@weatherboard/cms 0.0.0-stage → 0.2.0

package/dist/site-content.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/portable/array.ts", "../src/contracts/query.ts", "../src/portable/fallback.ts", "../src/portable/site-content.ts", "../src/contracts/text.ts"],
+  "sourcesContent": ["/** Content lists must contain an own entry at every index. */\nexport function isDenseArray(value: unknown): value is unknown[] {\n  if (!Array.isArray(value)) return false;\n  for (let index = 0; index < value.length; index += 1) {\n    if (!Object.hasOwn(value, index)) return false;\n  }\n  return true;\n}\n", "/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly \"siteHero.layout.defaulted\"[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n", "import { isDenseArray } from \"./array.js\";\nimport {\n  READER_ACTION_HREF, READER_JUMP_LINK, READER_PHOTO_SLUG, READER_STORY_LAYOUTS,\n  type CompositionInput, type HomeContent, type PageContent, type SiteSettingsContent,\n} from \"./site-content.js\";\n\nconst object = (value: unknown): value is Record<string, unknown> => value !== null && typeof value === \"object\" && !Array.isArray(value);\nconst words = (value: unknown): boolean => typeof value === \"string\" && value.trim() !== \"\";\nconst nullableText = (value: unknown): boolean => value === null || typeof value === \"string\";\nconst photo = (value: unknown): boolean => value === null || (typeof value === \"string\" && READER_PHOTO_SLUG.test(value));\nconst href = (value: unknown): boolean => typeof value === \"string\" && READER_ACTION_HREF.test(value);\nconst copy = (value: unknown): boolean => words(value) || (object(value) && words(value.text) && (value.copySource === \"captured\" || value.copySource === \"proposed\"));\nconst optionalCopy = (value: unknown): boolean => value === null || copy(value);\nconst action = (value: unknown): boolean => object(value) && copy(value.label) && href(value.href);\nconst optionalAction = (value: unknown): boolean => value === null || action(value);\n\nfunction composition(value: unknown): boolean {\n  if (!object(value) || !nullableText(value.intro) || !photo(value.photo) || !isDenseArray(value.blocks)) return false;\n  const hero = value.hero;\n  if (hero !== null && (!object(hero) || !copy(hero.heading) || !optionalCopy(hero.subline) || !optionalCopy(hero.intro)\n    || !photo(hero.image) || !photo(hero.inset) || !optionalAction(hero.cta) || !optionalAction(hero.secondaryCta))) return false;\n  const validBlocks = value.blocks.every((block: unknown) => {\n    if (!object(block)) return false;\n    switch (block.kind) {\n      case \"campaign\": return optionalAction(block.action) && isDenseArray(block.images) && block.images.every((image: unknown) => typeof image === \"string\" && photo(image));\n      case \"locations\": return (block.anchor === null || (typeof block.anchor === \"string\" && READER_JUMP_LINK.test(block.anchor))) && copy(block.heading) && optionalCopy(block.tail) && photo(block.image);\n      case \"feature_stories\": return copy(block.heading) && optionalCopy(block.tail) && isDenseArray(block.items) && block.items.length > 0 && block.items.every((item: unknown) => object(item) && copy(item.heading) && copy(item.body) && action(item.action) && photo(item.image) && READER_STORY_LAYOUTS.some((layout) => layout === item.shape) && typeof item.card === \"boolean\");\n      case \"accent_band\": return copy(block.heading) && copy(block.body) && optionalAction(block.action) && photo(block.image);\n      case \"cta\": return words(block.heading) && nullableText(block.body) && object(block.link) && words(block.link.label) && href(block.link.href);\n      default: return false;\n    }\n  });\n  if (!validBlocks) return false;\n  const model = value as unknown as CompositionInput;\n  const anchors = model.blocks.flatMap((block) => block.kind === \"locations\" && block.anchor !== null ? [block.anchor] : []);\n  if (new Set(anchors).size !== anchors.length) return false;\n  const links = [model.hero?.cta?.href, model.hero?.secondaryCta?.href, ...model.blocks.flatMap((block) => {\n    switch (block.kind) {\n      case \"campaign\": case \"accent_band\": return [block.action?.href];\n      case \"feature_stories\": return block.items.map((item) => item.action.href);\n      case \"cta\": return [block.link.href];\n      default: return [];\n    }\n  })];\n  return links.every((link) => link === undefined || !link.startsWith(\"#\") || anchors.includes(link.slice(1)));\n}\n\nfunction proposed(value: unknown): boolean {\n  return isDenseArray(value) && value.every((line: unknown) => object(line) && words(line.where) && typeof line.text === \"string\");\n}\n\nexport function validHomeFallback(value: unknown): value is HomeContent | null {\n  return value === null || (object(value) && composition(value.composition) && typeof value.body === \"string\" && proposed(value.proposedCopy)\n    && typeof value.campaign === \"string\" && [\"shown\", \"off\", \"not-started\", \"ended\", \"none\"].includes(value.campaign));\n}\n\nexport function validPageFallback(value: unknown): value is PageContent | null {\n  return value === null || (object(value) && words(value.slug) && words(value.title) && composition(value.composition)\n    && typeof value.body === \"string\" && typeof value.migrated === \"boolean\" && proposed(value.proposedCopy));\n}\n\nexport function validSettingsFallback(value: unknown): value is SiteSettingsContent | null {\n  return value === null || (object(value) && words(value.name) && nullableText(value.description) && object(value.contact)\n    && nullableText(value.contact.email) && nullableText(value.contact.phone) && isDenseArray(value.social)\n    && value.social.every((link: unknown) => object(link) && words(link.network) && typeof link.url === \"string\" && /^https?:\\/\\//.test(link.url)));\n}\n", "/**\n * A-1713. The site content model, read: the home page, content pages and site\n * settings, validated on read and returned in the shape a site's page\n * composition consumes.\n *\n * ===========================================================================\n * READ ONLY, BY CONSTRUCTION\n * ===========================================================================\n *\n * A client site reads its content with a read-only token. All editing goes\n * through the studio's dashboard, which writes to Sanity; nothing on a client\n * site writes, and this module has no write path to call. It is handed a\n * `ContentClient` (a `query` function) and nothing else.\n *\n * ===========================================================================\n * VALIDATED ON READ, BECAUSE SANITY VALIDATION ONLY ADVISES\n * ===========================================================================\n *\n * The schema's rules warn an editor; they do not refuse a publish, and\n * anything writing over the API skips them entirely. So every document is\n * checked here again, and a malformed one is refused BY NAME\n * (`MalformedContentError`, code `malformed-content`) listing every problem\n * with its path, rather than rendered half-empty. A page that renders with a\n * missing headline and a page whose content is broken look identical to a\n * visitor; a build that fails naming `hero.headline` does not.\n *\n * Absent is not malformed: `null` from `home()` means nobody has created the\n * home page yet, and a site decides what to do about that.\n *\n * ===========================================================================\n * THE SHAPE IT RETURNS\n * ===========================================================================\n *\n * The INPUT shape of a site's composition schema (the reference build's\n * frontmatter): a copy value is a plain string for the client's own words\n * with no claim about their source, `{ text, copySource: \"captured\" }` for\n * words claimed verbatim from the capture (the site checks every such claim\n * against its capture evidence, so the claim must survive Sanity), and\n * `{ text, copySource: \"proposed\" }` for studio-written words awaiting\n * approval. All three round-trip exactly; a photo is its library slug; every key a block declares is\n * present, `null` where there is nothing. So a site validates this with the\n * same schema it validates its Markdown frontmatter with, and its components\n * never know where the content came from.\n *\n * Mapping from the generic model to the composition's names:\n *\n *   hero.headline / subline / lead      hero.heading / subline / intro\n *   hero.photos[0], [1]                 hero.image, hero.inset\n *   hero.primaryAction / secondary...   hero.cta / secondaryCta\n *   campaign (when shown)               the FIRST block, kind `campaign`, and\n *                                       the page body (`# title` + its text)\n *   featureStoriesBlock                 kind `feature_stories`\n *   surfaceCardBlock                    kind `cta`\n *   accentBandBlock                     kind `accent_band`\n *   locationsBlock                      kind `locations` (jumpLink \u2192 anchor)\n *\n * Two places the composition cannot carry a proposed marker: a `cta` block's\n * plain strings, and the campaign's title and body (which travel as Markdown).\n * There the text is returned plain and the line is still listed in\n * `proposedCopy`, which is the list a dashboard and a site both read for\n * approval. Nothing is dropped silently.\n */\n\nimport { isDenseArray } from \"./array.js\";\nimport { defineCmsQuery, type CmsQuery, type CmsResolution } from \"../contracts/query.js\";\nimport { validHomeFallback, validPageFallback, validSettingsFallback } from \"./fallback.js\";\n\n// ---------------------------------------------------------------------------\n// Output types\n// ---------------------------------------------------------------------------\n\nexport type CopyInput = string | { readonly text: string; readonly copySource: \"captured\" | \"proposed\" };\nexport type ActionInput = { readonly label: CopyInput; readonly href: string };\n\nexport type HeroInput = {\n  readonly heading: CopyInput;\n  readonly subline: CopyInput | null;\n  readonly intro: CopyInput | null;\n  readonly image: string | null;\n  readonly inset: string | null;\n  readonly cta: ActionInput | null;\n  readonly secondaryCta: ActionInput | null;\n};\n\nexport type StoryInput = {\n  readonly heading: CopyInput;\n  readonly body: CopyInput;\n  readonly action: ActionInput;\n  readonly image: string | null;\n  readonly shape: \"wide\" | \"tall\" | \"round\" | \"free\";\n  readonly card: boolean;\n};\n\nexport type CompositionBlockInput =\n  | { readonly kind: \"campaign\"; readonly action: ActionInput | null; readonly images: readonly string[] }\n  | {\n      readonly kind: \"locations\";\n      readonly anchor: string | null;\n      readonly heading: CopyInput;\n      readonly tail: CopyInput | null;\n      readonly image: string | null;\n    }\n  | {\n      readonly kind: \"feature_stories\";\n      readonly heading: CopyInput;\n      readonly tail: CopyInput | null;\n      readonly items: readonly StoryInput[];\n    }\n  | {\n      readonly kind: \"accent_band\";\n      readonly heading: CopyInput;\n      readonly body: CopyInput;\n      readonly action: ActionInput | null;\n      readonly image: string | null;\n    }\n  | {\n      readonly kind: \"cta\";\n      readonly heading: string;\n      readonly body: string | null;\n      readonly link: { readonly label: string; readonly href: string };\n    };\n\nexport type CompositionInput = {\n  readonly intro: string | null;\n  readonly photo: string | null;\n  readonly hero: HeroInput | null;\n  readonly blocks: readonly CompositionBlockInput[];\n};\n\n/** One line of studio-written copy awaiting approval, and where it is in the document. */\nexport type ProposedCopy = { readonly where: string; readonly text: string };\n\nexport type CampaignState = \"shown\" | \"off\" | \"not-started\" | \"ended\" | \"none\";\n\nexport type HomeContent = {\n  readonly composition: CompositionInput;\n  /** The page body as Markdown: the campaign's title and text when it is shown, otherwise empty. */\n  readonly body: string;\n  readonly campaign: CampaignState;\n  readonly proposedCopy: readonly ProposedCopy[];\n};\n\nexport type PageContent = {\n  readonly slug: string;\n  readonly title: string;\n  readonly composition: CompositionInput;\n  readonly body: string;\n  readonly migrated: boolean;\n  readonly proposedCopy: readonly ProposedCopy[];\n};\n\nexport type SiteSettingsContent = {\n  readonly name: string;\n  readonly description: string | null;\n  readonly contact: { readonly email: string | null; readonly phone: string | null };\n  readonly social: readonly { readonly network: string; readonly url: string }[];\n};\n\n// ---------------------------------------------------------------------------\n// The refusal\n// ---------------------------------------------------------------------------\n\nexport const MALFORMED_CONTENT = \"malformed-content\";\n\nexport class MalformedContentError extends Error {\n  readonly code = MALFORMED_CONTENT;\n  readonly documentId: string;\n  readonly problems: readonly string[];\n\n  constructor(documentId: string, problems: readonly string[]) {\n    super(`${MALFORMED_CONTENT}: ${documentId}: ${problems.join(\"; \")}`);\n    this.name = \"MalformedContentError\";\n    this.documentId = documentId;\n    this.problems = problems;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// The rules restated\n// ---------------------------------------------------------------------------\n\n/*\n * Runtime-free rules shared with schema-base. The schema adapter imports these\n * objects; content-client compatibility tests pin the shared references.\n */\nexport const READER_PHOTO_SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nexport const READER_ACTION_HREF =\n  /^(?:\\/(?![/\\\\])[^\\s]*|#[a-z][a-z0-9]*(?:-[a-z0-9]+)*|mailto:[^\\s@]+@[^\\s@]+|tel:\\+?[0-9][0-9 ()-]*|https?:\\/\\/[^\\s/]+[^\\s]*)$/;\nexport const READER_JUMP_LINK = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;\nexport const READER_STORY_LAYOUTS = [\"wide\", \"tall\", \"round\", \"free\"] as const;\nexport const READER_HOME_PAGE_ID = \"homePage\";\nexport const READER_SITE_SETTINGS_ID = \"siteSettings\";\n\n// ---------------------------------------------------------------------------\n// A small path-aware reader\n// ---------------------------------------------------------------------------\n\ntype Raw = Record<string, unknown>;\n\nclass Reading {\n  readonly problems: string[] = [];\n  readonly proposed: ProposedCopy[] = [];\n\n  fail(path: string, message: string): null {\n    this.problems.push(`${path} ${message}`);\n    return null;\n  }\n\n  object(value: unknown, path: string): Raw | null {\n    if (typeof value === \"object\" && value !