@universalcms/connect 0.1.0 → 0.13.0

package/dist/website-setup.mjs

@@ -0,0 +1,256 @@
+import { planAstroSettings, inspectAstroProject } from './astro-setup.mjs';
+import { isNativeFramework, nativeFramework, inspectNativeProject, planNativeSettings } from './native-adapters.mjs';
+/** Explicit reviewed extension to full setup. Never overwrite a custom website adapter. */
+import path from 'node:path';
+import { lstat, readdir } from 'node:fs/promises';
+import { projectRoot, readProjectFile, SetupError, applyPlan } from './core.mjs';
+import { readContentRegistry, readFrozenContent, contentDigest, CONTENT_BINDINGS_FILE } from './content-registry.mjs';
+import { readPublicationConfiguration, viteServerTemplate } from './publication-setup.mjs';
+import { nextContentPageTemplate, inspectOwnedDemo } from './content-next-setup.mjs';
+import { REVIEWED_NEXT_NATIVE_PROFILE } from './native-routes.mjs';
+import { inspectReviewedNativeOwnership } from './reviewed-native-ownership.mjs';
+import { planReviewedCommerceSettings, reviewPlannedCommerceSettings } from './reviewed-commerce-settings-setup.mjs';
+import { viteContentPageTemplate } from './content-vite-setup.mjs';
+import { nextPublicationProxyTemplate, nextWebsiteProxyTemplate, planNextPublication } from './publication-next-setup.mjs';
+import { viteSourceWrapper, readSourceSettings } from './source-setup.mjs';
+import { inspectSourceRoutes } from './source-routes.mjs';
+import { isExcludedPublicationPath } from './publication.mjs';
+import { setupReviewError } from './preflight-recovery.mjs';
+import { inspectSettingsLayoutReview, planNextSettingsLayout, SETTINGS_LAYOUT_FILE } from './next-settings-layout.mjs';
+const FILE='.universalcms/website.integration.json';
+const json=value=>JSON.stringify(value,null,2)+'\n';
+const fail=message=>{throw new SetupError(message);};
+const relative=(from,to)=>{const value=path.posix.relative(path.posix.dirname(from),to);return value.startsWith('.')?value:`./${value}`;};
+const sections=['branding','social','seo','languages','analytics','navigation','experience','scripts','redirects','authors','templates','taxonomies'];
+function vitePage(row,config,old) {
+  const scope=`${config.siteId}:${config.environmentId}`;
+  const setup=`import { CmsWebsite, CmsWebsitePage } from '@universalcms/connect/react-website';\nimport '@universalcms/connect/website.css';\n`;
+  return setup+old.replace('return createElement(PublishedDocumentProvider,',`const current = window.location.pathname === '/index.html' ? '/' : window.location.pathname;\n  if (current !== ${JSON.stringify(row.path)}) return createElement(CmsWebsitePage, { pathname: current, scope: ${JSON.stringify(scope)} });\n  return createElement(CmsWebsite, { scope: ${JSON.stringify(scope)}, children: createElement(PublishedDocumentProvider,`).replace('children: createElement(NativePage, props) });','children: createElement(NativePage, props) }) });');
+}
+function nextPage(row, config, ownership, layout = false) {
+  const typed = row.sourceFile.endsWith('.tsx');
+  const pathname = JSON.stringify(row.path);
+  const native = relative(row.sourceFile, row.nativeFile).replace(/\.(?:[jt]sx?)$/, '');
+  return `// Generated by @universalcms/connect. Original content and layout stay bound to their fixed route.
