@weatherboard/cms 0.0.0-stage → 0.2.0

package/dist/index.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts", "../src/contracts/query.ts", "../src/contracts/text.ts"],
+  "sourcesContent": ["export { defineCmsQuery, cmsTags } from \"./contracts/query.js\";\nexport type { CmsParams, CmsDependencies, CmsResolution, CmsQuery } from \"./contracts/query.js\";\nexport { SITE_HERO, CMS_CONTRACT_VERSION, validateTextDocument, siteHeroQuery, SITE_HERO_LAYOUTS, SITE_HERO_TAGLINE_MAX_LENGTH, SITE_HERO_LAYOUT_WARNING, parseSiteHero, validateSiteHeroTaglines } from \"./contracts/text.js\";\nexport type { SiteHero, ParsedSiteHero, SiteHeroLayout, SiteHeroTagline, TextFieldDefinition, TextDocumentDefinition, TextValidation } from \"./contracts/text.js\";\n", "/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly \"siteHero.layout.defaulted\"[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n", "import { defineCmsQuery, type CmsQuery, type CmsResolution } from \"./query.js\";\n\nexport const SITE_HERO_LAYOUTS = [\"columns\", \"rows\"] as const;\nexport const SITE_HERO_TAGLINE_MAX_LENGTH = 36;\nexport const SITE_HERO_LAYOUT_WARNING = \"siteHero.layout.defaulted\" as const;\nexport type SiteHeroLayout = typeof SITE_HERO_LAYOUTS[number];\nexport type SiteHeroTagline = { readonly key: string; readonly text: string };\n/** Optional additions preserve existing heading/intro-only consumer fallbacks. */\nexport type SiteHero = {\n  readonly heading: string;\n  readonly intro: string;\n  readonly layout?: SiteHeroLayout;\n  readonly taglines?: readonly SiteHeroTagline[];\n};\nexport type ParsedSiteHero = SiteHero & {\n  readonly layout: SiteHeroLayout;\n  readonly taglines: readonly SiteHeroTagline[];\n};\nexport type TextFieldDefinition = {\n  readonly name: string;\n  readonly label: string;\n  readonly noun: { readonly article: \"a\" | \"an\"; readonly word: string };\n  readonly kind: \"single-line\" | \"multi-line\";\n  readonly required: boolean;\n  readonly minLength: number;\n  readonly maxLength: number;\n  readonly noTrailingFullStop?: boolean;\n};\nexport type TextDocumentDefinition = {\n  readonly key: string;\n  readonly documentId: string;\n  readonly documentType: string;\n  readonly fields: readonly TextFieldDefinition[];\n  readonly copy: {\n    readonly currentTitle: string;\n    readonly editTitle: string;\n    readonly empty: string;\n  };\n};\nexport type TextValidation =\n  | { readonly ok: true; readonly value: Readonly<Record<string, string>> }\n  | { readonly ok: false; readonly errors: Readonly<Record<string, string>> };\n\nexport const CMS_CONTRACT_VERSION = 1;\n\nexport const SITE_HERO: TextDocumentDefinition = {\n  key: \"hero\",\n  documentId: \"siteHero\",\n  documentType: \"siteHero\",\n  fields: [\n    {\n      name: \"heading\",\n      label: \"Heading\",\n      noun: { article: \"a\", word: \"heading\" },\n      kind: \"single-line\",\n      required: true,\n      minLength: 1,\n      maxLength: 80,\n      noTrailingFullStop: true,\n    },\n    {\n      name: \"intro\",\n      label: \"Introduction\",\n      noun: { article: \"an\", word: \"introduction\" },\n      kind: \"multi-line\",\n      required: true,\n      minLength: 1,\n      maxLength: 320,\n    },\n  ],\n  copy: {\n    currentTitle: \"On your site now\",\n    editTitle: \"Edit and publish\",\n    empty: \"Your site has no hero text yet. Whatever you publish below becomes its first version.\",\n  },\n};\n\nfunction fieldError(field: TextFieldDefinition, text: string): string | null {\n  const { article, word } = field.noun;\n  if (text.length === 0) return field.required ? `Enter ${article} ${word}.` : null;\n  const count = [...text].length;\n  if (count < field.minLength) return `Make the ${word} at least ${String(field.minLength)} characters. It is ${String(count)} now.`;\n  if (count > field.maxLength) return `Keep the ${word} to ${String(field.maxLength)} characters or fewer. It is ${String(count)} now.`;\n  if (text.includes(\"\\u2014\")) return `The ${word} contains a long dash. Use a comma, a colon or a short dash instead.`;\n  if (field.kind === \"single-line\" && /[\\r\\n]/.test(text)) return `The ${word} must be a single line.`;\n  if (field.noTrailingFullStop === true && text.endsWith(\".\")) {\n    return `${word.charAt(0).toUpperCase()}${word.slice(1)}s on your site do not end with a full stop. Remove the last full stop.`;\n  }\n  return null;\n}\n\nexport function validateTextDocument(\n  definition: TextDocumentDefinition, raw: Readonly<Record<string, unknown>>,\n): TextValidation {\n  const value: Record<string, string> = {};\n  const errors: Record<string, string> = {};\n  for (const field of definition.fields) {\n    const submitted = Object.hasOwn(raw, field.name) ? raw[field.name] : undefined;\n    const text = typeof submitted === \"string\" ? submitted.trim() : \"\";\n    const error = fieldError(field, text);\n    Object.defineProperty(error === null ? value : errors, field.name, { value: error ?? text, enumerable: true });\n  }\n  return Object.keys(errors).length > 0 ? { ok: false, errors } : { ok: true, value };\n}\n\n/** Shared with the schema adapter; no provider metadata is returned. */\nexport function validateSiteHeroTaglines(raw: unknown):\n  | { readonly ok: true; readonly value: readonly SiteHeroTagline[] }\n  | { readonly ok: false; readonly error: string } {\n  if (!Array.isArray(raw)) return { ok: false, error: \"Enter a list of taglines.\" };\n  const heading = SITE_HERO.fields[0];\n  if (!heading) throw new TypeError(\"Missing siteHero heading definition\");\n  const field = { ...heading, name: \"text\", noun: { article: \"a\", word: \"tagline\" } as const,\n    maxLength: SITE_HERO_TAGLINE_MAX_LENGTH };\n  const value: SiteHeroTagline[] = [];\n  const keys = new Set<string>();\n  for (const item of raw as unknown[]) {\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) return { ok: false, error: \"Enter a key and text for each tagline.\" };\n    const record = item as Record<string, unknown>;\n    const key = Object.hasOwn(record, \"key\") ? record.key : undefined;\n    if (typeof key !== \"string\" || !/^[a-z][a-z0-9_-]{0,31}$/.test(key)) {\n      return { ok: false, error: \"Use a lowercase key of 1 to 32 letters, numbers, short dashes or underscores, starting with a letter.\" };\n    }\n    if (keys.has(key)) return { ok: false, error: \"Use each tagline key only once.\" };\n    const text = validateTextDocument({ ...SITE_HERO, fields: [field] }, record);\n    if (!text.ok) return { ok: false, error: text.errors.text ?? \"Invalid tagline.\" };\n    keys.add(key);\n    value.push({ key, text: text.value.text ?? \"\" });\n  }\n  return { ok: true, value };\n}\n\nfunction isLayout(value: unknown): value is SiteHeroLayout {\n  return SITE_HERO_LAYOUTS.some((layout) => value === layout);\n}\n\n/** Strict per-field resolution: an invalid list never partially changes keyed copy. */\nexport function parseSiteHero(raw: unknown, fallback: SiteHero): CmsResolution<ParsedSiteHero> {\n  const local = validateTextDocument(SITE_HERO, fallback);\n  const localTaglines = validateSiteHeroTaglines(fallback.taglines ?? []);\n  if (!local.ok || !localTaglines.ok || (fallback.layout !== undefined && !isLayout(fallback.layout))) {\n    throw new TypeError(\"Invalid siteHero fallback\");\n  }\n  const data: { heading: string; intro: string; layout: SiteHeroLayout; taglines: readonly SiteHeroTagline[] } = {\n    heading: local.value.heading ?? \"\", intro: local.value.intro ?? \"\",\n    layout: fallback.layout ?? \"columns\", taglines: localTaglines.value,\n  };\n  if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return { data, fallbackFields: [\"$\"] };\n  const record = raw as Readonly<Record<string, unknown>>;\n  const text = validateTextDocument(SITE_HERO, record);\n  const fallbackFields: string[] = text.ok ? [] : Object.keys(text.errors);\n  for (const field of SITE_HERO.fields) {\n    if (!fallbackFields.includes(field.name)) {\n      const value = text.ok ? text.value[field.name] : record[field.name];\n      if (typeof value === \"string\" && (field.name === \"heading\" || field.name === \"intro\")) data[field.name] = value.trim();\n    }\n  }\n  const layout = Object.hasOwn(record, \"layout\") ? record.layout : undefined;\n  const warnings: (typeof SITE_HERO_LAYOUT_WARNING)[] = [];\n  if (isLayout(layout)) data.layout = layout;\n  else {\n    data.layout = \"columns\";\n    fallbackFields.push(\"layout\");\n    warnings.push(SITE_HERO_LAYOUT_WARNING);\n  }\n  const taglines = validateSiteHeroTaglines(Object.hasOwn(record, \"taglines\") ? record.taglines : undefined);\n  if (taglines.ok) data.taglines = taglines.value;\n  else fallbackFields.push(\"taglines\");\n  return { data, fallbackFields: fallbackFields.length === SITE_HERO.fields.length + 2 ? [\"$\"] : fallbackFields,\n    ...(warnings.length > 0 ? { warnings } : {}) };\n}\n\nexport function siteHeroQuery(): CmsQuery<SiteHero> {\n  return defineCmsQuery<SiteHero>({\n    name: \"siteHero.v1\", query: '*[_id == $id && _type == \"siteHero\"][0]{heading,intro,layout,taglines}',\n    params: { id: \"siteHero\" }, dependencies: { types: [\"siteHero\"], ids: [\"siteHero\"] },\n    resolve: parseSiteHero,\n  });\n}\n"],
+  "mappings": "yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,0BAAAE,EAAA,cAAAC,EAAA,sBAAAC,EAAA,6BAAAC,EAAA,iCAAAC,EAAA,YAAAC,EAAA,mBAAAC,EAAA,kBAAAC,EAAA,kBAAAC,EAAA,6BAAAC,EAAA,yBAAAC,IAAA,eAAAC,EAAAb,GCmBA,IAAMc,EAAO,+BACPC,EAAK,qCACLC,EAAQ,0CAEd,SAASC,EAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACN,EAAK,KAAKM,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMG,EAAMH,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWI,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACP,EAAG,KAAKO,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIH,CAAK,EAAE,KAAO,IAAI,IAAIE,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOF,CAAK,EAAG,GAAIE,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASE,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcT,EAAiBO,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CAEO,SAASM,EAAQC,EAAeb,EAAkD,CACvF,GAAI,OAAOa,GAAU,UAAYA,EAAM,OAAS,IAAM,CAACf,EAAM,KAAKe,CAAK,EAAG,MAAM,IAAI,UAAU,mBAAmB,EACjH,IAAML,EAAST,EAAiBC,CAAY,EACtCc,EAAO,CACX,GAAG,CAAC,GAAG,IAAI,IAAIN,EAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAKN,GAAS,OAAOW,CAAK,SAASX,CAAI,EAAE,EAC9E,GAAG,CAAC,GAAG,IAAI,IAAIM,EAAO,KAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAKJ,GAAO,OAAOS,CAAK,OAAOT,CAAE,EAAE,CAC9E,EACA,OAAO,OAAO,OAAOU,CAAI,CAC3B,CCxEO,IAAMC,EAAoB,CAAC,UAAW,MAAM,EACtCC,EAA+B,GAC/BC,EAA2B,4BAuC3BC,EAAuB,EAEvBC,EAAoC,CAC/C,IAAK,OACL,WAAY,WACZ,aAAc,WACd,OAAQ,CACN,CACE,KAAM,UACN,MAAO,UACP,KAAM,CAAE,QAAS,IAAK,KAAM,SAAU,EACtC,KAAM,cACN,SAAU,GACV,UAAW,EACX,UAAW,GACX,mBAAoB,EACtB,EACA,CACE,KAAM,QACN,MAAO,eACP,KAAM,CAAE,QAAS,KAAM,KAAM,cAAe,EAC5C,KAAM,aACN,SAAU,GACV,UAAW,EACX,UAAW,GACb,CACF,EACA,KAAM,CACJ,aAAc,mBACd,UAAW,mBACX,MAAO,uFACT,CACF,EAEA,SAASC,EAAWC,EAA4BC,EAA6B,CAC3E,GAAM,CAAE,QAAAC,EAAS,KAAAC,CAAK,EAAIH,EAAM,KAChC,GAAIC,EAAK,SAAW,EAAG,OAAOD,EAAM,SAAW,SAASE,CAAO,IAAIC,CAAI,IAAM,KAC7E,IAAMC,EAAQ,CAAC,GAAGH,CAAI,EAAE,OACxB,OAAIG,EAAQJ,EAAM,UAAkB,YAAYG,CAAI,aAAa,OAAOH,EAAM,SAAS,CAAC,sBAAsB,OAAOI,CAAK,CAAC,QACvHA,EAAQJ,EAAM,UAAkB,YAAYG,CAAI,OAAO,OAAOH,EAAM,SAAS,CAAC,+BAA+B,OAAOI,CAAK,CAAC,QAC1HH,EAAK,SAAS,QAAQ,EAAU,OAAOE,CAAI,uEAC3CH,EAAM,OAAS,eAAiB,SAAS,KAAKC,CAAI,EAAU,OAAOE,CAAI,0BACvEH,EAAM,qBAAuB,IAAQC,EAAK,SAAS,GAAG,EACjD,GAAGE,EAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAGA,EAAK,MAAM,CAAC,CAAC,yEAEjD,IACT,CAEO,SAASE,EACdC,EAAoCC,EACpB,CAChB,IAAMC,EAAgC,CAAC,EACjCC,EAAiC,CAAC,EACxC,QAAWT,KAASM,EAAW,OAAQ,CACrC,IAAMI,EAAY,OAAO,OAAOH,EAAKP,EAAM,IAAI,EAAIO,EAAIP,EAAM,IAAI,EAAI,OAC/DC,EAAO,OAAOS,GAAc,SAAWA,EAAU,KAAK,EAAI,GAC1DC,EAAQZ,EAAWC,EAAOC,CAAI,EACpC,OAAO,eAAeU,IAAU,KAAOH,EAAQC,EAAQT,EAAM,KAAM,CAAE,MAAOW,GAASV,EAAM,WAAY,EAAK,CAAC,CAC/G,CACA,OAAO,OAAO,KAAKQ,CAAM,EAAE,OAAS,EAAI,CAAE,GAAI,GAAO,OAAAA,CAAO,EAAI,CAAE,GAAI,GAAM,MAAAD,CAAM,CACpF,CAGO,SAASI,EAAyBL,EAEU,CACjD,GAAI,CAAC,MAAM,QAAQA,CAAG,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,2BAA4B,EAChF,IAAMM,EAAUf,EAAU,OAAO,CAAC,EAClC,GAAI,CAACe,EAAS,MAAM,IAAI,UAAU,qCAAqC,EACvE,IAAMb,EAAQ,CAAE,GAAGa,EAAS,KAAM,OAAQ,KAAM,CAAE,QAAS,IAAK,KAAM,SAAU,EAC9E,UAAWlB,CAA6B,EACpCa,EAA2B,CAAC,EAC5BM,EAAO,IAAI,IACjB,QAAWC,KAAQR,EAAkB,CACnC,GAAI,CAACQ,GAAQ,OAAOA,GAAS,UAAY,MAAM,QAAQA,CAAI,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,wCAAyC,EAClI,IAAMC,EAASD,EACTE,EAAM,OAAO,OAAOD,EAAQ,KAAK,EAAIA,EAAO,IAAM,OACxD,GAAI,OAAOC,GAAQ,UAAY,CAAC,0BAA0B,KAAKA,CAAG,EAChE,MAAO,CAAE,GAAI,GAAO,MAAO,uGAAwG,EAErI,GAAIH,EAAK,IAAIG,CAAG,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,iCAAkC,EAChF,IAAMhB,EAAOI,EAAqB,CAAE,GAAGP,EAAW,OAAQ,CAACE,CAAK,CAAE,EAAGgB,CAAM,EAC3E,GAAI,CAACf,EAAK,GAAI,MAAO,CAAE,GAAI,GAAO,MAAOA,EAAK,OAAO,MAAQ,kBAAmB,EAChFa,EAAK,IAAIG,CAAG,EACZT,EAAM,KAAK,CAAE,IAAAS,EAAK,KAAMhB,EAAK,MAAM,MAAQ,EAAG,CAAC,CACjD,CACA,MAAO,CAAE,GAAI,GAAM,MAAAO,CAAM,CAC3B,CAEA,SAASU,EAASV,EAAyC,CACzD,OAAOd,EAAkB,KAAMyB,GAAWX,IAAUW,CAAM,CAC5D,CAGO,SAASC,EAAcb,EAAcc,EAAmD,CAC7F,IAAMC,EAAQjB,EAAqBP,EAAWuB,CAAQ,EAChDE,EAAgBX,EAAyBS,EAAS,UAAY,CAAC,CAAC,EACtE,GAAI,CAACC,EAAM,IAAM,CAACC,EAAc,IAAOF,EAAS,SAAW,QAAa,CAACH,EAASG,EAAS,MAAM,EAC/F,MAAM,IAAI,UAAU,2BAA2B,EAEjD,IAAMG,EAAyG,CAC7G,QAASF,EAAM,MAAM,SAAW,GAAI,MAAOA,EAAM,MAAM,OAAS,GAChE,OAAQD,EAAS,QAAU,UAAW,SAAUE,EAAc,KAChE,EACA,GAAIhB,IAAQ,MAAQ,OAAOA,GAAQ,UAAY,MAAM,QAAQA,CAAG,EAAG,MAAO,CAAE,KAAAiB,EAAM,eAAgB,CAAC,GAAG,CAAE,EACxG,IAAMR,EAAST,EACTN,EAAOI,EAAqBP,EAAWkB,CAAM,EAC7CS,EAA2BxB,EAAK,GAAK,CAAC,EAAI,OAAO,KAAKA,EAAK,MAAM,EACvE,QAAWD,KAASF,EAAU,OAC5B,GAAI,CAAC2B,EAAe,SAASzB,EAAM,IAAI,EAAG,CACxC,IAAMQ,EAAQP,EAAK,GAAKA,EAAK,MAAMD,EAAM,IAAI,EAAIgB,EAAOhB,EAAM,IAAI,EAC9D,OAAOQ,GAAU,WAAaR,EAAM,OAAS,WAAaA,EAAM,OAAS,WAAUwB,EAAKxB,EAAM,IAAI,EAAIQ,EAAM,KAAK,EACvH,CAEF,IAAMW,EAAS,OAAO,OAAOH,EAAQ,QAAQ,EAAIA,EAAO,OAAS,OAC3DU,EAAgD,CAAC,EACnDR,EAASC,CAAM,EAAGK,EAAK,OAASL,GAElCK,EAAK,OAAS,UACdC,EAAe,KAAK,QAAQ,EAC5BC,EAAS,KAAK9B,CAAwB,GAExC,IAAM+B,EAAWf,EAAyB,OAAO,OAAOI,EAAQ,UAAU,EAAIA,EAAO,SAAW,MAAS,EACzG,OAAIW,EAAS,GAAIH,EAAK,SAAWG,EAAS,MACrCF,EAAe,KAAK,UAAU,EAC5B,CAAE,KAAAD,EAAM,eAAgBC,EAAe,SAAW3B,EAAU,OAAO,OAAS,EAAI,CAAC,GAAG,EAAI2B,EAC7F,GAAIC,EAAS,OAAS,EAAI,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CACjD,CAEO,SAASE,GAAoC,CAClD,OAAOC,EAAyB,CAC9B,KAAM,cAAe,MAAO,yEAC5B,OAAQ,CAAE,GAAI,UAAW,EAAG,aAAc,CAAE,MAAO,CAAC,UAAU,EAAG,IAAK,CAAC,UAAU,CAAE,EACnF,QAAST,CACX,CAAC,CACH",
+  "names": ["index_exports", "__export", "CMS_CONTRACT_VERSION", "SITE_HERO", "SITE_HERO_LAYOUTS", "SITE_HERO_LAYOUT_WARNING", "SITE_HERO_TAGLINE_MAX_LENGTH", "cmsTags", "defineCmsQuery", "parseSiteHero", "siteHeroQuery", "validateSiteHeroTaglines", "validateTextDocument", "__toCommonJS", "TYPE", "ID", "SCOPE", "dependenciesCopy", "dependencies", "types", "type", "ids", "id", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "cmsTags", "scope", "tags", "SITE_HERO_LAYOUTS", "SITE_HERO_TAGLINE_MAX_LENGTH", "SITE_HERO_LAYOUT_WARNING", "CMS_CONTRACT_VERSION", "SITE_HERO", "fieldError", "field", "text", "article", "word", "count", "validateTextDocument", "definition", "raw", "value", "errors", "submitted", "error", "validateSiteHeroTaglines", "heading", "keys", "item", "record", "key", "isLayout", "layout", "parseSiteHero", "fallback", "local", "localTaglines", "data", "fallbackFields", "warnings", "taglines", "siteHeroQuery", "defineCmsQuery"]
+}

package/dist/index.d.cts

@@ -0,0 +1,4 @@
+export { defineCmsQuery, cmsTags } from "./contracts/query.cjs";
+export type { CmsParams, CmsDependencies, CmsResolution, CmsQuery } from "./contracts/query.cjs";
+export { SITE_HERO, CMS_CONTRACT_VERSION, validateTextDocument, siteHeroQuery, SITE_HERO_LAYOUTS, SITE_HERO_TAGLINE_MAX_LENGTH, SITE_HERO_LAYOUT_WARNING, parseSiteHero, validateSiteHeroTaglines } from "./contracts/text.cjs";
+export type { SiteHero, ParsedSiteHero, SiteHeroLayout, SiteHeroTagline, TextFieldDefinition, TextDocumentDefinition, TextValidation } from "./contracts/text.cjs";

package/dist/index.d.mts

@@ -0,0 +1,4 @@
+export { defineCmsQuery, cmsTags } from "./contracts/query.mjs";
+export type { CmsParams, CmsDependencies, CmsResolution, CmsQuery } from "./contracts/query.mjs";
+export { SITE_HERO, CMS_CONTRACT_VERSION, validateTextDocument, siteHeroQuery, SITE_HERO_LAYOUTS, SITE_HERO_TAGLINE_MAX_LENGTH, SITE_HERO_LAYOUT_WARNING, parseSiteHero, validateSiteHeroTaglines } from "./contracts/text.mjs";
+export type { SiteHero, ParsedSiteHero, SiteHeroLayout, SiteHeroTagline, TextFieldDefinition, TextDocumentDefinition, TextValidation } from "./contracts/text.mjs";

