@universalcms/connect 0.1.0 → 0.13.1

package/dist/react-website.mjs

@@ -0,0 +1,735 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import React, { createContext, useContext, useEffect, useMemo, useRef, useState, useCallback } from 'react';
+import { PublishedDocumentProvider, PublicationMetadataOwner, CmsPublishedDocument, validateEntry } from './react-publication.mjs';
+import { emptyWebsiteSettings, parseWebsiteSettings, sectionData, record, text, publicHref, navigationLinks, languageLinks, experienceCopy, consentPolicy, parseConsent, createConsent, scriptDescriptors, pagePresentation, websiteJsonLd, readWebsiteJson } from './website-model.mjs';
+const Context = createContext(null);
+// Only CmsWebsitePage declares a managed page failure. A settings-only provider
+// may legitimately receive a 404 for a native route and must keep its own title.
+const PageAvailabilityContext = createContext(undefined);
+const initial = (value) => { try {
+    return parseWebsiteSettings(value);
+}
+catch {
+    return emptyWebsiteSettings();
+} };
+/** Only public same-origin projections are read here. Server credentials never
+ * enter this provider, browser storage or request headers. */
+export function WebsiteProvider({ children, initialSettings, entry, archive, scope }) {
+    const parent = useContext(Context), pageAvailability = useContext(PageAvailabilityContext), resolvedScope = scope ?? parent?.scope ?? 'website';
+    const safeArchive = useMemo(() => { try {
+        return archive === undefined ? undefined : archiveMetadata(archive);
+    }
+    catch {
+        return undefined;
+    } }, [archive]);
+    // A native layout and its page share one settings/consent owner. Installing a
+    // second effects owner would execute scripts twice and race over SEO tags.
+    if (parent?.scope === resolvedScope)
+        return _jsx(PublicationMetadataOwner, { children: _jsx(InheritedWebsiteProvider, { parent: parent, entry: entry, archive: safeArchive, pageAvailability: pageAvailability, children: children }) });
+    return _jsx(PublicationMetadataOwner, { children: _jsx(ScopedWebsiteProvider, { scope: resolvedScope, initialSettings: initialSettings, entry: entry, archive: safeArchive, pageAvailability: pageAvailability, children: children }, resolvedScope) });
+}
+function InheritedWebsiteProvider({ parent, entry, archive, pageAvailability, children }) {
+    const adoptPage = parent.adoptPage;
+    useEffect(() => adoptPage(entry, archive, pageAvailability === 'unavailable'), [adoptPage, entry, archive, pageAvailability]);
+    const current = entry && parent.entry?.id === entry.id && parent.entry.locale === entry.locale && parent.entry.version >= entry.version ? parent.entry : entry;
+    return _jsx(Context.Provider, { value: { ...parent, entry: current, archive: archive && parent.archive?.path === archive.path ? parent.archive : archive, related: current?.id === parent.entry?.id ? parent.related : [] }, children: children });
+}
+function ScopedWebsiteProvider({ children, initialSettings, entry, archive, pageAvailability, scope }) {
+    const [settings, setSettings] = useState(() => initial(initialSettings));
+    const [settingsChecked, setSettingsChecked] = useState(false);
+    const [consent, setConsent] = useState(null);
+    const [preferencesOpen, setPreferencesOpen] = useState(false);
+    const [loadedEntry, setLoadedEntry] = useState(entry), [loadedArchive, setLoadedArchive] = useState(archive), [related, setRelated] = useState([]);
+    const [pageUnavailable, setPageUnavailable] = useState(pageAvailability === 'unavailable');
+    const adoptedPage = useRef(undefined);
+    const adoptPage = useCallback((next, nextArchive, unavailable = false) => {
+        const owner = Symbol('page');
+        adoptedPage.current = owner;
+        setLoadedEntry(next);
+        setLoadedArchive(next ? undefined : nextArchive);
+        setPageUnavailable(unavailable);
+        setRelated([]);
+        window.dispatchEvent(new Event('universalcms:page-change'));
+        return () => { if (adoptedPage.current === owner) {
+            adoptedPage.current = undefined;
+            setLoadedEntry(undefined);
+            setLoadedArchive(undefined);
+            setPageUnavailable(false);
+            setRelated([]);
+        } };
+    }, []);
+    useEffect(() => { if (pageAvailability !== undefined)
+        setPageUnavailable(pageAvailability === 'unavailable'); }, [pageAvailability]);
+    const generation = useRef(0), storageFailed = useRef(false);
+    const policy = consentPolicy(settings), policyKey = policy ? `${policy.version}:${policy.maxAgeDays}` : '';
+    const storageKey = `universalcms:consent:${scope.slice(0, 200)}`;
+    const denialMarker = `\n[universalcms-consent-denied:${encodeURIComponent(scope.slice(0, 200))}]`;
+    useEffect(() => {
+        const documentRoot = document.documentElement;
+        let disposed = false, controller;
+        const active = () => !disposed && document.documentElement === documentRoot;
+        const refresh = () => {
+            if (!active())
+                return;
+            const current = ++generation.current;
+            controller?.abort();
+            const request = new AbortController();
+            controller = request;
+            const timer = window.setTimeout(() => request.abort(), 10000);
+            void (async () => {
+                try {
+                    const response = await fetch('/api/universalcms/settings', { headers: { Accept: 'application/json' }, credentials: 'omit', cache: 'no-store', redirect: 'error', referrerPolicy: 'no-referrer', signal: request.signal });
+                    const next = parseWebsiteSettings(await readWebsiteJson(response, request.signal));
+                    if (active() && current === generation.current) {
+                        setSettings(next);
+                        setSettingsChecked(true);
+                    }
+                }
+                catch {
+                    if (active() && current === generation.current) {
+                        setSettings(emptyWebsiteSettings());
+                        setSettingsChecked(false);
+                        setConsent(null);
+                    }
+                }
+                finally {
+                    window.clearTimeout(timer);
+                }
+            })();
+        };
+        const visible = () => { if (document.visibilityState === 'visible')
+            refresh(); };
+        refresh();
+        const interval = window.setInterval(refresh, 15000);
+        window.addEventListener('focus', refresh);
+        document.addEventListener('visibilitychange', visible);
+        window.addEventListener('universalcms:page-change', refresh);
+        return () => { disposed = true; generation.current++; controller?.abort(); window.clearInterval(interval); window.removeEventListener('focus', refresh); document.removeEventListener('visibilitychange', visible); window.removeEventListener('universalcms:page-change', refresh); };
+    }, []);
+    useEffect(() => {
+        if (entry || archive) {