+import { cache } from 'react';
+import { connection } from 'next/server';
+import { notFound } from 'next/navigation';
+import { CmsWebsite } from '@universalcms/connect/react-website';
+import { PublishedDocumentProvider } from '@universalcms/connect/react-publication';
+import { publicBindingInventory } from '@universalcms/connect/public-bindings';
+import { createWebsiteRuntime, websiteMetadata } from '@universalcms/connect/website-runtime';
+import '@universalcms/connect/website.css';
+import configuration from ${JSON.stringify(relative(row.sourceFile,'.universalcms/publication.config.json'))};
+import inventory from ${JSON.stringify(relative(row.sourceFile,row.inventoryFile))};
+import NativePage from ${JSON.stringify(native)};
+const website = createWebsiteRuntime({ configuration: configuration${typed ? " as Parameters<typeof createWebsiteRuntime>[0]['configuration']" : ''}${ownership ? ', nativePaths: ' + JSON.stringify(ownership.nativePaths) + ', nativePatterns: ' + JSON.stringify(ownership.nativePatterns) : ''} });
+const settings = cache(async () => { await connection(); return website.settings(); });
+const load = cache(async () => {
+  await connection();
+  const result = await website.page(${pathname});
+  if (result.state === 'missing') notFound();
+  if (result.state !== 'published') throw new Error('Published website content unavailable');
+  return result.entry;
+});
+export async function generateMetadata() {
+  const entry = await load(), snapshot = await settings();
+  if (snapshot.sections.seo.state !== 'ready') return { title: entry.document.title, description: entry.document.excerpt };
+  const value = websiteMetadata(entry, snapshot, ${pathname}, configuration.websiteOrigin);
+  return { other: { 'universalcms-seo': 'managed' }, title: value.title, description: value.description, robots: value.robots, alternates: { canonical: value.canonical, languages: Object.fromEntries((value.alternates ?? []).map(item => [item.locale, item.url])) }, openGraph: value.openGraph ? { ...value.openGraph, images: value.openGraph.image ? [value.openGraph.image] : [] } : undefined, twitter: value.twitter };
+}
+export default async function Page() {
+  const entry = await load(), snapshot = await settings();
+  const structured = websiteMetadata(entry, snapshot, ${pathname}, configuration.websiteOrigin).jsonLd;
+  const publicInventory = publicBindingInventory(inventory${typed ? " as import('@universalcms/connect/react-publication').Inventory" : ''});
+  return <>{structured && <script type="application/ld+json" data-universalcms-setting="seo" dangerouslySetInnerHTML={{ __html: JSON.stringify(structured).replace(/</g, '\\\\u003c') }}/>}<CmsWebsite scope=${JSON.stringify(config.siteId+':'+config.environmentId)} initialSettings={snapshot} entry={entry}${layout ? ' chrome={false}' : ''}><PublishedDocumentProvider initialEntry={entry} pathname=${pathname} route={publicInventory}><NativePage /></PublishedDocumentProvider></CmsWebsite></>;
+}
+`;
+}
+function catchall(app, config, native, layout = false) {
+  const filename = `${app}/[...cmsPath]/page.tsx`, importPath = relative(filename,'.universalcms/publication.config.json');
+  return `// Generated website routes: originals and reserved paths retain their ownership.
+import { cache } from 'react';
+import { connection } from 'next/server';
+import { notFound } from 'next/navigation';
+import { createWebsiteRuntime, websiteMetadata } from '@universalcms/connect/website-runtime';
+import { CmsWebsitePage } from '@universalcms/connect/react-website';
+import '@universalcms/connect/website.css';
+import configuration from ${JSON.stringify(importPath)};
+const runtime = createWebsiteRuntime({ configuration: configuration as Parameters<typeof createWebsiteRuntime>[0]['configuration']${native ? ', nativePaths: ' + JSON.stringify(native.nativePaths) + ', nativePatterns: ' + JSON.stringify(native.nativePatterns) : ''} });
+const settings = cache(async () => { await connection(); return runtime.settings(); });
+const load = cache(async (pathname: string) => {
+  await connection();
+  const result = await runtime.resolve(pathname);
+  if (result.state === 'missing' || result.state === 'unmanaged') notFound();
+  if (result.state !== 'published' && result.state !== 'archive') throw new Error('Website unavailable');
+  return result;
+});
+type Props = { params: Promise<{ cmsPath: string[] }> };
+export async function generateMetadata({params}: Props) {
+  const pathname = '/' + (await params).cmsPath.join('/'), result = await load(pathname), snapshot = await settings();
+  const entry = result.state === 'published' ? result.entry : null;
+  if (snapshot.sections.seo.state !== 'ready') return { title: entry?.document.title ?? (result.state === 'archive' ? result.title : ''), description: entry?.document.excerpt };