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { defineCmsQuery, cmsTags } from "./contracts/query.js";
+export type { CmsParams, CmsDependencies, CmsResolution, CmsQuery } from "./contracts/query.js";
+export { SITE_HERO, CMS_CONTRACT_VERSION, validateTextDocument, siteHeroQuery, SITE_HERO_LAYOUTS, SITE_HERO_TAGLINE_MAX_LENGTH, SITE_HERO_LAYOUT_WARNING, parseSiteHero, validateSiteHeroTaglines } from "./contracts/text.js";
+export type { SiteHero, ParsedSiteHero, SiteHeroLayout, SiteHeroTagline, TextFieldDefinition, TextDocumentDefinition, TextValidation } from "./contracts/text.js";

package/dist/index.mjs

@@ -0,0 +1,2 @@
+var H=/^[A-Za-z][A-Za-z0-9_]{0,63}$/,O=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,k=/^[a-z0-9]{6,12}\.[a-z][a-z0-9_-]{0,63}$/;function T(e){if(!e||!Array.isArray(e.types)||e.types.length===0)throw new TypeError("CMS dependencies require document types");let t=[...e.types];for(let n of t)if(typeof n!="string"||!H.test(n))throw new TypeError("Invalid CMS document type");if(e.ids!==void 0&&!Array.isArray(e.ids))throw new TypeError("Invalid CMS document IDs");let o=e.ids===void 0?void 0:[...e.ids];for(let n of o??[])if(typeof n!="string"||!O.test(n)||/^(drafts|versions)\./.test(n))throw new TypeError("Invalid CMS document ID");if(new Set(t).size+new Set(o).size>128)throw new TypeError("Too many CMS tags");return Object.freeze({types:Object.freeze(t),...o===void 0?{}:{ids:Object.freeze(o)}})}function p(e){if(!e||typeof e.name!="string"||!/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(e.name)||typeof e.query!="string"||e.query.trim()===""||typeof e.resolve!="function")throw new TypeError("Invalid CMS query configuration");let t=e.params;if(!t||typeof t!="object"||Object.getPrototypeOf(t)!==Object.prototype&&Object.getPrototypeOf(t)!==null)throw new TypeError("CMS params must be plain JSON scalars");let o={};for(let n of Reflect.ownKeys(t)){let r=Object.getOwnPropertyDescriptor(t,n);if(typeof n!="string"||!r||!Object.hasOwn(r,"value")||!r.enumerable)throw new TypeError("CMS params must be plain JSON scalars");let i=r.value;if(!(i===null||typeof i=="string"||typeof i=="boolean"||typeof i=="number"&&Number.isFinite(i)))throw new TypeError("CMS params must be plain JSON scalars");Object.defineProperty(o,n,{value:i,enumerable:!0})}return Object.freeze({name:e.name,query:e.query,params:Object.freeze(o),dependencies:T(e.dependencies),resolve:e.resolve})}function E(e,t){if(typeof e!="string"||e.length>77||!k.test(e))throw new TypeError("Invalid CMS scope");let o=T(t),n=[...[...new Set(o.types)].sort().map(r=>`cms:${e}:type:${r}`),...[...new Set(o.ids??[])].sort().map(r=>`cms:${e}:id:${r}`)];return Object.freeze(n)}var S=["columns","rows"],w=36,b="siteHero.layout.defaulted",C=1,l={key:"hero",documentId:"siteHero",documentType:"siteHero",fields:[{name:"heading",label:"Heading",noun:{article:"a",word:"heading"},kind:"single-line",required:!0,minLength:1,maxLength:80,noTrailingFullStop:!0},{name:"intro",label:"Introduction",noun:{article:"an",word:"introduction"},kind:"multi-line",required:!0,minLength:1,maxLength:320}],copy:{currentTitle:"On your site now",editTitle:"Edit and publish",empty:"Your site has no hero text yet. Whatever you publish below becomes its first version."}};function R(e,t){let{article:o,word:n}=e.noun;if(t.length===0)return e.required?`Enter ${o} ${n}.`:null;let r=[...t].length;return r<e.minLength?`Make the ${n} at least ${String(e.minLength)} characters. It is ${String(r)} now.`:r>e.maxLength?`Keep the ${n} to ${String(e.maxLength)} characters or fewer. It is ${String(r)} now.`:t.includes("\u2014")?`The ${n} contains a long dash. Use a comma, a colon or a short dash instead.`:e.kind==="single-line"&&/[\r\n]/.test(t)?`The ${n} must be a single line.`:e.noTrailingFullStop===!0&&t.endsWith(".")?`${n.charAt(0).toUpperCase()}${n.slice(1)}s on your site do not end with a full stop. Remove the last full stop.`:null}function y(e,t){let o={},n={};for(let r of e.fields){let i=Object.hasOwn(t,r.name)?t[r.name]:void 0,a=typeof i=="string"?i.trim():"",s=R(r,a);Object.defineProperty(s===null?o:n,r.name,{value:s??a,enumerable:!0})}return Object.keys(n).length>0?{ok:!1,errors:n}:{ok:!0,value:o}}function g(e){if(!Array.isArray(e))return{ok:!1,error:"Enter a list of taglines."};let t=l.fields[0];if(!t)throw new TypeError("Missing siteHero heading definition");let o={...t,name:"text",noun:{article:"a",word:"tagline"},maxLength:w},n=[],r=new Set;for(let i of e){if(!i||typeof i!="object"||Array.isArray(i))return{ok:!1,error:"Enter a key and text for each tagline."};let a=i,s=Object.hasOwn(a,"key")?a.key:void 0;if(typeof s!="string"||!/^[a-z][a-z0-9_-]{0,31}$/.test(s))return{ok:!1,error:"Use a lowercase key of 1 to 32 letters, numbers, short dashes or underscores, starting with a letter."};if(r.has(s))return{ok:!1,error:"Use each tagline key only once."};let d=y({...l,fields:[o]},a);if(!d.ok)return{ok:!1,error:d.errors.text??"Invalid tagline."};r.add(s),n.push({key:s,text:d.value.text??""})}return{ok:!0,value:n}}function h(e){return S.some(t=>e===t)}function x(e,t){let o=y(l,t),n=g(t.taglines??[]);if(!o.ok||!n.ok||t.layout!==void 0&&!h(t.layout))throw new TypeError("Invalid siteHero fallback");let r={heading:o.value.heading??"",intro:o.value.intro??"",layout:t.layout??"columns",taglines:n.value};if(e===null||typeof e!="object"||Array.isArray(e))return{data:r,fallbackFields:["$"]};let i=e,a=y(l,i),s=a.ok?[]:Object.keys(a.errors);for(let u of l.fields)if(!s.includes(u.name)){let m=a.ok?a.value[u.name]:i[u.name];typeof m=="string"&&(u.name==="heading"||u.name==="intro")&&(r[u.name]=m.trim())}let d=Object.hasOwn(i,"layout")?i.layout:void 0,c=[];h(d)?r.layout=d:(r.layout="columns",s.push("layout"),c.push(b));let f=g(Object.hasOwn(i,"taglines")?i.taglines:void 0);return f.ok?r.taglines=f.value:s.push("taglines"),{data:r,fallbackFields:s.length===l.fields.length+2?["$"]:s,...c.length>0?{warnings:c}:{}}}function v(){return p({name:"siteHero.v1",query:'*[_id == $id && _type == "siteHero"][0]{heading,intro,layout,taglines}',params:{id:"siteHero"},dependencies:{types:["siteHero"],ids:["siteHero"]},resolve:x})}export{C as CMS_CONTRACT_VERSION,l as SITE_HERO,S as SITE_HERO_LAYOUTS,b as SITE_HERO_LAYOUT_WARNING,w as SITE_HERO_TAGLINE_MAX_LENGTH,E as cmsTags,p as defineCmsQuery,x as parseSiteHero,v as siteHeroQuery,g as validateSiteHeroTaglines,y as validateTextDocument};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/contracts/query.ts", "../src/contracts/text.ts"],
+  "sourcesContent": ["/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly \"siteHero.layout.defaulted\"[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n", "import { defineCmsQuery, type CmsQuery, type CmsResolution } from \"./query.js\";\n\nexport const SITE_HERO_LAYOUTS = [\"columns\", \"rows\"] as const;\nexport const SITE_HERO_TAGLINE_MAX_LENGTH = 36;\nexport const SITE_HERO_LAYOUT_WARNING = \"siteHero.layout.defaulted\" as const;\nexport type SiteHeroLayout = typeof SITE_HERO_LAYOUTS[number];\nexport type SiteHeroTagline = { readonly key: string; readonly text: string };\n/** Optional additions preserve existing heading/intro-only consumer fallbacks. */\nexport type SiteHero = {\n  readonly heading: string;\n  readonly intro: string;\n  readonly layout?: SiteHeroLayout;\n  readonly taglines?: readonly SiteHeroTagline[];\n};\nexport type ParsedSiteHero = SiteHero & {\n  readonly layout: SiteHeroLayout;\n  readonly taglines: readonly SiteHeroTagline[];\n};\nexport type TextFieldDefinition = {\n  readonly name: string;\n  readonly label: string;\n  readonly noun: { readonly article: \"a\" | \"an\"; readonly word: string };\n  readonly kind: \"single-line\" | \"multi-line\";\n  readonly required: boolean;\n  readonly minLength: number;\n  readonly maxLength: number;\n  readonly noTrailingFullStop?: boolean;\n};\nexport type TextDocumentDefinition = {\n  readonly key: string;\n  readonly documentId: string;\n  readonly documentType: string;\n  readonly fields: readonly TextFieldDefinition[];\n  readonly copy: {\n    readonly currentTitle: string;\n    readonly editTitle: string;\n    readonly empty: string;\n  };\n};\nexport type TextValidation =\n  | { readonly ok: true; readonly value: Readonly<Record<string, string>> }\n  | { readonly ok: false; readonly errors: Readonly<Record<string, string>> };\n\nexport const CMS_CONTRACT_VERSION = 1;\n\nexport const SITE_HERO: TextDocumentDefinition = {\n  key: \"hero\",\n  documentId: \"siteHero\",\n  documentType: \"siteHero\",\n  fields: [\n    {\n      name: \"heading\",\n      label: \"Heading\",\n      noun: { article: \"a\", word: \"heading\" },\n      kind: \"single-line\",\n      required: true,\n      minLength: 1,\n      maxLength: 80,\n      noTrailingFullStop: true,\n    },\n    {\n      name: \"intro\",\n      label: \"Introduction\",\n      noun: { article: \"an\", word: \"introduction\" },\n      kind: \"multi-line\",\n      required: true,\n      minLength: 1,\n      maxLength: 320,\n    },\n  ],\n  copy: {\n    currentTitle: \"On your site now\",\n    editTitle: \"Edit and publish\",\n    empty: \"Your site has no hero text yet. Whatever you publish below becomes its first version.\",\n  },\n};\n\nfunction fieldError(field: TextFieldDefinition, text: string): string | null {\n  const { article, word } = field.noun;\n  if (text.length === 0) return field.required ? `Enter ${article} ${word}.` : null;\n  const count = [...text].length;\n  if (count < field.minLength) return `Make the ${word} at least ${String(field.minLength)} characters. It is ${String(count)} now.`;\n  if (count > field.maxLength) return `Keep the ${word} to ${String(field.maxLength)} characters or fewer. It is ${String(count)} now.`;\n  if (text.includes(\"\\u2014\")) return `The ${word} contains a long dash. Use a comma, a colon or a short dash instead.`;\n  if (field.kind === \"single-line\" && /[\\r\\n]/.test(text)) return `The ${word} must be a single line.`;\n  if (field.noTrailingFullStop === true && text.endsWith(\".\")) {\n    return `${word.charAt(0).toUpperCase()}${word.slice(1)}s on your site do not end with a full stop. Remove the last full stop.`;\n  }\n  return null;\n}\n\nexport function validateTextDocument(\n  definition: TextDocumentDefinition, raw: Readonly<Record<string, unknown>>,\n): TextValidation {\n  const value: Record<string, string> = {};\n  const errors: Record<string, string> = {};\n  for (const field of definition.fields) {\n    const submitted = Object.hasOwn(raw, field.name) ? raw[field.name] : undefined;\n    const text = typeof submitted === \"string\" ? submitted.trim() : \"\";\n    const error = fieldError(field, text);\n    Object.defineProperty(error === null ? value : errors, field.name, { value: error ?? text, enumerable: true });\n  }\n  return Object.keys(errors).length > 0 ? { ok: false, errors } : { ok: true, value };\n}\n\n/** Shared with the schema adapter; no provider metadata is returned. */\nexport function validateSiteHeroTaglines(raw: unknown):\n  | { readonly ok: true; readonly value: readonly SiteHeroTagline[] }\n  | { readonly ok: false; readonly error: string } {\n  if (!Array.isArray(raw)) return { ok: false, error: \"Enter a list of taglines.\" };\n  const heading = SITE_HERO.fields[0];\n  if (!heading) throw new TypeError(\"Missing siteHero heading definition\");\n  const field = { ...heading, name: \"text\", noun: { article: \"a\", word: \"tagline\" } as const,\n    maxLength: SITE_HERO_TAGLINE_MAX_LENGTH };\n  const value: SiteHeroTagline[] = [];\n  const keys = new Set<string>();\n  for (const item of raw as unknown[]) {\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) return { ok: false, error: \"Enter a key and text for each tagline.\" };\n    const record = item as Record<string, unknown>;\n    const key = Object.hasOwn(record, \"key\") ? record.key : undefined;\n    if (typeof key !== \"string\" || !/^[a-z][a-z0-9_-]{0,31}$/.test(key)) {\n      return { ok: false, error: \"Use a lowercase key of 1 to 32 letters, numbers, short dashes or underscores, starting with a letter.\" };\n    }\n    if (keys.has(key)) return { ok: false, error: \"Use each tagline key only once.\" };\n    const text = validateTextDocument({ ...SITE_HERO, fields: [field] }, record);\n    if (!text.ok) return { ok: false, error: text.errors.text ?? \"Invalid tagline.\" };\n    keys.add(key);\n    value.push({ key, text: text.value.text ?? \"\" });\n  }\n  return { ok: true, value };\n}\n\nfunction isLayout(value: unknown): value is SiteHeroLayout {\n  return SITE_HERO_LAYOUTS.some((layout) => value === layout);\n}\n\n/** Strict per-field resolution: an invalid list never partially changes keyed copy. */\nexport function parseSiteHero(raw: unknown, fallback: SiteHero): CmsResolution<ParsedSiteHero> {\n  const local = validateTextDocument(SITE_HERO, fallback);\n  const localTaglines = validateSiteHeroTaglines(fallback.taglines ?? []);\n  if (!local.ok || !localTaglines.ok || (fallback.layout !== undefined && !isLayout(fallback.layout))) {\n    throw new TypeError(\"Invalid siteHero fallback\");\n  }\n  const data: { heading: string; intro: string; layout: SiteHeroLayout; taglines: readonly SiteHeroTagline[] } = {\n    heading: local.value.heading ?? \"\", intro: local.value.intro ?? \"\",\n    layout: fallback.layout ?? \"columns\", taglines: localTaglines.value,\n  };\n  if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return { data, fallbackFields: [\"$\"] };\n  const record = raw as Readonly<Record<string, unknown>>;\n  const text = validateTextDocument(SITE_HERO, record);\n  const fallbackFields: string[] = text.ok ? [] : Object.keys(text.errors);\n  for (const field of SITE_HERO.fields) {\n    if (!fallbackFields.includes(field.name)) {\n      const value = text.ok ? text.value[field.name] : record[field.name];\n      if (typeof value === \"string\" && (field.name === \"heading\" || field.name === \"intro\")) data[field.name] = value.trim();\n    }\n  }\n  const layout = Object.hasOwn(record, \"layout\") ? record.layout : undefined;\n  const warnings: (typeof SITE_HERO_LAYOUT_WARNING)[] = [];\n  if (isLayout(layout)) data.layout = layout;\n  else {\n    data.layout = \"columns\";\n    fallbackFields.push(\"layout\");\n    warnings.push(SITE_HERO_LAYOUT_WARNING);\n  }\n  const taglines = validateSiteHeroTaglines(Object.hasOwn(record, \"taglines\") ? record.taglines : undefined);\n  if (taglines.ok) data.taglines = taglines.value;\n  else fallbackFields.push(\"taglines\");\n  return { data, fallbackFields: fallbackFields.length === SITE_HERO.fields.length + 2 ? [\"$\"] : fallbackFields,\n    ...(warnings.length > 0 ? { warnings } : {}) };\n}\n\nexport function siteHeroQuery(): CmsQuery<SiteHero> {\n  return defineCmsQuery<SiteHero>({\n    name: \"siteHero.v1\", query: '*[_id == $id && _type == \"siteHero\"][0]{heading,intro,layout,taglines}',\n    params: { id: \"siteHero\" }, dependencies: { types: [\"siteHero\"], ids: [\"siteHero\"] },\n    resolve: parseSiteHero,\n  });\n}\n"],
+  "mappings": "AAmBA,IAAMA,EAAO,+BACPC,EAAK,qCACLC,EAAQ,0CAEd,SAASC,EAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACN,EAAK,KAAKM,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMG,EAAMH,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWI,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACP,EAAG,KAAKO,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIH,CAAK,EAAE,KAAO,IAAI,IAAIE,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOF,CAAK,EAAG,GAAIE,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASE,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcT,EAAiBO,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CAEO,SAASM,EAAQC,EAAeb,EAAkD,CACvF,GAAI,OAAOa,GAAU,UAAYA,EAAM,OAAS,IAAM,CAACf,EAAM,KAAKe,CAAK,EAAG,MAAM,IAAI,UAAU,mBAAmB,EACjH,IAAML,EAAST,EAAiBC,CAAY,EACtCc,EAAO,CACX,GAAG,CAAC,GAAG,IAAI,IAAIN,EAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAKN,GAAS,OAAOW,CAAK,SAASX,CAAI,EAAE,EAC9E,GAAG,CAAC,GAAG,IAAI,IAAIM,EAAO,KAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAKJ,GAAO,OAAOS,CAAK,OAAOT,CAAE,EAAE,CAC9E,EACA,OAAO,OAAO,OAAOU,CAAI,CAC3B,CCxEO,IAAMC,EAAoB,CAAC,UAAW,MAAM,EACtCC,EAA+B,GAC/BC,EAA2B,4BAuC3BC,EAAuB,EAEvBC,EAAoC,CAC/C,IAAK,OACL,WAAY,WACZ,aAAc,WACd,OAAQ,CACN,CACE,KAAM,UACN,MAAO,UACP,KAAM,CAAE,QAAS,IAAK,KAAM,SAAU,EACtC,KAAM,cACN,SAAU,GACV,UAAW,EACX,UAAW,GACX,mBAAoB,EACtB,EACA,CACE,KAAM,QACN,MAAO,eACP,KAAM,CAAE,QAAS,KAAM,KAAM,cAAe,EAC5C,KAAM,aACN,SAAU,GACV,UAAW,EACX,UAAW,GACb,CACF,EACA,KAAM,CACJ,aAAc,mBACd,UAAW,mBACX,MAAO,uFACT,CACF,EAEA,SAASC,EAAWC,EAA4BC,EAA6B,CAC3E,GAAM,CAAE,QAAAC,EAAS,KAAAC,CAAK,EAAIH,EAAM,KAChC,GAAIC,EAAK,SAAW,EAAG,OAAOD,EAAM,SAAW,SAASE,CAAO,IAAIC,CAAI,IAAM,KAC7E,IAAMC,EAAQ,CAAC,GAAGH,CAAI,EAAE,OACxB,OAAIG,EAAQJ,EAAM,UAAkB,YAAYG,CAAI,aAAa,OAAOH,EAAM,SAAS,CAAC,sBAAsB,OAAOI,CAAK,CAAC,QACvHA,EAAQJ,EAAM,UAAkB,YAAYG,CAAI,OAAO,OAAOH,EAAM,SAAS,CAAC,+BAA+B,OAAOI,CAAK,CAAC,QAC1HH,EAAK,SAAS,QAAQ,EAAU,OAAOE,CAAI,uEAC3CH,EAAM,OAAS,eAAiB,SAAS,KAAKC,CAAI,EAAU,OAAOE,CAAI,0BACvEH,EAAM,qBAAuB,IAAQC,EAAK,SAAS,GAAG,EACjD,GAAGE,EAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAGA,EAAK,MAAM,CAAC,CAAC,yEAEjD,IACT,CAEO,SAASE,EACdC,EAAoCC,EACpB,CAChB,IAAMC,EAAgC,CAAC,EACjCC,EAAiC,CAAC,EACxC,QAAWT,KAASM,EAAW,OAAQ,CACrC,IAAMI,EAAY,OAAO,OAAOH,EAAKP,EAAM,IAAI,EAAIO,EAAIP,EAAM,IAAI,EAAI,OAC/DC,EAAO,OAAOS,GAAc,SAAWA,EAAU,KAAK,EAAI,GAC1DC,EAAQZ,EAAWC,EAAOC,CAAI,EACpC,OAAO,eAAeU,IAAU,KAAOH,EAAQC,EAAQT,EAAM,KAAM,CAAE,MAAOW,GAASV,EAAM,WAAY,EAAK,CAAC,CAC/G,CACA,OAAO,OAAO,KAAKQ,CAAM,EAAE,OAAS,EAAI,CAAE,GAAI,GAAO,OAAAA,CAAO,EAAI,CAAE,GAAI,GAAM,MAAAD,CAAM,CACpF,CAGO,SAASI,EAAyBL,EAEU,CACjD,GAAI,CAAC,MAAM,QAAQA,CAAG,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,2BAA4B,EAChF,IAAMM,EAAUf,EAAU,OAAO,CAAC,EAClC,GAAI,CAACe,EAAS,MAAM,IAAI,UAAU,qCAAqC,EACvE,IAAMb,EAAQ,CAAE,GAAGa,EAAS,KAAM,OAAQ,KAAM,CAAE,QAAS,IAAK,KAAM,SAAU,EAC9E,UAAWlB,CAA6B,EACpCa,EAA2B,CAAC,EAC5BM,EAAO,IAAI,IACjB,QAAWC,KAAQR,EAAkB,CACnC,GAAI,CAACQ,GAAQ,OAAOA,GAAS,UAAY,MAAM,QAAQA,CAAI,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,wCAAyC,EAClI,IAAMC,EAASD,EACTE,EAAM,OAAO,OAAOD,EAAQ,KAAK,EAAIA,EAAO,IAAM,OACxD,GAAI,OAAOC,GAAQ,UAAY,CAAC,0BAA0B,KAAKA,CAAG,EAChE,MAAO,CAAE,GAAI,GAAO,MAAO,uGAAwG,EAErI,GAAIH,EAAK,IAAIG,CAAG,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,iCAAkC,EAChF,IAAMhB,EAAOI,EAAqB,CAAE,GAAGP,EAAW,OAAQ,CAACE,CAAK,CAAE,EAAGgB,CAAM,EAC3E,GAAI,CAACf,EAAK,GAAI,MAAO,CAAE,GAAI,GAAO,MAAOA,EAAK,OAAO,MAAQ,kBAAmB,EAChFa,EAAK,IAAIG,CAAG,EACZT,EAAM,KAAK,CAAE,IAAAS,EAAK,KAAMhB,EAAK,MAAM,MAAQ,EAAG,CAAC,CACjD,CACA,MAAO,CAAE,GAAI,GAAM,MAAAO,CAAM,CAC3B,CAEA,SAASU,EAASV,EAAyC,CACzD,OAAOd,EAAkB,KAAMyB,GAAWX,IAAUW,CAAM,CAC5D,CAGO,SAASC,EAAcb,EAAcc,EAAmD,CAC7F,IAAMC,EAAQjB,EAAqBP,EAAWuB,CAAQ,EAChDE,EAAgBX,EAAyBS,EAAS,UAAY,CAAC,CAAC,EACtE,GAAI,CAACC,EAAM,IAAM,CAACC,EAAc,IAAOF,EAAS,SAAW,QAAa,CAACH,EAASG,EAAS,MAAM,EAC/F,MAAM,IAAI,UAAU,2BAA2B,EAEjD,IAAMG,EAAyG,CAC7G,QAASF,EAAM,MAAM,SAAW,GAAI,MAAOA,EAAM,MAAM,OAAS,GAChE,OAAQD,EAAS,QAAU,UAAW,SAAUE,EAAc,KAChE,EACA,GAAIhB,IAAQ,MAAQ,OAAOA,GAAQ,UAAY,MAAM,QAAQA,CAAG,EAAG,MAAO,CAAE,KAAAiB,EAAM,eAAgB,CAAC,GAAG,CAAE,EACxG,IAAMR,EAAST,EACTN,EAAOI,EAAqBP,EAAWkB,CAAM,EAC7CS,EAA2BxB,EAAK,GAAK,CAAC,EAAI,OAAO,KAAKA,EAAK,MAAM,EACvE,QAAWD,KAASF,EAAU,OAC5B,GAAI,CAAC2B,EAAe,SAASzB,EAAM,IAAI,EAAG,CACxC,IAAMQ,EAAQP,EAAK,GAAKA,EAAK,MAAMD,EAAM,IAAI,EAAIgB,EAAOhB,EAAM,IAAI,EAC9D,OAAOQ,GAAU,WAAaR,EAAM,OAAS,WAAaA,EAAM,OAAS,WAAUwB,EAAKxB,EAAM,IAAI,EAAIQ,EAAM,KAAK,EACvH,CAEF,IAAMW,EAAS,OAAO,OAAOH,EAAQ,QAAQ,EAAIA,EAAO,OAAS,OAC3DU,EAAgD,CAAC,EACnDR,EAASC,CAAM,EAAGK,EAAK,OAASL,GAElCK,EAAK,OAAS,UACdC,EAAe,KAAK,QAAQ,EAC5BC,EAAS,KAAK9B,CAAwB,GAExC,IAAM+B,EAAWf,EAAyB,OAAO,OAAOI,EAAQ,UAAU,EAAIA,EAAO,SAAW,MAAS,EACzG,OAAIW,EAAS,GAAIH,EAAK,SAAWG,EAAS,MACrCF,EAAe,KAAK,UAAU,EAC5B,CAAE,KAAAD,EAAM,eAAgBC,EAAe,SAAW3B,EAAU,OAAO,OAAS,EAAI,CAAC,GAAG,EAAI2B,EAC7F,GAAIC,EAAS,OAAS,EAAI,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CACjD,CAEO,SAASE,GAAoC,CAClD,OAAOC,EAAyB,CAC9B,KAAM,cAAe,MAAO,yEAC5B,OAAQ,CAAE,GAAI,UAAW,EAAG,aAAc,CAAE,MAAO,CAAC,UAAU,EAAG,IAAK,CAAC,UAAU,CAAE,EACnF,QAAST,CACX,CAAC,CACH",
+  "names": ["TYPE", "ID", "SCOPE", "dependenciesCopy", "dependencies", "types", "type", "ids", "id", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "cmsTags", "scope", "tags", "SITE_HERO_LAYOUTS", "SITE_HERO_TAGLINE_MAX_LENGTH", "SITE_HERO_LAYOUT_WARNING", "CMS_CONTRACT_VERSION", "SITE_HERO", "fieldError", "field", "text", "article", "word", "count", "validateTextDocument", "definition", "raw", "value", "errors", "submitted", "error", "validateSiteHeroTaglines", "heading", "keys", "item", "record", "key", "isLayout", "layout", "parseSiteHero", "fallback", "local", "localTaglines", "data", "fallbackFields", "warnings", "taglines", "siteHeroQuery", "defineCmsQuery"]
+}