+            setLoadedEntry(entry);
+            setLoadedArchive(entry ? undefined : archive);
+        }
+        const documentRoot = document.documentElement;
+        let disposed = false, serial = 0, controller, observedPath = window.location.pathname;
+        const active = () => !disposed && document.documentElement === documentRoot;
+        const refresh = () => {
+            if (!active())
+                return;
+            const current = ++serial;
+            controller?.abort();
+            const request = new AbortController();
+            controller = request;
+            const path = window.location.pathname, timer = window.setTimeout(() => request.abort(), 10000);
+            void (async () => {
+                try {
+                    const response = await fetch(`/api/universalcms/page?path=${encodeURIComponent(path)}`, { headers: { Accept: 'application/json' }, credentials: 'omit', cache: 'no-store', redirect: 'error', referrerPolicy: 'no-referrer', signal: request.signal });
+                    const next = validatedPage(await readWebsiteJson(response, request.signal));
+                    if (next.path && next.path !== path)
+                        throw Error();
+                    if (active() && current === serial && window.location.pathname === path) {
+                        setLoadedEntry(next.state === 'published' ? next.entry : undefined);
+                        setLoadedArchive(next.state === 'archive' ? archiveMetadata(next) : undefined);
+                        setRelated(Array.isArray(next.related) ? next.related.slice(0, 6) : []);
+                    }
+                }
+                catch {
+                    if (active() && current === serial && window.location.pathname === path) {
+                        setLoadedEntry(undefined);
+                        setLoadedArchive(undefined);
+                        setRelated([]);
+                    }
+                }
+                finally {
+                    window.clearTimeout(timer);
+                }
+            })();
+        };
+        const changed = () => { observedPath = window.location.pathname; refresh(); };
+        // Native client routers may preserve their layout on navigation. Refresh only
+        // when the URL changes; this interval never polls the network at this rate.
+        const locationTimer = window.setInterval(() => { if (active() && observedPath !== window.location.pathname) {
+            setLoadedEntry(undefined);
+            setLoadedArchive(undefined);
+            setRelated([]);
+            window.dispatchEvent(new Event('universalcms:page-change'));
+        } }, 500);
+        refresh();
+        const interval = window.setInterval(refresh, 15000);
+        window.addEventListener('focus', refresh);
+        window.addEventListener('universalcms:page-change', changed);
+        return () => { disposed = true; serial++; controller?.abort(); window.clearInterval(interval); window.clearInterval(locationTimer); window.removeEventListener('focus', refresh); window.removeEventListener('universalcms:page-change', changed); };
+    }, [entry, archive]);
+    useEffect(() => {
+        const documentRoot = document.documentElement;
+        const restore = () => {
+            if (document.documentElement !== documentRoot)
+                return;
+            if (storageFailed.current || !policy || window.name.includes(denialMarker)) {
+                setConsent(null);
+                return;
+            }
+            try {
+                setConsent(parseConsent(window.localStorage.getItem(storageKey), policy));
+            }
+            catch {
+                storageFailed.current = true;
+                setConsent(null);
+            }
+        };
+        const storage = (event) => { if (!event.key || event.key === storageKey)
+            restore(); };
+        restore();
+        const timer = window.setInterval(restore, 1000);
+        window.addEventListener('storage', storage);
+        window.addEventListener('focus', restore);
+        return () => { window.clearInterval(timer); window.removeEventListener('storage', storage); window.removeEventListener('focus', restore); };
+    }, [storageKey, policyKey, denialMarker]);
+    const saveConsent = (choices) => {
+        const next = createConsent(policy, choices);
+        if (!next)
+            return;
+        // Failed persistence cannot grant optional execution, including next load.
+        try {
+            const serialized = JSON.stringify(next);
+            window.localStorage.setItem(storageKey, serialized);
+            if (window.localStorage.getItem(storageKey) !== serialized)
+                throw Error();
+            window.name = window.name.replaceAll(denialMarker, '');
+            storageFailed.current = false;
+            setConsent(next);
+            setPreferencesOpen(false);
+        }
+        catch {
+            // A denial-only marker survives a same-tab navigation even when browser
+            // storage refuses a write. Preserve unrelated window.name text; this is
+            // never a source of permission and contains no credential or visitor ID.
+            try {
+                window.localStorage.removeItem(storageKey);
+            }
+            catch { /* denied storage */ }
+            if (!window.name.includes(denialMarker))
+                window.name += denialMarker;
+            storageFailed.current = true;
+            setConsent(null);
+        }
+    };
+    const value = { settings, settingsChecked, entry: loadedEntry, archive: loadedArchive, pageUnavailable, related, scope, consent, saveConsent, preferencesOpen, setPreferencesOpen, adoptPage };
+    return _jsxs(Context.Provider, { value: value, children: [_jsx(WebsiteEffects, {}), children] });
+}
+export function useWebsiteSettings() {
+    const context = useContext(Context);
+    if (!context)
+        throw Error('Website settings require WebsiteProvider');
+    return context;
+}
+function WebsiteEffects() {
+    const { settings, settingsChecked, entry, archive, pageUnavailable, consent } = useWebsiteSettings();
+    const documentRoot = useRef(undefined), archiveManaged = useRef(false);
+    const branding = sectionData(settings, 'branding'), seo = sectionData(settings, 'seo'), installed = useRef(new Map()), cleanupTimer = useRef(undefined);
+    // Validate the browser's current projection before executing any script. A
+    // failed settings read can then withdraw execution with one reload, without
+    // replaying the server snapshot and reloading forever while offline.
+    const scripts = JSON.stringify(settingsChecked ? scriptDescriptors(settings, consent, typeof navigator !== 'undefined' && (navigator.doNotTrack === '1' || navigator.globalPrivacyControl === true)) : []);
+    useEffect(() => {
+        documentRoot.current ??= document.documentElement;
+        // The publication guard can replace the document before an aborted fetch
+        // settles. That departing React tree must not reload or modify the new page.