== null && !Array.isArray(value)) return value as Raw;\n    return this.fail(path, \"is not an object\");\n  }\n\n  dense(value: unknown[], path: string): boolean {\n    if (isDenseArray(value)) return true;\n    this.fail(path, \"contains missing entries\");\n    return false;\n  }\n\n  optionalString(value: unknown, path: string): string | null {\n    if (value === undefined || value === null) return null;\n    if (typeof value === \"string\") return value.trim() === \"\" ? null : value;\n    return this.fail(path, \"is not text\");\n  }\n\n  /** A copy value, or null when absent or empty. Records a proposed line. */\n  copy(value: unknown, path: string): CopyInput | null {\n    if (value === undefined || value === null) return null;\n    const raw = this.object(value, path);\n    if (raw === null) return null;\n    const text = raw[\"text\"];\n    const source = raw[\"copySource\"];\n    if (text !== undefined && typeof text !== \"string\") return this.fail(`${path}.text`, \"is not text\");\n    if (source !== undefined && source !== \"captured\" && source !== \"proposed\") {\n      return this.fail(`${path}.copySource`, `is ${JSON.stringify(source)}, not captured or proposed`);\n    }\n    if (typeof text !== \"string\" || text.trim() === \"\") return null;\n    if (source === \"proposed\") {\n      this.proposed.push({ where: path, text });\n      return { text, copySource: \"proposed\" };\n    }\n    if (source === \"captured\") return { text, copySource: \"captured\" };\n    return text;\n  }\n\n  requiredCopy(value: unknown, path: string): CopyInput | null {\n    const copy = this.copy(value, path);\n    if (copy === null && !this.problems.some((p) => p.startsWith(path))) this.fail(path, \"is missing its words\");\n    return copy;\n  }\n\n  photo(value: unknown, path: string): string | null {\n    if (value === undefined || value === null) return null;\n    if (typeof value === \"string\" && READER_PHOTO_SLUG.test(value)) return value;\n    return this.fail(path, `is ${JSON.stringify(value)}, not a photo library slug`);\n  }\n\n  photos(value: unknown, path: string, max: number): string[] {\n    if (value === undefined || value === null) return [];\n    if (!Array.isArray(value)) {\n      this.fail(path, \"is not a list of photos\");\n      return [];\n    }\n    if (!this.dense(value, path)) return [];\n    if (value.length > max) this.fail(path, `holds ${String(value.length)} photos; at most ${String(max)}`);\n    return value.map((entry, index) => this.photo(entry, `${path}[${String(index)}]`)).filter((p): p is string => p !== null);\n  }\n\n  action(value: unknown, path: string): ActionInput | null {\n    if (value === undefined || value === null) return null;\n    const raw = this.object(value, path);\n    if (raw === null) return null;\n    const label = this.requiredCopy(raw[\"label\"], `${path}.label`);\n    const href = raw[\"href\"];\n    if (typeof href !== \"string\" || !READER_ACTION_HREF.test(href)) {\n      return this.fail(`${path}.href`, `is ${JSON.stringify(href)}, not a site path, #jump-link, mailto:, tel: or web address`);\n    }\n    return label === null ? null : { label, href };\n  }\n\n  requiredAction(value: unknown, path: string): ActionInput | null {\n    if (value === undefined || value === null) return this.fail(path, \"is missing\");\n    return this.action(value, path);\n  }\n}\n\nfunction plain(copy: CopyInput): string {\n  return typeof copy === \"string\" ? copy : copy.text;\n}\n\n// ---------------------------------------------------------------------------\n// Portable Text to Markdown\n// ---------------------------------------------------------------------------\n\n/**\n * The narrow Portable Text `portableText` declares, back to Markdown: normal,\n * h2, h3 and quote blocks, bullet and numbered lists, bold, italic, code and\n * links. It is the inverse of the seed package's Markdown mapper, and the\n * round-trip test holds the two to each other.\n *\n * An uploaded image inside rich text is REFUSED, not dropped: nothing can\n * upload one yet (the dashboard slice decides how), so one arriving means\n * something wrote the document by hand, and a page silently missing a picture\n * is the failure this reader exists to prevent.\n */\nexport function portableTextToMarkdown(value: unknown): string {\n  const reading = new Reading();\n  const markdown = richTextToMarkdown(value, \"body\", reading);\n  if (reading.problems.length > 0) throw new MalformedContentError(\"body\", reading.problems);\n  return markdown;\n}\n\nfunction richTextToMarkdown(value: unknown, path: string, reading: Reading): string {\n  if (value === undefined || value === null) return \"\";\n  if (!Array.isArray(value)) {\n    reading.fail(path, \"is not rich text\");\n    return \"\";\n  }\n  if (!reading.dense(value, path)) return \"\";\n  const out: string[] = [];\n  let previousWasList = false;\n  value.forEach((member, index) => {\n    const at = `${path}[${String(index)}]`;\n    const block = reading.object(member, at);\n    if (block === null) return;\n    if (block[\"_type\"] !== \"block\") {\n      reading.fail(at, `is a ${JSON.stringify(block[\"_type\"])}; only text is supported in rich text so far`);\n      return;\n    }\n    const text = spansToMarkdown(block, at, reading);\n    const listItem = block[\"listItem\"];\n    const style = block[\"style\"] ?? \"normal\";\n    let line: string;\n    if (listItem === \"bullet\" || listItem === \"number\") {\n      const level = typeof block[\"level\"] === \"number\" && block[\"level\"] > 1 ? block[\"level\"] : 1;\n      line = `${\"  \".repeat(level - 1)}${listItem === \"bullet\" ? \"-\" : \"1.\"} ${text}`;\n    } else if (style === \"h2\") line = `## ${text}`;\n    else if (style === \"h3\") line = `### ${text}`;\n    else if (style === \"blockquote\") line = `> ${text}`;\n    else if (style === \"normal\") line = text;\n    else {\n      reading.fail(`${at}.style`, `is ${JSON.stringify(style)}, which the schema does not offer`);\n      return;\n    }\n    const isList = listItem === \"bullet\" || listItem === \"number\";\n    if (out.length > 0) out.push(isList && previousWasList ? \"\\n\" : \"\\n\\n\");\n    out.push(line);\n    previousWasList = isList;\n  });\n  return out.join(\"\");\n}\n\nconst DECORATORS: Record<string, string> = { strong: \"**\", em: \"*\", code: \"`\" };\n\nfunction spansToMarkdown(block: Raw, path: string, reading: Reading): string {\n  const links = new Map<string, string>();\n  const markDefs = Array.isArray(block[\"markDefs\"]) ? (block[\"markDefs\"] as unknown[]) : [];\n  if (!reading.dense(markDefs, `${path}.markDefs`)) return \"\";\n  for (const def of markDefs) {\n    const d = def as Raw;\n    if (d[\"_type\"] === \"link\" && typeof d[\"_key\"] === \"string\" && typeof d[\"href\"] === \"string\") links.set(d[\"_key\"], d[\"href\"]);\n  }\n  const children = Array.isArray(block[\"children\"]) ? (block[\"children\"] as unknown[]) : [];\n  if (!reading.dense(children, `${path}.children`)) return \"\";\n  return children\n    .map((child, index) => {\n      const span = child as Raw;\n      if (span[\"_type\"] !== \"span\" || typeof span[\"text\"] !== \"string\") {\n        reading.fail(`${path}.children[${String(index)}]`, \"is not a text span\");\n        return \"\";\n      }\n      let text = span[\"text\"];\n      const marks = Array.isArray(span[\"marks\"]) ? (span[\"marks\"] as unknown[]) : [];\n      if (!reading.dense(marks, `${path}.children[${String(index)}].marks`)) return \"\";\n      let href: string | null = null;\n      for (const mark of marks) {\n        if (typeof mark !== \"string\") continue;\n        const fence = DECORATORS[mark];\n        if (fence !== undefined) text = `${fence}${text}${fence}`;\n        else if (links.has(mark)) href = links.get(mark) ?? null;\n        else reading.fail(`${path}.children[${String(index)}].marks`, `names ${JSON.stringify(mark)}, which is neither a style nor a link`);\n      }\n      return href === null ? text : `[${text}](${href})`;\n    })\n    .join(\"\");\n}\n\n// ---------------------------------------------------------------------------\n// The home page\n// ---------------------------------------------------------------------------\n\n/** Whether a campaign is shown at `now`, and if not, why not. */\nexport function campaignState(campaign: unknown, now: Date): CampaignState {\n  if (typeof campaign !== \"object\" || campaign === null) return \"none\";\n  const c = campaign as Raw;\n  if (c[\"enabled\"] !== true) return \"off\";\n  const starts = typeof c[\"startsAt\"] === \"string\" ? Date.parse(c[\"startsAt\"]) : null;\n  const ends = typeof c[\"endsAt\"] === \"string\" ? Date.parse(c[\"endsAt\"]) : null;\n  if (starts !== null && now.getTime() < starts) return \"not-started\";\n  if (ends !== null && now.getTime() >= ends) return \"ended\";\n  return \"shown\";\n}\n\nfunction keyed(path: string, raw: Raw, index: number): string {\n  return typeof raw[\"_key\"] === \"string\" ? `${path}[_key==\"${raw[\"_key\"]}\"]` : `${path}[${String(index)}]`;\n}\n\n/**\n * A stored home page document, validated and mapped. Throws\n * `MalformedContentError` naming every problem. `now` decides whether a\n * scheduled campaign is shown, and is a parameter so a build, a preview and a\n * test each say which moment they mean.\n */\nexport function parseHomePage(document: unknown, options: { readonly now: Date }): HomeContent {\n  const reading = new Reading();\n  const doc = reading.object(document, \"homePage\");\n  if (doc === null) throw new MalformedContentError(READER_HOME_PAGE_ID, reading.problems);\n  const id = typeof doc[\"_id\"] === \"string\" ? doc[\"_id\"] : READER_HOME_PAGE_ID;\n  if (doc[\"_type\"] !== \"homePage\") reading.fail(\"_type\", `is ${JSON.stringify(doc[\"_type\"])}, not homePage`);\n\n  let hero: HeroInput | null = null;\n  const rawHero = doc[\"hero\"] === undefined ? reading.fail(\"hero\", \"is missing\") : reading.object(doc[\"hero\"], \"hero\");\n  if (rawHero !== null) {\n    const photos = reading.photos(rawHero[\"photos\"], \"hero.photos\", 2);\n    const heading = reading.requiredCopy(rawHero[\"headline\"], \"hero.headline\");\n    const subline = reading.copy(rawHero[\"subline\"], \"hero.subline\");\n    const intro = reading.copy(rawHero[\"lead\"], \"hero.lead\");\n    const cta = reading.action(rawHero[\"primaryAction\"], \"hero.primaryAction\");\n    const secondaryCta = reading.action(rawHero[\"secondaryAction\"], \"hero.secondaryAction\");\n    if (heading !== null) {\n      hero = { heading, subline, intro, image: photos[0] ?? null, inset: photos[1] ?? null, cta, secondaryCta };\n    }\n  }\n\n  const blocks: CompositionBlockInput[] = [];\n  const blockJumps: { where: string; href: string }[] = [];\n  let body = \"\";\n  const state = campaignState(doc[\"campaign\"], options.now);\n  if (state === \"shown\") {\n    const campaign = reading.object(doc[\"campaign\"], \"campaign\");\n    if (campaign !== null) {\n      const title = reading.requiredCopy(campaign[\"title\"], \"campaign.title\");\n      const images = reading.photos(campaign[\"photos\"], \"campaign.photos\", 3);\n      if (images.length === 0) reading.fail(\"campaign.photos\", \"is empty; a shown campaign needs at least one photo\");\n      const text = richTextToMarkdown(campaign[\"body\"], \"campaign.body\", reading);\n      if (text === \"\") reading.fail(\"campaign.body\", \"is empty; a shown campaign needs its text\");\n      if (campaign[\"bodyCopySource\"] === \"proposed\") reading.proposed.push({ where: \"campaign.body\", text });\n      const action = reading.action(campaign[\"action\"], \"campaign.action\");\n      if (action !== null) blockJumps.push({ where: \"campaign.action.href\", href: action.href });\n      if (title !== null) body = `# ${plain(title)}\\n\\n${text}`;\n      blocks.push({ kind: \"campaign\", action, images });\n    }\n  }\n\n  const anchors: string[] = [];\n  const rawBlocks = doc[\"blocks\"] ?? [];\n  if (!Array.isArray(rawBlocks)) reading.fail(\"blocks\", \"is not a list\");\n  else if (reading.dense(rawBlocks, \"blocks\")) {\n    rawBlocks.forEach((member, index) => {\n      const raw = reading.object(member, `blocks[${String(index)}]`);\n      if (raw === null) return;\n      const at = keyed(\"blocks\", raw, index);\n      const mapped = mapBlock(raw, at, reading);\n      if (mapped === null) return;\n      blockJumps.push(...buttonsOf(mapped, raw, at));\n      if (mapped.kind === \"locations\" && mapped.anchor !== null) {\n        if (anchors.includes(mapped.anchor)) reading.fail(`${at}.jumpLink`, `repeats \"${mapped.anchor}\", already used by another section`);\n        anchors.push(mapped.anchor);\n      }\n      blocks.push(mapped);\n    });\n  }\n\n  // A jump link on ANY button must land on a section of this page.\n  const jumps: { where: string; href: string }[] = [];\n  if (hero?.cta) jumps.push({ where: \"hero.primaryAction.href\", href: hero.cta.href });\n  if (hero?.secondaryCta) jumps.push({ where: \"hero.secondaryAction.href\", href: hero.secondaryCta.href });\n  jumps.push(...blockJumps);\n  for (const { where, href } of jumps) {\n    if (href.startsWith(\"#\") && !anchors.includes(href.slice(1))) {\n      reading.fail(where, `jumps to ${href}, which no section on the page is named`);\n    }\n  }\n\n  if (reading.problems.length > 0) throw new MalformedContentError(id, reading.problems);\n  return {\n    composition: { intro: null, photo: null, hero, blocks },\n    body,\n    campaign: state,\n    proposedCopy: reading.proposed,\n  };\n}\n\n/** Every button a mapped section carries, with its path in the stored document. */\nfunction buttonsOf(block: CompositionBlockInput, raw: Raw, at: string): { where: string; href: string }[] {\n  switch (block.kind) {\n    case \"feature_stories\": {\n      const stories = Array.isArray(raw[\"stories\"]) ? (raw[\"stories\"] as Raw[]) : [];\n      return block.items.map((item, index) => ({\n        where: `${keyed(`${at}.stories`, stories[index] ?? {}, index)}.action.href`,\n        href: item.action.href,\n      }));\n    }\n    case \"accent_band\":\n      return block.action === null ? [] : [{ where: `${at}.action.href`, href: block.action.href }];\n    case \"cta\":\n      return [{ where: `${at}.action.href`, href: block.link.href }];\n    default:\n      return [];\n  }\n}\n\nfunction mapBlock(raw: Raw, at: string, reading: Reading): CompositionBlockInput | null {\n  switch (raw[\"_type\"]) {\n    case \"featureStoriesBlock\": {\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const tail = reading.copy(raw[\"tail\"], `${at}.tail`);\n      const stories = raw[\"stories\"];\n      if (!Array.isArray(stories) || stories.length === 0) return reading.fail(`${at}.stories`, \"has no stories\");\n      if (!reading.dense(stories, `${at}.stories`)) return null;\n      const items: StoryInput[] = [];\n      stories.forEach((member, index) => {\n        const story = reading.object(member, `${at}.stories[${String(index)}]`);\n        if (story === null) return;\n        const sat = keyed(`${at}.stories`, story, index);\n        const sHeading = reading.requiredCopy(story[\"heading\"], `${sat}.heading`);\n        const sBody = reading.requiredCopy(story[\"body\"], `${sat}.body`);\n        const action = reading.requiredAction(story[\"action\"], `${sat}.action`);\n        const image = reading.photo(story[\"photo\"], `${sat}.photo`);\n        const layout = story[\"layout\"] ?? \"wide\";\n        if (!(READER_STORY_LAYOUTS as readonly unknown[]).includes(layout)) {\n          reading.fail(`${sat}.layout`, `is ${JSON.stringify(layout)}, not wide, tall, round or free`);\n          return;\n        }\n        const onCard = story[\"onCard\"] ?? false;\n        if (typeof onCard !