package/dist/invalidation/route.d.cts

@@ -0,0 +1,12 @@
+export type TypeToTags = Readonly<Record<string, readonly string[]>>;
+export type RevalidateRouteOptions = {
+    readonly scope: string;
+    readonly secretEnv?: string;
+    readonly previousSecretEnv?: string;
+    readonly typeToTags: TypeToTags;
+    readonly env?: () => Readonly<Record<string, string | undefined>>;
+    readonly now?: () => number;
+};
+export type CmsRouteHandler = (request: Request) => Promise<Response>;
+export type CmsRevalidateRoute = Readonly<Record<"POST" | "GET" | "HEAD" | "PUT" | "PATCH" | "DELETE" | "OPTIONS", CmsRouteHandler>>;
+export declare function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute;

package/dist/invalidation/route.d.mts

@@ -0,0 +1,12 @@
+export type TypeToTags = Readonly<Record<string, readonly string[]>>;
+export type RevalidateRouteOptions = {
+    readonly scope: string;
+    readonly secretEnv?: string;
+    readonly previousSecretEnv?: string;
+    readonly typeToTags: TypeToTags;
+    readonly env?: () => Readonly<Record<string, string | undefined>>;
+    readonly now?: () => number;
+};
+export type CmsRouteHandler = (request: Request) => Promise<Response>;
+export type CmsRevalidateRoute = Readonly<Record<"POST" | "GET" | "HEAD" | "PUT" | "PATCH" | "DELETE" | "OPTIONS", CmsRouteHandler>>;
+export declare function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute;

package/dist/invalidation/route.d.ts

@@ -0,0 +1,12 @@
+export type TypeToTags = Readonly<Record<string, readonly string[]>>;
+export type RevalidateRouteOptions = {
+    readonly scope: string;
+    readonly secretEnv?: string;
+    readonly previousSecretEnv?: string;
+    readonly typeToTags: TypeToTags;
+    readonly env?: () => Readonly<Record<string, string | undefined>>;
+    readonly now?: () => number;
+};
+export type CmsRouteHandler = (request: Request) => Promise<Response>;
+export type CmsRevalidateRoute = Readonly<Record<"POST" | "GET" | "HEAD" | "PUT" | "PATCH" | "DELETE" | "OPTIONS", CmsRouteHandler>>;
+export declare function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute;

package/dist/next.cjs

@@ -0,0 +1,2 @@
+"use strict";var R=Object.defineProperty;var j=Object.getOwnPropertyDescriptor;var z=Object.getOwnPropertyNames;var N=Object.prototype.hasOwnProperty;var F=(e,r)=>{for(var t in r)R(e,t,{get:r[t],enumerable:!0})},$=(e,r,t,n)=>{if(r&&typeof r=="object"||typeof r=="function")for(let o of z(r))!N.call(e,o)&&o!==t&&R(e,o,{get:()=>r[o],enumerable:!(n=j(r,o))||n.enumerable});return e};var U=e=>$(R({},"__esModule",{value:!0}),e);var K={};F(K,{createNextCmsReader:()=>O,createRevalidateRoute:()=>D});module.exports=U(K);var de=require("server-only");var H=/^[A-Za-z][A-Za-z0-9_]{0,63}$/,L=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,Z=/^[a-z0-9]{6,12}\.[a-z][a-z0-9_-]{0,63}$/;function k(e){if(!e||!Array.isArray(e.types)||e.types.length===0)throw new TypeError("CMS dependencies require document types");let r=[...e.types];for(let n of r)if(typeof n!="string"||!H.test(n))throw new TypeError("Invalid CMS document type");if(e.ids!==void 0&&!Array.isArray(e.ids))throw new TypeError("Invalid CMS document IDs");let t=e.ids===void 0?void 0:[...e.ids];for(let n of t??[])if(typeof n!="string"||!L.test(n)||/^(drafts|versions)\./.test(n))throw new TypeError("Invalid CMS document ID");if(new Set(r).size+new Set(t).size>128)throw new TypeError("Too many CMS tags");return Object.freeze({types:Object.freeze(r),...t===void 0?{}:{ids:Object.freeze(t)}})}function E(e){if(!e||typeof e.name!="string"||!/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(e.name)||typeof e.query!="string"||e.query.trim()===""||typeof e.resolve!="function")throw new TypeError("Invalid CMS query configuration");let r=e.params;if(!r||typeof r!="object"||Object.getPrototypeOf(r)!==Object.prototype&&Object.getPrototypeOf(r)!==null)throw new TypeError("CMS params must be plain JSON scalars");let t={};for(let n of Reflect.ownKeys(r)){let o=Object.getOwnPropertyDescriptor(r,n);if(typeof n!="string"||!o||!Object.hasOwn(o,"value")||!o.enumerable)throw new TypeError("CMS params must be plain JSON scalars");let a=o.value;if(!(a===null||typeof a=="string"||typeof a=="boolean"||typeof a=="number"&&Number.isFinite(a)))throw new TypeError("CMS params must be plain JSON scalars");Object.defineProperty(t,n,{value:a,enumerable:!0})}return Object.freeze({name:e.name,query:e.query,params:Object.freeze(t),dependencies:k(e.dependencies),resolve:e.resolve})}function T(e,r){if(typeof e!="string"||e.length>77||!Z.test(e))throw new TypeError("Invalid CMS scope");let t=k(r),n=[...[...new Set(t.types)].sort().map(o=>`cms:${e}:type:${o}`),...[...new Set(t.ids??[])].sort().map(o=>`cms:${e}:id:${o}`)];return Object.freeze(n)}function A(e){if(!e||!Object.hasOwn(e,"data")||!Array.isArray(e.fallbackFields)||![...e.fallbackFields].every(r=>typeof r=="string"&&(r==="$"||/^[A-Za-z][A-Za-z0-9_.[\]-]{0,127}$/.test(r))))throw new TypeError("Invalid CMS resolution");if(e.warnings!==void 0&&(!Array.isArray(e.warnings)||![...e.warnings].every(r=>r==="siteHero.layout.defaulted")))throw new TypeError("Invalid CMS resolution warnings");return{data:e.data,fallbackFields:Object.freeze([...new Set(e.fallbackFields)]),...e.warnings?.length?{warnings:Object.freeze([...new Set(e.warnings)])}:{}}}function S(e){let r=e?.revalidateSeconds??3600;if(!Number.isSafeInteger(r)||r<3600||!e?.adapter||typeof e.adapter.read!="function"||e.onDiagnostic!==void 0&&typeof e.onDiagnostic!="function")throw new TypeError("Invalid CMS reader configuration");let t=e.adapter;T(t.scope,{types:["ScopeValidation"]});let n=o=>{try{e.onDiagnostic?e.onDiagnostic(o):console.warn(JSON.stringify(o))}catch{}};return{async read(o,a){let s,l,d;try{if(s=E(o),d=T(t.scope,s.dependencies),!a||!Object.hasOwn(a,"fallback"))throw new TypeError;l=A(s.resolve(null,a.fallback))}catch{throw new TypeError("Invalid CMS query or fallback configuration")}let f=(g,u,m)=>(n({event:"cms.fallback",query:s.name,reason:g,fields:["$"],...u===void 0?{}:{status:u},...m?{warnings:m}:{}}),{data:l.data,source:"fallback",fallbackFields:["$"],reason:g,...m?{warnings:m}:{}}),i;try{i=await t.read({name:s.name,query:s.query,params:s.params},{tags:d,revalidateSeconds:r})}catch{return f("network")}if(!i.ok){let u=["configuration","network","timeout","rate-limit","upstream","plan-limit","permission","malformed"].includes(i.reason)?i.reason:"malformed",m=Number.isInteger(i.status)&&(i.status??0)>=100&&(i.status??0)<=599?i.status:void 0;return f(u,m)}if(i.value===null||i.value===void 0)return f("missing");let c;try{c=A(s.resolve(i.value,a.fallback))}catch{return f("malformed")}return c.fallbackFields.includes("$")?{...f("invalid-field",void 0,c.warnings),data:c.data}:c.fallbackFields.length>0?(n({event:"cms.partial-fallback",query:s.name,reason:"invalid-field",fields:c.fallbackFields,...c.warnings?{warnings:c.warnings}:{}}),{...c,source:"mixed",reason:"invalid-field"}):{...c,source:"cms"}}}}var O=S;var _=require("next/cache.js");var h="sanity-webhook-signature",Q=/^t=(\d+)[, ]+v1=([^, ]+)$/;var I=new TextEncoder;function V(e){return crypto.subtle.importKey("raw",I.encode(e),{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"])}function B(e){if(!/^[A-Za-z0-9_-]+={0,2}$/.test(e))return null;let r=e.replace(/-/g,"+").replace(/_/g,"/");try{let t=atob(r),n=new Uint8Array(t.length);for(let o=0;o<t.length;o+=1)n[o]=t.charCodeAt(o);return n}catch{return null}}async function x(e){let{secret:r,rawBody:t,headers:n}=e,o=e.now??Date.now(),a=e.toleranceMs??3e5;if(!r||r.length===0)return{ok:!1,reason:"no-secret"};let s=n.get(h);if(!s)return{ok:!1,reason:"no-signature"};let l=Q.exec(s.trim());if(l===null)return{ok:!1,reason:"malformed-signature"};let d=Number(l[1]),f=l[2]??"";if(!Number.isSafeInteger(d))return{ok:!1,reason:"malformed-signature"};if(d<16094592e5)return{ok:!1,reason:"stale-timestamp"};if(Math.abs(o-d)>a)return{ok:!1,reason:"stale-timestamp"};let i=B(f);if(i===null)return{ok:!1,reason:"malformed-signature"};let c=await V(r);return await crypto.subtle.verify("HMAC",c,i,I.encode(`${d}.${t}`))?{ok:!0}:{ok:!1,reason:"bad-signature"}}var q=16*1024,W=1500,Y=new TextEncoder;function y(e,r,t={},n=!1){return new Response(n?null:JSON.stringify(r),{status:e,headers:{"Content-Type":"application/json","Cache-Control":"no-store",...t}})}function J(e,r){if(!r||typeof r!="object"||Array.isArray(r)||Object.keys(r).length===0)throw new TypeError("Invalid CMS invalidation mapping");let t=Object.create(null);for(let n of Reflect.ownKeys(r)){let o=Object.getOwnPropertyDescriptor(r,n);if(typeof n!="string"||!o?.enumerable||!Object.hasOwn(o,"value"))throw new TypeError("Invalid CMS invalidation mapping");let a=o.value;if(!Array.isArray(a)||!a.includes(n))throw new TypeError("Invalid CMS invalidation mapping");T(e,{types:a,ids:["validation"]}),t[n]=Object.freeze([...a])}for(let n of Object.values(t))if(n.some(o=>!Object.hasOwn(t,o)))throw new TypeError("Invalid CMS invalidation mapping");return Object.freeze(t)}function M(e){return typeof e=="string"&&e.trim()!==""&&Y.encode(e).byteLength>=32}var b=class extends Error{constructor(t){super("Invalid CMS webhook body");this.status=t}status};async function G(e){let r=e.body?.getReader();if(!r)return"";let t=new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}),n,o=new Promise((a,s)=>{n=setTimeout(()=>s(new b(400)),W)});try{let a=0,s="";for(;;){let{done:l,value:d}=await Promise.race([r.read(),o]);if(l)return s+t.decode();if(a+=d.byteLength,a>q)throw new b(413);s+=t.decode(d,{stream:!0})}}catch(a){throw r.cancel().catch(()=>{}),a}finally{clearTimeout(n),r.releaseLock()}}function D(e){let r=e.scope,t=J(r,e.typeToTags),n=e.secretEnv??"SANITY_REVALIDATE_SECRET",o=e.previousSecretEnv??"SANITY_REVALIDATE_SECRET_PREVIOUS",a=e.env??(()=>process.env),s=e.now??Date.now,l=async d=>{if(d.method!=="POST")return y(405,{error:"Method not allowed"},{Allow:"POST"},d.method==="HEAD");let f,i;try{let p=a(),v=p[n],w=p[o];if(!M(v)||w!==void 0&&!M(w))throw new Error;f=v,i=w}catch{return y(503,{error:"COULD NOT ANSWER: revalidation configuration unavailable"})}let c=d.headers.get(h);if(!c||c.length>512||!/^t=\d+[, ]+v1=[A-Za-z0-9_-]+={0,2}$/.test(c.trim()))return y(401,{error:"Unauthorized"});let g;try{g=await G(d)}catch(p){return p instanceof b&&p.status===413?y(413,{error:"Payload too large"}):y(400,{error:"Invalid body"})}try{let p=s();if(!Number.isFinite(p))throw new Error;if(!(await Promise.all([f,...i===void 0?[]:[i]].map(w=>x({secret:w,rawBody:g,headers:d.headers,now:p})))).some(w=>w.ok))return y(401,{error:"Unauthorized"})}catch{return y(401,{error:"Unauthorized"})}let u;try{u=JSON.parse(g)}catch{return y(400,{error:"Invalid payload"})}if(!u||typeof u!="object"||Array.isArray(u)||Object.keys(u).length!==2||!Object.hasOwn(u,"_type")||!Object.hasOwn(u,"_id"))return y(400,{error:"Invalid payload"});let{_type:m,_id:C}=u;if(typeof m!="string"||!/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(m)||typeof C!="string"||!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(C))return y(400,{error:"Invalid payload"});if(!Object.hasOwn(t,m)||/^(drafts|versions)\./.test(C))return y(400,{error:"Unsupported document"});let P=T(r,{types:t[m],ids:[C]});try{for(let p of P)(0,_.revalidateTag)(p,{expire:0})}catch{return y(500,{error:"Could not revalidate"})}return y(200,{revalidated:!0})};return Object.freeze({POST:l,GET:l,HEAD:l,PUT:l,PATCH:l,DELETE:l,OPTIONS:l})}0&&(module.exports={createNextCmsReader,createRevalidateRoute});
+//# sourceMappingURL=next.cjs.map

