@voltro/cms 0.86.0 → 0.88.0

package/dist/snapshotPresentation.js

@@ -0,0 +1,85 @@
+import { consentDecisionComplete as e, grantedPurposes as t } from "./consent.js";
+import { Schema as n } from "effect";
+// src/snapshotPresentation.ts
+var r = class extends n.TaggedError()("SnapshotPresentationUnavailable", { reason: n.Literals([
+	"policy",
+	"selection",
+	"bounds"
+]) }) {}, i = (e) => {
+	throw new r({ reason: e });
+}, a = (e) => typeof e == "object" && !!e && !Array.isArray(e), o = (e) => typeof e == "string" && e.length > 0 && e.length <= 128 && !/[\x00-\x1f\x7f]/.test(e), s = (e, t) => {
+	if (!a(e) || Object.keys(e).sort().join(",") !== "id,version" || !o(e.id) || !Number.isSafeInteger(e.version) || Number(e.version) < 1) return i(t);
+	try {
+		encodeURIComponent(e.id);
+	} catch {
+		return i(t);
+	}
+	return {
+		id: e.id,
+		version: Number(e.version)
+	};
+}, c = (e) => {
+	if (!Array.isArray(e) || e.length > 32) return i("policy");
+	let t = e.map((e) => s(e, "policy"));
+	return new Set(t.map((e) => e.id)).size === t.length ? t.sort((e, t) => e.id < t.id ? -1 : +(e.id > t.id)) : i("policy");
+}, l = (e) => {
+	if (e === void 0) return {
+		version: 1,
+		decided: !1,
+		granted: []
+	};
+	if (!a(e) || Object.keys(e).sort().join(",") !== "decided,granted,version" || e.version !== 1 || typeof e.decided != "boolean" || !Array.isArray(e.granted) || e.granted.length > 32) return i("selection");
+	let t = e.granted.map((e) => s(e, "selection")).sort((e, t) => e.id < t.id ? -1 : +(e.id > t.id));
+	return new Set(t.map((e) => e.id)).size === t.length ? {
+		version: 1,
+		decided: e.decided,
+		granted: t
+	} : i("selection");
+}, u = (e, t) => {
+	let n = c(e), r = l(t);
+	return n.length === 0 && r.decided || n.length > 0 && !r.decided && r.granted.length === n.length || r.granted.some((e) => !n.some((t) => t.id === e.id && t.version === e.version)) ? i("selection") : r;
+}, d = (n, r) => {
+	let o = c(n);
+	if (r === void 0 || o.length === 0) return u(o, void 0);
+	if (!a(r)) return i("selection");
+	let s = Object.fromEntries(Object.entries(r)), l = t(o, s);
+	return {
+		version: 1,
+		decided: e(o, s),
+		granted: o.filter((e) => l.has(e.id))
+	};
+}, f = (e, t) => {
+	let n = "1." + encodeURIComponent(JSON.stringify(u(e, t)));
+	return n.length > 32768 ? i("bounds") : n;
+}, p = (e, t) => {
+	if (typeof t != "string" || t.length > 32768 || !t.startsWith("1.")) return i("selection");
+	let n;
+	try {
+		n = JSON.parse(decodeURIComponent(t.slice(2)));
+	} catch {
+		return i("selection");
+	}
+	let r = u(e, n);
+	return f(e, r) === t ? r : i("selection");
+}, m = (e, t = 65) => {
+	let n = c(e);
+	if (!Number.isSafeInteger(t) || t < 1 || t > 257) return i("bounds");
+	let r = u(n, void 0);
+	if (n.length === 0) return [r];
+	let a = 2 ** n.length;
+	if (2 * a - 1 > t) return i("bounds");
+	let o = Array.from({ length: a }, (e, t) => ({
+		version: 1,
+		decided: !0,
+		granted: n.filter((e, n) => !!(t & 1 << n))
+	}));
+	return [
+		r,
+		...o,
+		...o.slice(1, -1).map((e) => ({
+			...e,
+			decided: !1
+		}))
+	];
+};
+export { r as SnapshotPresentationUnavailable, u as admitSnapshotPresentation, c as copySnapshotConsentPurposes, l as copySnapshotPresentationValue, p as decodeSnapshotPresentation, f as encodeSnapshotPresentation, d as snapshotPresentationFromChoices, m as snapshotPresentations };