+  const value = websiteMetadata(entry, snapshot, pathname, configuration.websiteOrigin);
+  return { other: { 'universalcms-seo': 'managed' }, title: result.state === 'archive' ? result.title : value.title, description: value.description, robots: value.robots, alternates: { canonical: value.canonical, languages: Object.fromEntries((value.alternates ?? []).map(item => [item.locale, item.url])) }, openGraph: value.openGraph ? { ...value.openGraph, images: value.openGraph.image ? [value.openGraph.image] : [] } : undefined, twitter: value.twitter };
+}
+export default async function Page({params}: Props) {
+  const pathname = '/' + (await params).cmsPath.join('/'), result = await load(pathname), snapshot = await settings();
+  const structured = websiteMetadata(result.state === 'published' ? result.entry : null, snapshot, pathname, configuration.websiteOrigin).jsonLd;
+  return <>{structured && <script type="application/ld+json" data-universalcms-setting="seo" dangerouslySetInnerHTML={{ __html: JSON.stringify(structured).replace(/</g, '\\\\u003c') }}/>}<CmsWebsitePage pathname={pathname} scope=${JSON.stringify(config.siteId+':'+config.environmentId)} initialResult={result} initialSettings={snapshot}${layout ? ' chrome={false}' : ''}/></>;
+}
+`;
+}
+async function ordinary(root,name) {
+  const content=await readProjectFile(root,name);if(content!==null&&(await lstat(path.join(root,name))).nlink!==1)fail('Website settings cannot replace linked files.');return content;
+}
+async function preserveSeoAndSettingsRoutes(root,app) {
+  for(const name of ['public/sitemap.xml','public/robots.txt',...(app?[...['js','jsx','ts','tsx'].flatMap(ext=>[`${app}/sitemap.${ext}`,`${app}/robots.${ext}`,`${app}/api/universalcms/settings/route.${ext}`,`${app}/api/universalcms/page/route.${ext}`,`${app}/sitemap.xml/route.${ext}`,`${app}/robots.txt/route.${ext}`]),`${app}/sitemap.xml`,`${app}/robots.txt`]:[])])if(await ordinary(root,name)!==null)fail('An existing settings, sitemap or robots route needs manual composition. It was preserved.');
+}
+async function inspectNativeChrome(root, registry, app, plannedFiles = [], layoutReview = null) {
+  const observed = new Map();
+  const nativeChrome = /<\s*(?:header|footer)\b|<\s*(?:[A-Z][\w$]*(?:Header|Footer|Navbar|NavBar|Shell)|Header|Footer|Navbar|NavBar|AppShell)\b|\bimport\s[\s\S]*?\bfrom\s*['"][^'"]*(?:^|\/)(?:[^/'"]*(?:[Hh]eader|[Ff]ooter|[Nn]avbar|[Nn]av[Bb]ar|[Ss]hell))[^/'"]*['"]/;
+  const inspect = (name, content) => {
+    if (nativeChrome.test(content) && name !== layoutReview?.rootLayout) throw setupReviewError('native-settings-layout', [name]);
+    observed.set(name, {path:name,content,state:'unchanged'});
+  };
+  for (const row of registry.routes) {
+    const planned = plannedFiles.find(file => file.path === row.originalFile);
+    const original = planned?.content ?? (await readFrozenContent(root,row)).texts.original;
+    inspect(row.originalFile,original);
+    if (!app) continue;
+    let directory = path.posix.dirname(row.sourceFile);
+    while (directory === app || directory.startsWith(app + '/')) {
+      for (const ext of ['js','jsx','ts','tsx']) { const name = `${directory}/layout.${ext}`, content = await ordinary(root,name); if (content !== null && !observed.has(name)) inspect(name,content); }
+      if (directory === app) break;
+      directory = path.posix.dirname(directory);
+    }
+  }
+  return [...observed.values()];
+}
+// New explicit native reviews must discover unsupported custom chrome before
+// full setup writes source endpoints, publication guards or bound pages.
+export async function assertPlannedNativeSettings(root, plan, publication) {
+  root = await projectRoot(root);
+  if (isNativeFramework(publication.framework)) { await inspectNativeProject(root, publication.framework); return; }
+  if (publication.framework === 'astro') { await inspectAstroProject(root); return; }
+  const registry = JSON.parse(plan.files.find(file => file.path === CONTENT_BINDINGS_FILE).content);
+  if (registry.profile !== REVIEWED_NEXT_NATIVE_PROFILE) return;
+  const ownership = await inspectReviewedNativeOwnership(root);
+  if (ownership.files.some(observed => publication?.files.some(file => file.path === observed.path && file.state !== 'unchanged'))) fail('A reviewed native dependency also needs publication edits. Review shared ownership before setup; existing files were preserved.');
+  const app = registry.routes[0].sourceFile.startsWith('src/app/') ? 'src/app' : 'app';
+  await inspectNativeChrome(root, registry, app, plan.files, await inspectSettingsLayoutReview(root));
+}
+// Preflight checks known settings conflicts against prospective original files.