package/dist/next.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/next.ts", "../src/contracts/query.ts", "../src/runtime/reader.ts", "../src/adapters/next/reader.ts", "../src/invalidation/route.ts", "../src/portable/webhook.ts"],
+  "sourcesContent": ["import \"server-only\";\nexport { createNextCmsReader } from \"./adapters/next/reader.js\";\nexport { createRevalidateRoute } from \"./invalidation/route.js\";\nexport type {\n  TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute,\n} from \"./invalidation/route.js\";\n", "/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly \"siteHero.layout.defaulted\"[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n", "import { cmsTags, defineCmsQuery, type CmsQuery, type CmsResolution } from \"../contracts/query.js\";\n\nexport type CmsFailure = \"configuration\" | \"network\" | \"timeout\" | \"rate-limit\"\n  | \"upstream\" | \"plan-limit\" | \"permission\" | \"malformed\";\nexport type CmsDiagnostic = {\n  readonly event: \"cms.fallback\" | \"cms.partial-fallback\" | \"cms.refused\";\n  readonly query: string;\n  readonly reason: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly status?: number;\n  readonly fields: readonly string[];\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsFetch = (url: string, init: RequestInit & {\n  next?: { revalidate: number; tags: string[] };\n}) => Promise<Response>;\nexport type CmsReadPolicy = {\n  readonly tags: readonly string[];\n  readonly revalidateSeconds: number;\n};\nexport type CmsAdapterResult =\n  | { readonly ok: true; readonly value: unknown }\n  | { readonly ok: false; readonly reason: CmsFailure; readonly status?: number };\nexport type CmsAdapter = {\n  readonly scope: string;\n  read(query: Pick<CmsQuery<unknown>, \"name\" | \"query\" | \"params\">,\n    policy: CmsReadPolicy): Promise<CmsAdapterResult>;\n};\nexport type CmsReadResult<T> = {\n  readonly data: T;\n  readonly source: \"cms\" | \"mixed\" | \"fallback\";\n  readonly fallbackFields: readonly string[];\n  readonly reason?: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsReaderOptions = {\n  readonly adapter: CmsAdapter;\n  readonly revalidateSeconds?: number;\n  readonly onDiagnostic?: (event: CmsDiagnostic) => void;\n};\nexport type CmsReader = {\n  read<T>(query: CmsQuery<T>, options: { readonly fallback: T }): Promise<CmsReadResult<T>>;\n};\n\nfunction resolution<T>(value: CmsResolution<T>): CmsResolution<T> {\n  if (!value || !Object.hasOwn(value, \"data\") || !Array.isArray(value.fallbackFields)\n    || ![...value.fallbackFields].every((field: unknown) => typeof field === \"string\"\n      && (field === \"$\" || /^[A-Za-z][A-Za-z0-9_.[\\]-]{0,127}$/.test(field)))) {\n    throw new TypeError(\"Invalid CMS resolution\");\n  }\n  if (value.warnings !== undefined && (!Array.isArray(value.warnings)\n    || ![...value.warnings].every((warning) => warning === \"siteHero.layout.defaulted\"))) {\n    throw new TypeError(\"Invalid CMS resolution warnings\");\n  }\n  return { data: value.data, fallbackFields: Object.freeze([...new Set(value.fallbackFields)]),\n    ...(value.warnings?.length ? { warnings: Object.freeze([...new Set(value.warnings)]) } : {}) };\n}\n\n/** Forwards cache policy; persistence and rendered-output invalidation belong to the host. */\nexport function createCmsReader(options: CmsReaderOptions): CmsReader {\n  const seconds = options?.revalidateSeconds ?? 3600;\n  if (!Number.isSafeInteger(seconds) || seconds < 3600 || !options?.adapter\n    || typeof options.adapter.read !== \"function\"\n    || (options.onDiagnostic !== undefined && typeof options.onDiagnostic !== \"function\")) {\n    throw new TypeError(\"Invalid CMS reader configuration\");\n  }\n  const adapter = options.adapter;\n  // Validate the scope without assuming any particular shared content types.\n  cmsTags(adapter.scope, { types: [\"ScopeValidation\"] });\n  const notify = (event: CmsDiagnostic): void => {\n    try {\n      if (options.onDiagnostic) options.onDiagnostic(event);\n      else console.warn(JSON.stringify(event));\n    } catch { /* Reporting must not break visitor rendering. */ }\n  };\n  return {\n    async read<T>(input: CmsQuery<T>, readOptions: { readonly fallback: T }): Promise<CmsReadResult<T>> {\n      let query: CmsQuery<T>;\n      let local: CmsResolution<T>;\n      let tags: readonly string[];\n      try {\n        query = defineCmsQuery(input);\n        tags = cmsTags(adapter.scope, query.dependencies);\n        if (!readOptions || !Object.hasOwn(readOptions, \"fallback\")) throw new TypeError();\n        // Built-in resolvers validate fallback here, before any I/O.\n        local = resolution(query.resolve(null, readOptions.fallback));\n      } catch {\n        throw new TypeError(\"Invalid CMS query or fallback configuration\");\n      }\n      const fallback = (reason: CmsFailure | \"missing\" | \"invalid-field\", status?: number, warnings?: CmsResolution<T>[\"warnings\"]): CmsReadResult<T> => {\n        notify({ event: \"cms.fallback\", query: query.name, reason, fields: [\"$\"],\n          ...(status === undefined ? {} : { status }), ...(warnings ? { warnings } : {}) });\n        return { data: local.data, source: \"fallback\", fallbackFields: [\"$\"], reason, ...(warnings ? { warnings } : {}) };\n      };\n      let result: CmsAdapterResult;\n      try {\n        result = await adapter.read({ name: query.name, query: query.query, params: query.params },\n          { tags, revalidateSeconds: seconds });\n      } catch { return fallback(\"network\"); }\n      if (!result.ok) {\n        const reasons: readonly CmsFailure[] = [\"configuration\", \"network\", \"timeout\", \"rate-limit\", \"upstream\", \"plan-limit\", \"permission\", \"malformed\"];\n        const reason = reasons.includes(result.reason) ? result.reason : \"malformed\";\n        const status = Number.isInteger(result.status) && (result.status ?? 0) >= 100 && (result.status ?? 0) <= 599 ? result.status : undefined;\n        return fallback(reason, status);\n      }\n      if (result.value === null || result.value === undefined) return fallback(\"missing\");\n      let resolved: CmsResolution<T>;\n      try { resolved = resolution(query.resolve(result.value, readOptions.fallback)); }\n      catch { return fallback(\"malformed\"); }\n      if (resolved.fallbackFields.includes(\"$\")) {\n        return { ...fallback(\"invalid-field\", undefined, resolved.warnings), data: resolved.data };\n      }\n      if (resolved.fallbackFields.length > 0) {\n        notify({ event: \"cms.partial-fallback\", query: query.name, reason: \"invalid-field\", fields: resolved.fallbackFields, ...(resolved.warnings ? { warnings: resolved.warnings } : {}) });\n        return { ...resolved, source: \"mixed\", reason: \"invalid-field\" };\n      }\n      return { ...resolved, source: \"cms\" };\n    },\n  };\n}\n", "import { createCmsReader } from \"../../runtime/reader.js\";\n\n// Keep the adapter's patched global fetch and policy intact. No second cache.\nexport const createNextCmsReader = createCmsReader;\n", "import { revalidateTag } from \"next/cache.js\";\nimport { cmsTags } from \"../contracts/query.js\";\nimport { SANITY_SIGNATURE_HEADER, verifySanityWebhook } from \"../portable/webhook.js\";\n\nexport type TypeToTags = Readonly<Record<string, readonly string[]>>;\nexport type RevalidateRouteOptions = {\n  readonly scope: string;\n  readonly secretEnv?: string;\n  readonly previousSecretEnv?: string;\n  readonly typeToTags: TypeToTags;\n  readonly env?: () => Readonly<Record<string, string | undefined>>;\n  readonly now?: () => number;\n};\nexport type CmsRouteHandler = (request: Request) => Promise<Response>;\nexport type CmsRevalidateRoute = Readonly<Record<\n  \"POST\" | \"GET\" | \"HEAD\" | \"PUT\" | \"PATCH\" | \"DELETE\" | \"OPTIONS\", CmsRouteHandler\n>>;\n\nconst BODY_LIMIT = 16 * 1024;\nconst BODY_DEADLINE_MS = 1500;\nconst encoder = new TextEncoder();\n\nfunction response(status: number, value: unknown, headers: Record<string, string> = {}, head = false): Response {\n  return new Response(head ? null : JSON.stringify(value), {\n    status, headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\", ...headers },\n  });\n}\n\nfunction copyMapping(scope: string, mapping: TypeToTags): TypeToTags {\n  if (!mapping || typeof mapping !== \"object\" || Array.isArray(mapping) || Object.keys(mapping).length === 0) {\n    throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  const copied: Record<string, readonly string[]> = Object.create(null);\n  for (const key of Reflect.ownKeys(mapping)) {\n    const descriptor = Object.getOwnPropertyDescriptor(mapping, key);\n    if (typeof key !== \"string\" || !descriptor?.enumerable || !Object.hasOwn(descriptor, \"value\")) {\n      throw new TypeError(\"Invalid CMS invalidation mapping\");\n    }\n    const types: unknown = descriptor.value;\n    if (!Array.isArray(types) || !types.includes(key)) throw new TypeError(\"Invalid CMS invalidation mapping\");\n    // Reserve the document ID tag as well as validating every local type.\n    cmsTags(scope, { types, ids: [\"validation\"] });\n    copied[key] = Object.freeze([...types] as string[]);\n  }\n  for (const types of Object.values(copied)) {\n    if (types.some((type) => !Object.hasOwn(copied, type))) throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  return Object.freeze(copied);\n}\n\nfunction validSecret(value: unknown): value is string {\n  return typeof value === \"string\" && value.trim() !== \"\" && encoder.encode(value).byteLength >= 32;\n}\n\nclass BodyFailure extends Error {\n  constructor(readonly status: 400 | 413) { super(\"Invalid CMS webhook body\"); }\n}\n\nasync function rawBody(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true });\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const deadline = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => reject(new BodyFailure(400)), BODY_DEADLINE_MS);\n  });\n  try {\n    let bytes = 0;\n    let text = \"\";\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), deadline]);\n      if (done) return text + decoder.decode();\n      bytes += value.byteLength;\n      if (bytes > BODY_LIMIT) throw new BodyFailure(413);\n      text += decoder.decode(value, { stream: true });\n    }\n  } catch (error) {\n    // Cancellation must not extend the deadline, including a stalled source.\n    void reader.cancel().catch(() => {});\n    throw error;\n  } finally {\n    clearTimeout(timer);\n    reader.releaseLock();\n  }\n}\n\nexport function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute {\n  const scope = options.scope;\n  const mapping = copyMapping(scope, options.typeToTags);\n  const secretEnv = options.secretEnv ?? \"SANITY_REVALIDATE_SECRET\";\n  const previousSecretEnv = options.previousSecretEnv ?? \"SANITY_REVALIDATE_SECRET_PREVIOUS\";\n  const env = options.env ?? (() => process.env);\n  const now = options.now ?? Date.now;\n\n  const handler: CmsRouteHandler = async (request) => {\n    if (request.method !== \"POST\") {\n      return response(405, { error: \"Method not allowed\" }, { Allow: \"POST\" }, request.method === \"HEAD\");\n    }\n    let active: string;\n    let previous: string | undefined;\n    try {\n      const values = env();\n      const activeValue = values[secretEnv];\n      const previousValue = values[previousSecretEnv];\n      if (!validSecret(activeValue) || (previousValue !== undefined && !validSecret(previousValue))) throw new Error();\n      active = activeValue;\n      previous = previousValue;\n    } catch {\n      return response(503, { error: \"COULD NOT ANSWER: revalidation configuration unavailable\" });\n    }\n    const signature = request.headers.get(SANITY_SIGNATURE_HEADER);\n    if (!signature || signature.length > 512 || !/^t=\\d+[, ]+v1=[A-Za-z0-9_-]+={0,2}$/.test(signature.trim())) {\n      return response(401, { error: \"Unauthorized\" });\n    }\n    let body: string;\n    try { body = await rawBody(request); }\n    catch (error) {\n      return error instanceof BodyFailure && error.status === 413\n        ? response(413, { error: \"Payload too large\" }) : response(400, { error: \"Invalid body\" });\n    }\n    try {\n      const clock = now();\n      if (!Number.isFinite(clock)) throw new Error();\n      const results = await Promise.all([active, ...(previous === undefined ? [] : [previous])].map((secret) =>\n        verifySanityWebhook({ secret, rawBody: body, headers: request.headers, now: clock })));\n      if (!results.some((result) => result.ok)) return response(401, { error: \"Unauthorized\" });\n    } catch { return response(401, { error: \"Unauthorized\" }); }\n\n    let payload: unknown;\n    try { payload = JSON.parse(body); }\n    catch { return response(400, { error: \"Invalid payload\" }); }\n    if (!payload || typeof payload !== \"object\" || Array.isArray(payload)\n      || Object.keys(payload).length !== 2 || !Object.hasOwn(payload, \"_type\") || !Object.hasOwn(payload, \"_id\")) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    const { _type: type, _id: id } = payload as { _type: unknown; _id: unknown };\n    if (typeof type !== \"string\" || !/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(type)\n      || typeof id !== \"string\" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id)) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    if (!Object.hasOwn(mapping, type) || /^(drafts|versions)\\./.test(id)) {\n      return response(400, { error: \"Unsupported document\" });\n    }\n    const tags = cmsTags(scope, { types: mapping[type]!, ids: [id] });\n    try {\n      for (const tag of tags) revalidateTag(tag, { expire: 0 });\n    } catch { return response(500, { error: \"Could not revalidate\" }); }\n    return response(200, { revalidated: true });\n  };\n  return Object.freeze({ POST: handler, GET: handler, HEAD: handler, PUT: handler, PATCH: handler, DELETE: handler, OPTIONS: handler });\n}\n", "/**\n * Verifying a Sanity webhook (A-590 step 1, A-592's `SANITY_WEBHOOK_SECRET`).\n *\n * -------------------------------------------------------------------------\n * WHY THIS ENDPOINT NEEDS A SIGNATURE AT ALL\n * -------------------------------------------------------------------------\n *\n * `/revalidate` throws away cache entries. A-590: \"An unauthenticated\n * revalidation endpoint is a free cache-purge and rebuild trigger for anyone\n * who finds the URL.\" On a plan whose API request allowance is a HARD cap that\n * returns 402 rather than a bill, an attacker who can empty the cache at will\n * can take a client's site content-offline for the rest of the month. So the\n * signature is not hygiene here; it is the availability control.\n *\n * -------------------------------------------------------------------------\n * THE WIRE FORMAT IS MEASURED, NOT REMEMBERED\n * -------------------------------------------------------------------------\n *\n * Read on 2026-09-16 from Sanity's own toolkit,\n * `https://raw.githubusercontent.com/sanity-io/webhook-toolkit/main/src/signature.ts`:\n *\n *   header            `sanity-webhook-signature`\n *   value             `t=<millis>,v1=<signature>`  (regex `/^t=(\\d+)[, ]+v1=([^, ]+)$/`)\n *   signed payload    `` `${timestamp}.${body}` ``\n *   algorithm         HMAC-SHA256\n *   digest encoding   base64url \u2014 standard base64 with `+`\u2192`-`, `/`\u2192`_`, padding stripped\n *   MINIMUM_TIMESTAMP 1609459200000 (2021-01-01Z), below which a value is nonsense\n *\n * `signature.test.ts` does not take that paragraph's word for it either: it\n * signs a payload with `@sanity/webhook`'s own `encodeSignatureHeader` and\n * asserts this verifier accepts it. If Sanity changes the format, that test\n * goes red rather than production quietly rejecting every webhook.\n *\n * -------------------------------------------------------------------------\n * WHAT THIS ADDS TO THE TOOLKIT, AND WHY IT IS NOT JUST IMPORTED\n * -------------------------------------------------------------------------\n *\n * Two things, both of which are `CLAUDE.md`'s \"take the safer construction\".\n *\n * First, a REPLAY WINDOW. The toolkit enforces only that the timestamp is after\n * 2021; a captured webhook is otherwise replayable forever. A replayed purge is\n * the attack in the first paragraph, executed with a request somebody was\n * legitimately sent. `verifySanityWebhook` takes a symmetric tolerance \u2014 the\n * window is symmetric for A-44's reason, since a far-future timestamp is\n * precisely how you mint a request that stays replayable for a year.\n *\n * Second, a MISSING SECRET IS A REJECTION, never a bypass. A-590 says it in as\n * many words: \"reject on absence rather than skipping the check when the secret\n * is unset.\" The degraded mode of \"no secret configured, so allow it\" is\n * produced by a deploy that forgot `wrangler secret put`, announces itself\n * nowhere, and grants strangers the purge endpoint.\n *\n * The comparison is `crypto.subtle.verify`, which compares raw digests in\n * constant time. A `===` on the base64 strings short-circuits at the first\n * differing character, which turns one 2^256 search into a few dozen sequential\n * 64-way ones against an endpoint that answers in milliseconds.