label));
-};
-function approvedOrigin(value) {
-  const u = new URL(value);
-  if (u.origin !== value || u.hostname.includes("*") || u.username || u.password || u.protocol !== "https:" && !(u.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(u.hostname))) throw new Error("Expected exact HTTPS origin (HTTP only on loopback)");
-  return u.origin;
-}
-function validateFormConfig(value) {
-  const c = value;
-  if (!c || !safeId(c.id) || !["disabled", "test", "live"].includes(c.mode)) throw new Error("Invalid form ID or mode");
-  if (!Array.isArray(c.origins) || !c.origins.length || c.origins.length > 10 || new Set(c.origins).size !== c.origins.length) throw new Error("One to ten unique exact origins required");
-  c.origins.forEach(approvedOrigin);
-  if (c.mode === "live" && c.origins.some((o) => new URL(o).protocol !== "https:" || ["localhost", "127.0.0.1", "[::1]"].includes(new URL(o).hostname))) throw new Error("Live forms cannot approve loopback origins");
-  if (!Array.isArray(c.fields) || !c.fields.length || c.fields.length > 32 || new Set(c.fields.map((f) => f.name)).size !== c.fields.length) throw new Error("One to 32 unique fields required");
-  const reserved = /* @__PURE__ */ new Set(["form_id", "tenant_id", "idempotency_key", "page_path", "vid", "company_url", "cf-turnstile-response", "recipients", "to", "from", "sender"]);
-  const maps = /* @__PURE__ */ new Set();
-  for (const f of c.fields) {
-    if (!safeId(f.name) || reserved.has(f.name) || !["text", "email", "tel", "textarea", "select", "checkbox", "radio"].includes(f.type) || !Number.isInteger(f.maxLength) || f.maxLength < 1 || f.maxLength > 8e3 || f.minLength !== void 0 && (!Number.isInteger(f.minLength) || f.minLength < 0 || f.minLength > f.maxLength) || f.label !== void 0 && (typeof f.label !== "string" || f.label.length > 200) || f.required !== void 0 && typeof f.required !== "boolean") throw new Error("Invalid field schema");
-    if (f.map !== void 0) {
-      if (!["name", "email", "phone", "message"].includes(f.map) || maps.has(f.map)) throw new Error("Invalid or duplicate mapping");
-      maps.add(f.map);
-    }
-    if ((["select", "checkbox", "radio"].includes(f.type) || f.options !== void 0) && (!Array.isArray(f.options) || !f.options.length || f.options.length > 40 || f.options.some((s) => typeof s !== "string" || !s || s.length > f.maxLength) || new Set(f.options).size !== f.options.length)) throw new Error("Choice fields need bounded options");
-  }
-  if (!c.fields.some((f) => f.map === "email" && f.type === "email" && f.required)) throw new Error("A required visitor email mapping is needed");
-  if (!Array.isArray(c.recipients) || c.recipients.length > 5 || c.recipients.some((r) => !safeEmail(r)) || new Set(c.recipients).size !== c.recipients.length) throw new Error("Invalid notification recipients");
-  if (!c.turnstile || typeof c.turnstile.sitekey !== "string" || !/^[a-zA-Z0-9_-]{1,100}$/.test(c.turnstile.sitekey) || !safeId(c.turnstile.secretRef) || !safeId(c.turnstile.action) || c.turnstile.action.length > 32) throw new Error("Invalid Turnstile configuration");
-  return c;
-}
-
-// src/forms/frontend.ts
-function inspectForms(html) {
-  const inventory = [];
-  const walk = (node, visit) => {
-    if ("tagName" in node) visit(node);
-    if ("childNodes" in node) node.childNodes.forEach((n) => walk(n, visit));
-  };
-  walk(parseFragment(html), (form) => {
-    if (form.tagName !== "form") return;
-    const fields = [], unsupported = [];
-    let eligible = form.attrs.some((a) => a.name === "data-lead-form");
-    if (form.attrs.some((a) => ["data-lead-custom", "data-no-enhance"].includes(a.name))) unsupported.push("Custom submission handler needs explicit migration");
-    walk(form, (el) => {
-      const attr = (name2) => el.attrs.find((a) => a.name === name2)?.value;
-      if (attr("data-vitrisid") === "emailSendButton") eligible = true;
-      if (!["input", "textarea", "select"].includes(el.tagName)) return;
