@voltro/cms 0.86.0 → 0.88.0

package/dist/snapshotRouting.js

@@ -0,0 +1,112 @@
+import { copySnapshotResource as e } from "./buildSnapshot.js";
+import { Schema as t } from "effect";
+import { createHash as n } from "node:crypto";
+import { canonicalJson as r } from "@voltro/runtime";
+// src/snapshotRouting.ts
+var i = class extends t.TaggedError()("SnapshotRoutingUnavailable", { reason: t.Literals([
+	"definition",
+	"discovery",
+	"claim",
+	"missing",
+	"collision",
+	"ownership"
+]) }) {}, a = (e) => {
+	throw new i({ reason: e });
+}, o = (e) => n("sha256").update(r(e)).digest("hex"), s = (e) => typeof e != "object" || !e || Array.isArray(e) ? a("definition") : e, c = (e) => typeof e == "string" && e.length > 0 && e.length <= 1024 && !/[\\\x00-\x1f\x7f:]/.test(e) && e.split("/").every((e) => e !== "" && e !== "." && e !== ".." && e.toLowerCase() !== ".git"), l = (e) => typeof e == "string" && /^[a-f0-9]{64}$/.test(e), u = (t) => e({
+	key: "routing",
+	value: { data: t }
+}).value.data, d = (e) => {
+	if (e === null) return null;
+	let t = s(u(e)), n = s(t.claims);
+	if (Object.keys(t).length !== 2 || !c(t.pagesDirectory) || Object.keys(n).length > 4096) return a("definition");
+	let r = Object.fromEntries(Object.keys(n).sort().map((e) => {
+		if (!c(e)) return a("definition");
+		let t = s(n[e]);
+		return t.kind === "cms" && Object.keys(t).length === 1 ? [e, { kind: "cms" }] : t.kind === "code" && ["collision,kind", "collision,kind,public"].includes(Object.keys(t).sort().join(",")) && [
+			"reject",
+			"cms",
+			"code"
+		].includes(String(t.collision)) && (t.public === void 0 || typeof t.public == "boolean") ? [e, {
+			kind: "code",
+			collision: t.collision,
+			...t.public === void 0 ? {} : { public: t.public }
+		}] : a("definition");
+	}));
+	return {
+		pagesDirectory: t.pagesDirectory,
+		claims: r
+	};
+}, f = (e, t, n) => {
+	let i = d(e);
+	if (i === null) return t === null ? {
+		definition: null,
+		discovery: null
+	} : a("discovery");
+	let f = s(u(t)), { digest: p, ...m } = f, h = s(f.inputs);
+	if (f.version !== 2 || !l(p) || o(m) !== p || f.pagesDirectory !== i.pagesDirectory || !l(h.id) || r(h) !== r({
+		id: h.id,
+		...n
+	}) || !Array.isArray(f.pages) || f.pages.length === 0 || f.pages.length > 4096) return a("discovery");
+	let g = /* @__PURE__ */ new Set();
+	for (let e of f.pages) {
+		let t = s(e), n = s(t.source), r = s(t.matcher);
+		if (!c(t.file) || g.has(t.file) || n.path !== `${i.pagesDirectory}/${t.file}` || !l(n.digest) || typeof t.pattern != "string" || !t.pattern.startsWith("/") || t.pattern.length > 4096 || typeof r.source != "string" || r.source.length > 8192 || r.flags !== "" || !Number.isSafeInteger(r.priority) || Number(r.priority) < 0) return a("discovery");
+		try {
+			new RegExp(r.source);
+		} catch {
+			return a("discovery");
+		}
+		g.add(t.file);
+	}
+	return Object.keys(i.claims).some((e) => !g.has(e)) ? a("claim") : {
+		definition: i,
+		discovery: f
+	};
+}, p = (e, t, n) => {
+	if (e.definition === null || e.discovery === null) return n ? {
+		owner: "cms",
+		code: null
+	} : null;
+	let r = e.discovery.pages.filter((e) => new RegExp(e.matcher.source, e.matcher.flags).test(t)).sort((e, t) => e.matcher.priority - t.matcher.priority), i = r[0];
+	if (i === void 0) return n ? a("missing") : null;
+	if (r[1]?.matcher.priority === i.matcher.priority) return a("collision");
+	let o = e.definition.claims[i.file] ?? {