+// This is not a future installed settings plan and must never apply content.
+export async function assertPlannedSettingsCompatibility(root, plan, publication) {
+  root = await projectRoot(root);
+  if (isNativeFramework(publication.framework)) { await inspectNativeProject(root, publication.framework); return; }
+  if (publication.framework === 'astro') { await inspectAstroProject(root); return; }
+  const registry = JSON.parse(plan.files.find(file => file.path === CONTENT_BINDINGS_FILE).content);
+  const isNext = publication.framework === 'next';
+  const app = isNext ? (registry.routes[0].sourceFile.startsWith('src/app/') ? 'src/app' : 'app') : null;
+  await preserveSeoAndSettingsRoutes(root, app);
+  if (await reviewPlannedCommerceSettings(root, registry)) return;
+  if (registry.profile === REVIEWED_NEXT_NATIVE_PROFILE) {
+    await assertPlannedNativeSettings(root, plan, publication);
+    return;
+  }
+  if (registry.profile) fail('This reviewed native application needs explicit shared settings slots. Existing routing, commerce and custom adapters were preserved.');
+  if (!isNext && (registry.routes.length !== 1 || registry.routes[0].path !== '/' || !/^src\/App\.(jsx|tsx)$/.test(registry.routes[0].sourceFile))) fail('A custom Vite router needs reviewed settings and new-page slots. Original pages were preserved.');
+  await inspectNativeChrome(root, registry, app, plan.files, await inspectSettingsLayoutReview(root));
+}
+export async function planWebsiteSettings(directory) {
+  const root=await projectRoot(directory),config=await readPublicationConfiguration(root),registry=await readContentRegistry(root),source=await readSourceSettings(root);
+  if(!config||!registry||!source.adminOrigin)fail('Complete reviewed original-page setup before setup-settings. Keep existing custom integrations and use the shared website runtime manually.');
+  if(['siteId','environmentId','websiteOrigin'].some(name=>source[name]!==config[name])||registry.routes.length!==config.routes.length||config.routes.some(route=>!registry.routes.some(row=>['path','kind','slug','locale'].every(name=>row[name]===route[name]))))fail('Source, publication and content bindings must match the exact saved website connection.');
+  const manifest=JSON.parse(await ordinary(root,'package.json'));
+  if(nativeFramework(manifest))return planNativeSettings(root,nativeFramework(manifest),{config,source});
+  if(manifest.dependencies?.astro??manifest.devDependencies?.astro)return planAstroSettings(root,{config,source});
+  const isNext=Boolean(manifest.dependencies?.next??manifest.devDependencies?.next);
+  const app=registry.routes[0].sourceFile.startsWith('src/app/')?'src/app':'app';
+  const connection={apiOrigin:config.apiOrigin,websiteOrigin:config.websiteOrigin,adminOrigin:source.adminOrigin};
+  const reviewed = await planReviewedCommerceSettings(root, {config,registry,source,manifest});
+  if (reviewed) return reviewed;
+  const native = registry.profile === REVIEWED_NEXT_NATIVE_PROFILE && isNext ? await inspectReviewedNativeOwnership(root) : null;
+  const layout = isNext ? await planNextSettingsLayout(root,config,native) : null;
+  const chromeObservations = await inspectNativeChrome(root, registry, isNext ? app : null, [], layout?.review);
+  const demo = isNext ? await inspectOwnedDemo(root) : null;
+  const ownedNativePath = pathname => native?.nativePaths.includes(pathname);
+  const ownedNativeDirectory = directory => native?.dynamicDirectories.includes(directory);
+  const nativeLayoutUpdate = !!(layout && native && layout.files.some(file=>native.files.some(observed=>observed.path===file.path)));
+  const layoutPaths = layout ? [...layout.files.map(file=>file.path), SETTINGS_LAYOUT_FILE, ...(nativeLayoutUpdate ? [native.manifest.path] : [])] : [];
+  const expectedPaths=[...layoutPaths,CONTENT_BINDINGS_FILE,...registry.routes.map(row=>row.sourceFile),...(isNext?[app==='src/app'?'src/proxy.ts':'proxy.ts',`${app}/[...cmsPath]/page.tsx`]:['.universalcms/source.vite.config.mjs','.universalcms/serve.mjs'])].sort();
+  await preserveSeoAndSettingsRoutes(root,isNext?app:null);
+  const previousText=await ordinary(root,FILE);
+  if(previousText!==null){
+    let previous;try{previous=JSON.parse(previousText);}catch{fail('Invalid website integration manifest.');}