\n *\n * -------------------------------------------------------------------------\n * `encodeSignatureHeader` IS ASYNC. AWAIT IT. (A-651)\n * -------------------------------------------------------------------------\n *\n * `@sanity/webhook@4.0.4` declares\n *\n *   encodeSignatureHeader(payload: string, timestamp: number, secret: string):\n *     Promise<string>\n *\n * and nothing forces you to await it. Drop the `await` and the Promise is\n * stringified into the header as the literal `[object Promise]`, which arrives\n * here, fails `SIGNATURE_VALUE`, and is rejected as `malformed-signature`. The\n * rejection is correct and the message is about the wire format, so it sends\n * you to read Sanity's header spec \u2014 the one place the bug is not. TypeScript\n * does not save you either: the value usually lands in a `Record<string,\n * string>` built by a helper, or inside a template literal, both of which take\n * a Promise without complaint.\n *\n * The rule: every call to `encodeSignatureHeader` is awaited, and the helper\n * that wraps it is `async` rather than returning the Promise for someone else\n * to forget. The content-client compatibility tests and CMS signer tests await every\n * encoder call; this note exists so the next one\n * is too, because the symptom will not tell you.\n */\n\n/** Sanity's header. Lower-cased; `Headers.get` is case-insensitive either way. */\nexport const SANITY_SIGNATURE_HEADER = \"sanity-webhook-signature\";\n\n/** Sanity's own parser, character for character. See the header. */\nconst SIGNATURE_VALUE = /^t=(\\d+)[, ]+v1=([^, ]+)$/;\n\n/** 2021-01-01T00:00:00.000Z. Sanity's `MINIMUM_TIMESTAMP`; anything earlier is not a timestamp. */\nexport const MINIMUM_TIMESTAMP = 1_609_459_200_000;\n\n/**\n * How far from `now` a webhook timestamp may be, in milliseconds.\n *\n * Five minutes rather than A-44's sixty seconds: this one crosses Sanity's\n * delivery queue rather than two NTP-synced clouds, and a retried delivery is a\n * normal event. It is still a window rather than \"forever\", which is the whole\n * difference from the toolkit.\n */\nexport const DEFAULT_TOLERANCE_MS = 300_000;\n\nexport type WebhookRejection =\n  /** `SANITY_WEBHOOK_SECRET` is unset or empty. Fail closed. */\n  | \"no-secret\"\n  /** No `sanity-webhook-signature` header. */\n  | \"no-signature\"\n  /** Header present but not `t=\u2026,v1=\u2026`, or `v1` is not decodable base64url. */\n  | \"malformed-signature\"\n  /** Before 2021, or outside the tolerance in either direction. */\n  | \"stale-timestamp\"\n  /** Well-formed, in window, wrong. */\n  | \"bad-signature\";\n\nexport type WebhookVerification = { ok: true } | { ok: false; reason: WebhookRejection };\n\nconst encoder = new TextEncoder();\n\nfunction hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\n/**\n * base64url \u2192 bytes, without `Buffer`.\n *\n * `atob` rather than `node:crypto` or `Buffer` because this file is imported by\n * the Worker, and workerd has neither by default. Returns null rather than\n * throwing on rubbish, so a malformed header is a 401 and not a 500 \u2014 a\n * verifier that crashes on bad input is a verifier an attacker can use as a\n * denial of service.\n */\nfunction base64UrlToBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  if (!/^[A-Za-z0-9_-]+={0,2}$/.test(value)) return null;\n  const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  try {\n    const binary = atob(padded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);\n    return bytes;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Verify a Sanity webhook delivery.\n *\n * `rawBody` must be the bytes as received \u2014 `await request.text()`, never\n * `JSON.stringify(await request.json())`. A parse-and-restringify is not a\n * byte-for-byte round trip (key order, number formatting, whitespace) and one\n * byte changes the whole digest, so the symptom is every webhook failing after\n * a refactor that looked like tidying.\n *\n * The `reason` is for our logs and our tests. It is never returned to the\n * caller: \"your signature was fine but your clock is stale\" is the next step in\n * an attack, handed over free.\n */\nexport async function verifySanityWebhook(options: {\n  secret: string | undefined;\n  rawBody: string;\n  headers: { get(name: string): string | null };\n  now?: number;\n  toleranceMs?: number;\n}): Promise<WebhookVerification> {\n  const { secret, rawBody, headers } = options;\n  const now = options.now ?? Date.now();\n  const toleranceMs = options.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n\n  if (!secret || secret.length === 0) return { ok: false, reason: \"no-secret\" };\n\n  const header = headers.get(SANITY_SIGNATURE_HEADER);\n  if (!header) return { ok: false, reason: \"no-signature\" };\n\n  const match = SIGNATURE_VALUE.exec(header.trim());\n  if (match === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const timestamp = Number(match[1]);\n  const provided = match[2] ?? \"\";\n  if (!Number.isSafeInteger(timestamp)) return { ok: false, reason: \"malformed-signature\" };\n  if (timestamp < MINIMUM_TIMESTAMP) return { ok: false, reason: \"stale-timestamp\" };\n  if (Math.abs(now - timestamp) > toleranceMs) return { ok: false, reason: \"stale-timestamp\" };\n\n  const signature = base64UrlToBytes(provided);\n  if (signature === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const key = await hmacKey(secret);\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    signature,\n    encoder.encode(`${timestamp}.${rawBody}`),\n  );\n  return valid ? { ok: true } : { ok: false, reason: \"bad-signature\" };\n}\n"],
+  "mappings": "yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,yBAAAE,EAAA,0BAAAC,IAAA,eAAAC,EAAAJ,GAAA,IAAAK,GAAO,uBCmBP,IAAMC,EAAO,+BACPC,EAAK,qCACLC,EAAQ,0CAEd,SAASC,EAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACN,EAAK,KAAKM,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMG,EAAMH,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWI,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACP,EAAG,KAAKO,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIH,CAAK,EAAE,KAAO,IAAI,IAAIE,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOF,CAAK,EAAG,GAAIE,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASE,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcT,EAAiBO,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CAEO,SAASM,EAAQC,EAAeb,EAAkD,CACvF,GAAI,OAAOa,GAAU,UAAYA,EAAM,OAAS,IAAM,CAACf,EAAM,KAAKe,CAAK,EAAG,MAAM,IAAI,UAAU,mBAAmB,EACjH,IAAML,EAAST,EAAiBC,CAAY,EACtCc,EAAO,CACX,GAAG,CAAC,GAAG,IAAI,IAAIN,EAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAKN,GAAS,OAAOW,CAAK,SAASX,CAAI,EAAE,EAC9E,GAAG,CAAC,GAAG,IAAI,IAAIM,EAAO,KAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAKJ,GAAO,OAAOS,CAAK,OAAOT,CAAE,EAAE,CAC9E,EACA,OAAO,OAAO,OAAOU,CAAI,CAC3B,CC/BA,SAASC,EAAcC,EAA2C,CAChE,GAAI,CAACA,GAAS,CAAC,OAAO,OAAOA,EAAO,MAAM,GAAK,CAAC,MAAM,QAAQA,EAAM,cAAc,GAC7E,CAAC,CAAC,GAAGA,EAAM,cAAc,EAAE,MAAOC,GAAmB,OAAOA,GAAU,WACnEA,IAAU,KAAO,qCAAqC,KAAKA,CAAK,EAAE,EACxE,MAAM,IAAI,UAAU,wBAAwB,EAE9C,GAAID,EAAM,WAAa,SAAc,CAAC,MAAM,QAAQA,EAAM,QAAQ,GAC7D,CAAC,CAAC,GAAGA,EAAM,QAAQ,EAAE,MAAOE,GAAYA,IAAY,2BAA2B,GAClF,MAAM,IAAI,UAAU,iCAAiC,EAEvD,MAAO,CAAE,KAAMF,EAAM,KAAM,eAAgB,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,cAAc,CAAC,CAAC,EACzF,GAAIA,EAAM,UAAU,OAAS,CAAE,SAAU,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,QAAQ,CAAC,CAAC,CAAE,EAAI,CAAC,CAAG,CACjG,CAGO,SAASG,EAAgBC,EAAsC,CACpE,IAAMC,EAAUD,GAAS,mBAAqB,KAC9C,GAAI,CAAC,OAAO,cAAcC,CAAO,GAAKA,EAAU,MAAQ,CAACD,GAAS,SAC7D,OAAOA,EAAQ,QAAQ,MAAS,YAC/BA,EAAQ,eAAiB,QAAa,OAAOA,EAAQ,cAAiB,WAC1E,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAME,EAAUF,EAAQ,QAExBG,EAAQD,EAAQ,MAAO,CAAE,MAAO,CAAC,iBAAiB,CAAE,CAAC,EACrD,IAAME,EAAUC,GAA+B,CAC7C,GAAI,CACEL,EAAQ,aAAcA,EAAQ,aAAaK,CAAK,EAC/C,QAAQ,KAAK,KAAK,UAAUA,CAAK,CAAC,CACzC,MAAQ,CAAoD,CAC9D,EACA,MAAO,CACL,MAAM,KAAQC,EAAoBC,EAAkE,CAClG,IAAIC,EACAC,EACAC,EACJ,GAAI,CAGF,GAFAF,EAAQG,EAAeL,CAAK,EAC5BI,EAAOP,EAAQD,EAAQ,MAAOM,EAAM,YAAY,EAC5C,CAACD,GAAe,CAAC,OAAO,OAAOA,EAAa,UAAU,EAAG,MAAM,IAAI,UAEvEE,EAAQd,EAAWa,EAAM,QAAQ,KAAMD,EAAY,QAAQ,CAAC,CAC9D,MAAQ,CACN,MAAM,IAAI,UAAU,6CAA6C,CACnE,CACA,IAAMK,EAAW,CAACC,EAAkDC,EAAiBC,KACnFX,EAAO,CAAE,MAAO,eAAgB,MAAOI,EAAM,KAAM,OAAAK,EAAQ,OAAQ,CAAC,GAAG,EACrE,GAAIC,IAAW,OAAY,CAAC,EAAI,CAAE,OAAAA,CAAO,EAAI,GAAIC,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CAAC,EAC3E,CAAE,KAAMN,EAAM,KAAM,OAAQ,WAAY,eAAgB,CAAC,GAAG,EAAG,OAAAI,EAAQ,GAAIE,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,GAE9GC,EACJ,GAAI,CACFA,EAAS,MAAMd,EAAQ,KAAK,CAAE,KAAMM,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQA,EAAM,MAAO,EACvF,CAAE,KAAAE,EAAM,kBAAmBT,CAAQ,CAAC,CACxC,MAAQ,CAAE,OAAOW,EAAS,SAAS,CAAG,CACtC,GAAI,CAACI,EAAO,GAAI,CAEd,IAAMH,EADiC,CAAC,gBAAiB,UAAW,UAAW,aAAc,WAAY,aAAc,aAAc,WAAW,EACzH,SAASG,EAAO,MAAM,EAAIA,EAAO,OAAS,YAC3DF,EAAS,OAAO,UAAUE,EAAO,MAAM,IAAMA,EAAO,QAAU,IAAM,MAAQA,EAAO,QAAU,IAAM,IAAMA,EAAO,OAAS,OAC/H,OAAOJ,EAASC,EAAQC,CAAM,CAChC,CACA,GAAIE,EAAO,QAAU,MAAQA,EAAO,QAAU,OAAW,OAAOJ,EAAS,SAAS,EAClF,IAAIK,EACJ,GAAI,CAAEA,EAAWtB,EAAWa,EAAM,QAAQQ,EAAO,MAAOT,EAAY,QAAQ,CAAC,CAAG,MAC1E,CAAE,OAAOK,EAAS,WAAW,CAAG,CACtC,OAAIK,EAAS,eAAe,SAAS,GAAG,EAC/B,CAAE,GAAGL,EAAS,gBAAiB,OAAWK,EAAS,QAAQ,EAAG,KAAMA,EAAS,IAAK,EAEvFA,EAAS,eAAe,OAAS,GACnCb,EAAO,CAAE,MAAO,uBAAwB,MAAOI,EAAM,KAAM,OAAQ,gBAAiB,OAAQS,EAAS,eAAgB,GAAIA,EAAS,SAAW,CAAE,SAAUA,EAAS,QAAS,EAAI,CAAC,CAAG,CAAC,EAC7K,CAAE,GAAGA,EAAU,OAAQ,QAAS,OAAQ,eAAgB,GAE1D,CAAE,GAAGA,EAAU,OAAQ,KAAM,CACtC,CACF,CACF,CCnHO,IAAMC,EAAsBC,ECHnC,IAAAC,EAA8B,yBCmFvB,IAAMC,EAA0B,2BAGjCC,EAAkB,4BA6BxB,IAAMC,EAAU,IAAI,YAEpB,SAASC,EAAQC,EAAoC,CACnD,OAAO,OAAO,OAAO,UACnB,MACAF,EAAQ,OAAOE,CAAM,EACrB,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,OAAQ,QAAQ,CACnB,CACF,CAWA,SAASC,EAAiBC,EAA+C,CACvE,GAAI,CAAC,yBAAyB,KAAKA,CAAK,EAAG,OAAO,KAClD,IAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACzD,GAAI,CACF,IAAME,EAAS,KAAKD,CAAM,EACpBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,GAAK,EAAGD,EAAMC,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACzE,OAAOD,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAeA,eAAsBE,EAAoBC,EAMT,CAC/B,GAAM,CAAE,OAAAR,EAAQ,QAAAS,EAAS,QAAAC,CAAQ,EAAIF,EAC/BG,EAAMH,EAAQ,KAAO,KAAK,IAAI,EAC9BI,EAAcJ,EAAQ,aAAe,IAE3C,GAAI,CAACR,GAAUA,EAAO,SAAW,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,WAAY,EAE5E,IAAMa,EAASH,EAAQ,IAAII,CAAuB,EAClD,GAAI,CAACD,EAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,EAExD,IAAME,EAAQC,EAAgB,KAAKH,EAAO,KAAK,CAAC,EAChD,GAAIE,IAAU,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAEtE,IAAME,EAAY,OAAOF,EAAM,CAAC,CAAC,EAC3BG,EAAWH,EAAM,CAAC,GAAK,GAC7B,GAAI,CAAC,OAAO,cAAcE,CAAS,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EACxF,GAAIA,EAAY,WAAmB,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACjF,GAAI,KAAK,IAAIN,EAAMM,CAAS,EAAIL,EAAa,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EAE3F,IAAMO,EAAYlB,EAAiBiB,CAAQ,EAC3C,GAAIC,IAAc,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAE1E,IAAMC,EAAM,MAAMrB,EAAQC,CAAM,EAOhC,OANc,MAAM,OAAO,OAAO,OAChC,OACAoB,EACAD,EACArB,EAAQ,OAAO,GAAGmB,CAAS,IAAIR,CAAO,EAAE,CAC1C,EACe,CAAE,GAAI,EAAK,EAAI,CAAE,GAAI,GAAO,OAAQ,eAAgB,CACrE,CDpLA,IAAMY,EAAa,GAAK,KAClBC,EAAmB,KACnBC,EAAU,IAAI,YAEpB,SAASC,EAASC,EAAgBC,EAAgBC,EAAkC,CAAC,EAAGC,EAAO,GAAiB,CAC9G,OAAO,IAAI,SAASA,EAAO,KAAO,KAAK,UAAUF,CAAK,EAAG,CACvD,OAAAD,EAAQ,QAAS,CAAE,eAAgB,mBAAoB,gBAAiB,WAAY,GAAGE,CAAQ,CACjG,CAAC,CACH,CAEA,SAASE,EAAYC,EAAeC,EAAiC,CACnE,GAAI,CAACA,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAAK,OAAO,KAAKA,CAAO,EAAE,SAAW,EACvG,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAA4C,OAAO,OAAO,IAAI,EACpE,QAAWC,KAAO,QAAQ,QAAQF,CAAO,EAAG,CAC1C,IAAMG,EAAa,OAAO,yBAAyBH,EAASE,CAAG,EAC/D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAY,YAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,EAC1F,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAAiBD,EAAW,MAClC,GAAI,CAAC,MAAM,QAAQC,CAAK,GAAK,CAACA,EAAM,SAASF,CAAG,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEzGG,EAAQN,EAAO,CAAE,MAAAK,EAAO,IAAK,CAAC,YAAY,CAAE,CAAC,EAC7CH,EAAOC,CAAG,EAAI,OAAO,OAAO,CAAC,GAAGE,CAAK,CAAa,CACpD,CACA,QAAWA,KAAS,OAAO,OAAOH,CAAM,EACtC,GAAIG,EAAM,KAAME,GAAS,CAAC,OAAO,OAAOL,EAAQK,CAAI,CAAC,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEhH,OAAO,OAAO,OAAOL,CAAM,CAC7B,CAEA,SAASM,EAAYZ,EAAiC,CACpD,OAAO,OAAOA,GAAU,UAAYA,EAAM,KAAK,IAAM,IAAMH,EAAQ,OAAOG,CAAK,EAAE,YAAc,EACjG,CAEA,IAAMa,EAAN,cAA0B,KAAM,CAC9B,YAAqBd,EAAmB,CAAE,MAAM,0BAA0B,EAArD,YAAAA,CAAwD,CAAxD,MACvB,EAEA,eAAee,EAAQC,EAAmC,CACxD,IAAMC,EAASD,EAAQ,MAAM,UAAU,EACvC,GAAI,CAACC,EAAQ,MAAO,GACpB,IAAMC,EAAU,IAAI,YAAY,QAAS,CAAE,MAAO,GAAM,UAAW,EAAK,CAAC,EACrEC,EACEC,EAAW,IAAI,QAAe,CAACC,EAAUC,IAAW,CACxDH,EAAQ,WAAW,IAAMG,EAAO,IAAIR,EAAY,GAAG,CAAC,EAAGjB,CAAgB,CACzE,CAAC,EACD,GAAI,CACF,IAAI0B,EAAQ,EACRC,EAAO,GACX,OAAa,CACX,GAAM,CAAE,KAAAC,EAAM,MAAAxB,CAAM,EAAI,MAAM,QAAQ,KAAK,CAACgB,EAAO,KAAK,EAAGG,CAAQ,CAAC,EACpE,GAAIK,EAAM,OAAOD,EAAON,EAAQ,OAAO,EAEvC,GADAK,GAAStB,EAAM,WACXsB,EAAQ3B,EAAY,MAAM,IAAIkB,EAAY,GAAG,EACjDU,GAAQN,EAAQ,OAAOjB,EAAO,CAAE,OAAQ,EAAK,CAAC,CAChD,CACF,OAASyB,EAAO,CAEd,MAAKT,EAAO,OAAO,EAAE,MAAM,IAAM,CAAC,CAAC,EAC7BS,CACR,QAAE,CACA,aAAaP,CAAK,EAClBF,EAAO,YAAY,CACrB,CACF,CAEO,SAASU,EAAsBC,EAAqD,CACzF,IAAMvB,EAAQuB,EAAQ,MAChBtB,EAAUF,EAAYC,EAAOuB,EAAQ,UAAU,EAC/CC,EAAYD,EAAQ,WAAa,2BACjCE,EAAoBF,EAAQ,mBAAqB,oCACjDG,EAAMH,EAAQ,MAAQ,IAAM,QAAQ,KACpCI,EAAMJ,EAAQ,KAAO,KAAK,IAE1BK,EAA2B,MAAOjB,GAAY,CAClD,GAAIA,EAAQ,SAAW,OACrB,OAAOjB,EAAS,IAAK,CAAE,MAAO,oBAAqB,EAAG,CAAE,MAAO,MAAO,EAAGiB,EAAQ,SAAW,MAAM,EAEpG,IAAIkB,EACAC,EACJ,GAAI,CACF,IAAMC,EAASL,EAAI,EACbM,EAAcD,EAAOP,CAAS,EAC9BS,EAAgBF,EAAON,CAAiB,EAC9C,GAAI,CAACjB,EAAYwB,CAAW,GAAMC,IAAkB,QAAa,CAACzB,EAAYyB,CAAa,EAAI,MAAM,IAAI,MACzGJ,EAASG,EACTF,EAAWG,CACb,MAAQ,CACN,OAAOvC,EAAS,IAAK,CAAE,MAAO,0DAA2D,CAAC,CAC5F,CACA,IAAMwC,EAAYvB,EAAQ,QAAQ,IAAIwB,CAAuB,EAC7D,GAAI,CAACD,GAAaA,EAAU,OAAS,KAAO,CAAC,sCAAsC,KAAKA,EAAU,KAAK,CAAC,EACtG,OAAOxC,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,EAEhD,IAAI0C,EACJ,GAAI,CAAEA,EAAO,MAAM1B,EAAQC,CAAO,CAAG,OAC9BU,EAAO,CACZ,OAAOA,aAAiBZ,GAAeY,EAAM,SAAW,IACpD3B,EAAS,IAAK,CAAE,MAAO,mBAAoB,CAAC,EAAIA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC7F,CACA,GAAI,CACF,IAAM2C,EAAQV,EAAI,EAClB,GAAI,CAAC,OAAO,SAASU,CAAK,EAAG,MAAM,IAAI,MAGvC,GAAI,EAFY,MAAM,QAAQ,IAAI,CAACR,EAAQ,GAAIC,IAAa,OAAY,CAAC,EAAI,CAACA,CAAQ,CAAE,EAAE,IAAKQ,GAC7FC,EAAoB,CAAE,OAAAD,EAAQ,QAASF,EAAM,QAASzB,EAAQ,QAAS,IAAK0B,CAAM,CAAC,CAAC,CAAC,GAC1E,KAAMG,GAAWA,EAAO,EAAE,EAAG,OAAO9C,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC1F,MAAQ,CAAE,OAAOA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAAG,CAE3D,IAAI+C,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAML,CAAI,CAAG,MAC5B,CAAE,OAAO1C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,CAAG,CAC5D,GAAI,CAAC+C,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAC/D,OAAO,KAAKA,CAAO,EAAE,SAAW,GAAK,CAAC,OAAO,OAAOA,EAAS,OAAO,GAAK,CAAC,OAAO,OAAOA,EAAS,KAAK,EACzG,OAAO/C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAM,CAAE,MAAOa,EAAM,IAAKmC,CAAG,EAAID,EACjC,GAAI,OAAOlC,GAAS,UAAY,CAAC,+BAA+B,KAAKA,CAAI,GACpE,OAAOmC,GAAO,UAAY,CAAC,qCAAqC,KAAKA,CAAE,EAC1E,OAAOhD,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAI,CAAC,OAAO,OAAOO,EAASM,CAAI,GAAK,uBAAuB,KAAKmC,CAAE,EACjE,OAAOhD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,EAExD,IAAMiD,EAAOrC,EAAQN,EAAO,CAAE,MAAOC,EAAQM,CAAI,EAAI,IAAK,CAACmC,CAAE,CAAE,CAAC,EAChE,GAAI,CACF,QAAWE,KAAOD,KAAM,iBAAcC,EAAK,CAAE,OAAQ,CAAE,CAAC,CAC1D,MAAQ,CAAE,OAAOlD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,CAAG,CACnE,OAAOA,EAAS,IAAK,CAAE,YAAa,EAAK,CAAC,CAC5C,EACA,OAAO,OAAO,OAAO,CAAE,KAAMkC,EAAS,IAAKA,EAAS,KAAMA,EAAS,IAAKA,EAAS,MAAOA,EAAS,OAAQA,EAAS,QAASA,CAAQ,CAAC,CACtI",
+  "names": ["next_exports", "__export", "createNextCmsReader", "createRevalidateRoute", "__toCommonJS", "import_server_only", "TYPE", "ID", "SCOPE", "dependenciesCopy", "dependencies", "types", "type", "ids", "id", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "cmsTags", "scope", "tags", "resolution", "value", "field", "warning", "createCmsReader", "options", "seconds", "adapter", "cmsTags", "notify", "event", "input", "readOptions", "query", "local", "tags", "defineCmsQuery", "fallback", "reason", "status", "warnings", "result", "resolved", "createNextCmsReader", "createCmsReader", "import_cache", "SANITY_SIGNATURE_HEADER", "SIGNATURE_VALUE", "encoder", "hmacKey", "secret", "base64UrlToBytes", "value", "padded", "binary", "bytes", "i", "verifySanityWebhook", "options", "rawBody", "headers", "now", "toleranceMs", "header", "SANITY_SIGNATURE_HEADER", "match", "SIGNATURE_VALUE", "timestamp", "provided", "signature", "key", "BODY_LIMIT", "BODY_DEADLINE_MS", "encoder", "response", "status", "value", "headers", "head", "copyMapping", "scope", "mapping", "copied", "key", "descriptor", "types", "cmsTags", "type", "validSecret", "BodyFailure", "rawBody", "request", "reader", "decoder", "timer", "deadline", "_resolve", "reject", "bytes", "text", "done", "error", "createRevalidateRoute", "options", "secretEnv", "previousSecretEnv", "env", "now", "handler", "active", "previous", "values", "activeValue", "previousValue", "signature", "SANITY_SIGNATURE_HEADER", "body", "clock", "secret", "verifySanityWebhook", "result", "payload", "id", "tags", "tag"]
+}