+        if (document.documentElement !== documentRoot.current)
+            return;
+        const descriptors = JSON.parse(scripts), desired = new Map(descriptors.map(item => [item.src, JSON.stringify(item)]));
+        const removed = [...installed.current].filter(([src, node]) => desired.get(src) !== node.dataset.universalcmsDescriptor);
+        for (const [src, node] of removed) {
+            node.remove();
+            installed.current.delete(src);
+        }
+        // Executed JavaScript cannot be recalled by removing its DOM element. The
+        // persisted denial/current policy is checked before anything runs on reload.
+        if (removed.length) {
+            window.location.reload();
+            return;
+        }
+        for (const descriptor of descriptors) {
+            if (installed.current.has(descriptor.src))
+                continue;
+            prepareAnalytics(descriptor);
+            const element = document.createElement('script');
+            element.src = descriptor.src;
+            element.async = true;
+            element.referrerPolicy = 'no-referrer';
+            element.dataset.universalcmsSetting = descriptor.category;
+            element.dataset.universalcmsDescriptor = JSON.stringify(descriptor);
+            for (const [name, value] of Object.entries(descriptor.attributes))
+                if (name === 'data-domain')
+                    element.setAttribute(name, value);
+            (descriptor.placement === 'body' ? document.body : document.head).append(element);
+            installed.current.set(descriptor.src, element);
+        }
+    }, [scripts]);
+    useEffect(() => {
+        // React's development effect replay must not execute external code twice.
+        if (cleanupTimer.current !== undefined)
+            window.clearTimeout(cleanupTimer.current);
+        return () => {
+            cleanupTimer.current = window.setTimeout(() => {
+                for (const node of installed.current.values())
+                    node.remove();
+                installed.current.clear();
+            }, 0);
+        };
+    }, []);
+    useEffect(() => {
+        if (document.documentElement !== documentRoot.current)
+            return;
+        const favicon = publicHref(branding?.faviconUrl, { relative: false });
+        document.querySelectorAll('[data-universalcms-setting="branding"]').forEach(node => node.remove());
+        if (!favicon)
+            return;
+        const element = document.createElement('link');
+        element.rel = 'icon';
+        element.href = favicon;
+        element.dataset.universalcmsSetting = 'branding';
+        document.head.append(element);
+        return () => element.remove();
+    }, [branding?.faviconUrl]);
+    useEffect(() => {
+        if (document.documentElement !== documentRoot.current)
+            return;
+        // Only delivered translations change language; settings alone never imply a
+        // page was translated or invent a locale-prefixed URL.
+        if (!entry?.locale || !sectionData(settings, 'languages'))
+            return;
+        const before = document.documentElement.lang;
+        document.documentElement.lang = entry.locale;
+        return () => { if (document.documentElement === documentRoot.current && document.documentElement.lang === entry.locale)
+            document.documentElement.lang = before; };
+    }, [entry?.locale, settings.sections.languages]);
+    useEffect(() => {
+        if (document.documentElement !== documentRoot.current)
+            return;
+        // Next owns server metadata outside this React subtree. After a fresh access
+        // denial, request its fallback metadata instead of restoring saved CMS SEO
+        // as if it were native. The marker is emitted only by our SEO adapter; remove
+        // it first so repeated effects cannot trigger multiple reloads.
+        const serverSeo = document.head.querySelector('meta[name="universalcms-seo"][content="managed"]');
+        const seoRemoved = ['denied', 'missing'].includes(settings.sections.seo.state);
+        if (!seo && seoRemoved && settingsChecked && serverSeo) {
+            serverSeo.remove();
+            window.location.reload();
+            return;
+        }
+        // Archives have presentation metadata, not a fabricated published entry.
+        // Only a currently verified archive with current taxonomy access can supply it.
+        const currentArchive = !pageUnavailable && archive?.path === window.location.pathname && sectionData(settings, 'taxonomies') ? archive : undefined;
+        if (currentArchive)
+            archiveManaged.current = true;
+        document.querySelectorAll('[data-universalcms-setting="archive-fallback"]').forEach(node => node.remove());
+        if (pageUnavailable || (!entry && !currentArchive) || !seo) {
+            const loadingTitle = document.title;
+            document.querySelectorAll('[data-universalcms-setting="seo"]').forEach(node => node.remove());
+            if (entry && !pageUnavailable) {
+                archiveManaged.current = false;
+                document.title = entry.document.title;
+                return;
+            }
+            // Keep a plain title while the initial public page read settles, even if
+            // the server's managed <title> was removed with its unverified SEO tags.