+		kind: "code",
+		collision: "reject"
+	}, s = {
+		file: i.file,
+		pattern: i.pattern,
+		sourceDigest: i.source.digest
+	};
+	return n ? o.kind === "code" && o.collision === "reject" ? a("collision") : {
+		owner: o.kind === "cms" ? "cms" : o.collision,
+		code: s
+	} : o.kind === "cms" ? null : {
+		owner: "code",
+		code: s
+	};
+}, m = (e, t) => p(e, t, !0), h = (e, t) => {
+	if (e.definition === null || e.discovery === null) return a("missing");
+	let n = e.discovery.pages.filter((n) => e.definition.claims[n.file]?.kind === "cms" && new RegExp(n.matcher.source, n.matcher.flags).test(t)).sort((e, t) => e.matcher.priority - t.matcher.priority), r = n[0];
+	return r === void 0 ? a("missing") : n[1]?.matcher.priority === r.matcher.priority ? a("collision") : {
+		file: r.file,
+		pattern: r.pattern,
+		sourceDigest: r.source.digest
+	};
+}, g = (e) => {
+	let t = s(e.routing), n = f(t.definition, t.discovery, e.app);
+	return r(t) === r(n) ? n : a("discovery");
+}, _ = (e, t) => {
+	let n = m(g(e), String(t.path));
+	return r(t.ownership) === r(n) ? n : a("ownership");
+}, v = (e, t, n, r) => `native_${o([
+	{
+		tenantId: e.tenantId,
+		site: e.site,
+		environment: e.environment
+	},
+	t,
+	n,
+	r
+])}`;
+export { i as SnapshotRoutingUnavailable, f as compileSnapshotRouting, d as copySnapshotRoutingDefinition, v as nativeSnapshotRouteId, g as readSnapshotRouting, h as snapshotCmsPage, p as snapshotRouteDispatch, m as snapshotRouteOwnership, c as snapshotRoutingPath, _ as verifySnapshotRouteOwnership };

package/dist/snapshotSeo.js

@@ -0,0 +1,178 @@
+import { compileSiteDelivery as e } from "./siteDelivery.js";
+import { normalizeHost as t } from "./domainHost.js";
+import { copySnapshotResource as n, findVerifiedSnapshotResource as r, pinnedSnapshotPartSource as i, readVerifiedSnapshotResource as a, verifyBuildSnapshot as o } from "./buildSnapshot.js";
+import { verifySnapshotRouteOwnership as s } from "./snapshotRouting.js";
+import { contentRouteId as c } from "./contentRouteIdentity.js";
+import { Schema as l } from "effect";
+import { createHash as u } from "node:crypto";
+import { canonicalJson as d } from "@voltro/runtime";
+// src/snapshotSeo.ts
+var f = class extends l.TaggedError()("SnapshotSeoUnavailable", { reason: l.Literals([
+	"scope",
+	"format",
+	"configuration",
+	"domain",
+	"route",
+	"publication"
+]) }) {}, p = (e) => {
+	throw new f({ reason: e });
+}, m = (e) => u("sha256").update(d(e)).digest("hex"), h = (e) => typeof e == "string" && e.length > 0, g = async (l, u, f, g) => {
+	let _ = {
+		tenantId: u.tenantId,
+		site: u.site,
+		environment: u.environment
+	}, v = {
+		id: f.id,
+		digest: f.digest
+	}, y = g.now ?? Date.now(), b = g.xDefault, x = g.routeKey;
+	if (x !== void 0 && !/^path:[a-f0-9]{64}$/.test(x)) return p("route");
+	if (!Object.values(_).every(h) || typeof b != "boolean") return p("scope");
+	let S = await o(l, _, v, y), C = (e, t) => {
+		let n = i(l, _, S, e, y);
+		return n.format === t ? n : p("format");
+	}, w = C("routes", "voltro.cms.content-routes/v4"), T = C("domains", "voltro.cms.domains/v1");
+	C("locales", "voltro.cms.locales/v1");
+	let E = (await a(l, _, S, "routes", "configuration")).value, D = (await a(l, _, S, "locales", "policy")).value, O = e(E.site);