package/dist/next.d.cts

@@ -0,0 +1,4 @@
+import "server-only";
+export { createNextCmsReader } from "./adapters/next/reader.cjs";
+export { createRevalidateRoute } from "./invalidation/route.cjs";
+export type { TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute, } from "./invalidation/route.cjs";

package/dist/next.d.mts

@@ -0,0 +1,4 @@
+import "server-only";
+export { createNextCmsReader } from "./adapters/next/reader.mjs";
+export { createRevalidateRoute } from "./invalidation/route.mjs";
+export type { TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute, } from "./invalidation/route.mjs";

package/dist/next.d.ts

@@ -0,0 +1,4 @@
+import "server-only";
+export { createNextCmsReader } from "./adapters/next/reader.js";
+export { createRevalidateRoute } from "./invalidation/route.js";
+export type { TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute, } from "./invalidation/route.js";

package/dist/next.mjs

@@ -0,0 +1,2 @@
+import"server-only";var M=/^[A-Za-z][A-Za-z0-9_]{0,63}$/,_=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,D=/^[a-z0-9]{6,12}\.[a-z][a-z0-9_-]{0,63}$/;function h(e){if(!e||!Array.isArray(e.types)||e.types.length===0)throw new TypeError("CMS dependencies require document types");let r=[...e.types];for(let n of r)if(typeof n!="string"||!M.test(n))throw new TypeError("Invalid CMS document type");if(e.ids!==void 0&&!Array.isArray(e.ids))throw new TypeError("Invalid CMS document IDs");let t=e.ids===void 0?void 0:[...e.ids];for(let n of t??[])if(typeof n!="string"||!_.test(n)||/^(drafts|versions)\./.test(n))throw new TypeError("Invalid CMS document ID");if(new Set(r).size+new Set(t).size>128)throw new TypeError("Too many CMS tags");return Object.freeze({types:Object.freeze(r),...t===void 0?{}:{ids:Object.freeze(t)}})}function k(e){if(!e||typeof e.name!="string"||!/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(e.name)||typeof e.query!="string"||e.query.trim()===""||typeof e.resolve!="function")throw new TypeError("Invalid CMS query configuration");let r=e.params;if(!r||typeof r!="object"||Object.getPrototypeOf(r)!==Object.prototype&&Object.getPrototypeOf(r)!==null)throw new TypeError("CMS params must be plain JSON scalars");let t={};for(let n of Reflect.ownKeys(r)){let o=Object.getOwnPropertyDescriptor(r,n);if(typeof n!="string"||!o||!Object.hasOwn(o,"value")||!o.enumerable)throw new TypeError("CMS params must be plain JSON scalars");let a=o.value;if(!(a===null||typeof a=="string"||typeof a=="boolean"||typeof a=="number"&&Number.isFinite(a)))throw new TypeError("CMS params must be plain JSON scalars");Object.defineProperty(t,n,{value:a,enumerable:!0})}return Object.freeze({name:e.name,query:e.query,params:Object.freeze(t),dependencies:h(e.dependencies),resolve:e.resolve})}function T(e,r){if(typeof e!="string"||e.length>77||!D.test(e))throw new TypeError("Invalid CMS scope");let t=h(r),n=[...[...new Set(t.types)].sort().map(o=>`cms:${e}:type:${o}`),...[...new Set(t.ids??[])].sort().map(o=>`cms:${e}:id:${o}`)];return Object.freeze(n)}function E(e){if(!e||!Object.hasOwn(e,"data")||!Array.isArray(e.fallbackFields)||![...e.fallbackFields].every(r=>typeof r=="string"&&(r==="$"||/^[A-Za-z][A-Za-z0-9_.[\]-]{0,127}$/.test(r))))throw new TypeError("Invalid CMS resolution");if(e.warnings!==void 0&&(!Array.isArray(e.warnings)||![...e.warnings].every(r=>r==="siteHero.layout.defaulted")))throw new TypeError("Invalid CMS resolution warnings");return{data:e.data,fallbackFields:Object.freeze([...new Set(e.fallbackFields)]),...e.warnings?.length?{warnings:Object.freeze([...new Set(e.warnings)])}:{}}}function A(e){let r=e?.revalidateSeconds??3600;if(!Number.isSafeInteger(r)||r<3600||!e?.adapter||typeof e.adapter.read!="function"||e.onDiagnostic!==void 0&&typeof e.onDiagnostic!="function")throw new TypeError("Invalid CMS reader configuration");let t=e.adapter;T(t.scope,{types:["ScopeValidation"]});let n=o=>{try{e.onDiagnostic?e.onDiagnostic(o):console.warn(JSON.stringify(o))}catch{}};return{async read(o,a){let s,l,d;try{if(s=k(o),d=T(t.scope,s.dependencies),!a||!Object.hasOwn(a,"fallback"))throw new TypeError;l=E(s.resolve(null,a.fallback))}catch{throw new TypeError("Invalid CMS query or fallback configuration")}let f=(g,u,m)=>(n({event:"cms.fallback",query:s.name,reason:g,fields:["$"],...u===void 0?{}:{status:u},...m?{warnings:m}:{}}),{data:l.data,source:"fallback",fallbackFields:["$"],reason:g,...m?{warnings:m}:{}}),i;try{i=await t.read({name:s.name,query:s.query,params:s.params},{tags:d,revalidateSeconds:r})}catch{return f("network")}if(!i.ok){let u=["configuration","network","timeout","rate-limit","upstream","plan-limit","permission","malformed"].includes(i.reason)?i.reason:"malformed",m=Number.isInteger(i.status)&&(i.status??0)>=100&&(i.status??0)<=599?i.status:void 0;return f(u,m)}if(i.value===null||i.value===void 0)return f("missing");let c;try{c=E(s.resolve(i.value,a.fallback))}catch{return f("malformed")}return c.fallbackFields.includes("$")?{...f("invalid-field",void 0,c.warnings),data:c.data}:c.fallbackFields.length>0?(n({event:"cms.partial-fallback",query:s.name,reason:"invalid-field",fields:c.fallbackFields,...c.warnings?{warnings:c.warnings}:{}}),{...c,source:"mixed",reason:"invalid-field"}):{...c,source:"cms"}}}}var P=A;import{revalidateTag as F}from"next/cache.js";var R="sanity-webhook-signature",j=/^t=(\d+)[, ]+v1=([^, ]+)$/;var S=new TextEncoder;function z(e){return crypto.subtle.importKey("raw",S.encode(e),{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"])}function N(e){if(!/^[A-Za-z0-9_-]+={0,2}$/.test(e))return null;let r=e.replace(/-/g,"+").replace(/_/g,"/");try{let t=atob(r),n=new Uint8Array(t.length);for(let o=0;o<t.length;o+=1)n[o]=t.charCodeAt(o);return n}catch{return null}}async function O(e){let{secret:r,rawBody:t,headers:n}=e,o=e.now??Date.now(),a=e.toleranceMs??3e5;if(!r||r.length===0)return{ok:!1,reason:"no-secret"};let s=n.get(R);if(!s)return{ok:!1,reason:"no-signature"};let l=j.exec(s.trim());if(l===null)return{ok:!1,reason:"malformed-signature"};let d=Number(l[1]),f=l[2]??"";if(!Number.isSafeInteger(d))return{ok:!1,reason:"malformed-signature"};if(d<16094592e5)return{ok:!1,reason:"stale-timestamp"};if(Math.abs(o-d)>a)return{ok:!1,reason:"stale-timestamp"};let i=N(f);if(i===null)return{ok:!1,reason:"malformed-signature"};let c=await z(r);return await crypto.subtle.verify("HMAC",c,i,S.encode(`${d}.${t}`))?{ok:!0}:{ok:!1,reason:"bad-signature"}}var $=16*1024,U=1500,H=new TextEncoder;function y(e,r,t={},n=!1){return new Response(n?null:JSON.stringify(r),{status:e,headers:{"Content-Type":"application/json","Cache-Control":"no-store",...t}})}function L(e,r){if(!r||typeof r!="object"||Array.isArray(r)||Object.keys(r).length===0)throw new TypeError("Invalid CMS invalidation mapping");let t=Object.create(null);for(let n of Reflect.ownKeys(r)){let o=Object.getOwnPropertyDescriptor(r,n);if(typeof n!="string"||!o?.enumerable||!Object.hasOwn(o,"value"))throw new TypeError("Invalid CMS invalidation mapping");let a=o.value;if(!Array.isArray(a)||!a.includes(n))throw new TypeError("Invalid CMS invalidation mapping");T(e,{types:a,ids:["validation"]}),t[n]=Object.freeze([...a])}for(let n of Object.values(t))if(n.some(o=>!Object.hasOwn(t,o)))throw new TypeError("Invalid CMS invalidation mapping");return Object.freeze(t)}function I(e){return typeof e=="string"&&e.trim()!==""&&H.encode(e).byteLength>=32}var b=class extends Error{constructor(t){super("Invalid CMS webhook body");this.status=t}status};async function Z(e){let r=e.body?.getReader();if(!r)return"";let t=new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}),n,o=new Promise((a,s)=>{n=setTimeout(()=>s(new b(400)),U)});try{let a=0,s="";for(;;){let{done:l,value:d}=await Promise.race([r.read(),o]);if(l)return s+t.decode();if(a+=d.byteLength,a>$)throw new b(413);s+=t.decode(d,{stream:!0})}}catch(a){throw r.cancel().catch(()=>{}),a}finally{clearTimeout(n),r.releaseLock()}}function Q(e){let r=e.scope,t=L(r,e.typeToTags),n=e.secretEnv??"SANITY_REVALIDATE_SECRET",o=e.previousSecretEnv??"SANITY_REVALIDATE_SECRET_PREVIOUS",a=e.env??(()=>process.env),s=e.now??Date.now,l=async d=>{if(d.method!=="POST")return y(405,{error:"Method not allowed"},{Allow:"POST"},d.method==="HEAD");let f,i;try{let p=a(),v=p[n],w=p[o];if(!I(v)||w!==void 0&&!I(w))throw new Error;f=v,i=w}catch{return y(503,{error:"COULD NOT ANSWER: revalidation configuration unavailable"})}let c=d.headers.get(R);if(!c||c.length>512||!/^t=\d+[, ]+v1=[A-Za-z0-9_-]+={0,2}$/.test(c.trim()))return y(401,{error:"Unauthorized"});let g;try{g=await Z(d)}catch(p){return p instanceof b&&p.status===413?y(413,{error:"Payload too large"}):y(400,{error:"Invalid body"})}try{let p=s();if(!Number.isFinite(p))throw new Error;if(!(await Promise.all([f,...i===void 0?[]:[i]].map(w=>O({secret:w,rawBody:g,headers:d.headers,now:p})))).some(w=>w.ok))return y(401,{error:"Unauthorized"})}catch{return y(401,{error:"Unauthorized"})}let u;try{u=JSON.parse(g)}catch{return y(400,{error:"Invalid payload"})}if(!u||typeof u!="object"||Array.isArray(u)||Object.keys(u).length!==2||!Object.hasOwn(u,"_type")||!Object.hasOwn(u,"_id"))return y(400,{error:"Invalid payload"});let{_type:m,_id:C}=u;if(typeof m!="string"||!/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(m)||typeof C!="string"||!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(C))return y(400,{error:"Invalid payload"});if(!Object.hasOwn(t,m)||/^(drafts|versions)\./.test(C))return y(400,{error:"Unsupported document"});let x=T(r,{types:t[m],ids:[C]});try{for(let p of x)F(p,{expire:0})}catch{return y(500,{error:"Could not revalidate"})}return y(200,{revalidated:!0})};return Object.freeze({POST:l,GET:l,HEAD:l,PUT:l,PATCH:l,DELETE:l,OPTIONS:l})}export{P as createNextCmsReader,Q as createRevalidateRoute};
+//# sourceMappingURL=next.mjs.map