+            if (!pageUnavailable && !archiveManaged.current && !archive) {
+                if (loadingTitle)
+                    document.title = loadingTitle;
+                return;
+            }
+            document.title = currentArchive?.title || 'Page unavailable';
+            const nodes = [['description', currentArchive?.description || ''], ['robots', 'noindex, follow']].map(([name, content]) => {
+                const node = document.createElement('meta');
+                node.name = name;
+                node.content = content;
+                node.dataset.universalcmsSetting = 'archive-fallback';
+                document.head.append(node);
+                return node;
+            });
+            return () => { for (const node of nodes)
+                node.remove(); };
+        }
+        if (entry)
+            archiveManaged.current = false;
+        const subject = entry ? { title: entry.document.title, description: entry.document.excerpt, path: entry.path } : { title: currentArchive.title, description: currentArchive.description, path: currentArchive.path };
+        const priorTitle = document.title, raw = record(entry?.seo), base = text(raw.title, 120) || subject.title;
+        const title = text(seo.titleTemplate, 500).replace(/%s|%title%|\{title\}/g, () => base) || base;
+        const description = text(raw.description, 320) || subject.description || text(seo.description, 500);
+        const robots = `${seo.indexable === true && record(raw.robots).index !== false ? 'index' : 'noindex'}, ${seo.followLinks !== false && record(raw.robots).follow !== false ? 'follow' : 'nofollow'}`;
+        let canonical = publicHref(raw.canonical, { relative: false });
+        if (!canonical && publicHref(subject.path)?.startsWith('/')) {
+            const base = publicHref(seo.canonicalBase, { relative: false }) || window.location.origin;
+            const url = new URL(base);
+            url.pathname = `${url.pathname.replace(/\/+$/, '')}${subject.path}`;
+            url.search = '';
+            url.hash = '';
+            canonical = url.href;
+        }
+        const image = publicHref(record(raw.openGraph).imageUrl || record(raw.featuredImage).url || seo.socialImageUrl, { relative: false });
+        const saved = [], created = [];
+        const meta = (name, content, property = false) => {
+            const attribute = property ? 'property' : 'name';
+            let node = document.head.querySelector(`meta[${attribute}="${name}"]`);
+            if (node && !node.hasAttribute('data-universalcms-setting'))
+                saved.push({ node, content: node.getAttribute('content') });
+            else {
+                node?.remove();
+                node = document.createElement('meta');
+                node.setAttribute(attribute, name);
+                node.dataset.universalcmsSetting = 'seo';
+                document.head.append(node);
+                created.push(node);
+            }
+            node.setAttribute('content', content);
+        };
+        document.title = title;
+        meta('description', description);
+        meta('robots', robots);
+        meta('og:title', text(record(raw.openGraph).title, 120) || title, true);
+        meta('og:description', text(record(raw.openGraph).description, 320) || description, true);
+        if (image)
+            meta('og:image', image, true);
+        if (canonical)
+            meta('og:url', canonical, true);
+        meta('og:type', ['website', 'article', 'product', 'profile'].includes(record(raw.openGraph).type) ? raw.openGraph.type : entry?.kind === 'post' ? 'article' : 'website', true);
+        meta('twitter:card', raw.twitterCard === 'summary' ? 'summary' : 'summary_large_image');
+        if (/^@?[A-Za-z0-9_]{1,15}$/.test(seo.twitterHandle ?? ''))
+            meta('twitter:site', seo.twitterHandle);
+        document.head.querySelectorAll('script[type="application/ld+json"][data-universalcms-setting="seo"],link[rel="alternate"][data-universalcms-setting="seo"]').forEach(node => node.remove());
+        const jsonLd = entry ? websiteJsonLd(settings, entry, { title, description, canonical, image }) : null;
+        if (jsonLd) {
+            const node = document.createElement('script');
+            node.type = 'application/ld+json';
+            node.dataset.universalcmsSetting = 'seo';
+            node.textContent = JSON.stringify(jsonLd).replace(/</g, '\\u003c');
+            document.head.append(node);
+            created.push(node);
+        }
+        for (const alternate of entry ? languageLinks(settings, entry) : []) {
+            if (alternate.current)
+                continue;
+            const node = document.createElement('link');
+            node.rel = 'alternate';
+            node.hreflang = alternate.locale;
+            node.href = new URL(alternate.path, seo.canonicalBase || window.location.origin).href;
+            node.dataset.universalcmsSetting = 'seo';
+            document.head.append(node);
+            created.push(node);
+        }
+        if (canonical) {
+            const existing = document.head.querySelector('link[rel="canonical"]');
+            if (existing && !existing.hasAttribute('data-universalcms-setting'))
+                saved.push({ node: existing, content: existing.getAttribute('href') });
+            else
+                existing?.remove();
+            if (existing && !existing.hasAttribute('data-universalcms-setting'))
+                existing.href = canonical;
+            else {
+                const node = document.createElement('link');
+                node.rel = 'canonical';
+                node.href = canonical;
+                node.dataset.universalcmsSetting = 'seo';
+                document.head.append(node);
+                created.push(node);
+            }
+        }
+        return () => { if (document.documentElement !== documentRoot.current)
+            return; if (document.title === title)
+            document.title = priorTitle; for (const { node, content } of saved) {
+            const attribute = node.tagName === 'LINK' ? 'href' : 'content';
+            if (content === null)
+                node.removeAttribute(attribute);
+            else
+                node.setAttribute(attribute, content);
+        } for (const node of created)
+            node.remove(); };
+    }, [entry, archive, pageUnavailable, seo, settingsChecked, settings.sections.templates, settings.sections.authors, settings.sections.languages, settings.sections.taxonomies]);
+    return null;
+}
+function prepareAnalytics(descriptor) {
+    const target = window;
+    if (descriptor.provider === 'google') {
+        target.dataLayer ??= [];
+        target.gtag ??= function () { target.dataLayer.push(arguments); };
+        target.gtag('js', new Date());
+        target.gtag('config', descriptor.id, { anonymize_ip: true });
+    }