+    if(previous.version!==1||previous.siteId!==config.siteId||previous.environmentId!==config.environmentId||Object.entries(connection).some(([name,value])=>previous[name]!==value)||JSON.stringify(previous.sections)!==JSON.stringify(sections)||!Array.isArray(previous.files)||previous.files.length!==expectedPaths.length||previous.files.some(row=>!row||Object.keys(row).sort().join()!=='path,sha256'||! /^[a-f0-9]{64}$/.test(row.sha256))||JSON.stringify(previous.files.map(row=>row.path).sort())!==JSON.stringify(expectedPaths))fail('Website settings scope or manifest is invalid.');
+    if(isNext){
+      const inventory=await inspectSourceRoutes(root);
+      if(inventory.unresolvedPaths.some(name=>name!==`${app}/[...cmsPath]`&&name!==demo?.path&&!ownedNativeDirectory(name))||inventory.routes.some(route=>!isExcludedPublicationPath(`/${route}`)&&!ownedNativePath(`/${route}`)&&!config.routes.some(row=>row.path===`/${route}`)))fail('Native routing changed after settings setup. Review new routes before continuing.');
+      const publication=await planNextPublication(root,config,{websiteSettings:true});
+      if(publication.files.some(file=>file.state!=='unchanged'))fail('The Next publication layout changed. Review settings integration before continuing.');
+    }else{
+      const suffix=' --config .universalcms/source.vite.config.mjs';
+      if(!manifest.scripts?.dev?.endsWith(suffix)||!manifest.scripts?.build?.endsWith(suffix)||manifest.scripts.start!=='node .universalcms/serve.mjs')fail('The website startup scripts changed. Review settings integration before continuing.');
+    }
+    const files=[];
+    for(const row of previous.files){const content=await ordinary(root,row.path);if(content===null||contentDigest(content)!==row.sha256)fail('A website settings adapter was customized. Preserve the changes and review the shared integration manually.');files.push({path:row.path,content,state:'unchanged'});}
+    for(const row of registry.routes)await readFrozenContent(root,row);
+    for(const name of ['package.json','.universalcms/publication.config.json','.universalcms/source.config.json'])files.push({path:name,content:await ordinary(root,name),state:'unchanged'});
+    return {root,files:[...files,...(layout?.observations??[]).filter(file=>file.content!==null),...chromeObservations,...(demo?.files??[]),...(native ? [...native.files,native.manifest] : []),{path:FILE,content:previousText,state:'unchanged'}],sections,config};
+  }
+  if(registry.profile && !native)fail('This reviewed native application needs explicit shared settings slots. Existing routing, commerce and custom adapters were preserved.');
+  const files=[],observed=[...(layout?.observations??[]),...chromeObservations,...(demo?.files??[]),...(native ? [...native.files,native.manifest] : [])];
+  const own=async(name,content,expected=null)=>{const current=await ordinary(root,name);if(current!==expected)fail(`Existing ${name} needs manual settings integration; it was preserved.`);files.push({path:name,content,state:current===null?'create':current===content?'unchanged':'update',...(current!==null&&current!==content?{previous:current}:{})});};
+  for(const row of registry.routes){const frozen=await readFrozenContent(root,row);observed.push(...Object.entries(frozen.texts).map(([key,content])=>({path:row[`${key}File`],content,state:'unchanged'})));}
+  const nextRegistry=JSON.parse(json(registry));
+  if(isNext){
+    const publication=await planNextPublication(root,config);
+    if(publication.files.some(file=>file.state!=='unchanged'))fail('The Next publication layout changed. Review settings integration before continuing.');
+    const inventory=await inspectSourceRoutes(root);
+    if(inventory.routes.some(route=>!isExcludedPublicationPath(`/${route}`)&&!ownedNativePath(`/${route}`)&&!config.routes.some(row=>row.path===`/${route}`)))fail('Native routing changed after original-page setup. Review new routes before continuing.');
+    if(native && inventory.unresolvedPaths.some(name=>name!==demo?.path&&!ownedNativeDirectory(name)))fail('Unreviewed dynamic or parallel routes need explicit settings ownership.');
+    // Reject competing dynamic ownership, including nested dynamic routes.