== \"boolean\") {\n          reading.fail(`${sat}.onCard`, \"is not on or off\");\n          return;\n        }\n        if (sHeading === null || sBody === null || action === null) return;\n        items.push({ heading: sHeading, body: sBody, action, image, shape: layout as StoryInput[\"shape\"], card: onCard });\n      });\n      return heading === null ? null : { kind: \"feature_stories\", heading, tail, items };\n    }\n    case \"surfaceCardBlock\": {\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const body = reading.copy(raw[\"body\"], `${at}.body`);\n      const action = reading.requiredAction(raw[\"action\"], `${at}.action`);\n      if (heading === null || action === null) return null;\n      return {\n        kind: \"cta\",\n        heading: plain(heading),\n        body: body === null ? null : plain(body),\n        link: { label: plain(action.label), href: action.href },\n      };\n    }\n    case \"accentBandBlock\": {\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const body = reading.requiredCopy(raw[\"body\"], `${at}.body`);\n      const action = reading.action(raw[\"action\"], `${at}.action`);\n      const image = reading.photo(raw[\"photo\"], `${at}.photo`);\n      if (heading === null || body === null) return null;\n      return { kind: \"accent_band\", heading, body, action, image };\n    }\n    case \"locationsBlock\": {\n      const jump = raw[\"jumpLink\"];\n      let anchor: string | null = null;\n      if (jump !== undefined && jump !== null && jump !== \"\") {\n        if (typeof jump !== \"string\" || !READER_JUMP_LINK.test(jump)) reading.fail(`${at}.jumpLink`, `is ${JSON.stringify(jump)}, not lowercase words joined by hyphens`);\n        else anchor = jump;\n      }\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const tail = reading.copy(raw[\"tail\"], `${at}.tail`);\n      const image = reading.photo(raw[\"photo\"], `${at}.photo`);\n      return heading === null ? null : { kind: \"locations\", anchor, heading, tail, image };\n    }\n    default:\n      return reading.fail(`${at}._type`, `is ${JSON.stringify(raw[\"_type\"])}, not a section type this reader knows`);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Content pages and settings\n// ---------------------------------------------------------------------------\n\nexport function parseContentPage(document: unknown): PageContent {\n  const reading = new Reading();\n  const doc = reading.object(document, \"page\");\n  if (doc === null) throw new MalformedContentError(\"page\", reading.problems);\n  const id = typeof doc[\"_id\"] === \"string\" ? doc[\"_id\"] : \"page\";\n  if (doc[\"_type\"] !== \"page\") reading.fail(\"_type\", `is ${JSON.stringify(doc[\"_type\"])}, not page`);\n  const title = reading.optionalString(doc[\"title\"], \"title\");\n  if (title === null) reading.fail(\"title\", \"is missing\");\n  if (doc[\"titleCopySource\"] === \"proposed\" && title !== null) reading.proposed.push({ where: \"title\", text: title });\n  const slugObject = doc[\"slug\"] as Raw | undefined;\n  const slug = typeof slugObject?.[\"current\"] === \"string\" && slugObject[\"current\"] !== \"\" ? slugObject[\"current\"] : null;\n  if (slug === null) reading.fail(\"slug.current\", \"is missing\");\n  const lead = reading.copy(doc[\"lead\"], \"lead\");\n  const photo = reading.photo(doc[\"photo\"], \"photo\");\n  const body = richTextToMarkdown(doc[\"body\"], \"body\", reading);\n  if (doc[\"bodyCopySource\"] === \"proposed\") reading.proposed.push({ where: \"body\", text: body });\n  if (reading.problems.length > 0 || title === null || slug === null) throw new MalformedContentError(id, reading.problems);\n  return {\n    slug,\n    title,\n    composition: { intro: lead === null ? null : plain(lead), photo, hero: null, blocks: [] },\n    body,\n    migrated: doc[\"migrated\"] === true,\n    proposedCopy: reading.proposed,\n  };\n}\n\nexport function parseSiteSettings(document: unknown): SiteSettingsContent {\n  const reading = new Reading();\n  const doc = reading.object(document, \"siteSettings\");\n  if (doc === null) throw new MalformedContentError(READER_SITE_SETTINGS_ID, reading.problems);\n  const name = reading.optionalString(doc[\"title\"], \"title\");\n  if (name === null) reading.fail(\"title\", \"is missing; a site needs its name\");\n  const description = reading.optionalString(doc[\"description\"], \"description\");\n  const contact = doc[\"contact\"] === undefined ? {} : (reading.object(doc[\"contact\"], \"contact\") ?? {});\n  const email = reading.optionalString(contact[\"email\"], \"contact.email\");\n  const phone = reading.optionalString(contact[\"phone\"], \"contact.phone\");\n  const social: { network: string; url: string }[] = [];\n  const rawSocial = doc[\"social\"] ?? [];\n  if (!Array.isArray(rawSocial)) reading.fail(\"social\", \"is not a list\");\n  else if (reading.dense(rawSocial, \"social\"))\n    rawSocial.forEach((member, index) => {\n      const link = reading.object(member, `social[${String(index)}]`);\n      if (link === null) return;\n      const network = reading.optionalString(link[\"network\"], `social[${String(index)}].network`);\n      const url = reading.optionalString(link[\"url\"], `social[${String(index)}].url`);\n      if (network === null || url === null || !/^https?:\\/\\//.test(url)) {\n        reading.fail(`social[${String(index)}]`, \"needs a network and a web address\");\n        return;\n      }\n      social.push({ network, url });\n    });\n  if (reading.problems.length > 0 || name === null) throw new MalformedContentError(READER_SITE_SETTINGS_ID, reading.problems);\n  return { name, description, contact: { email, phone }, social };\n}\n\n// ---------------------------------------------------------------------------\n// Queries\n// ---------------------------------------------------------------------------\n\n/** By fixed id: a second home page at a random id is never read. */\nexport const HOME_PAGE_DOCUMENT_QUERY = `*[_id == $id][0]`;\nexport const CONTENT_PAGES_QUERY = `*[_type == \"page\" && defined(slug.current)]|order(slug.current asc)`;\nexport const CONTENT_PAGE_BY_SLUG_QUERY = `*[_type == \"page\" && slug.current == $slug][0]`;\n\nexport interface SiteContentReader {\n  /** `null` when no home page document exists yet. */\n  home: (options: { readonly now: Date }) => Promise<HomeContent | null>;\n  pages: () => Promise<PageContent[]>;\n  /** `null` when no page has that slug. */\n  pageBySlug: (slug: string) => Promise<PageContent | null>;\n  /** `null` before anyone has filled in the site's details. */\n  siteSettings: () => Promise<SiteSettingsContent | null>;\n}\n\nexport function createSiteContentReader(client: { query: <T>(groq: string, options?: { params?: Record<string, unknown>; tags?: readonly string[] }) => Promise<T> }): SiteContentReader {\n  return {\n    home: async ({ now }) => {\n      const doc = await client.query<unknown>(HOME_PAGE_DOCUMENT_QUERY, { params: { id: READER_HOME_PAGE_ID } });\n      return doc === null || doc === undefined ? null : parseHomePage(doc, { now });\n    },\n    pages: async () => {\n      const docs = await client.query<unknown>(CONTENT_PAGES_QUERY);\n      if (!Array.isArray(docs)) throw new MalformedContentError(\"page\", [\"the page query did not return a list\"]);\n      if (!isDenseArray(docs)) throw new MalformedContentError(\"page\", [\"the page query contains missing entries\"]);\n      return docs.map((doc) => parseContentPage(doc));\n    },\n    pageBySlug: async (slug) => {\n      const doc = await client.query<unknown>(CONTENT_PAGE_BY_SLUG_QUERY, { params: { slug } });\n      return doc === null || doc === undefined ? null : parseContentPage(doc);\n    },\n    siteSettings: async () => {\n      const doc = await client.query<unknown>(HOME_PAGE_DOCUMENT_QUERY, { params: { id: READER_SITE_SETTINGS_ID } });\n      return doc === null || doc === undefined ? null : parseSiteSettings(doc);\n    },\n  };\n}\n\nfunction atomic<T>(raw: unknown, fallback: T, parse: (value: unknown) => T, validFallback: (value: unknown) => boolean): CmsResolution<T> {\n  if (!validFallback(fallback)) throw new TypeError(\"Invalid CMS content fallback\");\n  if (raw === null || raw === undefined) return { data: fallback, fallbackFields: [\"$\"] };\n  // The server reader catches parser errors and classifies the whole fallback\n  // as malformed. Returning fallback here would lose that diagnostic reason.\n  return { data: parse(raw), fallbackFields: [] };\n}\n\nexport function homeContentQuery(now: Date): CmsQuery<HomeContent | null> {\n  if (!(now instanceof Date) || !Number.isFinite(now.getTime())) throw new TypeError(\"Invalid CMS campaign date\");\n  const captured = now.getTime();\n  return defineCmsQuery({\n    name: \"homePage.v1\", query: HOME_PAGE_DOCUMENT_QUERY, params: { id: READER_HOME_PAGE_ID },\n    dependencies: { types: [\"homePage\"], ids: [READER_HOME_PAGE_ID] },\n    resolve: (raw, fallback) => atomic(raw, fallback, (value) => parseHomePage(value, { now: new Date(captured) }), validHomeFallback),\n  });\n}\n\nexport function contentPageQuery(slug: string): CmsQuery<PageContent | null> {\n  if (typeof slug !== \"string\" || slug === \"\") throw new TypeError(\"Invalid CMS page slug\");\n  return defineCmsQuery({\n    name: \"page.v1\", query: CONTENT_PAGE_BY_SLUG_QUERY, params: { slug }, dependencies: { types: [\"page\"] },\n    resolve: (raw, fallback) => atomic(raw, fallback, parseContentPage, validPageFallback),\n  });\n}\n\nexport function contentPagesQuery(): CmsQuery<readonly PageContent[]> {\n  return defineCmsQuery({\n    name: \"pages.v1\", query: CONTENT_PAGES_QUERY, params: {}, dependencies: { types: [\"page\"] },\n    resolve: (raw, fallback) => atomic(raw, fallback, (value) => {\n      if (!Array.isArray(value)) throw new MalformedContentError(\"page\", [\"the page query did not return a list\"]);\n      if (!isDenseArray(value)) throw new MalformedContentError(\"page\", [\"the page query contains missing entries\"]);\n      return value.map((document: unknown) => parseContentPage(document));\n    }, (value) => isDenseArray(value) && value.every((page: unknown) => page !== null && validPageFallback(page))),\n  });\n}\n\nexport function siteSettingsQuery(): CmsQuery<SiteSettingsContent | null> {\n  return defineCmsQuery({\n    name: \"siteSettings.v1\", query: HOME_PAGE_DOCUMENT_QUERY, params: { id: READER_SITE_SETTINGS_ID },\n    dependencies: { types: [\"siteSettings\"], ids: [READER_SITE_SETTINGS_ID] },\n    resolve: (raw, fallback) => atomic(raw, fallback, parseSiteSettings, validSettingsFallback),\n  });\n}\n", "import { defineCmsQuery, type CmsQuery, type CmsResolution } from \"./query.js\";\n\nexport const SITE_HERO_LAYOUTS = [\"columns\", \"rows\"] as const;\nexport const SITE_HERO_TAGLINE_MAX_LENGTH = 36;\nexport const SITE_HERO_LAYOUT_WARNING = \"siteHero.layout.defaulted\" as const;\nexport type SiteHeroLayout = typeof SITE_HERO_LAYOUTS[number];\nexport type SiteHeroTagline = { readonly key: string; readonly text: string };\n/** Optional additions preserve existing heading/intro-only consumer fallbacks. */\nexport type SiteHero = {\n  readonly heading: string;\n  readonly intro: string;\n  readonly layout?: SiteHeroLayout;\n  readonly taglines?: readonly SiteHeroTagline[];\n};\nexport type ParsedSiteHero = SiteHero & {\n  readonly layout: SiteHeroLayout;\n  readonly taglines: readonly SiteHeroTagline[];\n};\nexport type TextFieldDefinition = {\n  readonly name: string;\n  readonly label: string;\n  readonly noun: { readonly article: \"a\" | \"an\"; readonly word: string };\n  readonly kind: \"single-line\" | \"multi-line\";\n  readonly required: boolean;\n  readonly minLength: number;\n  readonly maxLength: number;\n  readonly noTrailingFullStop?: boolean;\n};\nexport type TextDocumentDefinition = {\n  readonly key: string;\n  readonly documentId: string;\n  readonly documentType: string;\n  readonly fields: readonly TextFieldDefinition[];\n  readonly copy: {\n    readonly currentTitle: string;\n    readonly editTitle: string;\n    readonly empty: string;\n  };\n};\nexport type TextValidation =\n  | { readonly ok: true; readonly value: Readonly<Record<string, string>> }\n  | { readonly ok: false; readonly errors: Readonly<Record<string, string>> };\n\nexport const CMS_CONTRACT_VERSION = 1;\n\nexport const SITE_HERO: TextDocumentDefinition = {\n  key: \"hero\",\n  documentId: \"siteHero\",\n  documentType: \"siteHero\",\n  fields: [\n    {\n      name: \"heading\",\n      label: \"Heading\",\n      noun: { article: \"a\", word: \"heading\" },\n      kind: \"single-line\",\n      required: true,\n      minLength: 1,\n      maxLength: 80,\n      noTrailingFullStop: true,\n    },\n    {\n      name: \"intro\",\n      label: \"Introduction\",\n      noun: { article: \"an\", word: \"introduction\" },\n      kind: \"multi-line\",\n      required: true,\n      minLength: 1,\n      maxLength: 320,\n    },\n  ],\n  copy: {\n    currentTitle: \"On your site now\",\n    editTitle: \"Edit and publish\",\n    empty: \"Your site has no hero text yet. Whatever you publish below becomes its first version.\",\n  },\n};\n\nfunction fieldError(field: TextFieldDefinition, text: string): string | null {\n  const { article, word } = field.noun;\n  if (text.length === 0) return field.required ? `Enter ${article} ${word}.` : null;\n  const count = [...text].length;\n  if (count < field.minLength) return `Make the ${word} at least ${String(field.minLength)} characters. It is ${String(count)} now.`;\n  if (count > field.maxLength) return `Keep the ${word} to ${String(field.maxLength)} characters or fewer. It is ${String(count)} now.`;\n  if (text.includes(\"\\u2014\")) return `The ${word} contains a long dash. Use a comma, a colon or a short dash instead.`;\n  if (field.kind === \"single-line\" && /[\\r\\n]/.test(text)) return `The ${word} must be a single line.`;\n  if (field.noTrailingFullStop === true && text.endsWith(\".\")) {\n    return `${word.charAt(0).toUpperCase()}${word.slice(1)}s on your site do not end with a full stop. Remove the last full stop.`;\n  }\n  return null;\n}\n\nexport function validateTextDocument(\n  definition: TextDocumentDefinition, raw: Readonly<Record<string, unknown>>,\n): TextValidation {\n  const value: Record<string, string> = {};\n  const errors: Record<string, string> = {};\n  for (const field of definition.fields) {\n    const submitted = Object.hasOwn(raw, field.name) ? raw[field.name] : undefined;\n    const text = typeof submitted === \"string\" ? submitted.trim() : \"\";\n    const error = fieldError(field, text);\n    Object.defineProperty(error === null ? value : errors, field.name, { value: error ?? text, enumerable: true });\n  }\n  return Object.keys(errors).length > 0 ? { ok: false, errors } : { ok: true, value };\n}\n\n/** Shared with the schema adapter; no provider metadata is returned. */\nexport function validateSiteHeroTaglines(raw: unknown):\n  | { readonly ok: true; readonly value: readonly SiteHeroTagline[] }\n  | { readonly ok: false; readonly error: string } {\n  if (!Array.isArray(raw)) return { ok: false, error: \"Enter a list of taglines.