+    else if (descriptor.provider === 'clarity') {
+        target.clarity ??= Object.assign((...args) => { target.clarity.q.push(args); }, { q: [] });
+    }
+    else if (descriptor.provider === 'matomo') {
+        target._paq ??= [];
+        target._paq.push(['setTrackerUrl', descriptor.tracker], ['setSiteId', descriptor.id], ['trackPageView'], ['enableLinkTracking']);
+    }
+}
+function SafeLink({ url, children, ...props }) {
+    const href = publicHref(url, { mail: true });
+    if (!href)
+        return null;
+    return _jsx("a", { href: href, ...props, rel: /^https?:/i.test(href) ? 'noopener noreferrer' : undefined, children: children });
+}
+export function CmsBranding({ homePath = '/', fallback = null }) {
+    const { settings } = useWebsiteSettings(), branding = sectionData(settings, 'branding'), [failed, setFailed] = useState('');
+    if (!branding)
+        return fallback;
+    const logo = publicHref(branding.logoUrl, { relative: false }), description = text(branding.description, 2000), label = text(branding.logoAlt, 500);
+    if ((!logo || failed === logo) && !description)
+        return fallback;
+    return _jsxs("div", { className: "cms-website-branding", children: [logo && failed !== logo ? _jsxs(SafeLink, { url: homePath, children: [_jsx("img", { src: logo, alt: label || 'Website home', referrerPolicy: "no-referrer", onError: () => setFailed(logo) }), " "] }) : fallback, description && _jsx("p", { children: description })] });
+}
+export function CmsNavigation({ location = 'header', originalLinks = [], excludeUrls = [], onNavigate, className }) {
+    const { settings } = useWebsiteSettings(), links = navigationLinks(settings, location, originalLinks, excludeUrls), navigation = sectionData(settings, 'navigation');
+    const used = new Set([...excludeUrls, ...links.flatMap(item => [item.url, ...(item.children?.map(child => child.url) ?? [])])].map(value => publicHref(value)).filter(Boolean));
+    const groups = location === 'footer' && Array.isArray(navigation?.footerGroups) ? navigation.footerGroups.slice(0, 8).flatMap((value) => {
+        const group = record(value), items = (Array.isArray(group.links) ? group.links : []).slice(0, 20).flatMap((value) => {
+            const row = record(value), url = publicHref(row.url), label = text(row.label, 80);
+            if (!url || !label || used.has(url))
+                return [];
+            used.add(url);
+            return [{ url, label }];
+        });
+        return items.length ? [{ title: text(group.title, 80), links: items }] : [];
+    }) : [];
+    const footerText = location === 'footer' ? text(navigation?.footerText, 1000) : '';
+    if (!links.length && !groups.length && !footerText)
+        return null;
+    return _jsxs("div", { className: `cms-website-navigation cms-website-navigation-${location}${className ? ` ${className}` : ''}`, onClick: event => { if (event.target.closest('a'))
+            onNavigate?.(); }, children: [!!links.length && _jsx("nav", { "aria-label": `CMS ${location} links`, children: _jsx("ul", { children: links.map((item, index) => _jsx("li", { children: item.children?.length ? _jsxs("details", { children: [_jsx("summary", { children: item.label }), _jsxs("ul", { children: [item.url && _jsx("li", { children: _jsx(SafeLink, { url: item.url, children: item.label }) }), item.children.map((child, i) => _jsx("li", { children: _jsx(SafeLink, { url: child.url, children: child.label }) }, `${i}:${child.url}`))] })] }) : item.url && _jsx(SafeLink, { url: item.url, children: item.label }) }, `${index}:${item.label}`)) }) }), !!groups.length && _jsx("div", { className: "cms-website-footer-groups", children: groups.map((value, index) => { const group = record(value); return _jsxs("section", { children: [_jsx("h2", { children: text(group.title, 80) }), _jsx("ul", { children: (Array.isArray(group.links) ? group.links : []).slice(0, 20).map((value, i) => { const item = record(value); return _jsx("li", { children: _jsx(SafeLink, { url: text(item.url), children: text(item.label, 80) }) }, i); }) })] }, index); }) }), footerText && _jsx("p", { children: footerText })] });
+}
+export function CmsSocialLinks() {
+    const { settings } = useWebsiteSettings(), social = sectionData(settings, 'social');
+    if (!social || !Array.isArray(social.profiles) || !social.profiles.length)
+        return null;
+    const alignment = ['left', 'center', 'right'].includes(social.alignment) ? social.alignment : 'left';
+    return _jsx("nav", { className: `cms-website-social cms-website-align-${alignment}`, "aria-label": "Social profiles", children: social.profiles.slice(0, 20).map((value, index) => { const profile = record(value), href = publicHref(profile.url, { mail: String(profile.network).toLowerCase() === 'email' }); return href ? _jsxs(SafeLink, { url: href, children: [publicHref(profile.iconUrl, { relative: false }) && _jsx("img", { src: profile.iconUrl, alt: "", loading: "lazy", referrerPolicy: "no-referrer" }), text(profile.label, 80) || text(profile.network, 40)] }, index) : null; }) });
+}
+export function CmsLanguages() {
+    const { settings, entry } = useWebsiteSettings(), links = languageLinks(settings, entry);
+    if (links.length < 2)
+        return null;
+    return _jsx("nav", { className: "cms-website-languages", "aria-label": "Available page languages", children: links.map(item => _jsx(SafeLink, { url: item.path, hrefLang: item.locale, "aria-current": item.current ? 'page' : undefined, children: item.locale }, item.locale)) });
+}
+export function CmsExperience({ notFound = false }) {
+    const { settings, entry, consent, saveConsent, preferencesOpen, setPreferencesOpen } = useWebsiteSettings(), experience = experienceCopy(settings, entry?.locale), policy = consentPolicy(settings);
+    const [choices, setChoices] = useState({ analytics: false, marketing: false });
+    const panel = useRef(null), restoreFocus = useRef(null);
+    useEffect(() => { if (preferencesOpen) {
+        setChoices({ analytics: consent?.analytics === true, marketing: consent?.marketing === true });
+        restoreFocus.current = document.activeElement;
+        panel.current?.focus();
+    }
+    else {
+        restoreFocus.current?.focus();
+        restoreFocus.current = null;
+    } }, [preferencesOpen]);
+    const label = (name, fallback) => text(experience?.[name], 80) || fallback;
+    const position = ['bottom-left', 'bottom-center', 'bottom-right'].includes(experience?.cookiePosition) ? experience.cookiePosition : 'bottom-center';
+    if (notFound)
+        return _jsxs("main", { className: "cms-website-error", children: [_jsx("h1", { children: text(experience?.notFoundTitle, 500) || 'Page not found' }), _jsx("p", { children: text(experience?.notFoundMessage, 2000) || 'This page is not available.' }), publicHref(record(experience?.notFoundAction).url) && _jsx(SafeLink, { url: experience.notFoundAction.url, children: text(experience.notFoundAction.label, 80) || 'Go back' })] });