package/dist/snapshotPresentationPolicy.js

@@ -0,0 +1,11 @@
+import { readVerifiedSnapshotResource as e } from "./buildSnapshot.js";
+import { SnapshotPresentationUnavailable as t, copySnapshotConsentPurposes as n } from "./snapshotPresentation.js";
+import { createHash as r } from "node:crypto";
+import { canonicalJson as i } from "@voltro/runtime";
+// src/snapshotPresentationPolicy.ts
+var a = async (a, o, s, c) => {
+	let l = await e(a, o, s, "policies", "configuration"), u = (await e(a, o, s, "policies", "registry")).value, d = l.value, f = r("sha256").update(i(l)).digest("hex");
+	if (s.manifest.parts.find((e) => e.part === "policies")?.format !== "voltro.cms.public-access/v2" || Object.keys(d).sort().join(",") !== "app,consentPurposes,version" || d.version !== 2 || u.version !== 2 || u.consentDigest !== f || i(d.app) !== i(c) || i(u.app) !== i(c)) throw new t({ reason: "policy" });
+	return n(d.consentPurposes);
+};
+export { a as readCapturedSnapshotConsentPurposes };

package/dist/snapshotProjection.js

@@ -0,0 +1,118 @@
+import { defineContentLocations as e } from "./contentLocations.js";
+import { copySnapshotResource as t } from "./buildSnapshot.js";
+import { copySnapshotAppCodePin as n, snapshotContentTypeDefinition as r } from "./snapshotDefinitions.js";
+import { defineContentProjection as i } from "./contentProjection.js";
+import { Schema as a } from "effect";
+import { createHash as o } from "node:crypto";
+import { canonicalJson as s } from "@voltro/runtime";
+// src/snapshotProjection.ts
+var c = class extends a.TaggedError()("SnapshotProjectionUnavailable", { reason: a.Literals([
+	"definition",
+	"scope",
+	"binding",
+	"unconfigured",
+	"publication"
+]) }) {}, l = (e) => {
+	throw new c({ reason: e });
+}, u = (e) => o("sha256").update(s(e)).digest("hex"), d = (n, r) => {
+	if (n === void 0) return {};
+	let i;
+	try {
+		i = t({
+			key: "trees",
+			value: n
+		}).value;
+	} catch {
+		return l("definition");
+	}
+	let a = Object.entries(i);
+	return a.length > 16 ? l("definition") : Object.fromEntries(a.sort(([e], [t]) => e < t ? -1 : +(e > t)).map(([t, n]) => {
+		if (!/^[A-Za-z][A-Za-z0-9_-]{0,63}$/.test(t) || typeof n != "object" || !n || Array.isArray(n)) return l("definition");
+		let i = n;
+		if (Object.keys(i).some((e) => ![
+			"contentType",
+			"mappingId",
+			"fields",
+			"includeField"
+		].includes(e))) return l("definition");
+		let a = r.find((e) => e.name === i.contentType);
+		if (a?.tree === void 0 || typeof i.mappingId != "string" || !e(a.locations ?? []).some((e) => e.id === i.mappingId) || !Array.isArray(i.fields) || i.fields.length === 0 || i.fields.length > 64 || new Set(i.fields).size !== i.fields.length) return l("definition");
+		let o = [];
+		for (let e of i.fields) {
+			if (typeof e != "string" || !Object.hasOwn(a.fields, e) || ![
+				"string",
+				"number",