+	if (O.definition.id !== _.site || !O.definition.environments.includes(_.environment) || [E, D].some((e) => e.tenantId !== _.tenantId || e.environment !== _.environment) || D.site !== _.site || d(E.app) !== d(D.app) || E.resolution !== "per-node" || D.resolution !== "per-node" || !Array.isArray(E.types) || E.types.some((e) => typeof e != "object" || !e || !Array.isArray(e.locations))) return p("configuration");
+	let k = {
+		version: O.definition.version,
+		defaultLocale: O.definition.defaultLocale,
+		sourceLocale: O.definition.sourceLocale,
+		locales: O.definition.locales
+	}, A = {
+		contentLocales: O.contentLocales,
+		defaultLocale: O.defaultLocale,
+		sourceLocale: O.sourceLocale,
+		fallback: O.fallback,
+		prefixes: O.prefixes,
+		tags: O.tags,
+		directions: O.directions
+	};
+	if (d(D.definition) !== d(k) || d(D.compiled) !== d(A)) return p("configuration");
+	let j;
+	for await (let e of T.entries(S.manifest.publication)) {
+		let n = e.value;
+		if (n.version !== 1 || n.tenantId !== _.tenantId || n.site !== _.site || typeof n.host != "string" || t(n.host) !== n.host || e.key !== n.host || typeof n.primary != "boolean") return p("domain");
+		if (n.primary) {
+			if (j !== void 0) return p("domain");
+			j = n.host;
+		}
+	}
+	if (j === void 0) return p("domain");
+	let M = `https://${j}`, N = O.definition.locales.filter((e) => e.enabled), P = (e) => {
+		let t = e.value;
+		if (t.version !== 1 || t.tenantId !== _.tenantId || t.site !== _.site || t.environment !== _.environment || ![
+			t.contentType,
+			t.documentId,
+			t.mappingId,
+			t.localeId,
+			t.requestedLocale,
+			t.sourceLocale,
+			t.variantId,
+			t.revisionId
+		].every(h) || !Number.isSafeInteger(t.revision) || Number(t.revision) < 1 || typeof t.fallback != "boolean" || t.definitionDigest !== E.definitionDigest) return p("route");
+		let n = t.lastModified;
+		if (n !== null && (typeof n != "string" || !Number.isFinite(Date.parse(n)) || new Date(n).toISOString() !== n)) return p("route");
+		let r = N.find((e) => e.id === t.localeId), i = E.types.find((e) => e.name === t.contentType);
+		if (r === void 0 || r.contentLocale !== t.requestedLocale || i === void 0 || !i.locations.some((e) => e.id === t.mappingId) || ![r.contentLocale, ...O.fallback[r.contentLocale]].includes(String(t.sourceLocale)) || t.fallback !== (t.sourceLocale !== t.requestedLocale) || t.routeId !== c(_, r.id, String(t.contentType), String(t.documentId), String(t.mappingId))) return p("route");
+		if (t.state === "unroutable") {
+			if (e.key !== `unroutable:${t.routeId}` || t.reason !== "orphan") return p("route");
+		} else if (t.state !== "resolved" || typeof t.path != "string" || !t.path.startsWith("/") || t.path.startsWith("//") || /[?#\\]/.test(t.path) || e.key !== `path:${m(t.path)}`) return p("route");
+		return t.state === "resolved" && s(E, t), t;
+	}, F = async (e, t) => {
+		let n = c(_, t, String(e.contentType), String(e.documentId), String(e.mappingId)), i = await r(l, _, S, "routes", `identity:${n}`);
+		if (i === null) return null;
+		if (i.value.version !== 1 || i.value.kind !== "route-index" || !h(i.value.target)) return p("route");
+		let o = await a(l, _, S, "routes", i.value.target), s = P(o);
+		return s.routeId === n ? s : p("route");
+	}, I = n({
+		key: "configuration",
+		value: {
+			version: 1,
+			..._,
+			origin: M,
+			xDefault: b,
+			sourceSnapshot: {
+				id: S.id,
+				digest: S.digest
+			},
+			inputs: S.manifest.parts.filter((e) => [
+				"routes",
+				"domains",
+				"locales"
+			].includes(e.part)),