package/dist/next.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/next.ts", "../src/contracts/query.ts", "../src/runtime/reader.ts", "../src/adapters/next/reader.ts", "../src/invalidation/route.ts", "../src/portable/webhook.ts"],
+  "sourcesContent": ["import \"server-only\";\nexport { createNextCmsReader } from \"./adapters/next/reader.js\";\nexport { createRevalidateRoute } from \"./invalidation/route.js\";\nexport type {\n  TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute,\n} from \"./invalidation/route.js\";\n", "/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly \"siteHero.layout.defaulted\"[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n", "import { cmsTags, defineCmsQuery, type CmsQuery, type CmsResolution } from \"../contracts/query.js\";\n\nexport type CmsFailure = \"configuration\" | \"network\" | \"timeout\" | \"rate-limit\"\n  | \"upstream\" | \"plan-limit\" | \"permission\" | \"malformed\";\nexport type CmsDiagnostic = {\n  readonly event: \"cms.fallback\" | \"cms.partial-fallback\" | \"cms.refused\";\n  readonly query: string;\n  readonly reason: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly status?: number;\n  readonly fields: readonly string[];\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsFetch = (url: string, init: RequestInit & {\n  next?: { revalidate: number; tags: string[] };\n}) => Promise<Response>;\nexport type CmsReadPolicy = {\n  readonly tags: readonly string[];\n  readonly revalidateSeconds: number;\n};\nexport type CmsAdapterResult =\n  | { readonly ok: true; readonly value: unknown }\n  | { readonly ok: false; readonly reason: CmsFailure; readonly status?: number };\nexport type CmsAdapter = {\n  readonly scope: string;\n  read(query: Pick<CmsQuery<unknown>, \"name\" | \"query\" | \"params\">,\n    policy: CmsReadPolicy): Promise<CmsAdapterResult>;\n};\nexport type CmsReadResult<T> = {\n  readonly data: T;\n  readonly source: \"cms\" | \"mixed\" | \"fallback\";\n  readonly fallbackFields: readonly string[];\n  readonly reason?: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsReaderOptions = {\n  readonly adapter: CmsAdapter;\n  readonly revalidateSeconds?: number;\n  readonly onDiagnostic?: (event: CmsDiagnostic) => void;\n};\nexport type CmsReader = {\n  read<T>(query: CmsQuery<T>, options: { readonly fallback: T }): Promise<CmsReadResult<T>>;\n};\n\nfunction resolution<T>(value: CmsResolution<T>): CmsResolution<T> {\n  if (!value || !Object.hasOwn(value, \"data\") || !Array.isArray(value.fallbackFields)\n    || ![...value.fallbackFields].every((field: unknown) => typeof field === \"string\"\n      && (field === \"$\" || /^[A-Za-z][A-Za-z0-9_.[\\]-]{0,127}$/.test(field)))) {\n    throw new TypeError(\"Invalid CMS resolution\");\n  }\n  if (value.warnings !== undefined && (!Array.isArray(value.warnings)\n    || ![...value.warnings].every((warning) => warning === \"siteHero.layout.defaulted\"))) {\n    throw new TypeError(\"Invalid CMS resolution warnings\");\n  }\n  return { data: value.data, fallbackFields: Object.freeze([...new Set(value.fallbackFields)]),\n    ...(value.warnings?.length ? { warnings: Object.freeze([...new Set(value.warnings)]) } : {}) };\n}\n\n/** Forwards cache policy; persistence and rendered-output invalidation belong to the host. */\nexport function createCmsReader(options: CmsReaderOptions): CmsReader {\n  const seconds = options?.revalidateSeconds ?? 3600;\n  if (!Number.isSafeInteger(seconds) || seconds < 3600 || !options?.adapter\n    || typeof options.adapter.read !== \"function\"\n    || (options.onDiagnostic !== undefined && typeof options.onDiagnostic !== \"function\")) {\n    throw new TypeError(\"Invalid CMS reader configuration\");\n  }\n  const adapter = options.adapter;\n  // Validate the scope without assuming any particular shared content types.\n  cmsTags(adapter.scope, { types: [\"ScopeValidation\"] });\n  const notify = (event: CmsDiagnostic): void => {\n    try {\n      if (options.onDiagnostic) options.onDiagnostic(event);\n      else console.warn(JSON.stringify(event));\n    } catch { /* Reporting must not break visitor rendering. */ }\n  };\n  return {\n    async read<T>(input: CmsQuery<T>, readOptions: { readonly fallback: T }): Promise<CmsReadResult<T>> {\n      let query: CmsQuery<T>;\n      let local: CmsResolution<T>;\n      let tags: readonly string[];\n      try {\n        query = defineCmsQuery(input);\n        tags = cmsTags(adapter.scope, query.dependencies);\n        if (!readOptions || !Object.hasOwn(readOptions, \"fallback\")) throw new TypeError();\n        // Built-in resolvers validate fallback here, before any I/O.\n        local = resolution(query.resolve(null, readOptions.fallback));\n      } catch {\n        throw new TypeError(\"Invalid CMS query or fallback configuration\");\n      }\n      const fallback = (reason: CmsFailure | \"missing\" | \"invalid-field\", status?: number, warnings?: CmsResolution<T>[\"warnings\"]): CmsReadResult<T> => {\n        notify({ event: \"cms.fallback\", query: query.name, reason, fields: [\"$\"],\n          ...(status === undefined ? {} : { status }), ...(warnings ? { warnings } : {}) });\n        return { data: local.data, source: \"fallback\", fallbackFields: [\"$\"], reason, ...(warnings ? { warnings } : {}) };\n      };\n      let result: CmsAdapterResult;\n      try {\n        result = await adapter.read({ name: query.name, query: query.query, params: query.params },\n          { tags, revalidateSeconds: seconds });\n      } catch { return fallback(\"network\"); }\n      if (!result.ok) {\n        const reasons: readonly CmsFailure[] = [\"configuration\", \"network\", \"timeout\", \"rate-limit\", \"upstream\", \"plan-limit\", \"permission\", \"malformed\"];\n        const reason = reasons.includes(result.reason) ? result.reason : \"malformed\";\n        const status = Number.isInteger(result.status) && (result.status ?? 0) >= 100 && (result.status ?? 0) <= 599 ? result.status : undefined;\n        return fallback(reason, status);\n      }\n      if (result.value === null || result.value === undefined) return fallback(\"missing\");\n      let resolved: CmsResolution<T>;\n      try { resolved = resolution(query.resolve(result.value, readOptions.fallback)); }\n      catch { return fallback(\"malformed\"); }\n      if (resolved.fallbackFields.includes(\"$\")) {\n        return { ...fallback(\"invalid-field\", undefined, resolved.warnings), data: resolved.data };\n      }\n      if (resolved.fallbackFields.length > 0) {\n        notify({ event: \"cms.partial-fallback\", query: query.name, reason: \"invalid-field\", fields: resolved.fallbackFields, ...(resolved.warnings ? { warnings: resolved.warnings } : {}) });\n        return { ...resolved, source: \"mixed\", reason: \"invalid-field\" };\n      }\n      return { ...resolved, source: \"cms\" };\n    },\n  };\n}\n", "import { createCmsReader } from \"../../runtime/reader.js\";\n\n// Keep the adapter's patched global fetch and policy intact. No second cache.\nexport const createNextCmsReader = createCmsReader;\n", "import { revalidateTag } from \"next/cache.js\";\nimport { cmsTags } from \"../contracts/query.js\";\nimport { SANITY_SIGNATURE_HEADER, verifySanityWebhook } from \"../portable/webhook.js\";\n\nexport type TypeToTags = Readonly<Record<string, readonly string[]>>;\nexport type RevalidateRouteOptions = {\n  readonly scope: string;\n  readonly secretEnv?: string;\n  readonly previousSecretEnv?: string;\n  readonly typeToTags: TypeToTags;\n  readonly env?: () => Readonly<Record<string, string | undefined>>;\n  readonly now?: () => number;\n};\nexport type CmsRouteHandler = (request: Request) => Promise<Response>;\nexport type CmsRevalidateRoute = Readonly<Record<\n  \"POST\" | \"GET\" | \"HEAD\" | \"PUT\" | \"PATCH\" | \"DELETE\" | \"OPTIONS\", CmsRouteHandler\n>>;\n\nconst BODY_LIMIT = 16 * 1024;\nconst BODY_DEADLINE_MS = 1500;\nconst encoder = new TextEncoder();\n\nfunction response(status: number, value: unknown, headers: Record<string, string> = {}, head = false): Response {\n  return new Response(head ? null : JSON.stringify(value), {\n    status, headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\", ...headers },\n  });\n}\n\nfunction copyMapping(scope: string, mapping: TypeToTags): TypeToTags {\n  if (!mapping || typeof mapping !== \"object\" || Array.isArray(mapping) || Object.keys(mapping).length === 0) {\n    throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  const copied: Record<string, readonly string[]> = Object.create(null);\n  for (const key of Reflect.ownKeys(mapping)) {\n    const descriptor = Object.getOwnPropertyDescriptor(mapping, key);\n    if (typeof key !== \"string\" || !descriptor?.enumerable || !Object.hasOwn(descriptor, \"value\")) {\n      throw new TypeError(\"Invalid CMS invalidation mapping\");\n    }\n    const types: unknown = descriptor.value;\n    if (!Array.isArray(types) || !types.includes(key)) throw new TypeError(\"Invalid CMS invalidation mapping\");\n    // Reserve the document ID tag as well as validating every local type.\n    cmsTags(scope, { types, ids: [\"validation\"] });\n    copied[key] = Object.freeze([...types] as string[]);\n  }\n  for (const types of Object.values(copied)) {\n    if (types.some((type) => !Object.hasOwn(copied, type))) throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  return Object.freeze(copied);\n}\n\nfunction validSecret(value: unknown): value is string {\n  return typeof value === \"string\" && value.trim() !== \"\" && encoder.encode(value).byteLength >= 32;\n}\n\nclass BodyFailure extends Error {\n  constructor(readonly status: 400 | 413) { super(\"Invalid CMS webhook body\"); }\n}\n\nasync function rawBody(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true });\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const deadline = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => reject(new BodyFailure(400)), BODY_DEADLINE_MS);\n  });\n  try {\n    let bytes = 0;\n    let text = \"\";\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), deadline]);\n      if (done) return text + decoder.decode();\n      bytes += value.byteLength;\n      if (bytes > BODY_LIMIT) throw new BodyFailure(413);\n      text += decoder.decode(value, { stream: true });\n    }\n  } catch (error) {\n    // Cancellation must not extend the deadline, including a stalled source.\n    void reader.cancel().catch(() => {});\n    throw error;\n  } finally {\n    clearTimeout(timer);\n    reader.releaseLock();\n  }\n}\n\nexport function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute {\n  const scope = options.scope;\n  const mapping = copyMapping(scope, options.typeToTags);\n  const secretEnv = options.secretEnv ?? \"SANITY_REVALIDATE_SECRET\";\n  const previousSecretEnv = options.previousSecretEnv ?? \"SANITY_REVALIDATE_SECRET_PREVIOUS\";\n  const env = options.env ?? (() => process.env);\n  const now = options.now ?? Date.now;\n\n  const handler: CmsRouteHandler = async (request) => {\n    if (request.method !== \"POST\") {\n      return response(405, { error: \"Method not allowed\" }, { Allow: \"POST\" }, request.method === \"HEAD\");\n    }\n    let active: string;\n    let previous: string | undefined;\n    try {\n      const values = env();\n      const activeValue = values[secretEnv];\n      const previousValue = values[previousSecretEnv];\n      if (!validSecret(activeValue) || (previousValue !== undefined && !validSecret(previousValue))) throw new Error();\n      active = activeValue;\n      previous = previousValue;\n    } catch {\n      return response(503, { error: \"COULD NOT ANSWER: revalidation configuration unavailable\" });\n    }\n    const signature = request.headers.get(SANITY_SIGNATURE_HEADER);\n    if (!signature || signature.length > 512 || !/^t=\\d+[, ]+v1=[A-Za-z0-9_-]+={0,2}$/.test(signature.trim())) {\n      return response(401, { error: \"Unauthorized\" });\n    }\n    let body: string;\n    try { body = await rawBody(request); }\n    catch (error) {\n      return error instanceof BodyFailure && error.status === 413\n        ? response(413, { error: \"Payload too large\" }) : response(400, { error: \"Invalid body\" });\n    }\n    try {\n      const clock = now();\n      if (!Number.isFinite(clock)) throw new Error();\n      const results = await Promise.all([active, ...(previous === undefined ? [] : [previous])].map((secret) =>\n        verifySanityWebhook({ secret, rawBody: body, headers: request.headers, now: clock })));\n      if (!results.some((result) => result.ok)) return response(401, { error: \"Unauthorized\" });\n    } catch { return response(401, { error: \"Unauthorized\" }); }\n\n    let payload: unknown;\n    try { payload = JSON.parse(body); }\n    catch { return response(400, { error: \"Invalid payload\" }); }\n    if (!payload || typeof payload !== \"object\" || Array.isArray(payload)\n      || Object.keys(payload).length !== 2 || !Object.hasOwn(payload, \"_type\") || !Object.hasOwn(payload, \"_id\")) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    const { _type: type, _id: id } = payload as { _type: unknown; _id: unknown };\n    if (typeof type !== \"string\" || !/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(type)\n      || typeof id !== \"string\" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id)) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    if (!Object.hasOwn(mapping, type) || /^(drafts|versions)\\./.test(id)) {\n      return response(400, { error: \"Unsupported document\" });\n    }\n    const tags = cmsTags(scope, { types: mapping[type]!, ids: [id] });\n    try {\n      for (const tag of tags) revalidateTag(tag, { expire: 0 });\n    } catch { return response(500, { error: \"Could not revalidate\" }); }\n    return response(200, { revalidated: true });\n  };\n  return Object.freeze({ POST: handler, GET: handler, HEAD: handler, PUT: handler, PATCH: handler, DELETE: handler, OPTIONS: handler });\n}\n", "/**\n * Verifying a Sanity webhook (A-590 step 1, A-592's `SANITY_WEBHOOK_SECRET`).\n *\n * -------------------------------------------------------------------------\n * WHY THIS ENDPOINT NEEDS A SIGNATURE AT ALL\n * -------------------------------------------------------------------------\n *\n * `/revalidate` throws away cache entries. A-590: \"An unauthenticated\n * revalidation endpoint is a free cache-purge and rebuild trigger for anyone\n * who finds the URL.\" On a plan whose API request allowance is a HARD cap that\n * returns 402 rather than a bill, an attacker who can empty the cache at will\n * can take a client's site content-offline for the rest of the month. So the\n * signature is not hygiene here; it is the availability control.\n *\n * -------------------------------------------------------------------------\n * THE WIRE FORMAT IS MEASURED, NOT REMEMBERED\n * -------------------------------------------------------------------------\n *\n * Read on 2026-09-16 from Sanity's own toolkit,\n * `https://raw.githubusercontent.com/sanity-io/webhook-toolkit/main/src/signature.ts`:\n *\n *   header            `sanity-webhook-signature`\n *   value             `t=<millis>,v1=<signature>`  (regex `/^t=(\\d+)[, ]+v1=([^, ]+)$/`)\n *   signed payload    `` `${timestamp}.${body}` ``\n *   algorithm         HMAC-SHA256\n *   digest encoding   base64url \u2014 standard base64 with `+`\u2192`-`, `/`\u2192`_`, padding stripped\n *   MINIMUM_TIMESTAMP 1609459200000 (2021-01-01Z), below which a value is nonsense\n *\n * `signature.test.ts` does not take that paragraph's word for it either: it\n * signs a payload with `@sanity/webhook`'s own `encodeSignatureHeader` and\n * asserts this verifier accepts it. If Sanity changes the format, that test\n * goes red rather than production quietly rejecting every webhook.\n *\n * -------------------------------------------------------------------------\n * WHAT THIS ADDS TO THE TOOLKIT, AND WHY IT IS NOT JUST IMPORTED\n * -------------------------------------------------------------------------\n *\n * Two things, both of which are `CLAUDE.md`'s \"take the safer construction\".\n *\n * First, a REPLAY WINDOW. The toolkit enforces only that the timestamp is after\n * 2021; a captured webhook is otherwise replayable forever. A replayed purge is\n * the attack in the first paragraph, executed with a request somebody was\n * legitimately sent. `verifySanityWebhook` takes a symmetric tolerance \u2014 the\n * window is symmetric for A-44's reason, since a far-future timestamp is\n * precisely how you mint a request that stays replayable for a year.\n *\n * Second, a MISSING SECRET IS A REJECTION, never a bypass. A-590 says it in as\n * many words: \"reject on absence rather than skipping the check when the secret\n * is unset.\" The degraded mode of \"no secret configured, so allow it\" is\n * produced by a deploy that forgot `wrangler secret put`, announces itself\n * nowhere, and grants strangers the purge endpoint.\n *\n * The comparison is `crypto.subtle.verify`, which compares raw digests in\n * constant time. A `===` on the base64 strings short-circuits at the first\n * differing character, which turns one 2^256 search into a few dozen sequential\n * 64-way ones against an endpoint that answers in milliseconds.\n *\n * -------------------------------------------------------------------------\n * `encodeSignatureHeader` IS ASYNC. AWAIT IT. (A-651)\n * -------------------------------------------------------------------------\n *\n * `@sanity/webhook@4.0.4` declares\n *\n *   encodeSignatureHeader(payload: string, timestamp: number, secret: string):\n *     Promise<string>\n *\n * and nothing forces you to await it. Drop the `await` and the Promise is\n * stringified into the header as the literal `[object Promise]`, which arrives\n * here, fails `SIGNATURE_VALUE`, and is rejected as `malformed-signature`. The\n * rejection is correct and the message is about the wire format, so it sends\n * you to read Sanity's header spec \u2014 the one place the bug is not. TypeScript\n * does not save you either: the value usually lands in a `Record<string,\n * string>` built by a helper, or inside a template literal, both of which take\n * a Promise without complaint.\n *\n * The rule: every call to `encodeSignatureHeader` is awaited, and the helper\n * that wraps it is `async` rather than returning the Promise for someone else\n * to forget. The content-client compatibility tests and CMS signer tests await every\n * encoder call; this note exists so the next one\n * is too, because the symptom will not tell you.\n */\n\n/** Sanity's header. Lower-cased; `Headers.get` is case-insensitive either way. */\nexport const SANITY_SIGNATURE_HEADER = \"sanity-webhook-signature\";\n\n/** Sanity's own parser, character for character. See the header. */\nconst SIGNATURE_VALUE = /^t=(\\d+)[, ]+v1=([^, ]+)$/;\n\n/** 2021-01-01T00:00:00.000Z. Sanity's `MINIMUM_TIMESTAMP`; anything earlier is not a timestamp. */\nexport const MINIMUM_TIMESTAMP = 1_609_459_200_000;\n\n/**\n * How far from `now` a webhook timestamp may be, in milliseconds.\n *\n * Five minutes rather than A-44's sixty seconds: this one crosses Sanity's\n * delivery queue rather than two NTP-synced clouds, and a retried delivery is a\n * normal event. It is still a window rather than \"forever\", which is the whole\n * difference from the toolkit.\n */\nexport const DEFAULT_TOLERANCE_MS = 300_000;\n\nexport type WebhookRejection =\n  /** `SANITY_WEBHOOK_SECRET` is unset or empty. Fail closed. */\n  | \"no-secret\"\n  /** No `sanity-webhook-signature` header. */\n  | \"no-signature\"\n  /** Header present but not `t=\u2026,v1=\u2026`, or `v1` is not decodable base64url. */\n  | \"malformed-signature\"\n  /** Before 2021, or outside the tolerance in either direction. */\n  | \"stale-timestamp\"\n  /** Well-formed, in window, wrong. */\n  | \"bad-signature\";\n\nexport type WebhookVerification = { ok: true } | { ok: false; reason: WebhookRejection };\n\nconst encoder = new TextEncoder();\n\nfunction hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\n/**\n * base64url \u2192 bytes, without `Buffer`.\n *\n * `atob` rather than `node:crypto` or `Buffer` because this file is imported by\n * the Worker, and workerd has neither by default. Returns null rather than\n * throwing on rubbish, so a malformed header is a 401 and not a 500 \u2014 a\n * verifier that crashes on bad input is a verifier an attacker can use as a\n * denial of service.\n */\nfunction base64UrlToBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  if (!/^[A-Za-z0-9_-]+={0,2}$/.test(value)) return null;\n  const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  try {\n    const binary = atob(padded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);\n    return bytes;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Verify a Sanity webhook delivery.\n *\n * `rawBody` must be the bytes as received \u2014 `await request.text()`, never\n * `JSON.stringify(await request.json())`. A parse-and-restringify is not a\n * byte-for-byte round trip (key order, number formatting, whitespace) and one\n * byte changes the whole digest, so the symptom is every webhook failing after\n * a refactor that looked like tidying.\n *\n * The `reason` is for our logs and our tests. It is never returned to the\n * caller: \"your signature was fine but your clock is stale\" is the next step in\n * an attack, handed over free.\n */\nexport async function verifySanityWebhook(options: {\n  secret: string | undefined;\n  rawBody: string;\n  headers: { get(name: string): string | null };\n  now?: number;\n  toleranceMs?: number;\n}): Promise<WebhookVerification> {\n  const { secret, rawBody, headers } = options;\n  const now = options.now ?? Date.now();\n  const toleranceMs = options.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n\n  if (!secret || secret.length === 0) return { ok: false, reason: \"no-secret\" };\n\n  const header = headers.get(SANITY_SIGNATURE_HEADER);\n  if (!header) return { ok: false, reason: \"no-signature\" };\n\n  const match = SIGNATURE_VALUE.exec(header.trim());\n  if (match === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const timestamp = Number(match[1]);\n  const provided = match[2] ?? \"\";\n  if (!Number.isSafeInteger(timestamp)) return { ok: false, reason: \"malformed-signature\" };\n  if (timestamp < MINIMUM_TIMESTAMP) return { ok: false, reason: \"stale-timestamp\" };\n  if (Math.abs(now - timestamp) > toleranceMs) return { ok: false, reason: \"stale-timestamp\" };\n\n  const signature = base64UrlToBytes(provided);\n  if (signature === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const key = await hmacKey(secret);\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    signature,\n    encoder.encode(`${timestamp}.${rawBody}`),\n  );\n  return valid ? { ok: true } : { ok: false, reason: \"bad-signature\" };\n}\n"],
+  "mappings": "AAAA,MAAO,cCmBP,IAAMA,EAAO,+BACPC,EAAK,qCACLC,EAAQ,0CAEd,SAASC,EAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACN,EAAK,KAAKM,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMG,EAAMH,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWI,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACP,EAAG,KAAKO,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIH,CAAK,EAAE,KAAO,IAAI,IAAIE,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOF,CAAK,EAAG,GAAIE,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASE,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcT,EAAiBO,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CAEO,SAASM,EAAQC,EAAeb,EAAkD,CACvF,GAAI,OAAOa,GAAU,UAAYA,EAAM,OAAS,IAAM,CAACf,EAAM,KAAKe,CAAK,EAAG,MAAM,IAAI,UAAU,mBAAmB,EACjH,IAAML,EAAST,EAAiBC,CAAY,EACtCc,EAAO,CACX,GAAG,CAAC,GAAG,IAAI,IAAIN,EAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAKN,GAAS,OAAOW,CAAK,SAASX,CAAI,EAAE,EAC9E,GAAG,CAAC,GAAG,IAAI,IAAIM,EAAO,KAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAKJ,GAAO,OAAOS,CAAK,OAAOT,CAAE,EAAE,CAC9E,EACA,OAAO,OAAO,OAAOU,CAAI,CAC3B,CC/BA,SAASC,EAAcC,EAA2C,CAChE,GAAI,CAACA,GAAS,CAAC,OAAO,OAAOA,EAAO,MAAM,GAAK,CAAC,MAAM,QAAQA,EAAM,cAAc,GAC7E,CAAC,CAAC,GAAGA,EAAM,cAAc,EAAE,MAAOC,GAAmB,OAAOA,GAAU,WACnEA,IAAU,KAAO,qCAAqC,KAAKA,CAAK,EAAE,EACxE,MAAM,IAAI,UAAU,wBAAwB,EAE9C,GAAID,EAAM,WAAa,SAAc,CAAC,MAAM,QAAQA,EAAM,QAAQ,GAC7D,CAAC,CAAC,GAAGA,EAAM,QAAQ,EAAE,MAAOE,GAAYA,IAAY,2BAA2B,GAClF,MAAM,IAAI,UAAU,iCAAiC,EAEvD,MAAO,CAAE,KAAMF,EAAM,KAAM,eAAgB,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,cAAc,CAAC,CAAC,EACzF,GAAIA,EAAM,UAAU,OAAS,CAAE,SAAU,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,QAAQ,CAAC,CAAC,CAAE,EAAI,CAAC,CAAG,CACjG,CAGO,SAASG,EAAgBC,EAAsC,CACpE,IAAMC,EAAUD,GAAS,mBAAqB,KAC9C,GAAI,CAAC,OAAO,cAAcC,CAAO,GAAKA,EAAU,MAAQ,CAACD,GAAS,SAC7D,OAAOA,EAAQ,QAAQ,MAAS,YAC/BA,EAAQ,eAAiB,QAAa,OAAOA,EAAQ,cAAiB,WAC1E,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAME,EAAUF,EAAQ,QAExBG,EAAQD,EAAQ,MAAO,CAAE,MAAO,CAAC,iBAAiB,CAAE,CAAC,EACrD,IAAME,EAAUC,GAA+B,CAC7C,GAAI,CACEL,EAAQ,aAAcA,EAAQ,aAAaK,CAAK,EAC/C,QAAQ,KAAK,KAAK,UAAUA,CAAK,CAAC,CACzC,MAAQ,CAAoD,CAC9D,EACA,MAAO,CACL,MAAM,KAAQC,EAAoBC,EAAkE,CAClG,IAAIC,EACAC,EACAC,EACJ,GAAI,CAGF,GAFAF,EAAQG,EAAeL,CAAK,EAC5BI,EAAOP,EAAQD,EAAQ,MAAOM,EAAM,YAAY,EAC5C,CAACD,GAAe,CAAC,OAAO,OAAOA,EAAa,UAAU,EAAG,MAAM,IAAI,UAEvEE,EAAQd,EAAWa,EAAM,QAAQ,KAAMD,EAAY,QAAQ,CAAC,CAC9D,MAAQ,CACN,MAAM,IAAI,UAAU,6CAA6C,CACnE,CACA,IAAMK,EAAW,CAACC,EAAkDC,EAAiBC,KACnFX,EAAO,CAAE,MAAO,eAAgB,MAAOI,EAAM,KAAM,OAAAK,EAAQ,OAAQ,CAAC,GAAG,EACrE,GAAIC,IAAW,OAAY,CAAC,EAAI,CAAE,OAAAA,CAAO,EAAI,GAAIC,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CAAC,EAC3E,CAAE,KAAMN,EAAM,KAAM,OAAQ,WAAY,eAAgB,CAAC,GAAG,EAAG,OAAAI,EAAQ,GAAIE,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,GAE9GC,EACJ,GAAI,CACFA,EAAS,MAAMd,EAAQ,KAAK,CAAE,KAAMM,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQA,EAAM,MAAO,EACvF,CAAE,KAAAE,EAAM,kBAAmBT,CAAQ,CAAC,CACxC,MAAQ,CAAE,OAAOW,EAAS,SAAS,CAAG,CACtC,GAAI,CAACI,EAAO,GAAI,CAEd,IAAMH,EADiC,CAAC,gBAAiB,UAAW,UAAW,aAAc,WAAY,aAAc,aAAc,WAAW,EACzH,SAASG,EAAO,MAAM,EAAIA,EAAO,OAAS,YAC3DF,EAAS,OAAO,UAAUE,EAAO,MAAM,IAAMA,EAAO,QAAU,IAAM,MAAQA,EAAO,QAAU,IAAM,IAAMA,EAAO,OAAS,OAC/H,OAAOJ,EAASC,EAAQC,CAAM,CAChC,CACA,GAAIE,EAAO,QAAU,MAAQA,EAAO,QAAU,OAAW,OAAOJ,EAAS,SAAS,EAClF,IAAIK,EACJ,GAAI,CAAEA,EAAWtB,EAAWa,EAAM,QAAQQ,EAAO,MAAOT,EAAY,QAAQ,CAAC,CAAG,MAC1E,CAAE,OAAOK,EAAS,WAAW,CAAG,CACtC,OAAIK,EAAS,eAAe,SAAS,GAAG,EAC/B,CAAE,GAAGL,EAAS,gBAAiB,OAAWK,EAAS,QAAQ,EAAG,KAAMA,EAAS,IAAK,EAEvFA,EAAS,eAAe,OAAS,GACnCb,EAAO,CAAE,MAAO,uBAAwB,MAAOI,EAAM,KAAM,OAAQ,gBAAiB,OAAQS,EAAS,eAAgB,GAAIA,EAAS,SAAW,CAAE,SAAUA,EAAS,QAAS,EAAI,CAAC,CAAG,CAAC,EAC7K,CAAE,GAAGA,EAAU,OAAQ,QAAS,OAAQ,eAAgB,GAE1D,CAAE,GAAGA,EAAU,OAAQ,KAAM,CACtC,CACF,CACF,CCnHO,IAAMC,EAAsBC,ECHnC,OAAS,iBAAAC,MAAqB,gBCmFvB,IAAMC,EAA0B,2BAGjCC,EAAkB,4BA6BxB,IAAMC,EAAU,IAAI,YAEpB,SAASC,EAAQC,EAAoC,CACnD,OAAO,OAAO,OAAO,UACnB,MACAF,EAAQ,OAAOE,CAAM,EACrB,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,OAAQ,QAAQ,CACnB,CACF,CAWA,SAASC,EAAiBC,EAA+C,CACvE,GAAI,CAAC,yBAAyB,KAAKA,CAAK,EAAG,OAAO,KAClD,IAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACzD,GAAI,CACF,IAAME,EAAS,KAAKD,CAAM,EACpBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,GAAK,EAAGD,EAAMC,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACzE,OAAOD,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAeA,eAAsBE,EAAoBC,EAMT,CAC/B,GAAM,CAAE,OAAAR,EAAQ,QAAAS,EAAS,QAAAC,CAAQ,EAAIF,EAC/BG,EAAMH,EAAQ,KAAO,KAAK,IAAI,EAC9BI,EAAcJ,EAAQ,aAAe,IAE3C,GAAI,CAACR,GAAUA,EAAO,SAAW,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,WAAY,EAE5E,IAAMa,EAASH,EAAQ,IAAII,CAAuB,EAClD,GAAI,CAACD,EAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,EAExD,IAAME,EAAQC,EAAgB,KAAKH,EAAO,KAAK,CAAC,EAChD,GAAIE,IAAU,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAEtE,IAAME,EAAY,OAAOF,EAAM,CAAC,CAAC,EAC3BG,EAAWH,EAAM,CAAC,GAAK,GAC7B,GAAI,CAAC,OAAO,cAAcE,CAAS,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EACxF,GAAIA,EAAY,WAAmB,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACjF,GAAI,KAAK,IAAIN,EAAMM,CAAS,EAAIL,EAAa,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EAE3F,IAAMO,EAAYlB,EAAiBiB,CAAQ,EAC3C,GAAIC,IAAc,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAE1E,IAAMC,EAAM,MAAMrB,EAAQC,CAAM,EAOhC,OANc,MAAM,OAAO,OAAO,OAChC,OACAoB,EACAD,EACArB,EAAQ,OAAO,GAAGmB,CAAS,IAAIR,CAAO,EAAE,CAC1C,EACe,CAAE,GAAI,EAAK,EAAI,CAAE,GAAI,GAAO,OAAQ,eAAgB,CACrE,CDpLA,IAAMY,EAAa,GAAK,KAClBC,EAAmB,KACnBC,EAAU,IAAI,YAEpB,SAASC,EAASC,EAAgBC,EAAgBC,EAAkC,CAAC,EAAGC,EAAO,GAAiB,CAC9G,OAAO,IAAI,SAASA,EAAO,KAAO,KAAK,UAAUF,CAAK,EAAG,CACvD,OAAAD,EAAQ,QAAS,CAAE,eAAgB,mBAAoB,gBAAiB,WAAY,GAAGE,CAAQ,CACjG,CAAC,CACH,CAEA,SAASE,EAAYC,EAAeC,EAAiC,CACnE,GAAI,CAACA,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAAK,OAAO,KAAKA,CAAO,EAAE,SAAW,EACvG,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAA4C,OAAO,OAAO,IAAI,EACpE,QAAWC,KAAO,QAAQ,QAAQF,CAAO,EAAG,CAC1C,IAAMG,EAAa,OAAO,yBAAyBH,EAASE,CAAG,EAC/D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAY,YAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,EAC1F,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAAiBD,EAAW,MAClC,GAAI,CAAC,MAAM,QAAQC,CAAK,GAAK,CAACA,EAAM,SAASF,CAAG,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEzGG,EAAQN,EAAO,CAAE,MAAAK,EAAO,IAAK,CAAC,YAAY,CAAE,CAAC,EAC7CH,EAAOC,CAAG,EAAI,OAAO,OAAO,CAAC,GAAGE,CAAK,CAAa,CACpD,CACA,QAAWA,KAAS,OAAO,OAAOH,CAAM,EACtC,GAAIG,EAAM,KAAME,GAAS,CAAC,OAAO,OAAOL,EAAQK,CAAI,CAAC,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEhH,OAAO,OAAO,OAAOL,CAAM,CAC7B,CAEA,SAASM,EAAYZ,EAAiC,CACpD,OAAO,OAAOA,GAAU,UAAYA,EAAM,KAAK,IAAM,IAAMH,EAAQ,OAAOG,CAAK,EAAE,YAAc,EACjG,CAEA,IAAMa,EAAN,cAA0B,KAAM,CAC9B,YAAqBd,EAAmB,CAAE,MAAM,0BAA0B,EAArD,YAAAA,CAAwD,CAAxD,MACvB,EAEA,eAAee,EAAQC,EAAmC,CACxD,IAAMC,EAASD,EAAQ,MAAM,UAAU,EACvC,GAAI,CAACC,EAAQ,MAAO,GACpB,IAAMC,EAAU,IAAI,YAAY,QAAS,CAAE,MAAO,GAAM,UAAW,EAAK,CAAC,EACrEC,EACEC,EAAW,IAAI,QAAe,CAACC,EAAUC,IAAW,CACxDH,EAAQ,WAAW,IAAMG,EAAO,IAAIR,EAAY,GAAG,CAAC,EAAGjB,CAAgB,CACzE,CAAC,EACD,GAAI,CACF,IAAI0B,EAAQ,EACRC,EAAO,GACX,OAAa,CACX,GAAM,CAAE,KAAAC,EAAM,MAAAxB,CAAM,EAAI,MAAM,QAAQ,KAAK,CAACgB,EAAO,KAAK,EAAGG,CAAQ,CAAC,EACpE,GAAIK,EAAM,OAAOD,EAAON,EAAQ,OAAO,EAEvC,GADAK,GAAStB,EAAM,WACXsB,EAAQ3B,EAAY,MAAM,IAAIkB,EAAY,GAAG,EACjDU,GAAQN,EAAQ,OAAOjB,EAAO,CAAE,OAAQ,EAAK,CAAC,CAChD,CACF,OAASyB,EAAO,CAEd,MAAKT,EAAO,OAAO,EAAE,MAAM,IAAM,CAAC,CAAC,EAC7BS,CACR,QAAE,CACA,aAAaP,CAAK,EAClBF,EAAO,YAAY,CACrB,CACF,CAEO,SAASU,EAAsBC,EAAqD,CACzF,IAAMvB,EAAQuB,EAAQ,MAChBtB,EAAUF,EAAYC,EAAOuB,EAAQ,UAAU,EAC/CC,EAAYD,EAAQ,WAAa,2BACjCE,EAAoBF,EAAQ,mBAAqB,oCACjDG,EAAMH,EAAQ,MAAQ,IAAM,QAAQ,KACpCI,EAAMJ,EAAQ,KAAO,KAAK,IAE1BK,EAA2B,MAAOjB,GAAY,CAClD,GAAIA,EAAQ,SAAW,OACrB,OAAOjB,EAAS,IAAK,CAAE,MAAO,oBAAqB,EAAG,CAAE,MAAO,MAAO,EAAGiB,EAAQ,SAAW,MAAM,EAEpG,IAAIkB,EACAC,EACJ,GAAI,CACF,IAAMC,EAASL,EAAI,EACbM,EAAcD,EAAOP,CAAS,EAC9BS,EAAgBF,EAAON,CAAiB,EAC9C,GAAI,CAACjB,EAAYwB,CAAW,GAAMC,IAAkB,QAAa,CAACzB,EAAYyB,CAAa,EAAI,MAAM,IAAI,MACzGJ,EAASG,EACTF,EAAWG,CACb,MAAQ,CACN,OAAOvC,EAAS,IAAK,CAAE,MAAO,0DAA2D,CAAC,CAC5F,CACA,IAAMwC,EAAYvB,EAAQ,QAAQ,IAAIwB,CAAuB,EAC7D,GAAI,CAACD,GAAaA,EAAU,OAAS,KAAO,CAAC,sCAAsC,KAAKA,EAAU,KAAK,CAAC,EACtG,OAAOxC,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,EAEhD,IAAI0C,EACJ,GAAI,CAAEA,EAAO,MAAM1B,EAAQC,CAAO,CAAG,OAC9BU,EAAO,CACZ,OAAOA,aAAiBZ,GAAeY,EAAM,SAAW,IACpD3B,EAAS,IAAK,CAAE,MAAO,mBAAoB,CAAC,EAAIA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC7F,CACA,GAAI,CACF,IAAM2C,EAAQV,EAAI,EAClB,GAAI,CAAC,OAAO,SAASU,CAAK,EAAG,MAAM,IAAI,MAGvC,GAAI,EAFY,MAAM,QAAQ,IAAI,CAACR,EAAQ,GAAIC,IAAa,OAAY,CAAC,EAAI,CAACA,CAAQ,CAAE,EAAE,IAAKQ,GAC7FC,EAAoB,CAAE,OAAAD,EAAQ,QAASF,EAAM,QAASzB,EAAQ,QAAS,IAAK0B,CAAM,CAAC,CAAC,CAAC,GAC1E,KAAMG,GAAWA,EAAO,EAAE,EAAG,OAAO9C,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC1F,MAAQ,CAAE,OAAOA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAAG,CAE3D,IAAI+C,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAML,CAAI,CAAG,MAC5B,CAAE,OAAO1C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,CAAG,CAC5D,GAAI,CAAC+C,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAC/D,OAAO,KAAKA,CAAO,EAAE,SAAW,GAAK,CAAC,OAAO,OAAOA,EAAS,OAAO,GAAK,CAAC,OAAO,OAAOA,EAAS,KAAK,EACzG,OAAO/C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAM,CAAE,MAAOa,EAAM,IAAKmC,CAAG,EAAID,EACjC,GAAI,OAAOlC,GAAS,UAAY,CAAC,+BAA+B,KAAKA,CAAI,GACpE,OAAOmC,GAAO,UAAY,CAAC,qCAAqC,KAAKA,CAAE,EAC1E,OAAOhD,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAI,CAAC,OAAO,OAAOO,EAASM,CAAI,GAAK,uBAAuB,KAAKmC,CAAE,EACjE,OAAOhD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,EAExD,IAAMiD,EAAOrC,EAAQN,EAAO,CAAE,MAAOC,EAAQM,CAAI,EAAI,IAAK,CAACmC,CAAE,CAAE,CAAC,EAChE,GAAI,CACF,QAAWE,KAAOD,EAAME,EAAcD,EAAK,CAAE,OAAQ,CAAE,CAAC,CAC1D,MAAQ,CAAE,OAAOlD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,CAAG,CACnE,OAAOA,EAAS,IAAK,CAAE,YAAa,EAAK,CAAC,CAC5C,EACA,OAAO,OAAO,OAAO,CAAE,KAAMkC,EAAS,IAAKA,EAAS,KAAMA,EAAS,IAAKA,EAAS,MAAOA,EAAS,OAAQA,EAAS,QAASA,CAAQ,CAAC,CACtI",
+  "names": ["TYPE", "ID", "SCOPE", "dependenciesCopy", "dependencies", "types", "type", "ids", "id", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "cmsTags", "scope", "tags", "resolution", "value", "field", "warning", "createCmsReader", "options", "seconds", "adapter", "cmsTags", "notify", "event", "input", "readOptions", "query", "local", "tags", "defineCmsQuery", "fallback", "reason", "status", "warnings", "result", "resolved", "createNextCmsReader", "createCmsReader", "revalidateTag", "SANITY_SIGNATURE_HEADER", "SIGNATURE_VALUE", "encoder", "hmacKey", "secret", "base64UrlToBytes", "value", "padded", "binary", "bytes", "i", "verifySanityWebhook", "options", "rawBody", "headers", "now", "toleranceMs", "header", "SANITY_SIGNATURE_HEADER", "match", "SIGNATURE_VALUE", "timestamp", "provided", "signature", "key", "BODY_LIMIT", "BODY_DEADLINE_MS", "encoder", "response", "status", "value", "headers", "head", "copyMapping", "scope", "mapping", "copied", "key", "descriptor", "types", "cmsTags", "type", "validSecret", "BodyFailure", "rawBody", "request", "reader", "decoder", "timer", "deadline", "_resolve", "reject", "bytes", "text", "done", "error", "createRevalidateRoute", "options", "secretEnv", "previousSecretEnv", "env", "now", "handler", "active", "previous", "values", "activeValue", "previousValue", "signature", "SANITY_SIGNATURE_HEADER", "body", "clock", "secret", "verifySanityWebhook", "result", "payload", "id", "tags", "tag", "revalidateTag"]
+}