+				"boolean",
+				"date",
+				"datetime",
+				"literal"
+			].includes(a.fields[e].kind)) return l("definition");
+			o.push(e);
+		}
+		let s = i.includeField;
+		return s !== void 0 && (typeof s != "string" || !Object.hasOwn(a.fields, s) || a.fields[s].kind !== "boolean") ? l("definition") : [t, {
+			contentType: a.name,
+			mappingId: i.mappingId,
+			fields: o.sort(),
+			...s === void 0 ? {} : { includeField: s }
+		}];
+	}));
+}, f = (e, t) => e === void 0 ? [] : !Array.isArray(e) || e.length > 64 || e.some((e) => typeof e != "string" || !t.includes(e)) || new Set(e).size !== e.length ? l("definition") : [...e].sort(), p = (e, n) => {
+	if (e === void 0) return {};
+	let r;
+	try {
+		r = t({
+			key: "referenceRoutes",
+			value: e
+		}).value;
+	} catch {
+		return l("definition");
+	}
+	let i = Object.entries(r);
+	return i.length > 64 || i.some(([e, t]) => !n.includes(e) || typeof t != "string" || !/^[A-Za-z][A-Za-z0-9_.-]{0,63}$/.test(t)) ? l("definition") : Object.fromEntries(i.sort(([e], [t]) => e < t ? -1 : +(e > t)));
+}, m = (a, o, s) => {
+	let c = n(o);
+	if (!/^[A-Za-z][A-Za-z0-9_-]{0,63}$/.test(s.id) || a.length === 0 || new Set(a.map((e) => e.name)).size !== a.length) return l("definition");
+	let m = t({
+		key: "definitions",
+		value: s.definitions
+	}).value;
+	if (Object.keys(m).length !== a.length || Object.keys(m).some((e) => !a.some((t) => t.name === e))) return l("definition");
+	let h = [...a].sort((e, t) => e.name < t.name ? -1 : +(e.name > t.name)).map((e) => {
+		let n = m[e.name], a = n === null ? null : i(n);
+		return a !== null && Object.keys(a.fields).some((t) => !Object.hasOwn(e.fields, t)) ? l("definition") : t({
+			key: `type:${e.name}`,
+			value: {
+				version: 1,
+				app: c,
+				contentType: e.name,
+				definition: a,
+				schemaDigest: u(r(e, c).value)
+			}
+		});
+	}), g = f(s.referenceTypes, a.map((e) => e.name));
+	if (g.some((e) => !Object.hasOwn(m, e) || m[e] === null)) return l("definition");
+	let _ = p(s.referenceRoutes, a.map((e) => e.name)), v = d(s.trees, a);
+	for (let [t, n] of Object.entries(_)) if (!e(a.find((e) => e.name === t).locations ?? []).some((e) => e.id === n)) return l("definition");
+	let y = t({
+		key: "registry",
+		value: {
+			version: 1,
+			app: c,
+			id: s.id,
+			...g.length === 0 ? {} : { referenceTypes: g },
+			...Object.keys(_).length === 0 ? {} : { referenceRoutes: _ },
+			...Object.keys(v).length === 0 ? {} : { trees: v },
+			definitionDigest: u(h),
+			types: h.map((e) => e.value.contentType)
+		}
+	});
+	return {
+		format: "voltro.cms.field-projection/v1",
+		entries: function* () {
+			yield t(y);
+			for (let e of h) yield t(e);
+		}
+	};
+};
+export { c as SnapshotProjectionUnavailable, p as copySnapshotReferenceRoutes, f as copySnapshotReferenceTypes, d as copySnapshotTrees, m as snapshotProjectionSource };