\" };\n  const heading = SITE_HERO.fields[0];\n  if (!heading) throw new TypeError(\"Missing siteHero heading definition\");\n  const field = { ...heading, name: \"text\", noun: { article: \"a\", word: \"tagline\" } as const,\n    maxLength: SITE_HERO_TAGLINE_MAX_LENGTH };\n  const value: SiteHeroTagline[] = [];\n  const keys = new Set<string>();\n  for (const item of raw as unknown[]) {\n    if (!item || typeof item !== \"object\" || Array.isArray(item)) return { ok: false, error: \"Enter a key and text for each tagline.\" };\n    const record = item as Record<string, unknown>;\n    const key = Object.hasOwn(record, \"key\") ? record.key : undefined;\n    if (typeof key !== \"string\" || !/^[a-z][a-z0-9_-]{0,31}$/.test(key)) {\n      return { ok: false, error: \"Use a lowercase key of 1 to 32 letters, numbers, short dashes or underscores, starting with a letter.\" };\n    }\n    if (keys.has(key)) return { ok: false, error: \"Use each tagline key only once.\" };\n    const text = validateTextDocument({ ...SITE_HERO, fields: [field] }, record);\n    if (!text.ok) return { ok: false, error: text.errors.text ?? \"Invalid tagline.\" };\n    keys.add(key);\n    value.push({ key, text: text.value.text ?? \"\" });\n  }\n  return { ok: true, value };\n}\n\nfunction isLayout(value: unknown): value is SiteHeroLayout {\n  return SITE_HERO_LAYOUTS.some((layout) => value === layout);\n}\n\n/** Strict per-field resolution: an invalid list never partially changes keyed copy. */\nexport function parseSiteHero(raw: unknown, fallback: SiteHero): CmsResolution<ParsedSiteHero> {\n  const local = validateTextDocument(SITE_HERO, fallback);\n  const localTaglines = validateSiteHeroTaglines(fallback.taglines ?? []);\n  if (!local.ok || !localTaglines.ok || (fallback.layout !== undefined && !isLayout(fallback.layout))) {\n    throw new TypeError(\"Invalid siteHero fallback\");\n  }\n  const data: { heading: string; intro: string; layout: SiteHeroLayout; taglines: readonly SiteHeroTagline[] } = {\n    heading: local.value.heading ?? \"\", intro: local.value.intro ?? \"\",\n    layout: fallback.layout ?? \"columns\", taglines: localTaglines.value,\n  };\n  if (raw === null || typeof raw !== \"object\" || Array.isArray(raw)) return { data, fallbackFields: [\"$\"] };\n  const record = raw as Readonly<Record<string, unknown>>;\n  const text = validateTextDocument(SITE_HERO, record);\n  const fallbackFields: string[] = text.ok ? [] : Object.keys(text.errors);\n  for (const field of SITE_HERO.fields) {\n    if (!fallbackFields.includes(field.name)) {\n      const value = text.ok ? text.value[field.name] : record[field.name];\n      if (typeof value === \"string\" && (field.name === \"heading\" || field.name === \"intro\")) data[field.name] = value.trim();\n    }\n  }\n  const layout = Object.hasOwn(record, \"layout\") ? record.layout : undefined;\n  const warnings: (typeof SITE_HERO_LAYOUT_WARNING)[] = [];\n  if (isLayout(layout)) data.layout = layout;\n  else {\n    data.layout = \"columns\";\n    fallbackFields.push(\"layout\");\n    warnings.push(SITE_HERO_LAYOUT_WARNING);\n  }\n  const taglines = validateSiteHeroTaglines(Object.hasOwn(record, \"taglines\") ? record.taglines : undefined);\n  if (taglines.ok) data.taglines = taglines.value;\n  else fallbackFields.push(\"taglines\");\n  return { data, fallbackFields: fallbackFields.length === SITE_HERO.fields.length + 2 ? [\"$\"] : fallbackFields,\n    ...(warnings.length > 0 ? { warnings } : {}) };\n}\n\nexport function siteHeroQuery(): CmsQuery<SiteHero> {\n  return defineCmsQuery<SiteHero>({\n    name: \"siteHero.v1\", query: '*[_id == $id && _type == \"siteHero\"][0]{heading,intro,layout,taglines}',\n    params: { id: \"siteHero\" }, dependencies: { types: [\"siteHero\"], ids: [\"siteHero\"] },\n    resolve: parseSiteHero,\n  });\n}\n"],
+  "mappings": "AACO,SAASA,EAAaC,EAAoC,CAC/D,GAAI,CAAC,MAAM,QAAQA,CAAK,EAAG,MAAO,GAClC,QAASC,EAAQ,EAAGA,EAAQD,EAAM,OAAQC,GAAS,EACjD,GAAI,CAAC,OAAO,OAAOD,EAAOC,CAAK,EAAG,MAAO,GAE3C,MAAO,EACT,CCYA,IAAMC,GAAO,+BACPC,GAAK,qCAGX,SAASC,GAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACC,GAAK,KAAKD,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMI,EAAMJ,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWK,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACC,GAAG,KAAKD,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIJ,CAAK,EAAE,KAAO,IAAI,IAAIG,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOH,CAAK,EAAG,GAAIG,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASG,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcX,GAAiBS,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CC1DA,IAAMM,EAAUC,GAAqDA,IAAU,MAAQ,OAAOA,GAAU,UAAY,CAAC,MAAM,QAAQA,CAAK,EAClIC,EAASD,GAA4B,OAAOA,GAAU,UAAYA,EAAM,KAAK,IAAM,GACnFE,EAAgBF,GAA4BA,IAAU,MAAQ,OAAOA,GAAU,SAC/EG,EAASH,GAA4BA,IAAU,MAAS,OAAOA,GAAU,UAAYI,EAAkB,KAAKJ,CAAK,EACjHK,EAAQL,GAA4B,OAAOA,GAAU,UAAYM,EAAmB,KAAKN,CAAK,EAC9FO,EAAQP,GAA4BC,EAAMD,CAAK,GAAMD,EAAOC,CAAK,GAAKC,EAAMD,EAAM,IAAI,IAAMA,EAAM,aAAe,YAAcA,EAAM,aAAe,YACpJQ,EAAgBR,GAA4BA,IAAU,MAAQO,EAAKP,CAAK,EACxES,EAAUT,GAA4BD,EAAOC,CAAK,GAAKO,EAAKP,EAAM,KAAK,GAAKK,EAAKL,EAAM,IAAI,EAC3FU,EAAkBV,GAA4BA,IAAU,MAAQS,EAAOT,CAAK,EAElF,SAASW,EAAYX,EAAyB,CAC5C,GAAI,CAACD,EAAOC,CAAK,GAAK,CAACE,EAAaF,EAAM,KAAK,GAAK,CAACG,EAAMH,EAAM,KAAK,GAAK,CAACY,EAAaZ,EAAM,MAAM,EAAG,MAAO,GAC/G,IAAMa,EAAOb,EAAM,KAcnB,GAbIa,IAAS,OAAS,CAACd,EAAOc,CAAI,GAAK,CAACN,EAAKM,EAAK,OAAO,GAAK,CAACL,EAAaK,EAAK,OAAO,GAAK,CAACL,EAAaK,EAAK,KAAK,GAChH,CAACV,EAAMU,EAAK,KAAK,GAAK,CAACV,EAAMU,EAAK,KAAK,GAAK,CAACH,EAAeG,EAAK,GAAG,GAAK,CAACH,EAAeG,EAAK,YAAY,IAY3G,CAXgBb,EAAM,OAAO,MAAOc,GAAmB,CACzD,GAAI,CAACf,EAAOe,CAAK,EAAG,MAAO,GAC3B,OAAQA,EAAM,KAAM,CAClB,IAAK,WAAY,OAAOJ,EAAeI,EAAM,MAAM,GAAKF,EAAaE,EAAM,MAAM,GAAKA,EAAM,OAAO,MAAOC,GAAmB,OAAOA,GAAU,UAAYZ,EAAMY,CAAK,CAAC,EACtK,IAAK,YAAa,OAAQD,EAAM,SAAW,MAAS,OAAOA,EAAM,QAAW,UAAYE,EAAiB,KAAKF,EAAM,MAAM,IAAOP,EAAKO,EAAM,OAAO,GAAKN,EAAaM,EAAM,IAAI,GAAKX,EAAMW,EAAM,KAAK,EACrM,IAAK,kBAAmB,OAAOP,EAAKO,EAAM,OAAO,GAAKN,EAAaM,EAAM,IAAI,GAAKF,EAAaE,EAAM,KAAK,GAAKA,EAAM,MAAM,OAAS,GAAKA,EAAM,MAAM,MAAOG,GAAkBlB,EAAOkB,CAAI,GAAKV,EAAKU,EAAK,OAAO,GAAKV,EAAKU,EAAK,IAAI,GAAKR,EAAOQ,EAAK,MAAM,GAAKd,EAAMc,EAAK,KAAK,GAAKC,EAAqB,KAAMC,GAAWA,IAAWF,EAAK,KAAK,GAAK,OAAOA,EAAK,MAAS,SAAS,EACjX,IAAK,cAAe,OAAOV,EAAKO,EAAM,OAAO,GAAKP,EAAKO,EAAM,IAAI,GAAKJ,EAAeI,EAAM,MAAM,GAAKX,EAAMW,EAAM,KAAK,EACvH,IAAK,MAAO,OAAOb,EAAMa,EAAM,OAAO,GAAKZ,EAAaY,EAAM,IAAI,GAAKf,EAAOe,EAAM,IAAI,GAAKb,EAAMa,EAAM,KAAK,KAAK,GAAKT,EAAKS,EAAM,KAAK,IAAI,EAC5I,QAAS,MAAO,EAClB,CACF,CAAC,EACiB,MAAO,GACzB,IAAMM,EAAQpB,EACRqB,EAAUD,EAAM,OAAO,QAASN,GAAUA,EAAM,OAAS,aAAeA,EAAM,SAAW,KAAO,CAACA,EAAM,MAAM,EAAI,CAAC,CAAC,EACzH,OAAI,IAAI,IAAIO,CAAO,EAAE,OAASA,EAAQ,OAAe,GACvC,CAACD,EAAM,MAAM,KAAK,KAAMA,EAAM,MAAM,cAAc,KAAM,GAAGA,EAAM,OAAO,QAASN,GAAU,CACvG,OAAQA,EAAM,KAAM,CAClB,IAAK,WAAY,IAAK,cAAe,MAAO,CAACA,EAAM,QAAQ,IAAI,EAC/D,IAAK,kBAAmB,OAAOA,EAAM,MAAM,IAAKG,GAASA,EAAK,OAAO,IAAI,EACzE,IAAK,MAAO,MAAO,CAACH,EAAM,KAAK,IAAI,EACnC,QAAS,MAAO,CAAC,CACnB,CACF,CAAC,CAAC,EACW,MAAOQ,GAASA,IAAS,QAAa,CAACA,EAAK,WAAW,GAAG,GAAKD,EAAQ,SAASC,EAAK,MAAM,CAAC,CAAC,CAAC,CAC7G,CAEA,SAASC,GAASvB,EAAyB,CACzC,OAAOY,EAAaZ,CAAK,GAAKA,EAAM,MAAOwB,GAAkBzB,EAAOyB,CAAI,GAAKvB,EAAMuB,EAAK,KAAK,GAAK,OAAOA,EAAK,MAAS,QAAQ,CACjI,CAEO,SAASC,GAAkBzB,EAA6C,CAC7E,OAAOA,IAAU,MAASD,EAAOC,CAAK,GAAKW,EAAYX,EAAM,WAAW,GAAK,OAAOA,EAAM,MAAS,UAAYuB,GAASvB,EAAM,YAAY,GACrI,OAAOA,EAAM,UAAa,UAAY,CAAC,QAAS,MAAO,cAAe,QAAS,MAAM,EAAE,SAASA,EAAM,QAAQ,CACrH,CAEO,SAAS0B,EAAkB1B,EAA6C,CAC7E,OAAOA,IAAU,MAASD,EAAOC,CAAK,GAAKC,EAAMD,EAAM,IAAI,GAAKC,EAAMD,EAAM,KAAK,GAAKW,EAAYX,EAAM,WAAW,GAC9G,OAAOA,EAAM,MAAS,UAAY,OAAOA,EAAM,UAAa,WAAauB,GAASvB,EAAM,YAAY,CAC3G,CAEO,SAAS2B,GAAsB3B,EAAqD,CACzF,OAAOA,IAAU,MAASD,EAAOC,CAAK,GAAKC,EAAMD,EAAM,IAAI,GAAKE,EAAaF,EAAM,WAAW,GAAKD,EAAOC,EAAM,OAAO,GAClHE,EAAaF,EAAM,QAAQ,KAAK,GAAKE,EAAaF,EAAM,QAAQ,KAAK,GAAKY,EAAaZ,EAAM,MAAM,GACnGA,EAAM,OAAO,MAAOsB,GAAkBvB,EAAOuB,CAAI,GAAKrB,EAAMqB,EAAK,OAAO,GAAK,OAAOA,EAAK,KAAQ,UAAY,eAAe,KAAKA,EAAK,GAAG,CAAC,CACjJ,CCiGO,IAAMM,EAAoB,oBAEpBC,EAAN,cAAoC,KAAM,CACtC,KAAOD,EACP,WACA,SAET,YAAYE,EAAoBC,EAA6B,CAC3D,MAAM,GAAGH,CAAiB,KAAKE,CAAU,KAAKC,EAAS,KAAK,IAAI,CAAC,EAAE,EACnE,KAAK,KAAO,wBACZ,KAAK,WAAaD,EAClB,KAAK,SAAWC,CAClB,CACF,EAUaC,EAAoB,6BACpBC,EACX,gIACWC,EAAmB,kCACnBC,EAAuB,CAAC,OAAQ,OAAQ,QAAS,MAAM,EACvDC,EAAsB,WACtBC,EAA0B,eAQjCC,EAAN,KAAc,CACH,SAAqB,CAAC,EACtB,SAA2B,CAAC,EAErC,KAAKC,EAAcC,EAAuB,CACxC,YAAK,SAAS,KAAK,GAAGD,CAAI,IAAIC,CAAO,EAAE,EAChC,IACT,CAEA,OAAOC,EAAgBF,EAA0B,CAC/C,OAAI,OAAOE,GAAU,UAAYA,IAAU,MAAQ,CAAC,MAAM,QAAQA,CAAK,EAAUA,EAC1E,KAAK,KAAKF,EAAM,kBAAkB,CAC3C,CAEA,MAAME,EAAkBF,EAAuB,CAC7C,OAAIG,EAAaD,CAAK,EAAU,IAChC,KAAK,KAAKF,EAAM,0BAA0B,EACnC,GACT,CAEA,eAAeE,EAAgBF,EAA6B,CAC1D,OAA2BE,GAAU,KAAa,KAC9C,OAAOA,GAAU,SAAiBA,EAAM,KAAK,IAAM,GAAK,KAAOA,EAC5D,KAAK,KAAKF,EAAM,aAAa,CACtC,CAGA,KAAKE,EAAgBF,EAAgC,CACnD,GAA2BE,GAAU,KAAM,OAAO,KAClD,IAAME,EAAM,KAAK,OAAOF,EAAOF,CAAI,EACnC,GAAII,IAAQ,KAAM,OAAO,KACzB,IAAMC,EAAOD,EAAI,KACXE,EAASF,EAAI,WACnB,OAAIC,IAAS,QAAa,OAAOA,GAAS,SAAiB,KAAK,KAAK,GAAGL,CAAI,QAAS,aAAa,EAC9FM,IAAW,QAAaA,IAAW,YAAcA,IAAW,WACvD,KAAK,KAAK,GAAGN,CAAI,cAAe,MAAM,KAAK,UAAUM,CAAM,CAAC,4BAA4B,EAE7F,OAAOD,GAAS,UAAYA,EAAK,KAAK,IAAM,GAAW,KACvDC,IAAW,YACb,KAAK,SAAS,KAAK,CAAE,MAAON,EAAM,KAAAK,CAAK,CAAC,EACjC,CAAE,KAAAA,EAAM,WAAY,UAAW,GAEpCC,IAAW,WAAmB,CAAE,KAAAD,EAAM,WAAY,UAAW,EAC1DA,CACT,CAEA,aAAaH,EAAgBF,EAAgC,CAC3D,IAAMO,EAAO,KAAK,KAAKL,EAAOF,CAAI,EAClC,OAAIO,IAAS,MAAQ,CAAC,KAAK,SAAS,KAAMC,GAAMA,EAAE,WAAWR,CAAI,CAAC,GAAG,KAAK,KAAKA,EAAM,sBAAsB,EACpGO,CACT,CAEA,MAAML,EAAgBF,EAA6B,CACjD,OAA2BE,GAAU,KAAa,KAC9C,OAAOA,GAAU,UAAYT,EAAkB,KAAKS,CAAK,EAAUA,EAChE,KAAK,KAAKF,EAAM,MAAM,KAAK,UAAUE,CAAK,CAAC,4BAA4B,CAChF,CAEA,OAAOA,EAAgBF,EAAcS,EAAuB,CAC1D,OAA2BP,GAAU,KAAa,CAAC,EAC9C,MAAM,QAAQA,CAAK,EAInB,KAAK,MAAMA,EAAOF,CAAI,GACvBE,EAAM,OAASO,GAAK,KAAK,KAAKT,EAAM,SAAS,OAAOE,EAAM,MAAM,CAAC,oBAAoB,OAAOO,CAAG,CAAC,EAAE,EAC/FP,EAAM,IAAI,CAACQ,EAAOC,IAAU,KAAK,MAAMD,EAAO,GAAGV,CAAI,IAAI,OAAOW,CAAK,CAAC,GAAG,CAAC,EAAE,OAAQH,GAAmBA,IAAM,IAAI,GAFnF,CAAC,GAHpC,KAAK,KAAKR,EAAM,yBAAyB,EAClC,CAAC,EAKZ,CAEA,OAAOE,EAAgBF,EAAkC,CACvD,GAA2BE,GAAU,KAAM,OAAO,KAClD,IAAME,EAAM,KAAK,OAAOF,EAAOF,CAAI,EACnC,GAAII,IAAQ,KAAM,OAAO,KACzB,IAAMQ,EAAQ,KAAK,aAAaR,EAAI,MAAU,GAAGJ,CAAI,QAAQ,EACvDa,EAAOT,EAAI,KACjB,OAAI,OAAOS,GAAS,UAAY,CAACnB,EAAmB,KAAKmB,CAAI,EACpD,KAAK,KAAK,GAAGb,CAAI,QAAS,MAAM,KAAK,UAAUa,CAAI,CAAC,6DAA6D,EAEnHD,IAAU,KAAO,KAAO,CAAE,MAAAA,EAAO,KAAAC,CAAK,CAC/C,CAEA,eAAeX,EAAgBF,EAAkC,CAC/D,OAA2BE,GAAU,KAAa,KAAK,KAAKF,EAAM,YAAY,EACvE,KAAK,OAAOE,EAAOF,CAAI,CAChC,CACF,EAEA,SAASc,EAAMP,EAAyB,CACtC,OAAO,OAAOA,GAAS,SAAWA,EAAOA,EAAK,IAChD,CAiBO,SAASQ,GAAuBb,EAAwB,CAC7D,IAAMc,EAAU,IAAIjB,EACdkB,EAAWC,EAAmBhB,EAAO,OAAQc,CAAO,EAC1D,GAAIA,EAAQ,SAAS,OAAS,EAAG,MAAM,IAAI1B,EAAsB,OAAQ0B,EAAQ,QAAQ,EACzF,OAAOC,CACT,CAEA,SAASC,EAAmBhB,EAAgBF,EAAcgB,EAA0B,CAClF,GAA2Bd,GAAU,KAAM,MAAO,GAClD,GAAI,CAAC,MAAM,QAAQA,CAAK,EACtB,OAAAc,EAAQ,KAAKhB,EAAM,kBAAkB,EAC9B,GAET,GAAI,CAACgB,EAAQ,MAAMd,EAAOF,CAAI,EAAG,MAAO,GACxC,IAAMmB,EAAgB,CAAC,EACnBC,EAAkB,GACtB,OAAAlB,EAAM,QAAQ,CAACmB,EAAQV,IAAU,CAC/B,IAAMW,EAAK,GAAGtB,CAAI,IAAI,OAAOW,CAAK,CAAC,IAC7BY,EAAQP,EAAQ,OAAOK,EAAQC,CAAE,EACvC,GAAIC,IAAU,KAAM,OACpB,GAAIA,EAAM,QAAa,QAAS,CAC9BP,EAAQ,KAAKM,EAAI,QAAQ,KAAK,UAAUC,EAAM,KAAQ,CAAC,8CAA8C,EACrG,MACF,CACA,IAAMlB,EAAOmB,GAAgBD,EAAOD,EAAIN,CAAO,EACzCS,EAAWF,EAAM,SACjBG,EAAQH,EAAM,OAAY,SAC5BI,EACJ,GAAIF,IAAa,UAAYA,IAAa,SAAU,CAClD,IAAMG,EAAQ,OAAOL,EAAM,OAAa,UAAYA,EAAM,MAAW,EAAIA,EAAM,MAAW,EAC1FI,EAAO,GAAG,KAAK,OAAOC,EAAQ,CAAC,CAAC,GAAGH,IAAa,SAAW,IAAM,IAAI,IAAIpB,CAAI,EAC/E,SAAWqB,IAAU,KAAMC,EAAO,MAAMtB,CAAI,WACnCqB,IAAU,KAAMC,EAAO,OAAOtB,CAAI,WAClCqB,IAAU,aAAcC,EAAO,KAAKtB,CAAI,WACxCqB,IAAU,SAAUC,EAAOtB,MAC/B,CACHW,EAAQ,KAAK,GAAGM,CAAE,SAAU,MAAM,KAAK,UAAUI,CAAK,CAAC,mCAAmC,EAC1F,MACF,CACA,IAAMG,EAASJ,IAAa,UAAYA,IAAa,SACjDN,EAAI,OAAS,GAAGA,EAAI,KAAKU,GAAUT,EAAkB;AAAA,EAAO;AAAA;AAAA,CAAM,EACtED,EAAI,KAAKQ,CAAI,EACbP,EAAkBS,CACpB,CAAC,EACMV,EAAI,KAAK,EAAE,CACpB,CAEA,IAAMW,GAAqC,CAAE,OAAQ,KAAM,GAAI,IAAK,KAAM,GAAI,EAE9E,SAASN,GAAgBD,EAAYvB,EAAcgB,EAA0B,CAC3E,IAAMe,EAAQ,IAAI,IACZC,EAAW,MAAM,QAAQT,EAAM,QAAW,EAAKA,EAAM,SAA4B,CAAC,EACxF,GAAI,CAACP,EAAQ,MAAMgB,EAAU,GAAGhC,CAAI,WAAW,EAAG,MAAO,GACzD,QAAWiC,KAAOD,EAAU,CAC1B,IAAME,EAAID,EACNC,EAAE,QAAa,QAAU,OAAOA,EAAE,MAAY,UAAY,OAAOA,EAAE,MAAY,UAAUH,EAAM,IAAIG,EAAE,KAASA,EAAE,IAAO,CAC7H,CACA,IAAMC,EAAW,MAAM,QAAQZ,EAAM,QAAW,EAAKA,EAAM,SAA4B,CAAC,EACxF,OAAKP,EAAQ,MAAMmB,EAAU,GAAGnC,CAAI,WAAW,EACxCmC,EACJ,IAAI,CAACC,EAAOzB,IAAU,CACrB,IAAM0B,EAAOD,EACb,GAAIC,EAAK,QAAa,QAAU,OAAOA,EAAK,MAAY,SACtD,OAAArB,EAAQ,KAAK,GAAGhB,CAAI,aAAa,OAAOW,CAAK,CAAC,IAAK,oBAAoB,EAChE,GAET,IAAIN,EAAOgC,EAAK,KACVC,EAAQ,MAAM,QAAQD,EAAK,KAAQ,EAAKA,EAAK,MAAyB,CAAC,EAC7E,GAAI,CAACrB,EAAQ,MAAMsB,EAAO,GAAGtC,CAAI,aAAa,OAAOW,CAAK,CAAC,SAAS,EAAG,MAAO,GAC9E,IAAIE,EAAsB,KAC1B,QAAW0B,KAAQD,EAAO,CACxB,GAAI,OAAOC,GAAS,SAAU,SAC9B,IAAMC,EAAQV,GAAWS,CAAI,EACzBC,IAAU,OAAWnC,EAAO,GAAGmC,CAAK,GAAGnC,CAAI,GAAGmC,CAAK,GAC9CT,EAAM,IAAIQ,CAAI,EAAG1B,EAAOkB,EAAM,IAAIQ,CAAI,GAAK,KAC/CvB,EAAQ,KAAK,GAAGhB,CAAI,aAAa,OAAOW,CAAK,CAAC,UAAW,SAAS,KAAK,UAAU4B,CAAI,CAAC,uCAAuC,CACpI,CACA,OAAO1B,IAAS,KAAOR,EAAO,IAAIA,CAAI,KAAKQ,CAAI,GACjD,CAAC,EACA,KAAK,EAAE,EArB+C,EAsB3D,CAOO,SAAS4B,GAAcC,EAAmBC,EAA0B,CACzE,GAAI,OAAOD,GAAa,UAAYA,IAAa,KAAM,MAAO,OAC9D,IAAME,EAAIF,EACV,GAAIE,EAAE,UAAe,GAAM,MAAO,MAClC,IAAMC,EAAS,OAAOD,EAAE,UAAgB,SAAW,KAAK,MAAMA,EAAE,QAAW,EAAI,KACzEE,EAAO,OAAOF,EAAE,QAAc,SAAW,KAAK,MAAMA,EAAE,MAAS,EAAI,KACzE,OAAIC,IAAW,MAAQF,EAAI,QAAQ,EAAIE,EAAe,cAClDC,IAAS,MAAQH,EAAI,QAAQ,GAAKG,EAAa,QAC5C,OACT,CAEA,SAASC,EAAM/C,EAAcI,EAAUO,EAAuB,CAC5D,OAAO,OAAOP,EAAI,MAAY,SAAW,GAAGJ,CAAI,WAAWI,EAAI,IAAO,KAAO,GAAGJ,CAAI,IAAI,OAAOW,CAAK,CAAC,GACvG,CAQO,SAASqC,EAAcC,EAAmBC,EAA8C,CAC7F,IAAMlC,EAAU,IAAIjB,EACdoD,EAAMnC,EAAQ,OAAOiC,EAAU,UAAU,EAC/C,GAAIE,IAAQ,KAAM,MAAM,IAAI7D,EAAsBO,EAAqBmB,EAAQ,QAAQ,EACvF,IAAMoC,EAAK,OAAOD,EAAI,KAAW,SAAWA,EAAI,IAAStD,EACrDsD,EAAI,QAAa,YAAYnC,EAAQ,KAAK,QAAS,MAAM,KAAK,UAAUmC,EAAI,KAAQ,CAAC,gBAAgB,EAEzG,IAAIE,EAAyB,KACvBC,EAAUH,EAAI,OAAY,OAAYnC,EAAQ,KAAK,OAAQ,YAAY,EAAIA,EAAQ,OAAOmC,EAAI,KAAS,MAAM,EACnH,GAAIG,IAAY,KAAM,CACpB,IAAMC,EAASvC,EAAQ,OAAOsC,EAAQ,OAAW,cAAe,CAAC,EAC3DE,EAAUxC,EAAQ,aAAasC,EAAQ,SAAa,eAAe,EACnEG,EAAUzC,EAAQ,KAAKsC,EAAQ,QAAY,cAAc,EACzDI,EAAQ1C,EAAQ,KAAKsC,EAAQ,KAAS,WAAW,EACjDK,EAAM3C,EAAQ,OAAOsC,EAAQ,cAAkB,oBAAoB,EACnEM,GAAe5C,EAAQ,OAAOsC,EAAQ,gBAAoB,sBAAsB,EAClFE,IAAY,OACdH,EAAO,CAAE,QAAAG,EAAS,QAAAC,EAAS,MAAAC,EAAO,MAAOH,EAAO,CAAC,GAAK,KAAM,MAAOA,EAAO,CAAC,GAAK,KAAM,IAAAI,EAAK,aAAAC,EAAa,EAE5G,CAEA,IAAMC,EAAkC,CAAC,EACnCC,EAAgD,CAAC,EACnDC,EAAO,GACLC,EAAQvB,GAAcU,EAAI,SAAaD,EAAQ,GAAG,EACxD,GAAIc,IAAU,QAAS,CACrB,IAAMtB,EAAW1B,EAAQ,OAAOmC,EAAI,SAAa,UAAU,EAC3D,GAAIT,IAAa,KAAM,CACrB,IAAMuB,EAAQjD,EAAQ,aAAa0B,EAAS,MAAU,gBAAgB,EAChEwB,EAASlD,EAAQ,OAAO0B,EAAS,OAAW,kBAAmB,CAAC,EAClEwB,EAAO,SAAW,GAAGlD,EAAQ,KAAK,kBAAmB,qDAAqD,EAC9G,IAAMX,EAAOa,EAAmBwB,EAAS,KAAS,gBAAiB1B,CAAO,EACtEX,IAAS,IAAIW,EAAQ,KAAK,gBAAiB,2CAA2C,EACtF0B,EAAS,iBAAsB,YAAY1B,EAAQ,SAAS,KAAK,CAAE,MAAO,gBAAiB,KAAAX,CAAK,CAAC,EACrG,IAAM8D,EAASnD,EAAQ,OAAO0B,EAAS,OAAW,iBAAiB,EAC/DyB,IAAW,MAAML,EAAW,KAAK,CAAE,MAAO,uBAAwB,KAAMK,EAAO,IAAK,CAAC,EACrFF,IAAU,OAAMF,EAAO,KAAKjD,EAAMmD,CAAK,CAAC;AAAA;AAAA,EAAO5D,CAAI,IACvDwD,EAAO,KAAK,CAAE,KAAM,WAAY,OAAAM,EAAQ,OAAAD,CAAO,CAAC,CAClD,CACF,CAEA,IAAME,EAAoB,CAAC,EACrBC,EAAYlB,EAAI,QAAa,CAAC,EAC/B,MAAM,QAAQkB,CAAS,EACnBrD,EAAQ,MAAMqD,EAAW,QAAQ,GACxCA,EAAU,QAAQ,CAAChD,EAAQV,IAAU,CACnC,IAAMP,EAAMY,EAAQ,OAAOK,EAAQ,UAAU,OAAOV,CAAK,CAAC,GAAG,EAC7D,GAAIP,IAAQ,KAAM,OAClB,IAAMkB,EAAKyB,EAAM,SAAU