+			addressPolicy: "published-own-variants/v1",
+			publicAdmission: "required"
+		}
+	});
+	return {
+		format: "voltro.cms.seo-addresses/v2",
+		entries: async function* (e) {
+			if (d(e) !== d(S.manifest.publication)) return p("publication");
+			yield n(I);
+			let t = x === void 0 ? w.entries(e) : (async function* () {
+				yield await a(l, _, S, "routes", x);
+			})();
+			for await (let e of t) {
+				if (e.key === "configuration" || e.key.startsWith("identity:")) continue;
+				let t = P(e), r = await F(t, String(t.localeId));
+				if (r === null || d(r) !== d(t)) return p("route");
+				if (t.state === "unroutable") {
+					yield {
+						key: String(t.routeId),
+						value: {
+							version: 1,
+							routeKey: e.key,
+							state: "excluded",
+							reason: "unroutable"
+						}
+					};
+					continue;
+				}
+				if (s(E, t).owner === "code") {
+					yield {
+						key: String(t.routeId),
+						value: {
+							version: 1,
+							routeKey: e.key,
+							state: "excluded",
+							reason: "code-owned"
+						}
+					};
+					continue;
+				}
+				let i = [];
+				for (let e of N) {
+					let n = await F(t, e.id);
+					n !== null && n.state === "resolved" && n.fallback === !1 && s(E, n).owner === "cms" && i.push({
+						localeId: e.id,
+						locale: e.tag,
+						routeId: String(n.routeId),
+						href: M + String(n.path)
+					});
+				}
+				let a = N.find((e) => e.contentLocale === t.sourceLocale), o = a === void 0 ? void 0 : i.find((e) => e.localeId === a.id);
+				if (o === void 0) return p("route");
+				yield n({
+					key: String(t.routeId),
+					value: {
+						version: 1,
+						state: "resolved",
+						routeKey: e.key,
+						routeId: t.routeId,
+						revisionId: t.revisionId,
+						lastModified: t.lastModified,
+						requestedLocale: t.requestedLocale,
+						sourceLocale: t.sourceLocale,
+						fallback: t.fallback,
+						canonical: o.href,
+						canonicalRouteId: o.routeId,
+						alternates: i,
+						xDefault: b ? i.find((e) => e.localeId === O.definition.defaultLocale)?.href ?? null : null
+					}
+				});
+			}
+		}
+	};
+};
+export { f as SnapshotSeoUnavailable, g as snapshotSeoAddressSource };

package/dist/snapshotSeoControls.js

@@ -0,0 +1,100 @@
+import { defineSiteDelivery as e } from "./siteDelivery.js";
+import { pageSnapshotResources as t, readVerifiedSnapshotResource as n } from "./buildSnapshot.js";
+import { verifySnapshotRouteOwnership as r } from "./snapshotRouting.js";
+import { staticPathHash as i } from "./staticPathSet.js";
+import { snapshotSeoMetadataSource as a } from "./snapshotSeoMetadata.js";
+import { readSnapshotRouteAdmission as o, verifySnapshotContentRoute as s } from "./snapshotRouteAdmission.js";
+import { readAdmittedSnapshotContentRoute as c } from "./snapshotRouteRead.js";
+import { SnapshotSeoReadUnavailable as l, readAdmittedSnapshotSeo as u } from "./snapshotSeoRead.js";
+import { snapshotSitemapFiles as d } from "./snapshotSitemapFiles.js";
+import { canonicalJson as f } from "@voltro/runtime";
+// src/snapshotSeoControls.ts
+var p = () => {
+	throw new l({ reason: "binding" });
+}, m = async (l, m, h, g, _) => {
+	let v = await o(l, m, h, {
+		...g,
+		path: "/"
+	}, _), { snapshot: y, configuration: b, now: x } = v, S = e(b.site);
+	if (y.manifest.parts.find((e) => e.part === "seo")?.format !== "voltro.cms.seo-metadata/v1") return p();
+	let C = (await n(l, m, y, "seo", "configuration")).value;