package/dist/snapshotPublicAccess.js

@@ -0,0 +1,160 @@
+import { compileSiteDelivery as e } from "./siteDelivery.js";
+import { readCapturedDocument as t, verifyPublicationState as n } from "./publicationState.js";
+import { copySnapshotResource as r, readVerifiedSnapshotResource as i, verifyBuildSnapshot as a } from "./buildSnapshot.js";
+import { copySnapshotAppCodePin as o, snapshotContentTypeDefinition as s } from "./snapshotDefinitions.js";
+import { copySnapshotConsentPurposes as c } from "./snapshotPresentation.js";
+import { Schema as l } from "effect";
+import { createHash as u } from "node:crypto";
+import { canonicalJson as d } from "@voltro/runtime";
+// src/snapshotPublicAccess.ts
+var f = class extends l.TaggedError()("SnapshotPublicAccessUnavailable", { reason: l.Literals([
+	"definition",
+	"binding",
+	"scope",
+	"publication",
+	"bounds"
+]) }) {}, p = (e) => {
+	throw new f({ reason: e });
+}, m = (e) => u("sha256").update(d(e)).digest("hex"), h = (e) => typeof e == "object" && !!e && !Array.isArray(e), g = (e) => typeof e == "string" && e.length > 0 && e.length <= 256 && !/[\x00-\x1f\x7f]/.test(e), _ = (e) => h(e) ? e.kind === "public" || e.kind === "deny" ? Object.keys(e).length === 1 ? { kind: e.kind } : p("definition") : e.kind !== "field" || Object.keys(e).length !== 4 || !g(e.field) || !Array.isArray(e.values) || e.values.length === 0 || e.values.length > 64 || !e.values.every(g) || new Set(e.values).size !== e.values.length || e.missing !== "public" && e.missing !== "deny" ? p("definition") : {
+	kind: "field",
+	field: e.field,
+	values: [...e.values].sort(),
+	missing: e.missing
+} : p("definition"), v = (e, t) => {
+	if (e.kind !== "field") return;
+	let n = Object.hasOwn(t, e.field) ? t[e.field] : void 0;
+	if (!h(n) || !["string", "literal"].includes(String(n.kind))) return p("definition");
+	let r = n.literals;
+	if (n.kind === "literal" && (!Array.isArray(r) || e.values.some((e) => !r.includes(e)))) return p("definition");
+}, y = (e, t, n, i = []) => {
+	let a = o(t), l = r({
+		key: "configuration",
+		value: {
+			version: 2,
+			app: a,
+			consentPurposes: c(i)
+		}
+	}), u = r({
+		key: "definitions",
+		value: n
+	}).value;
+	if (e.length === 0 || new Set(e.map((e) => e.name)).size !== e.length || Object.keys(u).length !== e.length || Object.keys(u).some((t) => !e.some((e) => e.name === t))) return p("definition");
+	let d = [...e].sort((e, t) => e.name < t.name ? -1 : +(e.name > t.name)).map((e) => {
+		let t = _(u[e.name]);
+		return v(t, e.fields), r({
+			key: `type:${e.name}`,
+			value: {
+				version: 1,
+				app: a,
+				contentType: e.name,
+				decision: t,
+				schemaDigest: m(s(e, a).value)
+			}
+		});
+	}), f = r({
+		key: "registry",
+		value: {
+			version: 2,
+			app: a,
+			types: d.map((e) => e.value.contentType),
+			consentDigest: m(l),
+			definitionDigest: m([...d, l])
+		}
+	});
+	return {
+		format: "voltro.cms.public-access/v2",
+		entries: function* () {
+			yield r(f), yield r(l);
+			for (let e of d) yield r(e);
+		}
+	};
+}, b = async (e, t, n, r, i, a, o = Date.now()) => x(e, t, n, r, { profile: i }, a, o), x = async (e, t, r, i, o, s, c) => {
+	if (![
+		i,
+		"profile" in o ? o.profile : o.exact,
+		s
+	].every(g)) return p("scope");
+	let l = await a(e, t, r, c);
+	return w(e, t, l, await n(e, t, l.manifest.publication, c), i, o, s, c);
+}, S = async (e, t, n, r, i, a, o, s) => w(e, t, n, r, i, { profile: a }, o, s), C = async (e, t, n, r, i, a, o, s) => w(e, t, n, r, i, { exact: a }, o, s), w = async (n, r, a, o, s, c, l, u) => {