package/dist/portable/array.d.cts

@@ -0,0 +1,2 @@
+/** Content lists must contain an own entry at every index. */
+export declare function isDenseArray(value: unknown): value is unknown[];

package/dist/portable/array.d.mts

@@ -0,0 +1,2 @@
+/** Content lists must contain an own entry at every index. */
+export declare function isDenseArray(value: unknown): value is unknown[];

package/dist/portable/array.d.ts

@@ -0,0 +1,2 @@
+/** Content lists must contain an own entry at every index. */
+export declare function isDenseArray(value: unknown): value is unknown[];

package/dist/portable/fallback.d.cts

@@ -0,0 +1,4 @@
+import { type HomeContent, type PageContent, type SiteSettingsContent } from "./site-content.cjs";
+export declare function validHomeFallback(value: unknown): value is HomeContent | null;
+export declare function validPageFallback(value: unknown): value is PageContent | null;
+export declare function validSettingsFallback(value: unknown): value is SiteSettingsContent | null;

package/dist/portable/fallback.d.mts

@@ -0,0 +1,4 @@
+import { type HomeContent, type PageContent, type SiteSettingsContent } from "./site-content.mjs";
+export declare function validHomeFallback(value: unknown): value is HomeContent | null;
+export declare function validPageFallback(value: unknown): value is PageContent | null;
+export declare function validSettingsFallback(value: unknown): value is SiteSettingsContent | null;

package/dist/portable/fallback.d.ts

@@ -0,0 +1,4 @@
+import { type HomeContent, type PageContent, type SiteSettingsContent } from "./site-content.js";
+export declare function validHomeFallback(value: unknown): value is HomeContent | null;
+export declare function validPageFallback(value: unknown): value is PageContent | null;
+export declare function validSettingsFallback(value: unknown): value is SiteSettingsContent | null;