+    return _jsxs(_Fragment, { children: [policy && _jsx("button", { className: "cms-website-preferences", type: "button", onClick: () => setPreferencesOpen(true), children: label('cookiePreferencesLabel', 'Cookie preferences') }), policy && (!consent || preferencesOpen) && _jsxs("section", { ref: panel, tabIndex: -1, className: `cms-website-consent cms-website-${position}`, "aria-label": label('cookieTitle', 'Cookie preferences'), onKeyDown: event => { if (event.key === 'Escape' && consent)
+                    setPreferencesOpen(false); }, children: [_jsx("h2", { children: label('cookieTitle', 'Cookie preferences') }), _jsx("p", { children: text(experience?.cookieNotice, 2000) || 'Choose whether to allow optional analytics and marketing cookies.' }), publicHref(experience?.privacyUrl) && _jsx(SafeLink, { url: experience.privacyUrl, children: label('privacyLabel', 'Privacy policy') }), preferencesOpen && _jsxs("fieldset", { children: [_jsx("legend", { children: "Optional cookies" }), _jsxs("label", { children: [_jsx("input", { type: "checkbox", checked: choices.analytics, onChange: event => setChoices(value => ({ ...value, analytics: event.target.checked })) }), "Analytics"] }), _jsxs("label", { children: [_jsx("input", { type: "checkbox", checked: choices.marketing, onChange: event => setChoices(value => ({ ...value, marketing: event.target.checked })) }), "Marketing"] })] }), _jsxs("div", { className: "cms-website-consent-actions", children: [_jsx("button", { type: "button", onClick: () => saveConsent({ analytics: false, marketing: false }), children: label('cookieRejectLabel', 'Reject optional') }), _jsx("button", { type: "button", onClick: () => saveConsent({ analytics: true, marketing: true }), children: label('cookieAcceptLabel', 'Accept optional') }), preferencesOpen ? _jsx("button", { type: "button", onClick: () => saveConsent(choices), children: label('cookieSaveLabel', 'Save preferences') }) : _jsx("button", { type: "button", onClick: () => setPreferencesOpen(true), children: label('cookiePreferencesLabel', 'Preferences') })] })] })] });
+}
+/** Add settings-owned chrome without replacing or walking the native tree. */
+export function CmsWebsite({ children, initialSettings, entry, archive, scope, originalPaths: _originalPaths, applyTemplate = true, chrome = true }) {
+    const content = applyTemplate ? _jsx(NativePresentation, { children: children }) : children;
+    return _jsx(WebsiteProvider, { initialSettings: initialSettings, entry: entry, archive: archive, scope: scope, children: chrome ? _jsx(WebsiteChrome, { children: content }) : content });
+}
+function WebsiteChrome({ children }) {
+    const { settings } = useWebsiteSettings(), branding = sectionData(settings, 'branding');
+    const accent = /^#[0-9a-f]{6}$/i.test(branding?.accentColor ?? '') ? branding.accentColor : undefined;
+    return _jsxs("div", { className: "cms-website", style: accent ? { '--cms-website-accent': accent } : undefined, children: [_jsxs("header", { className: "cms-website-header", children: [_jsx(CmsBranding, {}), _jsx(CmsNavigation, {}), _jsx(CmsLanguages, {})] }), children, _jsxs("footer", { className: "cms-website-footer", children: [_jsx(CmsNavigation, { location: "footer" }), _jsx(CmsSocialLinks, {}), _jsx(CmsExperience, {})] })] });
+}
+function NativePresentation({ children }) {
+    const { settings, entry, related } = useWebsiteSettings(), root = useRef(null);
+    const presentation = pagePresentation(settings, entry), [headings, setHeadings] = useState([]);
+    useEffect(() => {
+        if (!root.current || !entry || !presentation.showTableOfContents) {
+            setHeadings([]);
+            return;
+        }
+        const container = root.current, added = new Map();
+        let serial = 0;
+        const options = { childList: true, subtree: true, characterData: true };
+        // Settings and the native document may finish loading in either order.
+        // Observe only content changes, so assigning IDs does not trigger a loop.
+        const observer = new MutationObserver(() => scan());
+        const scan = () => {
+            observer.disconnect();
+            observer.observe(container, options);
+            const nativeHeadings = new Set(container.querySelectorAll('h2,h3,h4'));
+            for (const slot of container.querySelectorAll('slot'))
+                for (const element of slot.assignedElements({ flatten: true })) {
+                    observer.observe(element, options);
+                    if (element.matches('h2,h3,h4'))
+                        nativeHeadings.add(element);
+                    for (const heading of element.querySelectorAll('h2,h3,h4'))
+                        nativeHeadings.add(heading);
+                }
+            for (const [heading, id] of added)
+                if (!nativeHeadings.has(heading)) {
+                    if (heading.id === id)
+                        heading.removeAttribute('id');
+                    added.delete(heading);
+                }
+            const rows = [...nativeHeadings].slice(0, 100).map(heading => {
+                let id = heading.id;
+                if (!id) {
+                    do {
+                        id = `cms-website-native-${entry.id}-${serial++}`;
+                    } while ([...nativeHeadings].some(other => other.id === id));
+                    heading.id = id;
+                    added.set(heading, id);
+                }
+                return { id, title: heading.textContent ?? '' };
+            });
+            setHeadings(previous => JSON.stringify(previous) === JSON.stringify(rows) ? previous : rows);
+        };
+        scan();
+        container.addEventListener('slotchange', scan);
+        return () => { observer.disconnect(); container.removeEventListener('slotchange', scan); for (const [heading, id] of added)
+            if (heading.id === id)
+                heading.removeAttribute('id'); };
+    }, [entry, presentation.showTableOfContents]);
+    const template = !!entry && !!sectionData(settings, 'templates');