+	if (![
+		s,
+		"profile" in c ? c.profile : c.exact,
+		l
+	].every(g)) return p("scope");
+	for (let [e, t] of [
+		["policies", "voltro.cms.public-access/v2"],
+		["schema", "voltro.cms.schema/v1"],
+		["site", "voltro.cms.site/v3"],
+		["locales", "voltro.cms.locales/v1"]
+	]) if (a.manifest.parts.find((t) => t.part === e)?.format !== t) return p("binding");
+	if (!o.types.includes(s)) return p("scope");
+	let f = (await i(n, r, a, "policies", `type:${s}`)).value, y = (await i(n, r, a, "schema", `type:${s}`)).value, b = (await i(n, r, a, "site", "configuration")).value, x = (await i(n, r, a, "locales", "policy")).value;
+	if (f.version !== 1 || y.version !== 1 || b.version !== 3 || x.version !== 1 || f.contentType !== s || f.schemaDigest !== m(y) || [
+		f,
+		b,
+		x
+	].some((e) => d(e.app) !== d(y.app)) || [b, x].some((e) => e.tenantId !== r.tenantId || e.site !== r.site || e.environment !== r.environment) || !h(b.definition) || !h(x.definition) || x.resolution !== "per-node") return p("binding");
+	let S = e({
+		...b.definition,
+		...x.definition
+	}), C = {
+		contentLocales: S.contentLocales,
+		defaultLocale: S.defaultLocale,
+		sourceLocale: S.sourceLocale,
+		fallback: S.fallback,
+		prefixes: S.prefixes,
+		tags: S.tags,
+		directions: S.directions
+	};
+	if (S.definition.id !== r.site || !S.definition.environments.includes(r.environment) || [b, x].some((e) => e.definitionDigest !== m(S.definition)) || d(x.compiled) !== d(C) || o.locales.length !== S.contentLocales.length || o.locales.some((e) => !S.contentLocales.includes(e))) return p("binding");
+	let w = "profile" in c ? S.definition.locales.find((e) => e.id === c.profile && e.enabled)?.contentLocale : S.contentLocales.includes(c.exact) ? c.exact : void 0;
+	if (w === void 0) return p("scope");
+	let T = y.definition;
+	if (!h(T) || T.name !== s || !h(T.fields)) return p("binding");
+	let E = _(f.decision);
+	if (v(E, T.fields), E.kind === "deny") return null;
+	let D = T.tree, O;
+	if (D !== void 0) {
+		if (!h(D) || !g(D.parent)) return p("binding");
+		O = D.parent;
+		let e = T.fields[O];
+		if (!h(e) || e.kind !== "reference" || e.referenceType !== s) return p("binding");
+	}
+	let k = [], A = /* @__PURE__ */ new Set(), j = [w, ..."profile" in c ? S.fallback[w] : []], M = l;
+	for (;;) {
+		if (A.has(M)) return null;
+		if (A.size >= 128) return p("bounds");
+		A.add(M);
+		let e = null;
+		for (let i of j) if (e = await t(n, r, a.manifest.publication.id, s, i, M, u), e !== null) break;
+		if (e === null) return null;
+		if (e.status !== "published" || e.documentId !== M || ![
+			e.id,
+			e.revisionId,
+			e.locale
+		].every(g) || !Number.isSafeInteger(e.revision) || Number(e.revision) < 1) return p("publication");
+		if (E.kind === "field") {
+			let t = e[E.field];
+			if (t == null) {
+				if (E.missing !== "public") return null;
+			} else if (typeof t != "string" || !E.values.includes(t)) return null;
+		}
+		k.push({
+			documentId: M,
+			variantId: String(e.id),
+			revisionId: String(e.revisionId),
+			revision: Number(e.revision),
+			locale: String(e.locale)
+		});
+		let i = O === void 0 ? void 0 : e[O];
+		if (i == null || i === "") return {
+			contentType: s,
+			requestedLocale: w,
+			chain: k
+		};
+		if (!g(i)) return p("publication");
+		M = i;
+	}
+};
+export { f as SnapshotPublicAccessUnavailable, b as admitSnapshotPublicDocument, S as admitVerifiedSnapshotPublicDocument, C as admitVerifiedSnapshotPublicDocumentLocale, y as snapshotPublicAccessSource };