+	if (typeof C.origin != "string" || typeof C.xDefault != "boolean") return p();
+	let w = await a(l, m, y, {
+		now: x,
+		xDefault: C.xDefault
+	}), T = !1;
+	for await (let e of w.entries(y.manifest.publication)) {
+		if (e.key !== "configuration") return p();
+		let t = (e) => Object.fromEntries(Object.entries(e).filter(([e]) => e !== "sourceSnapshot"));
+		if (f(t(e.value)) !== f(t(C))) return p();
+		T = !0;
+		break;
+	}
+	if (!T) return p();
+	let E = new URL(C.origin);
+	if (E.protocol !== "https:" || E.origin !== C.origin) return p();
+	let D = m.environment === "production" && m.environment === S.defaultEnvironment, O = [], k;
+	do {
+		let e = await t(l, m, y.id, "routes", {
+			now: x,
+			limit: 200,
+			...k === void 0 ? {} : { after: k }
+		});
+		for (let t of e.items) {
+			if (!t.key.startsWith("path:")) continue;
+			let e = t.value;
+			if (typeof e.path != "string" || t.key !== "path:" + i(e.path)) return p();
+			if (s(m, e.path, e), e.fallback !== !1 || r(b, e).owner !== "cms") continue;
+			let a = await c(l, {
+				...v,
+				input: {
+					...v.input,
+					path: e.path
+				},
+				route: e
+			});
+			if (a === null) continue;
+			let { seo: o } = await u(l, m, a, x), d = (await n(l, m, y, "seo", a.output.routeId)).value, f = d.metadata;
+			if (!D || f?.sitemap !== !0 || !o.robots.index || o.canonical === null) continue;
+			let h = E.origin + a.output.path;
+			if (o.canonical !== h || (O.push({
+				documentId: a.document.documentId,
+				locale: o.languageTag,
+				path: h,
+				lastmod: d.lastModified,
+				alternates: o.alternates.map((e) => ({
+					locale: e.locale,
+					path: e.href
+				}))
+			}), O.length > 1e5)) return p();
+		}
+		k = e.next ?? void 0;
+	} while (k !== void 0);
+	O.sort((e, t) => e.path < t.path ? -1 : +(e.path > t.path));
+	let A = new Set(O.map((e) => e.path));
+	if (A.size !== O.length) return p();
+	let j = O.map((e) => ({
+		...e,
+		alternates: e.alternates.filter((e) => A.has(e.path))
+	})), M = S.locales.find((e) => e.id === S.defaultLocale)?.tag, N = d(j, E.origin, C.xDefault ? M : void 0), P = N[0].text, F = D ? `User-agent: *\nAllow: /\n\nSitemap: ${E.origin}/sitemap.xml\n` : "User-agent: *\nDisallow: /\n", I = (await n(l, m, y, "app", "configuration")).value.execution, L = typeof I == "object" && !!I && !Array.isArray(I) && I.web !== void 0;
+	return await o(l, m, h, {
+		...g,
+		path: "/"
+	}, _), {
+		sitemap: P,
+		robots: F,
+		urls: j,
+		files: N,
+		origin: E.origin,
+		indexable: D,
+		defaultLanguage: M ?? null,
+		xDefault: C.xDefault,
+		locales: S.locales.map((e) => ({
+			id: e.id,
+			tag: e.tag,
+			enabled: e.enabled
+		})),
+		productionDocumentRequired: L
+	};
+};
+export { m as readSnapshotSeoControls };

package/dist/snapshotSeoDocumentInventory.js

@@ -0,0 +1,114 @@
+import { canonicalCmsPublicPath as e } from "./publicBuild.js";
+import { copySnapshotResource as t } from "./buildSnapshot.js";
+import { snapshotRoutingPath as n } from "./snapshotRouting.js";
+import { copySnapshotConsentPurposes as r, copySnapshotPresentationValue as i, snapshotPresentations as a } from "./snapshotPresentation.js";
+import { SnapshotSeoReadUnavailable as o } from "./snapshotSeoRead.js";
+import { createHash as s } from "node:crypto";
+import { canonicalJson as c } from "@voltro/runtime";
+// src/snapshotSeoDocumentInventory.ts
+var l = () => {