3C,EAAKO,CAAK,EAC/B2D,EAASC,GAASnE,EAAKkB,EAAIN,CAAO,EACpCsD,IAAW,OACfR,EAAW,KAAK,GAAGU,GAAUF,EAAQlE,EAAKkB,CAAE,CAAC,EACzCgD,EAAO,OAAS,aAAeA,EAAO,SAAW,OAC/CF,EAAQ,SAASE,EAAO,MAAM,GAAGtD,EAAQ,KAAK,GAAGM,CAAE,YAAa,YAAYgD,EAAO,MAAM,oCAAoC,EACjIF,EAAQ,KAAKE,EAAO,MAAM,GAE5BT,EAAO,KAAKS,CAAM,EACpB,CAAC,EAd4BtD,EAAQ,KAAK,SAAU,eAAe,EAkBrE,IAAMyD,EAA2C,CAAC,EAC9CpB,GAAM,KAAKoB,EAAM,KAAK,CAAE,MAAO,0BAA2B,KAAMpB,EAAK,IAAI,IAAK,CAAC,EAC/EA,GAAM,cAAcoB,EAAM,KAAK,CAAE,MAAO,4BAA6B,KAAMpB,EAAK,aAAa,IAAK,CAAC,EACvGoB,EAAM,KAAK,GAAGX,CAAU,EACxB,OAAW,CAAE,MAAAY,EAAO,KAAA7D,CAAK,IAAK4D,EACxB5D,EAAK,WAAW,GAAG,GAAK,CAACuD,EAAQ,SAASvD,EAAK,MAAM,CAAC,CAAC,GACzDG,EAAQ,KAAK0D,EAAO,YAAY7D,CAAI,yCAAyC,EAIjF,GAAIG,EAAQ,SAAS,OAAS,EAAG,MAAM,IAAI1B,EAAsB8D,EAAIpC,EAAQ,QAAQ,EACrF,MAAO,CACL,YAAa,CAAE,MAAO,KAAM,MAAO,KAAM,KAAAqC,EAAM,OAAAQ,CAAO,EACtD,KAAAE,EACA,SAAUC,EACV,aAAchD,EAAQ,QACxB,CACF,CAGA,SAASwD,GAAUjD,EAA8BnB,EAAUkB,EAA+C,CACxG,OAAQC,EAAM,KAAM,CAClB,IAAK,kBAAmB,CACtB,IAAMoD,EAAU,MAAM,QAAQvE,EAAI,OAAU,EAAKA,EAAI,QAAuB,CAAC,EAC7E,OAAOmB,EAAM,MAAM,IAAI,CAACqD,EAAMjE,KAAW,CACvC,MAAO,GAAGoC,EAAM,GAAGzB,CAAE,WAAYqD,EAAQhE,CAAK,GAAK,CAAC,EAAGA,CAAK,CAAC,eAC7D,KAAMiE,EAAK,OAAO,IACpB,EAAE,CACJ,CACA,IAAK,cACH,OAAOrD,EAAM,SAAW,KAAO,CAAC,EAAI,CAAC,CAAE,MAAO,GAAGD,CAAE,eAAgB,KAAMC,EAAM,OAAO,IAAK,CAAC,EAC9F,IAAK,MACH,MAAO,CAAC,CAAE,MAAO,GAAGD,CAAE,eAAgB,KAAMC,EAAM,KAAK,IAAK,CAAC,EAC/D,QACE,MAAO,CAAC,CACZ,CACF,CAEA,SAASgD,GAASnE,EAAUkB,EAAYN,EAAgD,CACtF,OAAQZ,EAAI,MAAU,CACpB,IAAK,sBAAuB,CAC1B,IAAMoD,EAAUxC,EAAQ,aAAaZ,EAAI,QAAY,GAAGkB,CAAE,UAAU,EAC9DuD,EAAO7D,EAAQ,KAAKZ,EAAI,KAAS,GAAGkB,CAAE,OAAO,EAC7CqD,EAAUvE,EAAI,QACpB,GAAI,CAAC,MAAM,QAAQuE,CAAO,GAAKA,EAAQ,SAAW,EAAG,OAAO3D,EAAQ,KAAK,GAAGM,CAAE,WAAY,gBAAgB,EAC1G,GAAI,CAACN,EAAQ,MAAM2D,EAAS,GAAGrD,CAAE,UAAU,EAAG,OAAO,KACrD,IAAMwD,EAAsB,CAAC,EAC7B,OAAAH,EAAQ,QAAQ,CAACtD,EAAQV,IAAU,CACjC,IAAMoE,EAAQ/D,EAAQ,OAAOK,EAAQ,GAAGC,CAAE,YAAY,OAAOX,CAAK,CAAC,GAAG,EACtE,GAAIoE,IAAU,KAAM,OACpB,IAAMC,EAAMjC,EAAM,GAAGzB,CAAE,WAAYyD,EAAOpE,CAAK,EACzCsE,EAAWjE,EAAQ,aAAa+D,EAAM,QAAY,GAAGC,CAAG,UAAU,EAClEE,EAAQlE,EAAQ,aAAa+D,EAAM,KAAS,GAAGC,CAAG,OAAO,EACzDb,EAASnD,EAAQ,eAAe+D,EAAM,OAAW,GAAGC,CAAG,SAAS,EAChEG,EAAQnE,EAAQ,MAAM+D,EAAM,MAAU,GAAGC,CAAG,QAAQ,EACpDI,EAASL,EAAM,QAAa,OAClC,GAAI,CAAEnF,EAA4C,SAASwF,CAAM,EAAG,CAClEpE,EAAQ,KAAK,GAAGgE,CAAG,UAAW,MAAM,KAAK,UAAUI,CAAM,CAAC,iCAAiC,EAC3F,MACF,CACA,IAAMC,EAASN,EAAM,QAAa,GAClC,GAAI,OAAOM,GAAW,UAAW,CAC/BrE,EAAQ,KAAK,GAAGgE,CAAG,UAAW,kBAAkB,EAChD,MACF,CACIC,IAAa,MAAQC,IAAU,MAAQf,IAAW,MACtDW,EAAM,KAAK,CAAE,QAASG,EAAU,KAAMC,EAAO,OAAAf,EAAQ,MAAAgB,EAAO,MAAOC,EAA+B,KAAMC,CAAO,CAAC,CAClH,CAAC,EACM7B,IAAY,KAAO,KAAO,CAAE,KAAM,kBAAmB,QAAAA,EAAS,KAAAqB,EAAM,MAAAC,CAAM,CACnF,CACA,IAAK,mBAAoB,CACvB,IAAMtB,EAAUxC,EAAQ,aAAaZ,EAAI,QAAY,GAAGkB,CAAE,UAAU,EAC9DyC,EAAO/C,EAAQ,KAAKZ,EAAI,KAAS,GAAGkB,CAAE,OAAO,EAC7C6C,EAASnD,EAAQ,eAAeZ,EAAI,OAAW,GAAGkB,CAAE,SAAS,EACnE,OAAIkC,IAAY,MAAQW,IAAW,KAAa,KACzC,CACL,KAAM,MACN,QAASrD,EAAM0C,CAAO,EACtB,KAAMO,IAAS,KAAO,KAAOjD,EAAMiD,CAAI,EACvC,KAAM,CAAE,MAAOjD,EAAMqD,EAAO,KAAK,EAAG,KAAMA,EAAO,IAAK,CACxD,CACF,CACA,IAAK,kBAAmB,CACtB,IAAMX,EAAUxC,EAAQ,aAAaZ,EAAI,QAAY,GAAGkB,CAAE,UAAU,EAC9DyC,EAAO/C,EAAQ,aAAaZ,EAAI,KAAS,GAAGkB,CAAE,OAAO,EACrD6C,EAASnD,EAAQ,OAAOZ,EAAI,OAAW,GAAGkB,CAAE,SAAS,EACrD6D,EAAQnE,EAAQ,MAAMZ,EAAI,MAAU,GAAGkB,CAAE,QAAQ,EACvD,OAAIkC,IAAY,MAAQO,IAAS,KAAa,KACvC,CAAE,KAAM,cAAe,QAAAP,EAAS,KAAAO,EAAM,OAAAI,EAAQ,MAAAgB,CAAM,CAC7D,CACA,IAAK,iBAAkB,CACrB,IAAMG,EAAOlF,EAAI,SACbmF,EAAwB,KACFD,GAAS,MAAQA,IAAS,KAC9C,OAAOA,GAAS,UAAY,CAAC3F,EAAiB,KAAK2F,CAAI,EAAGtE,EAAQ,KAAK,GAAGM,CAAE,YAAa,MAAM,KAAK,UAAUgE,CAAI,CAAC,yCAAyC,EAC3JC,EAASD,GAEhB,IAAM9B,EAAUxC,EAAQ,aAAaZ,EAAI,QAAY,GAAGkB,CAAE,UAAU,EAC9DuD,EAAO7D,EAAQ,KAAKZ,EAAI,KAAS,GAAGkB,CAAE,OAAO,EAC7C6D,EAAQnE,EAAQ,MAAMZ,EAAI,MAAU,GAAGkB,CAAE,QAAQ,EACvD,OAAOkC,IAAY,KAAO,KAAO,CAAE,KAAM,YAAa,OAAA+B,EAAQ,QAAA/B,EAAS,KAAAqB,EAAM,MAAAM,CAAM,CACrF,CACA,QACE,OAAOnE,EAAQ,KAAK,GAAGM,CAAE,SAAU,MAAM,KAAK,UAAUlB,EAAI,KAAQ,CAAC,wCAAwC,CACjH,CACF,CAMO,SAASoF,EAAiBvC,EAAgC,CAC/D,IAAMjC,EAAU,IAAIjB,EACdoD,EAAMnC,EAAQ,OAAOiC,EAAU,MAAM,EAC3C,GAAIE,IAAQ,KAAM,MAAM,IAAI7D,EAAsB,OAAQ0B,EAAQ,QAAQ,EAC1E,IAAMoC,EAAK,OAAOD,EAAI,KAAW,SAAWA,EAAI,IAAS,OACrDA,EAAI,QAAa,QAAQnC,EAAQ,KAAK,QAAS,MAAM,KAAK,UAAUmC,EAAI,KAAQ,CAAC,YAAY,EACjG,IAAMc,EAAQjD,EAAQ,eAAemC,EAAI,MAAU,OAAO,EACtDc,IAAU,MAAMjD,EAAQ,KAAK,QAAS,YAAY,EAClDmC,EAAI,kBAAuB,YAAcc,IAAU,MAAMjD,EAAQ,SAAS,KAAK,CAAE,MAAO,QAAS,KAAMiD,CAAM,CAAC,EAClH,IAAMwB,EAAatC,EAAI,KACjBuC,EAAO,OAAOD,GAAa,SAAe,UAAYA,EAAW,UAAe,GAAKA,EAAW,QAAa,KAC/GC,IAAS,MAAM1E,EAAQ,KAAK,eAAgB,YAAY,EAC5D,IAAM2E,EAAO3E,EAAQ,KAAKmC,EAAI,KAAS,MAAM,EACvCyC,EAAQ5E,EAAQ,MAAMmC,EAAI,MAAU,OAAO,EAC3CY,EAAO7C,EAAmBiC,EAAI,KAAS,OAAQnC,CAAO,EAE5D,GADImC,EAAI,iBAAsB,YAAYnC,EAAQ,SAAS,KAAK,CAAE,MAAO,OAAQ,KAAM+C,CAAK,CAAC,EACzF/C,EAAQ,SAAS,OAAS,GAAKiD,IAAU,MAAQyB,IAAS,KAAM,MAAM,IAAIpG,EAAsB8D,EAAIpC,EAAQ,QAAQ,EACxH,MAAO,CACL,KAAA0E,EACA,MAAAzB,EACA,YAAa,CAAE,MAAO0B,IAAS,KAAO,KAAO7E,EAAM6E,CAAI,EAAG,MAAAC,EAAO,KAAM,KAAM,OAAQ,CAAC,CAAE,EACxF,KAAA7B,EACA,SAAUZ,EAAI,WAAgB,GAC9B,aAAcnC,EAAQ,QACxB,CACF,CAEO,SAAS6E,EAAkB5C,EAAwC,CACxE,IAAMjC,EAAU,IAAIjB,EACdoD,EAAMnC,EAAQ,OAAOiC,EAAU,cAAc,EACnD,GAAIE,IAAQ,KAAM,MAAM,IAAI7D,EAAsBQ,EAAyBkB,EAAQ,QAAQ,EAC3F,IAAM8E,EAAO9E,EAAQ,eAAemC,EAAI,MAAU,OAAO,EACrD2C,IAAS,MAAM9E,EAAQ,KAAK,QAAS,mCAAmC,EAC5E,IAAM+E,EAAc/E,EAAQ,eAAemC,EAAI,YAAgB,aAAa,EACtE6C,EAAU7C,EAAI,UAAe,OAAY,CAAC,EAAKnC,EAAQ,OAAOmC,EAAI,QAAY,SAAS,GAAK,CAAC,EAC7F8C,EAAQjF,EAAQ,eAAegF,EAAQ,MAAU,eAAe,EAChEE,EAAQlF,EAAQ,eAAegF,EAAQ,MAAU,eAAe,EAChEG,EAA6C,CAAC,EAC9CC,EAAYjD,EAAI,QAAa,CAAC,EAcpC,GAbK,MAAM,QAAQiD,CAAS,EACnBpF,EAAQ,MAAMoF,EAAW,QAAQ,GACxCA,EAAU,QAAQ,CAAC/E,EAAQV,IAAU,CACnC,IAAM0F,EAAOrF,EAAQ,OAAOK,EAAQ,UAAU,OAAOV,CAAK,CAAC,GAAG,EAC9D,GAAI0F,IAAS,KAAM,OACnB,IAAMC,EAAUtF,EAAQ,eAAeqF,EAAK,QAAY,UAAU,OAAO1F,CAAK,CAAC,WAAW,EACpF4F,EAAMvF,EAAQ,eAAeqF,EAAK,IAAQ,UAAU,OAAO1F,CAAK,CAAC,OAAO,EAC9E,GAAI2F,IAAY,MAAQC,IAAQ,MAAQ,CAAC,eAAe,KAAKA,CAAG,EAAG,CACjEvF,EAAQ,KAAK,UAAU,OAAOL,CAAK,CAAC,IAAK,mCAAmC,EAC5E,MACF,CACAwF,EAAO,KAAK,CAAE,QAAAG,EAAS,IAAAC,CAAI,CAAC,CAC9B,CAAC,EAZ4BvF,EAAQ,KAAK,SAAU,eAAe,EAajEA,EAAQ,SAAS,OAAS,GAAK8E,IAAS,KAAM,MAAM,IAAIxG,EAAsBQ,EAAyBkB,EAAQ,QAAQ,EAC3H,MAAO,CAAE,KAAA8E,EAAM,YAAAC,EAAa,QAAS,CAAE,MAAAE,EAAO,MAAAC,CAAM,EAAG,OAAAC,CAAO,CAChE,CAOO,IAAMK,EAA2B,mBAC3BC,EAAsB,sEACtBC,EAA6B,iDAYnC,SAASC,GAAwBC,EAAiJ,CACvL,MAAO,CACL,KAAM,MAAO,CAAE,IAAAjE,CAAI,IAAM,CACvB,IAAMQ,EAAM,MAAMyD,EAAO,MAAeJ,EAA0B,CAAE,OAAQ,CAAE,GAAI3G,CAAoB,CAAE,CAAC,EACzG,OAAOsD,GAAQ,KAA4B,KAAOH,EAAcG,EAAK,CAAE,IAAAR,CAAI,CAAC,CAC9E,EACA,MAAO,SAAY,CACjB,IAAMkE,EAAO,MAAMD,EAAO,MAAeH,CAAmB,EAC5D,GAAI,CAAC,MAAM,QAAQI,CAAI,EAAG,MAAM,IAAIvH,EAAsB,OAAQ,CAAC,sCAAsC,CAAC,EAC1G,GAAI,CAACa,EAAa0G,CAAI,EAAG,MAAM,IAAIvH,EAAsB,OAAQ,CAAC,yCAAyC,CAAC,EAC5G,OAAOuH,EAAK,IAAK1D,GAAQqC,EAAiBrC,CAAG,CAAC,CAChD,EACA,WAAY,MAAOuC,GAAS,CAC1B,IAAMvC,EAAM,MAAMyD,EAAO,MAAeF,EAA4B,CAAE,OAAQ,CAAE,KAAAhB,CAAK,CAAE,CAAC,EACxF,OAAOvC,GAAQ,KAA4B,KAAOqC,EAAiBrC,CAAG,CACxE,EACA,aAAc,SAAY,CACxB,IAAMA,EAAM,MAAMyD,EAAO,MAAeJ,EAA0B,CAAE,OAAQ,CAAE,GAAI1G,CAAwB,CAAE,CAAC,EAC7G,OAAOqD,GAAQ,KAA4B,KAAO0C,EAAkB1C,CAAG,CACzE,CACF,CACF,CAEA,SAAS2D,EAAU1G,EAAc2G,EAAaC,EAA8BC,EAA8D,CACxI,GAAI,CAACA,EAAcF,CAAQ,EAAG,MAAM,IAAI,UAAU,8BAA8B,EAChF,OAAI3G,GAAQ,KAAkC,CAAE,KAAM2G,EAAU,eAAgB,CAAC,GAAG,CAAE,EAG/E,CAAE,KAAMC,EAAM5G,CAAG,EAAG,eAAgB,CAAC,CAAE,CAChD,CAEO,SAAS8G,GAAiBvE,EAAyC,CACxE,GAAI,EAAEA,aAAe,OAAS,CAAC,OAAO,SAASA,EAAI,QAAQ,CAAC,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAC9G,IAAMwE,EAAWxE,EAAI,QAAQ,EAC7B,OAAOyE,EAAe,CACpB,KAAM,cAAe,MAAOZ,EAA0B,OAAQ,CAAE,GAAI3G,CAAoB,EACxF,aAAc,CAAE,MAAO,CAAC,UAAU,EAAG,IAAK,CAACA,CAAmB,CAAE,EAChE,QAAS,CAACO,EAAK2G,IAAaD,EAAO1G,EAAK2G,EAAW7G,GAAU8C,EAAc9C,EAAO,CAAE,IAAK,IAAI,KAAKiH,CAAQ,CAAE,CAAC,EAAGE,EAAiB,CACnI,CAAC,CACH,CAEO,SAASC,GAAiB5B,EAA4C,CAC3E,GAAI,OAAOA,GAAS,UAAYA,IAAS,GAAI,MAAM,IAAI,UAAU,uBAAuB,EACxF,OAAO0B,EAAe,CACpB,KAAM,UAAW,MAAOV,EAA4B,OAAQ,CAAE,KAAAhB,CAAK,EAAG,aAAc,CAAE,MAAO,CAAC,MAAM,CAAE,EACtG,QAAS,CAACtF,EAAK2G,IAAaD,EAAO1G,EAAK2G,EAAUvB,EAAkB+B,CAAiB,CACvF,CAAC,CACH,CAEO,SAASC,IAAsD,CACpE,OAAOJ,EAAe,CACpB,KAAM,WAAY,MAAOX,EAAqB,OAAQ,CAAC,EAAG,aAAc,CAAE,MAAO,CAAC,MAAM,CAAE,EAC1F,QAAS,CAACrG,EAAK2G,IAAaD,EAAO1G,EAAK2G,EAAW7G,GAAU,CAC3D,GAAI,CAAC,MAAM,QAAQA,CAAK,EAAG,MAAM,IAAIZ,EAAsB,OAAQ,CAAC,sCAAsC,CAAC,EAC3G,GAAI,CAACa,EAAaD,CAAK,EAAG,MAAM,IAAIZ,EAAsB,OAAQ,CAAC,yCAAyC,CAAC,EAC7G,OAAOY,EAAM,IAAK+C,GAAsBuC,EAAiBvC,CAAQ,CAAC,CACpE,EAAI/C,GAAUC,EAAaD,CAAK,GAAKA,EAAM,MAAOuH,GAAkBA,IAAS,MAAQF,EAAkBE,CAAI,CAAC,CAAC,CAC/G,CAAC,CACH,CAEO,SAASC,IAA0D,CACxE,OAAON,EAAe,CACpB,KAAM,kBAAmB,MAAOZ,EAA0B,OAAQ,CAAE,GAAI1G,CAAwB,EAChG,aAAc,CAAE,MAAO,CAAC,cAAc,EAAG,IAAK,CAACA,CAAuB,CAAE,EACxE,QAAS,CAACM,EAAK2G,IAAaD,EAAO1G,EAAK2G,EAAUlB,EAAmB8B,EAAqB,CAC5F,CAAC,CACH,CCptBO,IAAMC,GAAoB,CAAC,UAAW,MAAM,EACtCC,GAA+B,GAC/BC,GAA2B,4BAyCjC,IAAMC,EAAoC,CAC/C,IAAK,OACL,WAAY,WACZ,aAAc,WACd,OAAQ,CACN,CACE,KAAM,UACN,MAAO,UACP,KAAM,CAAE,QAAS,IAAK,KAAM,SAAU,EACtC,KAAM,cACN,SAAU,GACV,UAAW,EACX,UAAW,GACX,mBAAoB,EACtB,EACA,CACE,KAAM,QACN,MAAO,eACP,KAAM,CAAE,QAAS,KAAM,KAAM,cAAe,EAC5C,KAAM,aACN,SAAU,GACV,UAAW,EACX,UAAW,GACb,CACF,EACA,KAAM,CACJ,aAAc,mBACd,UAAW,mBACX,MAAO,uFACT,CACF,EAEA,SAASC,GAAWC,EAA4BC,EAA6B,CAC3E,GAAM,CAAE,QAAAC,EAAS,KAAAC,CAAK,EAAIH,EAAM,KAChC,GAAIC,EAAK,SAAW,EAAG,OAAOD,EAAM,SAAW,SAASE,CAAO,IAAIC,CAAI,IAAM,KAC7E,IAAMC,EAAQ,CAAC,GAAGH,CAAI,EAAE,OACxB,OAAIG,EAAQJ,EAAM,UAAkB,YAAYG,CAAI,aAAa,OAAOH,EAAM,SAAS,CAAC,sBAAsB,OAAOI,CAAK,CAAC,QACvHA,EAAQJ,EAAM,UAAkB,YAAYG,CAAI,OAAO,OAAOH,EAAM,SAAS,CAAC,+BAA+B,OAAOI,CAAK,CAAC,QAC1HH,EAAK,SAAS,QAAQ,EAAU,OAAOE,CAAI,uEAC3CH,EAAM,OAAS,eAAiB,SAAS,KAAKC,CAAI,EAAU,OAAOE,CAAI,0BACvEH,EAAM,qBAAuB,IAAQC,EAAK,SAAS,GAAG,EACjD,GAAGE,EAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAGA,EAAK,MAAM,CAAC,CAAC,yEAEjD,IACT,CAEO,SAASE,EACdC,EAAoCC,EACpB,CAChB,IAAMC,EAAgC,CAAC,EACjCC,EAAiC,CAAC,EACxC,QAAWT,KAASM,EAAW,OAAQ,CACrC,IAAMI,EAAY,OAAO,OAAOH,EAAKP,EAAM,IAAI,EAAIO,EAAIP,EAAM,IAAI,EAAI,OAC/DC,EAAO,OAAOS,GAAc,SAAWA,EAAU,KAAK,EAAI,GAC1DC,EAAQZ,GAAWC,EAAOC,CAAI,EACpC,OAAO,eAAeU,IAAU,KAAOH,EAAQC,EAAQT,EAAM,KAAM,CAAE,MAAOW,GAASV,EAAM,WAAY,EAAK,CAAC,CAC/G,CACA,OAAO,OAAO,KAAKQ,CAAM,EAAE,OAAS,EAAI,CAAE,GAAI,GAAO,OAAAA,CAAO,EAAI,CAAE,GAAI,GAAM,MAAAD,CAAM,CACpF,CAGO,SAASI,EAAyBL,EAEU,CACjD,GAAI,CAAC,MAAM,QAAQA,CAAG,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,2BAA4B,EAChF,IAAMM,EAAUf,EAAU,OAAO,CAAC,EAClC,GAAI,CAACe,EAAS,MAAM,IAAI,UAAU,qCAAqC,EACvE,IAAMb,EAAQ,CAAE,GAAGa,EAAS,KAAM,OAAQ,KAAM,CAAE,QAAS,IAAK,KAAM,SAAU,EAC9E,UAAWC,EAA6B,EACpCN,EAA2B,CAAC,EAC5BO,EAAO,IAAI,IACjB,QAAWC,KAAQT,EAAkB,CACnC,GAAI,CAACS,GAAQ,OAAOA,GAAS,UAAY,MAAM,QAAQA,CAAI,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,wCAAyC,EAClI,IAAMC,EAASD,EACTE,EAAM,OAAO,OAAOD,EAAQ,KAAK,EAAIA,EAAO,IAAM,OACxD,GAAI,OAAOC,GAAQ,UAAY,CAAC,0BAA0B,KAAKA,CAAG,EAChE,MAAO,CAAE,GAAI,GAAO,MAAO,uGAAwG,EAErI,GAAIH,EAAK,IAAIG,CAAG,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,iCAAkC,EAChF,IAAMjB,EAAOI,EAAqB,CAAE,GAAGP,EAAW,OAAQ,CAACE,CAAK,CAAE,EAAGiB,CAAM,EAC3E,GAAI,CAAChB,EAAK,GAAI,MAAO,CAAE,GAAI,GAAO,MAAOA,EAAK,OAAO,MAAQ,kBAAmB,EAChFc,EAAK,IAAIG,CAAG,EACZV,EAAM,KAAK,CAAE,IAAAU,EAAK,KAAMjB,EAAK,MAAM,MAAQ,EAAG,CAAC,CACjD,CACA,MAAO,CAAE,GAAI,GAAM,MAAAO,CAAM,CAC3B,CAEA,SAASW,GAASX,EAAyC,CACzD,OAAOY,GAAkB,KAAMC,GAAWb,IAAUa,CAAM,CAC5D,CAGO,SAASC,GAAcf,EAAcgB,EAAmD,CAC7F,IAAMC,EAAQnB,EAAqBP,EAAWyB,CAAQ,EAChDE,EAAgBb,EAAyBW,EAAS,UAAY,CAAC,CAAC,EACtE,GAAI,CAACC,EAAM,IAAM,CAACC,EAAc,IAAOF,EAAS,SAAW,QAAa,CAACJ,GAASI,EAAS,MAAM,EAC/F,MAAM,IAAI,UAAU,2BAA2B,EAEjD,IAAMG,EAAyG,CAC7G,QAASF,EAAM,MAAM,SAAW,GAAI,MAAOA,EAAM,MAAM,OAAS,GAChE,OAAQD,EAAS,QAAU,UAAW,SAAUE,EAAc,KAChE,EACA,GAAIlB,IAAQ,MAAQ,OAAOA,GAAQ,UAAY,MAAM,QAAQA,CAAG,EAAG,MAAO,CAAE,KAAAmB,EAAM,eAAgB,CAAC,GAAG,CAAE,EACxG,IAAMT,EAASV,EACTN,EAAOI,EAAqBP,EAAWmB,CAAM,EAC7CU,EAA2B1B,EAAK,GAAK,CAAC,EAAI,OAAO,KAAKA,EAAK,MAAM,EACvE,QAAWD,KAASF,EAAU,OAC5B,GAAI,CAAC6B,EAAe,SAAS3B,EAAM,IAAI,EAAG,CACxC,IAAMQ,EAAQP,EAAK,GAAKA,EAAK,MAAMD,EAAM,IAAI,EAAIiB,EAAOjB,EAAM,IAAI,EAC9D,OAAOQ,GAAU,WAAaR,EAAM,OAAS,WAAaA,EAAM,OAAS,WAAU0B,EAAK1B,EAAM,IAAI,EAAIQ,EAAM,KAAK,EACvH,CAEF,IAAMa,EAAS,OAAO,OAAOJ,EAAQ,QAAQ,EAAIA,EAAO,OAAS,OAC3DW,EAAgD,CAAC,EACnDT,GAASE,CAAM,EAAGK,EAAK,OAASL,GAElCK,EAAK,OAAS,UACdC,EAAe,KAAK,QAAQ,EAC5BC,EAAS,KAAKC,EAAwB,GAExC,IAAMC,EAAWlB,EAAyB,OAAO,OAAOK,EAAQ,UAAU,EAAIA,EAAO,SAAW,MAAS,EACzG,OAAIa,EAAS,GAAIJ,EAAK,SAAWI,EAAS,MACrCH,EAAe,KAAK,UAAU,EAC5B,CAAE,KAAAD,EAAM,eAAgBC,EAAe,SAAW7B,EAAU,OAAO,OAAS,EAAI,CAAC,GAAG,EAAI6B,EAC7F,GAAIC,EAAS,OAAS,EAAI,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CACjD,CAEO,SAASG,IAAoC,CAClD,OAAOC,EAAyB,CAC9B,KAAM,cAAe,MAAO,yEAC5B,OAAQ,CAAE,GAAI,UAAW,EAAG,aAAc,CAAE,MAAO,CAAC,UAAU,EAAG,IAAK,CAAC,UAAU,CAAE,EACnF,QAASV,EACX,CAAC,CACH",
+  "names": ["isDenseArray", "value", "index", "TYPE", "ID", "dependenciesCopy", "dependencies", "types", "type", "TYPE", "ids", "id", "ID", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "object", "value", "words", "nullableText", "photo", "READER_PHOTO_SLUG", "href", "READER_ACTION_HREF", "copy", "optionalCopy", "action", "optionalAction", "composition", "isDenseArray", "hero", "block", "image", "READER_JUMP_LINK", "item", "READER_STORY_LAYOUTS", "layout", "model", "anchors", "link", "proposed", "line", "validHomeFallback", "validPageFallback", "validSettingsFallback", "MALFORMED_CONTENT", "MalformedContentError", "documentId", "problems", "READER_PHOTO_SLUG", "READER_ACTION_HREF", "READER_JUMP_LINK", "READER_STORY_LAYOUTS", "READER_HOME_PAGE_ID", "READER_SITE_SETTINGS_ID", "Reading", "path", "message", "value", "isDenseArray", "raw", "text", "source", "copy", "p", "max", "entry", "index", "label", "href", "plain", "portableTextToMarkdown", "reading", "markdown", "richTextToMarkdown", "out", "previousWasList", "member", "at", "block", "spansToMarkdown", "listItem", "style", "line", "level", "isList", "DECORATORS", "links", "markDefs", "def", "d", "children", "child", "span", "marks", "mark", "fence", "campaignState", "campaign", "now", "c", "starts", "ends", "keyed", "parseHomePage", "document", "options", "doc", "id", "hero", "rawHero", "photos", "heading", "subline", "intro", "cta", "secondaryCta", "blocks", "blockJumps", "body", "state", "title", "images", "action", "anchors", "rawBlocks", "mapped", "mapBlock", "buttonsOf", "jumps", "where", "stories", "item", "tail", "items", "story", "sat", "sHeading", "sBody", "image", "layout", "onCard", "jump", "anchor", "parseContentPage", "slugObject", "slug", "lead", "photo", "parseSiteSettings", "name", "description", "contact", "email", "phone", "social", "rawSocial", "link", "network", "url", "HOME_PAGE_DOCUMENT_QUERY", "CONTENT_PAGES_QUERY", "CONTENT_PAGE_BY_SLUG_QUERY", "createSiteContentReader", "client", "docs", "atomic", "fallback", "parse", "validFallback", "homeContentQuery", "captured", "defineCmsQuery", "validHomeFallback", "contentPageQuery", "validPageFallback", "contentPagesQuery", "page", "siteSettingsQuery", "validSettingsFallback", "SITE_HERO_LAYOUTS", "SITE_HERO_TAGLINE_MAX_LENGTH", "SITE_HERO_LAYOUT_WARNING", "SITE_HERO", "fieldError", "field", "text", "article", "word", "count", "validateTextDocument", "definition", "raw", "value", "errors", "submitted", "error", "validateSiteHeroTaglines", "heading", "SITE_HERO_TAGLINE_MAX_LENGTH", "keys", "item", "record", "key", "isLayout", "SITE_HERO_LAYOUTS", "layout", "parseSiteHero", "fallback", "local", "localTaglines", "data", "fallbackFields", "warnings", "SITE_HERO_LAYOUT_WARNING", "taglines", "siteHeroQuery", "defineCmsQuery"]
+}