-      const name = attr("name"), type = el.tagName === "input" ? attr("type") || "text" : el.tagName;
-      if (["hidden", "submit", "button", "reset"].includes(type)) {
-        if (type === "hidden" && name && !["vid", "page_path", "company_url", "form_id", "tenant_id", "idempotency_key", "cf-turnstile-response"].includes(name)) unsupported.push(`Unmapped hidden field: ${name}`);
-        return;
-      }
-      if (!name || !safeId(name) || !["text", "email", "tel", "textarea", "select", "checkbox", "radio"].includes(type)) {
-        unsupported.push(`Unsupported field: ${name || "(unnamed)"} (${type})`);
-        return;
-      }
-      if (attr("multiple") !== void 0 && type !== "checkbox") unsupported.push(`Unsupported multiple field: ${name}`);
-      const options = [];
-      if (type === "select") walk(el, (opt) => {
-        if (opt.tagName === "option") {
-          const value = opt.attrs.find((a) => a.name === "value")?.value ?? opt.childNodes.filter((n) => "value" in n).map((n) => n.value).join("");
-          if (value) options.push(value);
-        }
-      });
-      if (type === "checkbox" || type === "radio") options.push(attr("value") || "on");
-      const old = fields.find((f) => f.name === name);
-      if (old) {
-        if (old.type === type && ["checkbox", "radio"].includes(type)) {
-          old.options.push(...options);
-          old.required = old.required || attr("required") !== void 0;
-        } else unsupported.push(`Duplicate field: ${name}`);
-        return;
-      }
-      fields.push({ name, type, label: attr("aria-label") || name, required: attr("required") !== void 0, minLength: Number(attr("minlength") || 0), maxLength: Math.min(8e3, Number(attr("maxlength") || (type === "textarea" ? 8e3 : 255))), ...["select", "checkbox", "radio"].includes(type) ? { options } : {}, ...["name", "email", "message", "phone"].includes(name) ? { map: name } : ["number", "telephone", "phone_number", "phoneNumber"].includes(name) ? { map: "phone" } : {} });
-    });
-    inventory.push({ index: inventory.length, eligible, fields, unsupported });
-  });
-  return inventory;
-}
-function connectForms(html, backend, pagePath, forms) {
-  const bindings = forms.filter((f) => f.pagePath === pagePath);
-  if (!bindings.length) return html;
-  approvedOrigin(backend);
-  const inventory = inspectForms(html);
-  const seen = /* @__PURE__ */ new Set();
-  for (const f of bindings) {
-    const index = f.index ?? 0, item = inventory[index];
-    if (!safeId(f.id) || !safeId(f.action) || f.action.length > 32 || !/^[a-zA-Z0-9_-]{1,100}$/.test(f.sitekey) || !item || !item.eligible || item.unsupported.length || seen.has(index)) throw new Error(`Cannot connect ${pagePath} form ${index}: ${item?.unsupported.join(", ") || "explicit contact-form marker and valid unique binding required"}`);
-    seen.add(index);
-  }
-  const located = [];
-  const walk = (node) => {
-    if ("tagName" in node && node.tagName === "form") located.push(node);
-    if ("childNodes" in node) node.childNodes.forEach(walk);
-  };
-  walk(parseFragment(html, { sourceCodeLocationInfo: true }));
-  const edits = [];
-  for (const binding of bindings) {
-    const form = located[binding.index ?? 0], location = form.sourceCodeLocation;
-    if (!location?.startTag || !location.endTag) throw new Error("Unclosed contact form requires source repair");
-    const start = location.startTag.startOffset, end = location.endTag.endOffset;
-    let open = html.slice(start, location.startTag.endOffset);
-    const remove = /* @__PURE__ */ new Set(["action", "method", "novalidate", "data-preserve-forms", "data-vitris-form", "data-vitris-sitekey", "data-vitris-action", "data-vitris-enhanced", "data-lead-form"]);
-    for (const [name, span] of Object.entries(location.attrs || {}).sort((a, b) => b[1].startOffset - a[1].startOffset)) if (remove.has(name)) open = open.slice(0, span.startOffset - start) + open.slice(span.endOffset - start);
-    let inner = html.slice(location.startTag.endOffset, location.endTag.startOffset);