+	throw new o({ reason: "binding" });
+}, u = (e) => s("sha256").update(c(e)).digest("hex"), d = (e) => typeof e == "string" && /^[a-f0-9]{64}$/.test(e), f = (e, t) => typeof e != "object" || !e || Array.isArray(e) || ![Object.prototype, null].includes(Object.getPrototypeOf(e)) || Reflect.ownKeys(e).some((t) => typeof t != "string" || !Object.getOwnPropertyDescriptor(e, t).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(e, t), "value")) || t !== void 0 && Object.keys(e).sort().join(",") !== t ? l() : e, p = (e, t) => !Array.isArray(e) || e.length > t || Reflect.ownKeys(e).length !== e.length + 1 ? l() : Array.from({ length: e.length }, (t, n) => {
+	let r = Object.getOwnPropertyDescriptor(e, String(n));
+	return r === void 0 || !r.enumerable || !Object.hasOwn(r, "value") ? l() : r.value;
+}), m = (o) => {
+	let m = f(o, "id,manifest");
+	if (!d(m.id)) return l();
+	let h = f(m.manifest, "files,subject,version"), g = f(h.subject, "build,consentPurposes,pathSetIds,presentations,profile,records,selector,version");
+	if (h.version !== 1 || g.version !== 3 || g.profile !== "voltro.cms-public-documents/v3") return l();
+	let _ = f(g.build, "executionId,inputsId,snapshotDigest,version");
+	if (_.version !== 1 || !d(_.snapshotDigest) || !d(_.inputsId) || !d(_.executionId)) return l();
+	let v = {
+		version: 1,
+		snapshotDigest: _.snapshotDigest,
+		inputsId: _.inputsId,
+		executionId: _.executionId
+	}, y = [
+		"1",
+		v.snapshotDigest,
+		v.inputsId,
+		v.executionId
+	].join(".");
+	if (g.selector !== y) return l();
+	let b = t({
+		key: "public-classes",
+		value: {
+			consentPurposes: g.consentPurposes,
+			presentations: g.presentations
+		}
+	}).value, x = r(b.consentPurposes), S = a(x, 257).map((e) => ({
+		presentation: e,
+		key: u(e)
+	})).sort((e, t) => e.key < t.key ? -1 : +(e.key > t.key)).map((e) => e.presentation);
+	if (c({
+		consentPurposes: x,
+		presentations: S
+	}) !== c(b)) return l();
+	let C = p(g.pathSetIds, 64).map((e, t, n) => !d(e) || t > 0 && String(n[t - 1]) >= e ? l() : e);
+	if (C.length === 0) return l();
+	let w = S.map((e) => u(e)).sort(), T = /* @__PURE__ */ new Map(), E = /* @__PURE__ */ new Map(), D = /* @__PURE__ */ new Map(), O = /* @__PURE__ */ new Map(), k = p(h.files, 1e5).map((e) => {
+		let t = f(e, "contentType,digest,path,size");
+		if (typeof t.path != "string" || t.contentType !== "text/html" || !d(t.digest) || !Number.isSafeInteger(t.size) || Number(t.size) < 0 || Number(t.size) > 4194304 || O.has(t.path)) return l();
+		let n = {
+			path: t.path,
+			contentType: t.contentType,
+			digest: t.digest,
+			size: Number(t.size)
+		};
+		return O.set(n.path, n), n;
+	}), A = "", j = p(g.records, 1e5).map((r) => {
+		let a = t({
+			key: "public-document",
+			value: f(r, "artifactId,digest,file,media,pageFile,path,presentation,routeId,size,url")
+		}).value;
+		if (!n(a.pageFile) || typeof a.url != "string" || typeof a.path != "string" || e(a.path) !== a.path || typeof a.routeId != "string" || !/^(route_|native_)[a-f0-9]{64}$/.test(a.routeId) || !d(a.artifactId) || !d(a.digest)) return l();
+		let o = new URL(a.url);
+		if (o.protocol !== "https:" || o.origin + o.pathname !== a.url || o.pathname !== a.path) return l();
+		let c = i(a.presentation), m = u(c), h = a.url + "#" + m;
+		if (h <= A || a.file !== "pages/" + s("sha256").update(h).digest("hex") + ".html") return l();
+		A = h;
+		let g = O.get(String(a.file));