package/dist/snapshotPublicRouteHistory.js

@@ -0,0 +1,39 @@
+import { publicRouteRegistryFail as e } from "./publicRouteRegistry.js";
+import { copySnapshotResource as t } from "./buildSnapshot.js";
+import { compileCmsPublicRouteDeclaration as n } from "./initializePublicRoutes.js";
+import { readPublicRouteHistoryView as r } from "./publicRouteHistoryView.js";
+import { canonicalJson as i } from "@voltro/runtime";
+// src/snapshotPublicRouteHistory.ts
+var a = (a, o, s) => {
+	let c = n(s);
+	return {
+		format: "voltro.cms.source-route-history/v1",
+		entries: async function* () {
+			let n = await r(a, o);
+			if (i(n.namespace.binding.definition) !== i(c)) return e("configuration");
+			yield t({
+				key: "configuration",
+				value: {
+					version: 1,
+					...n.namespace.scope,
+					kind: "source-configuration",
+					coverage: "declared-content-source",
+					nativeInventory: "not-enumerated",
+					binding: n.namespace.binding,
+					currentNamespaceDigest: n.namespace.sourceDigest,
+					...n.history
+				}
+			});
+			for await (let e of n.entries()) yield t({
+				key: "url:" + e.urlKey,
+				value: {
+					version: 1,
+					...n.namespace.scope,
+					kind: "source-observed",
+					...e
+				}
+			});
+		}
+	};
+};
+export { a as snapshotPublicRouteHistorySource };

package/dist/snapshotReadAdmission.js

@@ -0,0 +1,37 @@
+import { verifyBuildSnapshot as e } from "./buildSnapshot.js";
+import { Schema as t } from "effect";
+// src/snapshotReadAdmission.ts
+var n = class extends t.TaggedError()("SnapshotReadAdmissionUnavailable", { reason: t.Literals(["binding"]) }) {}, r = async (t, r, i, a) => {
+	let o = await e(t, r, i, a);
+	for (let [e, t] of Object.entries({
+		policies: "voltro.cms.public-access/v2",
+		projection: "voltro.cms.field-projection/v1",
+		routes: "voltro.cms.content-routes/v4",
+		domains: "voltro.cms.domains/v1",
+		schema: "voltro.cms.schema/v1",
+		components: "voltro.cms.components/v1",
+		assets: "voltro.cms.media-custody/v2",
+		site: "voltro.cms.site/v3",
+		locales: "voltro.cms.locales/v1",
+		seo: "voltro.cms.seo-metadata/v1"
+	})) if (o.manifest.parts.find((t) => t.part === e)?.format !== t) throw new n({ reason: "binding" });
+	return o;
+}, i = async (e, t, n, i, a) => {
+	let o = await r(e, t, n, a);
+	return {
+		snapshot: o,
+		binding: {
+			tenantId: t.tenantId,
+			site: t.site,
+			environment: t.environment,
+			consumerId: i.consumerId,
+			buildId: i.buildId,
+			snapshotId: o.id,
+			snapshotDigest: o.digest,
+			releaseId: o.manifest.publication.releaseId,
+			policyDigest: o.manifest.parts.find((e) => e.part === "policies").digest,
+			projectionDigest: o.manifest.parts.find((e) => e.part === "projection").digest
+		}
+	};
+};
+export { n as SnapshotReadAdmissionUnavailable, r as readAdmittedBuildSnapshot, i as resolveSnapshotReadBinding };