-    const inputs = [];
-    const collect = (node) => {
-      if ("tagName" in node && node.tagName === "input") inputs.push(node);
-      if ("childNodes" in node) node.childNodes.forEach(collect);
-    };
-    collect(form);
-    for (const input of inputs.sort((a, b) => (b.sourceCodeLocation?.startOffset || 0) - (a.sourceCodeLocation?.startOffset || 0))) {
-      const name = input.attrs.find((a) => a.name === "name")?.value;
-      if (["form_id", "idempotency_key", "cf-turnstile-response"].includes(name || "") && input.sourceCodeLocation) {
-        const s = input.sourceCodeLocation.startOffset - location.startTag.endOffset, e = input.sourceCodeLocation.endOffset - location.startTag.endOffset;
-        inner = inner.slice(0, s) + inner.slice(e);
-      }
-    }
-    const has = (name) => inputs.some((input) => input.attrs.some((a) => a.name === "name" && a.value === name));
-    open = open.replace(/>$/, ` method="post" action="${escapeHtml(backend)}/api/leads?form_id=${binding.id}" data-lead-form data-vitris-enhanced data-preserve-forms="live" data-vitris-form="${binding.id}" data-vitris-sitekey="${binding.sitekey}" data-vitris-action="${binding.action}">`);
-    const value = `${open}<input type="hidden" name="form_id" value="${binding.id}">${has("page_path") ? "" : `<input type="hidden" name="page_path" value="${escapeHtml(pagePath)}">`}${has("company_url") ? "" : '<input type="hidden" name="company_url" value="">'}${inner}<noscript><p>This form needs JavaScript and a security check. Please use the listed contact details.</p></noscript>${html.slice(location.endTag.startOffset, end)}`;
-    edits.push({ start, end, value });
-  }
-  for (const edit of edits.sort((a, b) => b.start - a.start)) html = html.slice(0, edit.start) + edit.value + html.slice(edit.end);
-  return html;
-}
-
-// src/build/index.ts
-async function walkHtmlFiles(dir, base = dir) {
-  const out = [];
-  let entries;
-  try {
-    entries = await readdir(dir, { withFileTypes: true });
-  } catch {
-    return out;
-  }
-  for (const entry of entries) {
-    const full = join(dir, entry.name);
-    if (entry.isDirectory()) {
-      out.push(...await walkHtmlFiles(full, base));
-    } else if (entry.isFile() && entry.name.endsWith(".html")) {
-      out.push(relative(base, full).replace(/\\/g, "/"));
-    }
-  }
-  return out;
-}
-async function loadSiteCatalog(siteDir) {
-  const catalog = {};
-  try {
-    const entries = await readdir(join(siteDir, "components"), { withFileTypes: true });
-    for (const entry of entries) {
-      if (!entry.isDirectory()) continue;
-      const name = String(entry.name);
-      const dir = join(siteDir, "components", name);
-      let html;
-      let css;
-      try {
-        html = await readFile(join(dir, "template.html"), "utf8");
-        css = await readFile(join(dir, "styles.css"), "utf8");
-      } catch {
-        continue;
-      }
-      let island = null;
-      try {
-        island = await readFile(join(dir, "island.js"), "utf8");
-      } catch {
-        island = null;
-      }
-      catalog[name] = { html, css, island };
-    }
-  } catch {
-    return catalog;
-  }
-  return catalog;
-}
-async function loadSitePages(siteDir) {
-  const pagesDir = join(siteDir, "pages");
-  const files = await walkHtmlFiles(pagesDir);
-  const pages = [];
-  for (const file of files.sort()) {
-    const raw = await readFile(join(pagesDir, file), "utf8");
-    const { meta, body } = parseFrontmatter(raw);
-    const path = fileToPath(file);
-    pages.push({
-      path,
-      file,
-      title: meta.title || defaultTitleFromPath(path),
-      description: meta.description,
-      indexing: path === "/404" ? "noindex" : meta.indexing === "noindex" || meta.indexing === "index" ? meta.indexing : void 0,
-      lang: meta.lang,
-      body
-    });
-  }
-  return pages;
-}
-async function loadSiteDir(dir) {
-  const site = JSON.parse(await readFile(join(dir, "site.json"), "utf8"));
-  let theme = {};
-  try {