+    return _jsxs("div", { className: template ? `cms-website-native cms-website-layout-${presentation.layout}` : undefined, children: [entry && presentation.showBreadcrumbs && _jsxs("nav", { className: "cms-website-supplement", "aria-label": "Breadcrumbs", children: [_jsx(SafeLink, { url: "/", children: "Home" }), _jsx("span", { "aria-hidden": "true", children: " / " }), _jsx("span", { "aria-current": "page", children: entry.document.title })] }), entry && presentation.showDate && Number.isFinite(Date.parse(entry.publishedAt)) && _jsx("time", { className: "cms-website-supplement", dateTime: entry.publishedAt, children: new Date(entry.publishedAt).toLocaleDateString(entry.locale) }), presentation.showFeaturedImage && presentation.featuredImage.url && _jsx("img", { className: "cms-website-featured", src: presentation.featuredImage.url, alt: presentation.featuredImage.alt, referrerPolicy: "no-referrer" }), !!headings.length && _jsxs("nav", { className: "cms-website-toc cms-website-supplement", "aria-label": "Table of contents", children: [_jsx("h2", { children: "On this page" }), _jsx("ul", { children: headings.map(item => _jsx("li", { children: _jsx(SafeLink, { url: `${typeof window === 'undefined' ? '' : window.location.pathname}#${encodeURIComponent(item.id)}`, children: item.title }) }, item.id)) })] }), _jsx("div", { ref: root, children: children }), presentation.author && _jsxs("aside", { className: "cms-website-author cms-website-supplement", "aria-label": "About the author", children: [presentation.author.avatarUrl && _jsx("img", { src: presentation.author.avatarUrl, alt: "", loading: "lazy", referrerPolicy: "no-referrer" }), _jsxs("div", { children: [_jsx("h2", { children: presentation.author.url ? _jsx(SafeLink, { url: presentation.author.url, children: presentation.author.name }) : presentation.author.name }), _jsx("p", { children: presentation.author.jobTitle }), _jsx("p", { children: presentation.author.bio })] })] }), (presentation.categories.length > 0 || presentation.tags.length > 0) && _jsx("nav", { className: "cms-website-terms cms-website-supplement", "aria-label": "Categories and tags", children: [...presentation.categories, ...presentation.tags].map((term, index) => _jsx(SafeLink, { url: term.path, children: term.name }, `${term.id}:${index}`)) }), entry && presentation.showShare && _jsx(SharePage, { title: entry.document.title, path: entry.path || '/' }), presentation.showRelated && related.length > 0 && _jsxs("aside", { className: "cms-website-related cms-website-supplement", children: [_jsx("h2", { children: "Related content" }), _jsx("div", { className: "cms-website-cards", children: related.slice(0, 6).map((value, index) => { const row = record(value); return publicHref(row.path)?.startsWith('/') ? _jsxs("article", { children: [_jsx("h3", { children: _jsx(SafeLink, { url: row.path, children: text(row.title, 200) }) }), _jsx("p", { children: text(row.excerpt, 500) })] }, index) : null; }) })] })] });
+}
+function archiveMetadata(value) {
+    const row = record(value), path = publicHref(row.path);
+    if (!['category', 'tag'].includes(row.kind) || !path?.startsWith('/') || /[?#]/.test(path) ||
+        typeof row.title !== 'string' || !row.title.trim() || row.title.length > 200 ||
+        typeof row.description !== 'string' || row.description.length > 1000)
+        throw Error('Archive metadata unavailable');
+    return { kind: row.kind, path, title: row.title, description: row.description };
+}
+function validatedPage(value) {
+    const result = record(value);
+    if (result.state === 'archive' && ['category', 'tag'].includes(result.kind) && publicHref(result.path)?.startsWith('/') && Array.isArray(result.entries) && result.entries.length <= 1000) {
+        return { state: 'archive', ...archiveMetadata(result), entries: result.entries.map((value) => publicEntry(value)) };
+    }
+    if (result.state !== 'published')
+        throw Error('Published page unavailable');
+    const entry = publicEntry(result.entry), revision = `${entry.id}:${entry.version}${entry.revisionId ? `:${entry.revisionId}` : ''}`;
+    if (result.revision !== undefined && result.revision !== revision)
+        throw Error('Published page unavailable');
+    return { ...result, entry };
+}
+function publicEntry(value) {
+    const raw = record(value), entry = validateEntry(value, { kind: text(raw.kind, 40), slug: text(raw.slug, 160), locale: text(raw.locale, 35) });
+    // Extras are already projected by the private runtime. Each presentation helper
+    // independently validates its URLs and only consumes a ready selected section.
+    return { ...entry, ...Object.fromEntries(['path', 'seo', 'author', 'categories', 'tags', 'translations', 'canonicalUrl', 'publishedAt'].map(name => [name, raw[name]])) };
+}
+export function CmsWebsitePage({ scope, pathname, initialEntry, initialResult, initialSettings, chrome = true }) {
+    const path = pathname ?? (typeof window === 'undefined' ? '/' : window.location.pathname);
+    return _jsx(WebsitePageLoader, { scope: scope, pathname: path, initialEntry: initialEntry, initialResult: initialResult, initialSettings: initialSettings, chrome: chrome }, `${scope}:${path}`);
+}
+function WebsitePageLoader({ scope, pathname, initialEntry, initialResult, initialSettings, chrome }) {
+    const [page, setPage] = useState(() => { try {
+        return initialResult ? validatedPage(initialResult) : initialEntry ? validatedPage({ state: 'published', entry: initialEntry }) : null;
+    }
+    catch {
+        return null;
+    } });
+    const [failure, setFailure] = useState(null), generation = useRef(0);
+    useEffect(() => {
+        const documentRoot = document.documentElement;
+        let controller, disposed = false;
+        const active = () => !disposed && document.documentElement === documentRoot;
+        const refresh = () => {
+            if (!active())
+                return;
+            const current = ++generation.current;
+            controller?.abort();
+            const request = new AbortController();
+            controller = request;
+            const timer = window.setTimeout(() => request.abort(), 10000);
+            void (async () => {
+                try {
+                    const response = await fetch(`/api/universalcms/page?path=${encodeURIComponent(pathname)}`, { headers: { Accept: 'application/json' }, credentials: 'omit', cache: 'no-store', redirect: 'error', referrerPolicy: 'no-referrer', signal: request.signal });
+                    if (response.status === 404)
+                        throw 404;
+                    const next = validatedPage(await readWebsiteJson(response, request.signal));
+                    if (next.path && next.path !== pathname)
+                        throw 503;
+                    if (active() && current === generation.current) {
+                        setPage(next);
+                        setFailure(null);
+                    }
+                }
+                catch (error) {
+                    if (active() && current === generation.current) {
+                        setPage(null);
+                        setFailure(error === 404 ? 404 : 503);
+                    }
+                }
+                finally {
+                    window.clearTimeout(timer);
+                }
+            })();
+        };
+        const visible = () => { if (document.visibilityState === 'visible')
+            refresh(); };
+        refresh();
+        const interval = window.setInterval(refresh, 15000);
+        window.addEventListener('focus', refresh);
+        document.addEventListener('visibilitychange', visible);