package/dist/testing.cjs

@@ -0,0 +1,2 @@
+"use strict";var p=Object.create;var o=Object.defineProperty;var g=Object.getOwnPropertyDescriptor;var y=Object.getOwnPropertyNames;var f=Object.getPrototypeOf,C=Object.prototype.hasOwnProperty;var x=(t,r)=>{for(var a in r)o(t,a,{get:r[a],enumerable:!0})},d=(t,r,a,e)=>{if(r&&typeof r=="object"||typeof r=="function")for(let s of y(r))!C.call(t,s)&&s!==a&&o(t,s,{get:()=>r[s],enumerable:!(e=g(r,s))||e.enumerable});return t};var S=(t,r,a)=>(a=t!=null?p(f(t)):{},d(r||!t||!t.__esModule?o(a,"default",{value:t,enumerable:!0}):a,t)),q=t=>d(o({},"__esModule",{value:!0}),t);var v={};x(v,{assertCmsReadContract:()=>u});module.exports=q(v);var n=S(require("node:assert/strict"),1);async function u(t){(0,n.default)(Array.isArray(t.cases)&&t.cases.length>0,"CMS contract requires at least one case");let r=t.revalidateSeconds??3600;(0,n.default)(Number.isInteger(r)&&r>=3600,"CMS contract requires an integer interval of at least 3600 seconds");let a=new Set;for(let e of t.cases){(0,n.default)(e&&typeof e.name=="string"&&e.name.trim()&&!a.has(e.name),"CMS contract requires unique named cases"),a.add(e.name),n.default.equal(typeof e.exercise,"function","CMS contract requires an exercise"),(0,n.default)(Array.isArray(e.expectedTags)&&e.expectedTags.length>0&&e.expectedTags.every(s=>typeof s=="string"&&s.length>0)&&new Set(e.expectedTags).size===e.expectedTags.length,"CMS contract requires nonempty unique expected tags");for(let s of[!1,!0]){let i=0,m=[],l=async(T,c)=>{i++;try{n.default.deepEqual(c?.next?.tags,e.expectedTags,`${e.name}: every fetch must carry exactly the expected tags`),n.default.equal(c?.next?.revalidate,r,`${e.name}: every fetch must carry the expected interval`),(0,n.default)(c.cache!=="no-store"&&c.cache!=="no-cache",`${e.name}: fetch must retain caching`),(0,n.default)(c.method===void 0||c.method==="GET",`${e.name}: read must use GET`)}catch(h){m.push(h)}return s?new Response(null,{status:503}):Response.json({result:{heading:"CMS contract heading",intro:"CMS contract intro"}})};if(await e.exercise(l),(0,n.default)(i>0,`${e.name}: ${s?"failure":"published"} exercise must fetch`),m.length)throw m[0]}}}0&&(module.exports={assertCmsReadContract});
+//# sourceMappingURL=testing.cjs.map