+		if (g === void 0 || g.digest !== a.digest || g.size !== a.size) return l();
+		let _ = p(a.media, 1e5).map((e) => {
+			let t = f(e, "digest,rights"), n = f(t.rights);
+			return !d(t.digest) || n.version !== 1 ? l() : {
+				digest: t.digest,
+				rights: n
+			};
+		}), v = T.get(a.url) ?? [], y = E.get(a.url);
+		return y !== void 0 && (y !== a.routeId || D.get(a.url) !== a.pageFile) ? l() : (D.set(a.url, a.pageFile), E.set(a.url, a.routeId), v.push(m), T.set(a.url, v), {
+			url: a.url,
+			path: a.path,
+			routeId: a.routeId,
+			artifactId: a.artifactId,
+			presentation: c,
+			file: g.path,
+			pageFile: a.pageFile,
+			digest: g.digest,
+			size: g.size,
+			media: _
+		});
+	});
+	return k.length !== j.length || [...T.values()].some((e) => c(e.sort()) !== c(w)) || u({
+		version: 1,
+		subject: {
+			version: 3,
+			profile: "voltro.cms-public-documents/v3",
+			build: v,
+			selector: y,
+			pathSetIds: C,
+			consentPurposes: x,
+			presentations: S,
+			records: j
+		},
+		files: k
+	}) !== m.id ? l() : {
+		build: v,
+		selector: y,
+		pathSetIds: C,
+		consentPurposes: x,
+		presentations: S,
+		records: j
+	};
+};
+export { m as readSnapshotSeoDocumentInventory };

package/dist/snapshotSeoDocuments.js

@@ -0,0 +1,128 @@
+import { copySnapshotResource as e } from "./buildSnapshot.js";
+import { readCapturedSnapshotConsentPurposes as t } from "./snapshotPresentationPolicy.js";
+import { copySnapshotCodeSeo as n } from "./snapshotCodeSeo.js";
+import { admitCapturedAssetUseRights as r } from "./assetUseRights.js";
+import { SnapshotSeoReadUnavailable as i } from "./snapshotSeoRead.js";
+import { readSnapshotSeoPathSets as a } from "./snapshotSeoPathSets.js";
+import { readSnapshotSeoDocumentInventory as o } from "./snapshotSeoDocumentInventory.js";
+import { createHash as s } from "node:crypto";
+import { canonicalJson as c } from "@voltro/runtime";
+// src/snapshotSeoDocuments.ts
+var l = (e) => {
+	let { app: t, admission: n } = e.paths.admission, r = n.input;
+	return {
+		snapshot: {
+			id: n.snapshot.id,
+			digest: n.snapshot.digest
+		},
+		app: {
+			inputsId: t.inputsId,
+			executionId: t.executionId
+		},
+		documents: {
+			artifactId: e.paths.selection.artifactId,
+			pathSetIds: e.inventory.pathSetIds
+		},
+		consumerId: r.consumerId,
+		buildId: r.buildId,
+		host: r.host
+	};
+}, u = () => {
+	throw new i({ reason: "binding" });
+}, d = (e) => s("sha256").update(c(e)).digest("hex"), f = (e, t) => typeof e != "object" || !e || Array.isArray(e) || ![Object.prototype, null].includes(Object.getPrototypeOf(e)) || Reflect.ownKeys(e).some((t) => typeof t != "string" || !Object.getOwnPropertyDescriptor(e, t).enumerable || !Object.hasOwn(Object.getOwnPropertyDescriptor(e, t), "value")) || t !== void 0 && Object.keys(e).sort().join(",") !== t ? u() : e, p = (e) => !Array.isArray(e) || e.length > 1e5 || Reflect.ownKeys(e).length !== e.length + 1 ? u() : Array.from({ length: e.length }, (t, n) => {
+	let r = Object.getOwnPropertyDescriptor(e, String(n));
+	return r === void 0 || !r.enumerable || !Object.hasOwn(r, "value") ? u() : r.value;
+}), m = async (i, s, l, m, h) => {
+	let g = {
+		snapshot: {
+			id: l.snapshot.id,
+			digest: l.snapshot.digest
+		},
+		token: l.token,
+		consumerId: l.consumerId,
+		buildId: l.buildId,
+		host: l.host
+	}, _ = {
+		tenantId: s.tenantId,
+		site: s.site,
+		environment: s.environment
+	}, v = {