+    let inspected=0;
+    async function scan(directory,depth=0){if(depth>14)fail('Route inspection exceeded its bound.');for(const item of await readdir(path.join(root,directory),{withFileTypes:true})){if(++inspected>4000)fail('Route inspection exceeded its bound.');if(item.isSymbolicLink())fail('Linked routes need manual settings integration.');if(item.isDirectory()){const target=`${directory}/${item.name}`;if(item.name.includes('[')&&target!==demo?.path&&!ownedNativeDirectory(target))fail('Existing dynamic routes require reviewed settings composition.');await scan(target,depth+1);}}}
+    await scan(app);
+    const proxy=app==='src/app'?'src/proxy.ts':'proxy.ts',prior=nextPublicationProxyTemplate(app);
+    await own(proxy,nextWebsiteProxyTemplate(app),prior);
+    await own(`${app}/[...cmsPath]/page.tsx`,catchall(app,config,native,!!layout));
+    for(const row of nextRegistry.routes){const current=await ordinary(root,row.sourceFile),expected=nextContentPageTemplate(row);if(current!==expected)fail('A customized native page needs manual settings slots.');const content=nextPage(row,config,native,!!layout);await own(row.sourceFile,content,current);row.sourceHash=contentDigest(content);}
+  }else{
+    if(registry.routes.length!==1||registry.routes[0].path!=='/'||!/^src\/App\.(jsx|tsx)$/.test(registry.routes[0].sourceFile))fail('A custom Vite router needs reviewed settings and new-page slots. Original pages were preserved.');
+    const wrapper=viteSourceWrapper(true);
+    const updated=wrapper.includes('universalCmsWebsite') ? wrapper : `import { universalCmsWebsite } from '@universalcms/connect/website-node';\n`+wrapper.replace('plugins: [','plugins: [universalCmsWebsite({ configuration: publication, sourceConfiguration: configuration, contentBindings }), ');
+    await own('.universalcms/source.vite.config.mjs',updated,wrapper);
+    const serve=await ordinary(root,'.universalcms/serve.mjs');
+    if(serve!==viteServerTemplate())fail('The website server was customized; compose createWebsiteServer manually.');
+    await own('.universalcms/serve.mjs',serve.replaceAll('createVitePublicationServer','createWebsiteServer').replace('@universalcms/connect/vite-publication-server','@universalcms/connect/website-node'),serve);
+    const row=nextRegistry.routes[0],current=await ordinary(root,row.sourceFile);
+    if(current!==viteContentPageTemplate(row,(await readFrozenContent(root,row)).inventory))fail('The existing Vite wrapper needs public binding review; preserve older or customized adapters and compose CmsWebsite manually.');
+    const content=vitePage(row,config,current);await own(row.sourceFile,content,current);row.sourceHash=contentDigest(content);
+  }
+  if(layout){
+    for(const file of layout.files)await own(file.path,file.content,file.previous??(file.state==='create'?null:file.content));
+    await own(SETTINGS_LAYOUT_FILE,layout.review.observations.find(file=>file.path===SETTINGS_LAYOUT_FILE).content,layout.review.observations.find(file=>file.path===SETTINGS_LAYOUT_FILE).content);
+    if(nativeLayoutUpdate){
+      const value=JSON.parse(native.manifest.content),changed=new Map(layout.files.map(file=>[file.path,file.content]));
+      for(const row of value.files)if(changed.has(row.path))row.sha256=contentDigest(changed.get(row.path));
+      // A reviewed native module importing the root layout also owns the new
+      // server wrapper dependency. Keep its complete closure synchronized.