package/dist/testing.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/testing.ts", "../src/tooling/testing.ts"],
+  "sourcesContent": ["export { assertCmsReadContract } from \"./tooling/testing.js\";\nexport type { CmsContractCase } from \"./tooling/testing.js\";\n", "import assert from \"node:assert/strict\";\nimport type { CmsFetch } from \"../runtime/reader.js\";\n\nexport type CmsContractCase = {\n  readonly name: string;\n  readonly exercise: (fetchImpl: CmsFetch) => Promise<unknown>;\n  readonly expectedTags: readonly string[];\n};\n\nexport async function assertCmsReadContract(options: {\n  cases: readonly CmsContractCase[];\n  revalidateSeconds?: number;\n}): Promise<void> {\n  assert(Array.isArray(options.cases) && options.cases.length > 0, \"CMS contract requires at least one case\");\n  const interval = options.revalidateSeconds ?? 3600;\n  assert(Number.isInteger(interval) && interval >= 3600, \"CMS contract requires an integer interval of at least 3600 seconds\");\n  const names = new Set<string>();\n  for (const entry of options.cases) {\n    assert(entry && typeof entry.name === \"string\" && entry.name.trim() && !names.has(entry.name), \"CMS contract requires unique named cases\");\n    names.add(entry.name);\n    assert.equal(typeof entry.exercise, \"function\", \"CMS contract requires an exercise\");\n    assert(Array.isArray(entry.expectedTags) && entry.expectedTags.length > 0\n      && entry.expectedTags.every((tag: unknown) => typeof tag === \"string\" && tag.length > 0)\n      && new Set(entry.expectedTags).size === entry.expectedTags.length, \"CMS contract requires nonempty unique expected tags\");\n    for (const failure of [false, true]) {\n      let calls = 0;\n      const errors: unknown[] = [];\n      const fetchImpl: CmsFetch = async (_url, init) => {\n        calls++;\n        try {\n          assert.deepEqual(init?.next?.tags, entry.expectedTags, `${entry.name}: every fetch must carry exactly the expected tags`);\n          assert.equal(init?.next?.revalidate, interval, `${entry.name}: every fetch must carry the expected interval`);\n          assert(init.cache !== \"no-store\" && init.cache !== \"no-cache\", `${entry.name}: fetch must retain caching`);\n          assert(init.method === undefined || init.method === \"GET\", `${entry.name}: read must use GET`);\n        } catch (error) {\n          // A production reader can catch fetch errors and fall back. Preserve\n          // assertion failures out of band so that catch cannot turn a pass green.\n          errors.push(error);\n        }\n        return failure ? new Response(null, { status: 503 })\n          : Response.json({ result: { heading: \"CMS contract heading\", intro: \"CMS contract intro\" } });\n      };\n      // The consumer owns model/render assertions, including valid local fallback.\n      // Custom models can adapt this scripted envelope inside their exercise.\n      await entry.exercise(fetchImpl);\n      assert(calls > 0, `${entry.name}: ${failure ? \"failure\" : \"published\"} exercise must fetch`);\n      if (errors.length) throw errors[0];\n    }\n  }\n}\n"],
+  "mappings": "0jBAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,2BAAAE,IAAA,eAAAC,EAAAH,GCAA,IAAAI,EAAmB,mCASnB,eAAsBC,EAAsBC,EAG1B,IAChB,EAAAC,SAAO,MAAM,QAAQD,EAAQ,KAAK,GAAKA,EAAQ,MAAM,OAAS,EAAG,yCAAyC,EAC1G,IAAME,EAAWF,EAAQ,mBAAqB,QAC9C,EAAAC,SAAO,OAAO,UAAUC,CAAQ,GAAKA,GAAY,KAAM,oEAAoE,EAC3H,IAAMC,EAAQ,IAAI,IAClB,QAAWC,KAASJ,EAAQ,MAAO,IACjC,EAAAC,SAAOG,GAAS,OAAOA,EAAM,MAAS,UAAYA,EAAM,KAAK,KAAK,GAAK,CAACD,EAAM,IAAIC,EAAM,IAAI,EAAG,0CAA0C,EACzID,EAAM,IAAIC,EAAM,IAAI,EACpB,EAAAH,QAAO,MAAM,OAAOG,EAAM,SAAU,WAAY,mCAAmC,KACnF,EAAAH,SAAO,MAAM,QAAQG,EAAM,YAAY,GAAKA,EAAM,aAAa,OAAS,GACnEA,EAAM,aAAa,MAAOC,GAAiB,OAAOA,GAAQ,UAAYA,EAAI,OAAS,CAAC,GACpF,IAAI,IAAID,EAAM,YAAY,EAAE,OAASA,EAAM,aAAa,OAAQ,qDAAqD,EAC1H,QAAWE,IAAW,CAAC,GAAO,EAAI,EAAG,CACnC,IAAIC,EAAQ,EACNC,EAAoB,CAAC,EACrBC,EAAsB,MAAOC,EAAMC,IAAS,CAChDJ,IACA,GAAI,CACF,EAAAN,QAAO,UAAUU,GAAM,MAAM,KAAMP,EAAM,aAAc,GAAGA,EAAM,IAAI,oDAAoD,EACxH,EAAAH,QAAO,MAAMU,GAAM,MAAM,WAAYT,EAAU,GAAGE,EAAM,IAAI,gDAAgD,KAC5G,EAAAH,SAAOU,EAAK,QAAU,YAAcA,EAAK,QAAU,WAAY,GAAGP,EAAM,IAAI,6BAA6B,KACzG,EAAAH,SAAOU,EAAK,SAAW,QAAaA,EAAK,SAAW,MAAO,GAAGP,EAAM,IAAI,qBAAqB,CAC/F,OAASQ,EAAO,CAGdJ,EAAO,KAAKI,CAAK,CACnB,CACA,OAAON,EAAU,IAAI,SAAS,KAAM,CAAE,OAAQ,GAAI,CAAC,EAC/C,SAAS,KAAK,CAAE,OAAQ,CAAE,QAAS,uBAAwB,MAAO,oBAAqB,CAAE,CAAC,CAChG,EAKA,GAFA,MAAMF,EAAM,SAASK,CAAS,KAC9B,EAAAR,SAAOM,EAAQ,EAAG,GAAGH,EAAM,IAAI,KAAKE,EAAU,UAAY,WAAW,sBAAsB,EACvFE,EAAO,OAAQ,MAAMA,EAAO,CAAC,CACnC,CACF,CACF",
+  "names": ["testing_exports", "__export", "assertCmsReadContract", "__toCommonJS", "import_strict", "assertCmsReadContract", "options", "assert", "interval", "names", "entry", "tag", "failure", "calls", "errors", "fetchImpl", "_url", "init", "error"]
+}

package/dist/testing.d.cts

@@ -0,0 +1,2 @@
+export { assertCmsReadContract } from "./tooling/testing.cjs";
+export type { CmsContractCase } from "./tooling/testing.cjs";

package/dist/testing.d.mts

@@ -0,0 +1,2 @@
+export { assertCmsReadContract } from "./tooling/testing.mjs";
+export type { CmsContractCase } from "./tooling/testing.mjs";

package/dist/testing.d.ts

@@ -0,0 +1,2 @@
+export { assertCmsReadContract } from "./tooling/testing.js";
+export type { CmsContractCase } from "./tooling/testing.js";

package/dist/testing.mjs

@@ -0,0 +1,2 @@
+import t from"node:assert/strict";async function u(s){t(Array.isArray(s.cases)&&s.cases.length>0,"CMS contract requires at least one case");let n=s.revalidateSeconds??3600;t(Number.isInteger(n)&&n>=3600,"CMS contract requires an integer interval of at least 3600 seconds");let o=new Set;for(let e of s.cases){t(e&&typeof e.name=="string"&&e.name.trim()&&!o.has(e.name),"CMS contract requires unique named cases"),o.add(e.name),t.equal(typeof e.exercise,"function","CMS contract requires an exercise"),t(Array.isArray(e.expectedTags)&&e.expectedTags.length>0&&e.expectedTags.every(a=>typeof a=="string"&&a.length>0)&&new Set(e.expectedTags).size===e.expectedTags.length,"CMS contract requires nonempty unique expected tags");for(let a of[!1,!0]){let m=0,c=[],i=async(l,r)=>{m++;try{t.deepEqual(r?.next?.tags,e.expectedTags,`${e.name}: every fetch must carry exactly the expected tags`),t.equal(r?.next?.revalidate,n,`${e.name}: every fetch must carry the expected interval`),t(r.cache!=="no-store"&&r.cache!=="no-cache",`${e.name}: fetch must retain caching`),t(r.method===void 0||r.method==="GET",`${e.name}: read must use GET`)}catch(d){c.push(d)}return a?new Response(null,{status:503}):Response.json({result:{heading:"CMS contract heading",intro:"CMS contract intro"}})};if(await e.exercise(i),t(m>0,`${e.name}: ${a?"failure":"published"} exercise must fetch`),c.length)throw c[0]}}}export{u as assertCmsReadContract};
+//# sourceMappingURL=testing.mjs.map

package/dist/testing.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/tooling/testing.ts"],
+  "sourcesContent": ["import assert from \"node:assert/strict\";\nimport type { CmsFetch } from \"../runtime/reader.js\";\n\nexport type CmsContractCase = {\n  readonly name: string;\n  readonly exercise: (fetchImpl: CmsFetch) => Promise<unknown>;\n  readonly expectedTags: readonly string[];\n};\n\nexport async function assertCmsReadContract(options: {\n  cases: readonly CmsContractCase[];\n  revalidateSeconds?: number;\n}): Promise<void> {\n  assert(Array.isArray(options.cases) && options.cases.length > 0, \"CMS contract requires at least one case\");\n  const interval = options.revalidateSeconds ?? 3600;\n  assert(Number.isInteger(interval) && interval >= 3600, \"CMS contract requires an integer interval of at least 3600 seconds\");\n  const names = new Set<string>();\n  for (const entry of options.cases) {\n    assert(entry && typeof entry.name === \"string\" && entry.name.trim() && !names.has(entry.name), \"CMS contract requires unique named cases\");\n    names.add(entry.name);\n    assert.equal(typeof entry.exercise, \"function\", \"CMS contract requires an exercise\");\n    assert(Array.isArray(entry.expectedTags) && entry.expectedTags.length > 0\n      && entry.expectedTags.every((tag: unknown) => typeof tag === \"string\" && tag.length > 0)\n      && new Set(entry.expectedTags).size === entry.expectedTags.length, \"CMS contract requires nonempty unique expected tags\");\n    for (const failure of [false, true]) {\n      let calls = 0;\n      const errors: unknown[] = [];\n      const fetchImpl: CmsFetch = async (_url, init) => {\n        calls++;\n        try {\n          assert.deepEqual(init?.next?.tags, entry.expectedTags, `${entry.name}: every fetch must carry exactly the expected tags`);\n          assert.equal(init?.next?.revalidate, interval, `${entry.name}: every fetch must carry the expected interval`);\n          assert(init.cache !== \"no-store\" && init.cache !== \"no-cache\", `${entry.name}: fetch must retain caching`);\n          assert(init.method === undefined || init.method === \"GET\", `${entry.name}: read must use GET`);\n        } catch (error) {\n          // A production reader can catch fetch errors and fall back. Preserve\n          // assertion failures out of band so that catch cannot turn a pass green.\n          errors.push(error);\n        }\n        return failure ? new Response(null, { status: 503 })\n          : Response.json({ result: { heading: \"CMS contract heading\", intro: \"CMS contract intro\" } });\n      };\n      // The consumer owns model/render assertions, including valid local fallback.\n      // Custom models can adapt this scripted envelope inside their exercise.\n      await entry.exercise(fetchImpl);\n      assert(calls > 0, `${entry.name}: ${failure ? \"failure\" : \"published\"} exercise must fetch`);\n      if (errors.length) throw errors[0];\n    }\n  }\n}\n"],
+  "mappings": "AAAA,OAAOA,MAAY,qBASnB,eAAsBC,EAAsBC,EAG1B,CAChBF,EAAO,MAAM,QAAQE,EAAQ,KAAK,GAAKA,EAAQ,MAAM,OAAS,EAAG,yCAAyC,EAC1G,IAAMC,EAAWD,EAAQ,mBAAqB,KAC9CF,EAAO,OAAO,UAAUG,CAAQ,GAAKA,GAAY,KAAM,oEAAoE,EAC3H,IAAMC,EAAQ,IAAI,IAClB,QAAWC,KAASH,EAAQ,MAAO,CACjCF,EAAOK,GAAS,OAAOA,EAAM,MAAS,UAAYA,EAAM,KAAK,KAAK,GAAK,CAACD,EAAM,IAAIC,EAAM,IAAI,EAAG,0CAA0C,EACzID,EAAM,IAAIC,EAAM,IAAI,EACpBL,EAAO,MAAM,OAAOK,EAAM,SAAU,WAAY,mCAAmC,EACnFL,EAAO,MAAM,QAAQK,EAAM,YAAY,GAAKA,EAAM,aAAa,OAAS,GACnEA,EAAM,aAAa,MAAOC,GAAiB,OAAOA,GAAQ,UAAYA,EAAI,OAAS,CAAC,GACpF,IAAI,IAAID,EAAM,YAAY,EAAE,OAASA,EAAM,aAAa,OAAQ,qDAAqD,EAC1H,QAAWE,IAAW,CAAC,GAAO,EAAI,EAAG,CACnC,IAAIC,EAAQ,EACNC,EAAoB,CAAC,EACrBC,EAAsB,MAAOC,EAAMC,IAAS,CAChDJ,IACA,GAAI,CACFR,EAAO,UAAUY,GAAM,MAAM,KAAMP,EAAM,aAAc,GAAGA,EAAM,IAAI,oDAAoD,EACxHL,EAAO,MAAMY,GAAM,MAAM,WAAYT,EAAU,GAAGE,EAAM,IAAI,gDAAgD,EAC5GL,EAAOY,EAAK,QAAU,YAAcA,EAAK,QAAU,WAAY,GAAGP,EAAM,IAAI,6BAA6B,EACzGL,EAAOY,EAAK,SAAW,QAAaA,EAAK,SAAW,MAAO,GAAGP,EAAM,IAAI,qBAAqB,CAC/F,OAASQ,EAAO,CAGdJ,EAAO,KAAKI,CAAK,CACnB,CACA,OAAON,EAAU,IAAI,SAAS,KAAM,CAAE,OAAQ,GAAI,CAAC,EAC/C,SAAS,KAAK,CAAE,OAAQ,CAAE,QAAS,uBAAwB,MAAO,oBAAqB,CAAE,CAAC,CAChG,EAKA,GAFA,MAAMF,EAAM,SAASK,CAAS,EAC9BV,EAAOQ,EAAQ,EAAG,GAAGH,EAAM,IAAI,KAAKE,EAAU,UAAY,WAAW,sBAAsB,EACvFE,EAAO,OAAQ,MAAMA,EAAO,CAAC,CACnC,CACF,CACF",
+  "names": ["assert", "assertCmsReadContract", "options", "interval", "names", "entry", "tag", "failure", "calls", "errors", "fetchImpl", "_url", "init", "error"]
+}

package/dist/tooling/guard.d.cts

@@ -0,0 +1,13 @@
+export type CmsSourceFile = {
+    readonly path: string;
+    readonly text: string;
+};
+export type CmsGuardViolation = {
+    readonly path: string;
+    readonly line: number;
+    readonly rule: string;
+};
+export declare function findCmsBoundaryViolations(options: {
+    files: readonly CmsSourceFile[];
+    allowedProviderFiles?: readonly string[];
+}): readonly CmsGuardViolation[];

package/dist/tooling/guard.d.mts

@@ -0,0 +1,13 @@
+export type CmsSourceFile = {
+    readonly path: string;
+    readonly text: string;
+};
+export type CmsGuardViolation = {
+    readonly path: string;
+    readonly line: number;
+    readonly rule: string;
+};
+export declare function findCmsBoundaryViolations(options: {
+    files: readonly CmsSourceFile[];
+    allowedProviderFiles?: readonly string[];
+}): readonly CmsGuardViolation[];

package/dist/tooling/guard.d.ts

@@ -0,0 +1,13 @@
+export type CmsSourceFile = {
+    readonly path: string;
+    readonly text: string;
+};
+export type CmsGuardViolation = {
+    readonly path: string;
+    readonly line: number;
+    readonly rule: string;
+};
+export declare function findCmsBoundaryViolations(options: {
+    files: readonly CmsSourceFile[];
+    allowedProviderFiles?: readonly string[];
+}): readonly CmsGuardViolation[];

package/dist/tooling/test-fixtures/break-proof.d.cts

@@ -0,0 +1 @@
+export {};

package/dist/tooling/test-fixtures/break-proof.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/tooling/test-fixtures/break-proof.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tooling/test-fixtures/consumer.d.cts

@@ -0,0 +1,9 @@
+import type { CmsContractCase } from "@weatherboard/cms/testing";
+import type { CmsFetch } from "@weatherboard/cms/server";
+export declare const fallback: {
+    heading: string;
+    intro: string;
+};
+export declare const expectedTags: readonly string[];
+export declare function renderHero(fetchImpl: CmsFetch): Promise<string>;
+export declare const heroCase: CmsContractCase;

package/dist/tooling/test-fixtures/consumer.d.mts

@@ -0,0 +1,9 @@
+import type { CmsContractCase } from "@weatherboard/cms/testing";
+import type { CmsFetch } from "@weatherboard/cms/server";
+export declare const fallback: {
+    heading: string;
+    intro: string;
+};
+export declare const expectedTags: readonly string[];
+export declare function renderHero(fetchImpl: CmsFetch): Promise<string>;
+export declare const heroCase: CmsContractCase;

package/dist/tooling/test-fixtures/consumer.d.ts

@@ -0,0 +1,9 @@
+import type { CmsContractCase } from "@weatherboard/cms/testing";
+import type { CmsFetch } from "@weatherboard/cms/server";
+export declare const fallback: {
+    heading: string;
+    intro: string;
+};
+export declare const expectedTags: readonly string[];
+export declare function renderHero(fetchImpl: CmsFetch): Promise<string>;
+export declare const heroCase: CmsContractCase;

package/dist/tooling/testing.d.cts

@@ -0,0 +1,10 @@
+import type { CmsFetch } from "../runtime/reader.cjs";
+export type CmsContractCase = {
+    readonly name: string;
+    readonly exercise: (fetchImpl: CmsFetch) => Promise<unknown>;
+    readonly expectedTags: readonly string[];
+};
+export declare function assertCmsReadContract(options: {
+    cases: readonly CmsContractCase[];
+    revalidateSeconds?: number;
+}): Promise<void>;

package/dist/tooling/testing.d.mts

@@ -0,0 +1,10 @@
+import type { CmsFetch } from "../runtime/reader.mjs";
+export type CmsContractCase = {
+    readonly name: string;
+    readonly exercise: (fetchImpl: CmsFetch) => Promise<unknown>;
+    readonly expectedTags: readonly string[];
+};
+export declare function assertCmsReadContract(options: {
+    cases: readonly CmsContractCase[];
+    revalidateSeconds?: number;
+}): Promise<void>;

package/dist/tooling/testing.d.ts

@@ -0,0 +1,10 @@
+import type { CmsFetch } from "../runtime/reader.js";
+export type CmsContractCase = {
+    readonly name: string;
+    readonly exercise: (fetchImpl: CmsFetch) => Promise<unknown>;
+    readonly expectedTags: readonly string[];
+};
+export declare function assertCmsReadContract(options: {
+    cases: readonly CmsContractCase[];
+    revalidateSeconds?: number;
+}): Promise<void>;

package/dist/webhook.cjs

@@ -0,0 +1,2 @@
+"use strict";var i=Object.defineProperty;var M=Object.getOwnPropertyDescriptor;var h=Object.getOwnPropertyNames;var k=Object.prototype.hasOwnProperty;var p=(e,t)=>{for(var n in t)i(e,n,{get:t[n],enumerable:!0})},E=(e,t,n,o)=>{if(t&&typeof t=="object"||typeof t=="function")for(let r of h(t))!k.call(e,r)&&r!==n&&i(e,r,{get:()=>t[r],enumerable:!(o=M(t,r))||o.enumerable});return e};var _=e=>E(i({},"__esModule",{value:!0}),e);var w={};p(w,{DEFAULT_TOLERANCE_MS:()=>m,MINIMUM_TIMESTAMP:()=>f,SANITY_SIGNATURE_HEADER:()=>c,verifySanityWebhook:()=>d});module.exports=_(w);var c="sanity-webhook-signature",T=/^t=(\d+)[, ]+v1=([^, ]+)$/,f=16094592e5,m=3e5,y=new TextEncoder;function I(e){return crypto.subtle.importKey("raw",y.encode(e),{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"])}function S(e){if(!/^[A-Za-z0-9_-]+={0,2}$/.test(e))return null;let t=e.replace(/-/g,"+").replace(/_/g,"/");try{let n=atob(t),o=new Uint8Array(n.length);for(let r=0;r<n.length;r+=1)o[r]=n.charCodeAt(r);return o}catch{return null}}async function d(e){let{secret:t,rawBody:n,headers:o}=e,r=e.now??Date.now(),g=e.toleranceMs??3e5;if(!t||t.length===0)return{ok:!1,reason:"no-secret"};let l=o.get(c);if(!l)return{ok:!1,reason:"no-signature"};let s=T.exec(l.trim());if(s===null)return{ok:!1,reason:"malformed-signature"};let a=Number(s[1]),A=s[2]??"";if(!Number.isSafeInteger(a))return{ok:!1,reason:"malformed-signature"};if(a<16094592e5)return{ok:!1,reason:"stale-timestamp"};if(Math.abs(r-a)>g)return{ok:!1,reason:"stale-timestamp"};let u=S(A);if(u===null)return{ok:!1,reason:"malformed-signature"};let b=await I(t);return await crypto.subtle.verify("HMAC",b,u,y.encode(`${a}.${n}`))?{ok:!0}:{ok:!1,reason:"bad-signature"}}0&&(module.exports={DEFAULT_TOLERANCE_MS,MINIMUM_TIMESTAMP,SANITY_SIGNATURE_HEADER,verifySanityWebhook});
+//# sourceMappingURL=webhook.cjs.map