+		keys: h.keys.map((e) => ({
+			id: e.id,
+			material: new Uint8Array(e.material)
+		})),
+		now: h.now ?? Date.now
+	}, y = { ...h.use }, b = h.provider.read?.bind(h.provider);
+	if (b === void 0) return u();
+	let x = await a(i, _, g, m, v), S = await b(x.selection.artifactId);
+	if (f(S, "id,manifest").id !== x.selection.artifactId) return u();
+	let C = o(S), w = x.admission.app, T = x.admission.admission;
+	if (w.web === void 0 || c(C.build) !== c({
+		version: 1,
+		snapshotDigest: T.snapshot.digest,
+		inputsId: w.inputsId,
+		executionId: w.executionId
+	}) || c(C.pathSetIds) !== c(x.selection.pathSets.map((e) => e.digest).sort())) return u();
+	let E = await t(i, _, T.snapshot, T.configuration.app);
+	if (c(E) !== c(C.consentPurposes)) return u();
+	let D = new Map(x.entries.map((e) => ["https://" + e.host + e.path, e])), O = /* @__PURE__ */ new Map(), k = /* @__PURE__ */ new Set();
+	for (let t of C.records) {
+		let a = D.get(t.url);
+		if (a === void 0 || t.path !== a.path || t.routeId !== a.routeId || t.pageFile !== a.file) return u();
+		let o = f(await b(t.artifactId), "id,manifest"), s = f(o.manifest, "files,subject,version");
+		if (o.id !== t.artifactId || s.version !== 1) return u();
+		let l = f(s.subject, a.owner === "code" ? "assets,codeSeo,receipt" : "assets,receipt"), m = p(l.assets).map((t) => {
+			let n = f(e({
+				key: "rendered-asset",
+				value: f(t)
+			}).value);
+			if (n.routeId !== a.routeId || n.snapshotDigest !== T.snapshot.digest || typeof n.checksum != "string" || !/^[a-f0-9]{64}$/.test(n.checksum)) return u();
+			let r = f(n.rights);
+			return r.version === 1 ? {
+				digest: n.checksum,
+				rights: r
+			} : u();
+		});
+		if (c(m) !== c(t.media)) return u();
+		for (let e of m) await r(i, _, e.rights, v.now(), y);
+		let h = f(l.receipt);
+		if (h.version !== (a.owner === "code" ? 13 : 12) || h.owner !== a.owner || h.snapshotId !== T.snapshot.id || h.snapshotDigest !== T.snapshot.digest || h.inputsId !== w.inputsId || h.executionId !== w.executionId || h.consumerId !== T.input.consumerId || h.buildId !== T.input.buildId || h.pageFile !== t.pageFile || h.path !== a.path || h.routeId !== a.routeId || h.documentDigest !== t.digest) return u();
+		let g = e({
+			key: "renderer-binding",
+			value: {
+				consentPurposes: h.consentPurposes,
+				presentation: h.presentation,
+				web: h.web
+			}
+		}).value;
+		if (c(g) !== c({
+			consentPurposes: E,
+			presentation: t.presentation,
+			web: w.web
+		})) return u();
+		let x = p(s.files).map((e) => f(e, "contentType,digest,path,size")).find((e) => e.path === "document.html");
+		if (x === void 0 || x.contentType !== "text/html" || x.digest !== t.digest || x.size !== t.size) return u();
+		if (a.owner === "code") {
+			let e = n(l.codeSeo);
+			if (h.codeSeoDigest !== d(e)) return u();
+			let r = {
+				url: t.url,
+				path: a.path,
+				localeId: a.localeId,
+				routeId: a.routeId,
+				seo: e
+			}, i = O.get(t.url);
+			if (i !== void 0 && c(i) !== c(r)) return u();
+			O.set(t.url, r);
+		}
+		k.add(t.url);
+	}
+	if (k.size !== D.size || [...D.keys()].some((e) => !k.has(e))) return u();
+	let A = await a(i, _, g, x.selection, v);
+	return c(A.entries) !== c(x.entries) || c(A.admission.context) !== c(x.admission.context) ? u() : {
+		inventory: C,
+		paths: A,
+		native: [...O.values()]
+	};
+};
+export { m as readSnapshotSeoDocuments, l as snapshotOutputSafetyBinding };