+      if(value.files.some(row=>row.path===layout.review.rootLayout)&&!value.files.some(row=>row.path===layout.review.serverFile))value.files.push({path:layout.review.serverFile,sha256:contentDigest(changed.get(layout.review.serverFile))});
+      value.files.sort((a,b)=>a.path.localeCompare(b.path));
+      const content=json(value);await own(native.manifest.path,content,native.manifest.content);
+      nextRegistry.files=[...value.files,{path:native.manifest.path,sha256:contentDigest(content)}];
+    }
+  }
+  const registryText=await ordinary(root,CONTENT_BINDINGS_FILE);await own(CONTENT_BINDINGS_FILE,json(nextRegistry),registryText);
+  const hashes=files.map(file=>({path:file.path,sha256:contentDigest(file.content)}));
+  await own(FILE,json({version:1,siteId:config.siteId,environmentId:config.environmentId,...connection,sections,files:hashes}));
+  const writes=new Set(files.map(file=>file.path));
+  for(const observation of observed)if(!writes.has(observation.path)){files.unshift(observation);writes.add(observation.path);}
+  for(const name of ['package.json','.universalcms/publication.config.json','.universalcms/source.config.json'])files.unshift({path:name,content:await ordinary(root,name),state:'unchanged'});
+  return {root,files,sections,config};
+}
+export async function setupWebsiteSettings(directory,{apply=false}={}) {const plan=await planWebsiteSettings(directory);if(apply)await applyPlan(plan);return {applied:apply,sections:plan.sections,files:plan.files.map(({path,state})=>({path,state})),renderedVerified:false,message:apply?`Website settings installed: ${plan.sections.join(', ')}. Restart or deploy, verify each selected scope, then test the actual website. No key, CMS content or settings were changed.`:'Plan only. Review the files and rerun setup-settings --apply. Custom layouts need explicit shared component slots.'};}

package/dist/website.css

@@ -0,0 +1,49 @@
+.cms-website { --cms-website-accent: #2563eb; }
+.cms-website-header:empty, .cms-website-footer:empty { display: none; }
+.cms-website-header, .cms-website-footer { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 1rem; padding: 1rem clamp(1rem, 4vw, 3rem); color: inherit; background: inherit; }
+.cms-website-header:not(:has(> *)), .cms-website-footer:not(:has(> *)) { display: none; }
+.cms-website-header { border-bottom: 1px solid color-mix(in srgb, currentColor 15%, transparent); }
+.cms-website-footer { border-top: 1px solid color-mix(in srgb, currentColor 15%, transparent); }
+.cms-website a { overflow-wrap: anywhere; }
+.cms-website-header a, .cms-website-footer a, .cms-website-supplement a, .cms-website-page a { color: var(--cms-website-accent); }
+.cms-website-branding { max-width: 40rem; }
+.cms-website-branding img { display: block; max-width: min(15rem, 70vw); max-height: 4rem; width: auto; height: auto; object-fit: contain; }
+.cms-website-branding p { margin: .5rem 0 0; font-size: .9rem; }
+.cms-website-navigation { max-width: 100%; }
+.cms-website-navigation ul, .cms-website-social, .cms-website-languages, .cms-website-terms { display: flex; flex-wrap: wrap; align-items: center; gap: .5rem 1.25rem; margin: 0; padding: 0; list-style: none; }
+.cms-website-navigation a, .cms-website-navigation summary, .cms-website-social a, .cms-website-languages a, .cms-website-terms a { display: inline-flex; gap: .5rem; align-items: center; min-height: 2.75rem; }
+.cms-website-navigation details { position: relative; }
+.cms-website-navigation summary { cursor: pointer; }
+.cms-website-navigation summary::after { content: '⌄'; margin-inline-start: .3rem; }
+.cms-website-navigation details > ul { position: absolute; z-index: 40; top: 100%; min-width: 12rem; max-width: min(20rem, 85vw); flex-direction: column; align-items: stretch; gap: 0; padding: .5rem 1rem; border: 1px solid #64748b; border-radius: .5rem; color: #0f172a; background: #fff; box-shadow: 0 .5rem 1.5rem #0002; }