package/dist/snapshotRedirectOutput.js

@@ -0,0 +1,150 @@
+import { lockSiteState as e } from "./siteState.js";
+import { routeDispositionFail as t } from "./routeDispositions.js";
+import { lockOutputRouteHistoryCapture as n } from "./outputActivationStore.js";
+import { copySnapshotSeoDocumentsSelection as r } from "./snapshotSeoPathSets.js";
+import { readSnapshotSeoDocuments as i, snapshotOutputSafetyBinding as a } from "./snapshotSeoDocuments.js";
+import { copyOutputSafetySelection as o, readVerifiedOutputSafetyArtifact as s } from "./outputSafetyArtifact.js";
+import { readSnapshotRouteDispositionPlan as c } from "./snapshotRouteDispositionPlan.js";
+import { copySnapshotRedirectTargets as l } from "./snapshotRedirectTargets.js";
+import { createHash as u } from "node:crypto";
+import { canonicalJson as d } from "@voltro/runtime";
+// src/snapshotRedirectOutput.ts
+var f = (u, d, f, p, m) => {
+	let h = {
+		tenantId: d.tenantId,
+		site: d.site,
+		environment: d.environment
+	}, g = {
+		snapshot: {
+			id: f.id,
+			digest: f.digest
+		},
+		token: p.token,
+		consumerId: p.consumerId,
+		buildId: p.buildId,
+		host: p.host
+	}, _ = r(p.documents), v = o(p.safety), y = l(p.targets, g.host), b = m.keys.map((e) => ({
+		id: e.id,
+		material: new Uint8Array(e.material)
+	})), x = typeof m.declaration == "function" ? m.declaration.bind(m) : m.declaration, S = { ...m.use }, C = m.now ?? Date.now;
+	if (!Number.isSafeInteger(m.maxBytes) || m.maxBytes < 1) return t("bounds");
+	let w = Math.min(m.maxBytes, 67108864);
+	return {
+		read: async () => {
+			let r, o, l, d = await s(u, h, v.artifactId, {
+				provider: m.provider,
+				maxBytes: w,
+				admit: async (s) => {
+					let u = await n(s, h);
+					await e(s, h);
+					let d = await i(s, h, g, _, {
+						provider: m.provider,
+						use: S,
+						keys: b,
+						now: C
+					}), f = [d];
+					for (let e of y) f.push(await i(s, h, {
+						...g,
+						host: e.host
+					}, e.documents, {
+						provider: m.provider,
+						use: S,
+						keys: b,
+						now: C
+					}));
+					let p = f.flatMap((e) => e.paths.entries), v = f.flatMap((e) => e.paths.contexts);
+					if (o = f.flatMap((e) => e.inventory.records), p.length > 1e5 || o.length > 1e5) return t("bounds");
+					l = f.map((e) => ({
+						host: e.paths.admission.admission.input.host,
+						artifactId: e.paths.selection.artifactId,
+						pathSetIds: e.inventory.pathSetIds
+					})).sort((e, t) => e.host < t.host ? -1 : +(e.host > t.host));
+					let w = d.paths.admission.app, T = typeof x == "function" ? x({
+						inputsId: w.inputsId,
+						executionId: w.executionId,
+						code: { ...w.app },
+						routeDiscovery: structuredClone(w.routes.value)
+					}) : x;
+					return r = await c(s, h, {
+						admission: d.paths.admission.admission,
+						site: d.paths.admission.site,
+						entries: p,
+						contexts: v
+					}, T, u, C()), a(d);
+				}
+			});
+			if (r === void 0 || o === void 0 || l === void 0) return t("state");
+			let f = new Set(d.entries.filter((e) => e.target.kind === "url").map((e) => e.target.kind === "url" ? e.target.url : "")), p = new Set(d.entries.filter((e) => e.target.kind === "asset").map((e) => e.target.kind === "asset" ? e.target.digest : ""));