+        return () => { disposed = true; generation.current++; controller?.abort(); window.clearInterval(interval); window.removeEventListener('focus', refresh); document.removeEventListener('visibilitychange', visible); };
+    }, [pathname]);
+    const entry = page?.state === 'published' ? page.entry : undefined;
+    const archive = useMemo(() => page?.state === 'archive' ? archiveMetadata(page) : undefined, [page]);
+    return _jsx(PageAvailabilityContext.Provider, { value: failure ? 'unavailable' : page ? 'ready' : 'loading', children: _jsx(CmsWebsite, { scope: scope, entry: entry, archive: archive, initialSettings: initialSettings, applyTemplate: false, chrome: chrome, children: failure === 404 ? _jsx(CmsExperience, { notFound: true }) : failure ? _jsxs("main", { className: "cms-website-error", role: "alert", children: [_jsx("h1", { children: "Page temporarily unavailable" }), _jsx("p", { children: "Please try again later." })] }) : !page ? _jsx("main", { className: "cms-website-error", role: "status", "aria-busy": "true", children: "Loading published content\u2026" }) : page.state === 'archive' ? _jsx(ArchivePage, { page: page }) : entry && _jsx(PublishedPage, { entry: entry, pathname: pathname, related: page.related }) }) });
+}
+function ArchivePage({ page }) {
+    const { settings } = useWebsiteSettings();
+    if (!sectionData(settings, 'taxonomies'))
+        return _jsx(CmsExperience, { notFound: true });
+    return _jsxs("main", { className: "cms-website-page", children: [_jsx("h1", { children: text(page.title, 200) }), _jsx("p", { children: text(page.description, 1000) }), _jsx("div", { className: "cms-website-cards", children: page.entries.map((entry) => _jsxs("article", { children: [_jsx("h2", { children: _jsx(SafeLink, { url: entry.path, children: entry.document.title }) }), _jsx("p", { children: entry.document.excerpt })] }, entry.id)) })] });
+}
+function PublishedPage({ entry, pathname, related }) {
+    const { settings } = useWebsiteSettings(), presentation = pagePresentation(settings, entry), content = useRef(null);
+    const [headings, setHeadings] = useState([]);
+    useEffect(() => {
+        const root = content.current;
+        if (!root || !presentation.showTableOfContents) {
+            setHeadings([]);
+            return;
+        }
+        const added = [], rows = [];
+        root.querySelectorAll('h2,h3,h4').forEach((heading, index) => { let id = heading.id; if (!id) {
+            id = `cms-website-heading-${entry.id}-${index}`;
+            heading.id = id;
+            added.push(heading);
+        } rows.push({ id, title: heading.textContent ?? '' }); });
+        setHeadings(rows);
+        return () => { for (const heading of added)
+            heading.removeAttribute('id'); };
+    }, [entry, presentation.showTableOfContents]);
+    const route = useMemo(() => ({ identity: { kind: entry.kind, slug: entry.slug, locale: entry.locale }, baseline: entry.document, bindings: {} }), [entry]);
+    const publishedDate = Number.isFinite(Date.parse(entry.publishedAt)) ? new Date(entry.publishedAt).toLocaleDateString(entry.locale) : '';
+    return _jsxs("main", { className: `cms-website-page cms-website-layout-${presentation.layout}`, children: [presentation.showBreadcrumbs && _jsxs("nav", { "aria-label": "Breadcrumbs", children: [_jsx(SafeLink, { url: "/", children: "Home" }), _jsx("span", { "aria-hidden": "true", children: " / " }), _jsx("span", { "aria-current": "page", children: entry.document.title })] }), _jsx("h1", { children: entry.document.title }), entry.document.excerpt && _jsx("p", { className: "cms-website-excerpt", children: entry.document.excerpt }), presentation.showDate && publishedDate && _jsx("time", { dateTime: entry.publishedAt, children: publishedDate }), presentation.showFeaturedImage && presentation.featuredImage.url && _jsx("img", { className: "cms-website-featured", src: presentation.featuredImage.url, alt: presentation.featuredImage.alt, referrerPolicy: "no-referrer" }), !!headings.length && _jsxs("nav", { className: "cms-website-toc", "aria-label": "Table of contents", children: [_jsx("h2", { children: "On this page" }), _jsx("ul", { children: headings.map(item => _jsx("li", { children: _jsx(SafeLink, { url: `${pathname}#${encodeURIComponent(item.id)}`, children: item.title }) }, item.id)) })] }), _jsx("div", { ref: content, children: _jsx(PublishedDocumentProvider, { initialEntry: entry, pathname: pathname, route: route, children: _jsx(CmsPublishedDocument, {}) }) }), presentation.author && _jsxs("aside", { className: "cms-website-author", "aria-label": "About the author", children: [presentation.author.avatarUrl && _jsx("img", { src: presentation.author.avatarUrl, alt: "", loading: "lazy", referrerPolicy: "no-referrer" }), _jsxs("div", { children: [_jsx("h2", { children: presentation.author.url ? _jsx(SafeLink, { url: presentation.author.url, children: presentation.author.name }) : presentation.author.name }), _jsx("p", { children: presentation.author.jobTitle }), _jsx("p", { children: presentation.author.bio })] })] }), (presentation.categories.length > 0 || presentation.tags.length > 0) && _jsx("nav", { className: "cms-website-terms", "aria-label": "Categories and tags", children: [...presentation.categories, ...presentation.tags].map((term, index) => _jsx(SafeLink, { url: term.path, children: term.name }, `${term.id}:${index}`)) }), presentation.showShare && _jsx(SharePage, { title: entry.document.title, path: entry.path || pathname }), presentation.showRelated && Array.isArray(related) && related.length > 0 && _jsxs("aside", { className: "cms-website-related", children: [_jsx("h2", { children: "Related content" }), _jsx("div", { className: "cms-website-cards", children: related.slice(0, 6).map((value, index) => { const row = record(value); return publicHref(row.path)?.startsWith('/') ? _jsxs("article", { children: [_jsx("h3", { children: _jsx(SafeLink, { url: row.path, children: text(row.title, 200) }) }), _jsx("p", { children: text(row.excerpt, 500) })] }, index) : null; }) })] })] });
+}
+function SharePage({ title, path }) {
+    const [status, setStatus] = useState('');
+    const share = async () => {
+        const safe = publicHref(path);
+        if (!safe || !safe.startsWith('/'))
+            return;
+        const url = new URL(safe, window.location.origin).href;
+        try {
+            if (navigator.share)
+                await navigator.share({ title, url });
+            else {
+                await navigator.clipboard.writeText(url);
+                setStatus('Link copied');
+            }
+        }
+        catch {
+            setStatus('Sharing was canceled or unavailable.');
+        }
+    };
+    return _jsxs("div", { className: "cms-website-share", children: [_jsx("button", { type: "button", onClick: () => { void share(); }, children: "Share page" }), _jsx("span", { role: "status", children: status })] });
+}