+.cms-website-footer-groups { display: flex; gap: 2rem; flex-wrap: wrap; }
+.cms-website-footer-groups h2 { font-size: 1rem; margin: .75rem 0; }
+.cms-website-footer-groups ul { flex-direction: column; align-items: start; gap: 0; }
+.cms-website-social img { width: 1.25rem; height: 1.25rem; object-fit: contain; }
+.cms-website-align-left { justify-content: flex-start; }.cms-website-align-center { justify-content: center; }.cms-website-align-right { justify-content: flex-end; }
+.cms-website-languages [aria-current=page] { font-weight: 700; text-decoration: underline; }
+.cms-website-page { width: min(100% - 2rem, 72rem); margin: 0 auto; padding: 3rem 0; overflow-wrap: anywhere; }
+.cms-website-page.cms-website-layout-narrow, .cms-website-native.cms-website-layout-narrow { max-width: 48rem; margin-inline: auto; }
+.cms-website-page.cms-website-layout-wide { width: min(100% - 2rem, 90rem); }
+.cms-website-native.cms-website-layout-standard { max-width: 80rem; margin-inline: auto; }
+.cms-website-native.cms-website-layout-wide { max-width: 100%; }
+.cms-website-page > h1 { font-size: clamp(2rem, 5vw, 3.5rem); line-height: 1.15; margin: 1rem 0; }
+.cms-website-excerpt { font-size: 1.15rem; line-height: 1.7; }
+.cms-website-featured { display: block; width: 100%; height: auto; max-height: 36rem; object-fit: cover; margin: 1.5rem 0; border-radius: .75rem; }
+.cms-website-toc, .cms-website-author, .cms-website-related { margin-block: 2rem; padding: 1.25rem; border: 1px solid color-mix(in srgb, currentColor 20%, transparent); border-radius: .75rem; }
+.cms-website-toc h2, .cms-website-author h2, .cms-website-related h2 { font-size: 1.25rem; }
+.cms-website-author { display: flex; align-items: flex-start; gap: 1rem; }
+.cms-website-author img { width: 4rem; height: 4rem; object-fit: cover; border-radius: 50%; }
+.cms-website-cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(min(100%, 16rem), 1fr)); gap: 1.5rem; }
+.cms-website-cards article { padding: 1rem; border: 1px solid color-mix(in srgb, currentColor 20%, transparent); border-radius: .5rem; }
+.cms-website-share { display: flex; gap: .75rem; align-items: center; margin-block: 1rem; }
+.cms-website-share button, .cms-website-preferences, .cms-website-consent button { min-height: 2.75rem; padding: .5rem 1rem; font: inherit; border: 1px solid #64748b; border-radius: .4rem; cursor: pointer; background: transparent; color: inherit; }
+.cms-website-supplement { margin: 1rem clamp(1rem, 4vw, 3rem); }
+.cms-website-consent { position: fixed; z-index: 1000; bottom: 1rem; width: min(32rem, calc(100vw - 2rem)); max-height: calc(100dvh - 2rem); overflow-y: auto; box-sizing: border-box; padding: 1.25rem; border: 1px solid #cbd5e1; border-radius: .75rem; background: #fff; color: #0f172a; box-shadow: 0 .5rem 3rem #0003; font: 1rem/1.5 system-ui, sans-serif; }
+.cms-website-consent h2 { margin: 0 0 .5rem; font-size: 1.25rem; }.cms-website-consent p { margin: .5rem 0; }
+.cms-website-consent fieldset { margin: 1rem 0; padding: .75rem; }.cms-website-consent label { display: flex; align-items: center; gap: .5rem; min-height: 2.75rem; }.cms-website-consent input { width: 1.2rem; height: 1.2rem; }
+.cms-website-consent-actions { display: flex; flex-wrap: wrap; gap: .5rem; margin-top: 1rem; }
+.cms-website-bottom-left { left: 1rem; }.cms-website-bottom-right { right: 1rem; }.cms-website-bottom-center { left: 50%; transform: translateX(-50%); }
+.cms-website-error { margin: 4rem auto; padding: 1rem; max-width: 48rem; }
+.cms-website :focus-visible { outline: 3px solid var(--cms-website-accent); outline-offset: 3px; }
+@media(max-width: 640px) { .cms-website-header, .cms-website-footer { align-items: stretch; flex-direction: column; }.cms-website-navigation details > ul { position: static; max-width: 100%; }.cms-website-page { padding-block: 1.5rem; }.cms-website-author { flex-wrap: wrap; } }