+			for (let e of o) e.media.some((e) => p.has(e.digest)) && f.add(e.url);
+			for (let e of r.definitions) if (f.has(e.source.url) || e.action.kind === "redirect" && f.has(e.action.target.url)) return t("graph");
+			return {
+				...r,
+				binding: d.binding,
+				targetDocuments: l,
+				safety: {
+					artifactId: d.artifactId,
+					generation: d.generation,
+					safetyDigest: d.safetyDigest
+				}
+			};
+		},
+		place: h,
+		budget: w
+	};
+}, p = (e, t) => ({
+	version: 2,
+	profile: "voltro.cms.snapshot-redirect-output/v2",
+	kind: "redirects",
+	...t,
+	...e.binding,
+	targetDocuments: e.targetDocuments,
+	safety: e.safety,
+	routeState: e.routeState,
+	count: e.definitions.length
+}), m = async (...e) => {
+	let n = e[4], { read: r, place: i, budget: a } = f(...e), o = await r(), s = Buffer.from(d({
+		version: 1,
+		definitions: o.definitions
+	}) + "\n", "utf8");
+	if (s.length > a) return t("bounds");
+	let c;
+	try {
+		if (c = await n.provider.begin(), await c.write({
+			path: "redirects.json",
+			contentType: "application/json",
+			size: s.length,
+			digest: u("sha256").update(s).digest("hex")
+		}, (async function* () {
+			yield s;
+		})()), d(await r()) !== d(o)) return t("state");
+		let e = await c.seal(p(o, i));
+		return /^[a-f0-9]{64}$/.test(e.id) ? {
+			artifactId: e.id,
+			count: o.definitions.length
+		} : t("state");
+	} catch (e) {
+		throw c !== void 0 && await Promise.allSettled([c.abort()]), e;
+	}
+}, h = async (e, n, r, i, a) => {
+	let o = i.id, s = f(e, n, r, i, a);
+	if (!/^[a-f0-9]{64}$/.test(o) || a.provider.read === void 0) return t("state");
+	let c = a.provider.read.bind(a.provider), l = await s.read(), m = Buffer.from(d({
+		version: 1,
+		definitions: l.definitions
+	}) + "\n", "utf8");
+	if (m.length > s.budget) return t("bounds");
+	let h = {
+		version: 1,
+		subject: p(l, s.place),
+		files: [{
+			path: "redirects.json",
+			contentType: "application/json",
+			size: m.length,
+			digest: u("sha256").update(m).digest("hex")
+		}]
+	};
+	if (u("sha256").update(d(h)).digest("hex") !== o) return t("state");
+	let g = await c(o);
+	return g.id !== o || d(g.manifest) !== d(h) || d(await s.read()) !== d(l) ? t("state") : structuredClone(g);
+};
+export { h as readSnapshotRedirectOutputArtifact, m as renderSnapshotRouteDispositions };

package/dist/snapshotRedirectTargets.js

@@ -0,0 +1,23 @@
+import { normalizeHost as e } from "./domainHost.js";
+import { copySnapshotResource as t } from "./buildSnapshot.js";
+import { routeDispositionFail as n } from "./routeDispositions.js";
+import { copySnapshotSeoDocumentsSelection as r } from "./snapshotSeoPathSets.js";
+// src/snapshotRedirectTargets.ts
+var i = (i, a) => {
+	if (e(a) !== a) return n("input");
+	let o = t({
+		key: "redirect-targets",
+		value: { targets: i }
+	}).value.targets;
+	if (!Array.isArray(o) || o.length > 255) return n("bounds");
+	let s = "";
+	return o.map((t) => {
+		if (typeof t != "object" || !t || Array.isArray(t) || Object.keys(t).sort().join(",") !== "documents,host") return n("input");
+		let i = t, o = i.host;
+		return typeof o != "string" || e(o) !== o || o === a || o <= s ? n("input") : (s = o, {
+			host: o,
+			documents: r(i.documents)
+		});
+	});
+};
+export { i as copySnapshotRedirectTargets };