-    theme = JSON.parse(await readFile(join(dir, "theme", "defaults.json"), "utf8"));
-  } catch {
-    theme = {};
-  }
-  const pages = await loadSitePages(dir);
-  const catalog = await loadSiteCatalog(dir);
-  return { site, theme, pages, catalog };
-}
-async function buildSite(input) {
-  const backendOrigin = input.backendOrigin || input.kernelOrigin || "";
-  const theme = mergeTheme(input.theme);
-  const themeHref = input.themeHref ?? "/theme.css";
-  const envName = process.env.VITRIS_SITE_ENVIRONMENT;
-  const site = envName === "preview" || envName === "production" ? { ...input.site, environment: envName } : input.site;
-  const compiled = compileAllPages(site, input.pages, input.catalog, backendOrigin);
-  const pageAssets = {};
-  const routeAssets = /* @__PURE__ */ new Map();
-  const asset = (body, ext) => {
-    const path = `/assets/immutable/${createHash("sha256").update(body).digest("hex")}.${ext}`;
-    routeAssets.set(path, body);
-    return path;
-  };
-  for (const page of compiled) {
-    const js = siteIslands([page], input.catalog);
-    pageAssets[page.path] = { css: asset(siteCss([page], input.catalog, site), "css"), js: js ? asset(js, "js") : null };
-  }
-  if (backendOrigin) pageAssets[COOKIE_COMPLIANCE_PATH] = { css: asset(siteCss([], input.catalog, site), "css"), js: null };
-  const files = compileSite({
-    site,
-    pages: input.pages,
-    catalog: input.catalog,
-    kernelOrigin: backendOrigin,
-    themeHref,
-    publicOrigin: input.publicOrigin,
-    pageAssets,
-    webAnalyticsToken: input.webAnalyticsToken
-  }, compiled);
-  const written = [];
-  await mkdir(input.outDir, { recursive: true });
-  await mkdir(join(input.outDir, "assets/immutable"), { recursive: true });
-  for (const [path, body] of routeAssets) {
-    await writeFile(join(input.outDir, path.slice(1)), body, "utf8");
-    written.push(path.slice(1));
-  }
-  for (const file of files) {
-    const rel = file.path === "/" ? "index.html" : `${file.path.replace(/^\//, "").replace(/\/$/, "")}/index.html`;
-    const dest = join(input.outDir, rel);
-    await mkdir(join(dest, ".."), { recursive: true });
-    await writeFile(dest, connectForms(file.html, backendOrigin, file.path, input.forms || []), "utf8");
-    written.push(rel);
-  }
-  await writeFile(join(input.outDir, "site.css"), siteCss(compiled, input.catalog, site), "utf8");
-  await writeFile(join(input.outDir, "theme.css"), themeCss(theme, site.typography), "utf8");
-  if (backendOrigin) {
-    await writeFile(join(input.outDir, "beacon.js"), beaconJs, "utf8");
-    written.push("beacon.js");
-  }
-  await writeFile(join(input.outDir, "robots.txt"), robotsTxt(input.publicOrigin), "utf8");
-  await writeFile(
-    join(input.outDir, "sitemap.xml"),
-    sitemapXml(
-      compiled.map((p) => p.path),
-      input.publicOrigin,
-      [COOKIE_COMPLIANCE_PATH, ...site.indexing === "noindex" ? compiled.map((page) => page.path) : compiled.filter((page) => page.indexing === "noindex").map((page) => page.path)],
-      Boolean(backendOrigin)
-    ),
-    "utf8"
-  );
-  const islands = siteIslands(compiled, input.catalog);
-  if (islands) await writeFile(join(input.outDir, "islands.js"), islands, "utf8");
-  if (compiled.some((page) => page.usesMotion)) {
-    await writeFile(join(input.outDir, motionAssetHref.slice(1)), motionJs, "utf8");
-    written.push(motionAssetHref.slice(1));
-  }
-  if (islands) written.push("islands.js");
-  written.push("site.css", "theme.css", "robots.txt", "sitemap.xml");
-  return written;
-}
-async function fetchLiveContent(kernelOrigin, slug, token) {
-  const res = await fetch(`${kernelOrigin.replace(/\/$/, "")}/api/deploy/${encodeURIComponent(slug)}`, {
-    headers: { authorization: `Bearer ${token}` }
-  });
-  if (!res.ok) return null;
-  return await res.json();
-}
-
-export {
-  safeId,
-  approvedOrigin,
-  validateFormConfig,
-  inspectForms,
-  connectForms,
-  loadSiteCatalog,
-  loadSitePages,
-  loadSiteDir,
-  buildSite,
-  fetchLiveContent
-};