package/dist/webhook.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/webhook.ts", "../src/portable/webhook.ts"],
+  "sourcesContent": ["export {\n  SANITY_SIGNATURE_HEADER, DEFAULT_TOLERANCE_MS, MINIMUM_TIMESTAMP, verifySanityWebhook,\n} from \"./portable/webhook.js\";\nexport type { WebhookRejection, WebhookVerification } from \"./portable/webhook.js\";\n", "/**\n * Verifying a Sanity webhook (A-590 step 1, A-592's `SANITY_WEBHOOK_SECRET`).\n *\n * -------------------------------------------------------------------------\n * WHY THIS ENDPOINT NEEDS A SIGNATURE AT ALL\n * -------------------------------------------------------------------------\n *\n * `/revalidate` throws away cache entries. A-590: \"An unauthenticated\n * revalidation endpoint is a free cache-purge and rebuild trigger for anyone\n * who finds the URL.\" On a plan whose API request allowance is a HARD cap that\n * returns 402 rather than a bill, an attacker who can empty the cache at will\n * can take a client's site content-offline for the rest of the month. So the\n * signature is not hygiene here; it is the availability control.\n *\n * -------------------------------------------------------------------------\n * THE WIRE FORMAT IS MEASURED, NOT REMEMBERED\n * -------------------------------------------------------------------------\n *\n * Read on 2026-09-16 from Sanity's own toolkit,\n * `https://raw.githubusercontent.com/sanity-io/webhook-toolkit/main/src/signature.ts`:\n *\n *   header            `sanity-webhook-signature`\n *   value             `t=<millis>,v1=<signature>`  (regex `/^t=(\\d+)[, ]+v1=([^, ]+)$/`)\n *   signed payload    `` `${timestamp}.${body}` ``\n *   algorithm         HMAC-SHA256\n *   digest encoding   base64url \u2014 standard base64 with `+`\u2192`-`, `/`\u2192`_`, padding stripped\n *   MINIMUM_TIMESTAMP 1609459200000 (2021-01-01Z), below which a value is nonsense\n *\n * `signature.test.ts` does not take that paragraph's word for it either: it\n * signs a payload with `@sanity/webhook`'s own `encodeSignatureHeader` and\n * asserts this verifier accepts it. If Sanity changes the format, that test\n * goes red rather than production quietly rejecting every webhook.\n *\n * -------------------------------------------------------------------------\n * WHAT THIS ADDS TO THE TOOLKIT, AND WHY IT IS NOT JUST IMPORTED\n * -------------------------------------------------------------------------\n *\n * Two things, both of which are `CLAUDE.md`'s \"take the safer construction\".\n *\n * First, a REPLAY WINDOW. The toolkit enforces only that the timestamp is after\n * 2021; a captured webhook is otherwise replayable forever. A replayed purge is\n * the attack in the first paragraph, executed with a request somebody was\n * legitimately sent. `verifySanityWebhook` takes a symmetric tolerance \u2014 the\n * window is symmetric for A-44's reason, since a far-future timestamp is\n * precisely how you mint a request that stays replayable for a year.\n *\n * Second, a MISSING SECRET IS A REJECTION, never a bypass. A-590 says it in as\n * many words: \"reject on absence rather than skipping the check when the secret\n * is unset.\" The degraded mode of \"no secret configured, so allow it\" is\n * produced by a deploy that forgot `wrangler secret put`, announces itself\n * nowhere, and grants strangers the purge endpoint.\n *\n * The comparison is `crypto.subtle.verify`, which compares raw digests in\n * constant time. A `===` on the base64 strings short-circuits at the first\n * differing character, which turns one 2^256 search into a few dozen sequential\n * 64-way ones against an endpoint that answers in milliseconds.\n *\n * -------------------------------------------------------------------------\n * `encodeSignatureHeader` IS ASYNC. AWAIT IT. (A-651)\n * -------------------------------------------------------------------------\n *\n * `@sanity/webhook@4.0.4` declares\n *\n *   encodeSignatureHeader(payload: string, timestamp: number, secret: string):\n *     Promise<string>\n *\n * and nothing forces you to await it. Drop the `await` and the Promise is\n * stringified into the header as the literal `[object Promise]`, which arrives\n * here, fails `SIGNATURE_VALUE`, and is rejected as `malformed-signature`. The\n * rejection is correct and the message is about the wire format, so it sends\n * you to read Sanity's header spec \u2014 the one place the bug is not. TypeScript\n * does not save you either: the value usually lands in a `Record<string,\n * string>` built by a helper, or inside a template literal, both of which take\n * a Promise without complaint.\n *\n * The rule: every call to `encodeSignatureHeader` is awaited, and the helper\n * that wraps it is `async` rather than returning the Promise for someone else\n * to forget. The content-client compatibility tests and CMS signer tests await every\n * encoder call; this note exists so the next one\n * is too, because the symptom will not tell you.\n */\n\n/** Sanity's header. Lower-cased; `Headers.get` is case-insensitive either way. */\nexport const SANITY_SIGNATURE_HEADER = \"sanity-webhook-signature\";\n\n/** Sanity's own parser, character for character. See the header. */\nconst SIGNATURE_VALUE = /^t=(\\d+)[, ]+v1=([^, ]+)$/;\n\n/** 2021-01-01T00:00:00.000Z. Sanity's `MINIMUM_TIMESTAMP`; anything earlier is not a timestamp. */\nexport const MINIMUM_TIMESTAMP = 1_609_459_200_000;\n\n/**\n * How far from `now` a webhook timestamp may be, in milliseconds.\n *\n * Five minutes rather than A-44's sixty seconds: this one crosses Sanity's\n * delivery queue rather than two NTP-synced clouds, and a retried delivery is a\n * normal event. It is still a window rather than \"forever\", which is the whole\n * difference from the toolkit.\n */\nexport const DEFAULT_TOLERANCE_MS = 300_000;\n\nexport type WebhookRejection =\n  /** `SANITY_WEBHOOK_SECRET` is unset or empty. Fail closed. */\n  | \"no-secret\"\n  /** No `sanity-webhook-signature` header. */\n  | \"no-signature\"\n  /** Header present but not `t=\u2026,v1=\u2026`, or `v1` is not decodable base64url. */\n  | \"malformed-signature\"\n  /** Before 2021, or outside the tolerance in either direction. */\n  | \"stale-timestamp\"\n  /** Well-formed, in window, wrong. */\n  | \"bad-signature\";\n\nexport type WebhookVerification = { ok: true } | { ok: false; reason: WebhookRejection };\n\nconst encoder = new TextEncoder();\n\nfunction hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\n/**\n * base64url \u2192 bytes, without `Buffer`.\n *\n * `atob` rather than `node:crypto` or `Buffer` because this file is imported by\n * the Worker, and workerd has neither by default. Returns null rather than\n * throwing on rubbish, so a malformed header is a 401 and not a 500 \u2014 a\n * verifier that crashes on bad input is a verifier an attacker can use as a\n * denial of service.\n */\nfunction base64UrlToBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  if (!/^[A-Za-z0-9_-]+={0,2}$/.test(value)) return null;\n  const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  try {\n    const binary = atob(padded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);\n    return bytes;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Verify a Sanity webhook delivery.\n *\n * `rawBody` must be the bytes as received \u2014 `await request.text()`, never\n * `JSON.stringify(await request.json())`. A parse-and-restringify is not a\n * byte-for-byte round trip (key order, number formatting, whitespace) and one\n * byte changes the whole digest, so the symptom is every webhook failing after\n * a refactor that looked like tidying.\n *\n * The `reason` is for our logs and our tests. It is never returned to the\n * caller: \"your signature was fine but your clock is stale\" is the next step in\n * an attack, handed over free.\n */\nexport async function verifySanityWebhook(options: {\n  secret: string | undefined;\n  rawBody: string;\n  headers: { get(name: string): string | null };\n  now?: number;\n  toleranceMs?: number;\n}): Promise<WebhookVerification> {\n  const { secret, rawBody, headers } = options;\n  const now = options.now ?? Date.now();\n  const toleranceMs = options.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n\n  if (!secret || secret.length === 0) return { ok: false, reason: \"no-secret\" };\n\n  const header = headers.get(SANITY_SIGNATURE_HEADER);\n  if (!header) return { ok: false, reason: \"no-signature\" };\n\n  const match = SIGNATURE_VALUE.exec(header.trim());\n  if (match === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const timestamp = Number(match[1]);\n  const provided = match[2] ?? \"\";\n  if (!Number.isSafeInteger(timestamp)) return { ok: false, reason: \"malformed-signature\" };\n  if (timestamp < MINIMUM_TIMESTAMP) return { ok: false, reason: \"stale-timestamp\" };\n  if (Math.abs(now - timestamp) > toleranceMs) return { ok: false, reason: \"stale-timestamp\" };\n\n  const signature = base64UrlToBytes(provided);\n  if (signature === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const key = await hmacKey(secret);\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    signature,\n    encoder.encode(`${timestamp}.${rawBody}`),\n  );\n  return valid ? { ok: true } : { ok: false, reason: \"bad-signature\" };\n}\n"],
+  "mappings": "yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,0BAAAE,EAAA,sBAAAC,EAAA,4BAAAC,EAAA,wBAAAC,IAAA,eAAAC,EAAAN,GCmFO,IAAMO,EAA0B,2BAGjCC,EAAkB,4BAGXC,EAAoB,WAUpBC,EAAuB,IAgB9BC,EAAU,IAAI,YAEpB,SAASC,EAAQC,EAAoC,CACnD,OAAO,OAAO,OAAO,UACnB,MACAF,EAAQ,OAAOE,CAAM,EACrB,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,OAAQ,QAAQ,CACnB,CACF,CAWA,SAASC,EAAiBC,EAA+C,CACvE,GAAI,CAAC,yBAAyB,KAAKA,CAAK,EAAG,OAAO,KAClD,IAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACzD,GAAI,CACF,IAAME,EAAS,KAAKD,CAAM,EACpBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,GAAK,EAAGD,EAAMC,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACzE,OAAOD,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAeA,eAAsBE,EAAoBC,EAMT,CAC/B,GAAM,CAAE,OAAAR,EAAQ,QAAAS,EAAS,QAAAC,CAAQ,EAAIF,EAC/BG,EAAMH,EAAQ,KAAO,KAAK,IAAI,EAC9BI,EAAcJ,EAAQ,aAAe,IAE3C,GAAI,CAACR,GAAUA,EAAO,SAAW,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,WAAY,EAE5E,IAAMa,EAASH,EAAQ,IAAIhB,CAAuB,EAClD,GAAI,CAACmB,EAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,EAExD,IAAMC,EAAQnB,EAAgB,KAAKkB,EAAO,KAAK,CAAC,EAChD,GAAIC,IAAU,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAEtE,IAAMC,EAAY,OAAOD,EAAM,CAAC,CAAC,EAC3BE,EAAWF,EAAM,CAAC,GAAK,GAC7B,GAAI,CAAC,OAAO,cAAcC,CAAS,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EACxF,GAAIA,EAAY,WAAmB,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACjF,GAAI,KAAK,IAAIJ,EAAMI,CAAS,EAAIH,EAAa,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EAE3F,IAAMK,EAAYhB,EAAiBe,CAAQ,EAC3C,GAAIC,IAAc,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAE1E,IAAMC,EAAM,MAAMnB,EAAQC,CAAM,EAOhC,OANc,MAAM,OAAO,OAAO,OAChC,OACAkB,EACAD,EACAnB,EAAQ,OAAO,GAAGiB,CAAS,IAAIN,CAAO,EAAE,CAC1C,EACe,CAAE,GAAI,EAAK,EAAI,CAAE,GAAI,GAAO,OAAQ,eAAgB,CACrE",
+  "names": ["webhook_exports", "__export", "DEFAULT_TOLERANCE_MS", "MINIMUM_TIMESTAMP", "SANITY_SIGNATURE_HEADER", "verifySanityWebhook", "__toCommonJS", "SANITY_SIGNATURE_HEADER", "SIGNATURE_VALUE", "MINIMUM_TIMESTAMP", "DEFAULT_TOLERANCE_MS", "encoder", "hmacKey", "secret", "base64UrlToBytes", "value", "padded", "binary", "bytes", "i", "verifySanityWebhook", "options", "rawBody", "headers", "now", "toleranceMs", "header", "match", "timestamp", "provided", "signature", "key"]
+}

package/dist/webhook.d.cts

@@ -0,0 +1,2 @@
+export { SANITY_SIGNATURE_HEADER, DEFAULT_TOLERANCE_MS, MINIMUM_TIMESTAMP, verifySanityWebhook, } from "./portable/webhook.cjs";
+export type { WebhookRejection, WebhookVerification } from "./portable/webhook.cjs";

package/dist/webhook.d.mts

@@ -0,0 +1,2 @@
+export { SANITY_SIGNATURE_HEADER, DEFAULT_TOLERANCE_MS, MINIMUM_TIMESTAMP, verifySanityWebhook, } from "./portable/webhook.mjs";
+export type { WebhookRejection, WebhookVerification } from "./portable/webhook.mjs";

package/dist/webhook.d.ts

@@ -0,0 +1,2 @@
+export { SANITY_SIGNATURE_HEADER, DEFAULT_TOLERANCE_MS, MINIMUM_TIMESTAMP, verifySanityWebhook, } from "./portable/webhook.js";
+export type { WebhookRejection, WebhookVerification } from "./portable/webhook.js";

package/dist/webhook.mjs

@@ -0,0 +1,2 @@
+var l="sanity-webhook-signature",d=/^t=(\d+)[, ]+v1=([^, ]+)$/,g=16094592e5,A=3e5,u=new TextEncoder;function b(e){return crypto.subtle.importKey("raw",u.encode(e),{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"])}function M(e){if(!/^[A-Za-z0-9_-]+={0,2}$/.test(e))return null;let r=e.replace(/-/g,"+").replace(/_/g,"/");try{let n=atob(r),o=new Uint8Array(n.length);for(let t=0;t<n.length;t+=1)o[t]=n.charCodeAt(t);return o}catch{return null}}async function h(e){let{secret:r,rawBody:n,headers:o}=e,t=e.now??Date.now(),f=e.toleranceMs??3e5;if(!r||r.length===0)return{ok:!1,reason:"no-secret"};let i=o.get(l);if(!i)return{ok:!1,reason:"no-signature"};let s=d.exec(i.trim());if(s===null)return{ok:!1,reason:"malformed-signature"};let a=Number(s[1]),m=s[2]??"";if(!Number.isSafeInteger(a))return{ok:!1,reason:"malformed-signature"};if(a<16094592e5)return{ok:!1,reason:"stale-timestamp"};if(Math.abs(t-a)>f)return{ok:!1,reason:"stale-timestamp"};let c=M(m);if(c===null)return{ok:!1,reason:"malformed-signature"};let y=await b(r);return await crypto.subtle.verify("HMAC",y,c,u.encode(`${a}.${n}`))?{ok:!0}:{ok:!1,reason:"bad-signature"}}export{A as DEFAULT_TOLERANCE_MS,g as MINIMUM_TIMESTAMP,l as SANITY_SIGNATURE_HEADER,h as verifySanityWebhook};
+//# sourceMappingURL=webhook.mjs.map

package/dist/webhook.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/portable/webhook.ts"],
+  "sourcesContent": ["/**\n * Verifying a Sanity webhook (A-590 step 1, A-592's `SANITY_WEBHOOK_SECRET`).\n *\n * -------------------------------------------------------------------------\n * WHY THIS ENDPOINT NEEDS A SIGNATURE AT ALL\n * -------------------------------------------------------------------------\n *\n * `/revalidate` throws away cache entries. A-590: \"An unauthenticated\n * revalidation endpoint is a free cache-purge and rebuild trigger for anyone\n * who finds the URL.\" On a plan whose API request allowance is a HARD cap that\n * returns 402 rather than a bill, an attacker who can empty the cache at will\n * can take a client's site content-offline for the rest of the month. So the\n * signature is not hygiene here; it is the availability control.\n *\n * -------------------------------------------------------------------------\n * THE WIRE FORMAT IS MEASURED, NOT REMEMBERED\n * -------------------------------------------------------------------------\n *\n * Read on 2026-09-16 from Sanity's own toolkit,\n * `https://raw.githubusercontent.com/sanity-io/webhook-toolkit/main/src/signature.ts`:\n *\n *   header            `sanity-webhook-signature`\n *   value             `t=<millis>,v1=<signature>`  (regex `/^t=(\\d+)[, ]+v1=([^, ]+)$/`)\n *   signed payload    `` `${timestamp}.${body}` ``\n *   algorithm         HMAC-SHA256\n *   digest encoding   base64url \u2014 standard base64 with `+`\u2192`-`, `/`\u2192`_`, padding stripped\n *   MINIMUM_TIMESTAMP 1609459200000 (2021-01-01Z), below which a value is nonsense\n *\n * `signature.test.ts` does not take that paragraph's word for it either: it\n * signs a payload with `@sanity/webhook`'s own `encodeSignatureHeader` and\n * asserts this verifier accepts it. If Sanity changes the format, that test\n * goes red rather than production quietly rejecting every webhook.\n *\n * -------------------------------------------------------------------------\n * WHAT THIS ADDS TO THE TOOLKIT, AND WHY IT IS NOT JUST IMPORTED\n * -------------------------------------------------------------------------\n *\n * Two things, both of which are `CLAUDE.md`'s \"take the safer construction\".\n *\n * First, a REPLAY WINDOW. The toolkit enforces only that the timestamp is after\n * 2021; a captured webhook is otherwise replayable forever. A replayed purge is\n * the attack in the first paragraph, executed with a request somebody was\n * legitimately sent. `verifySanityWebhook` takes a symmetric tolerance \u2014 the\n * window is symmetric for A-44's reason, since a far-future timestamp is\n * precisely how you mint a request that stays replayable for a year.\n *\n * Second, a MISSING SECRET IS A REJECTION, never a bypass. A-590 says it in as\n * many words: \"reject on absence rather than skipping the check when the secret\n * is unset.\" The degraded mode of \"no secret configured, so allow it\" is\n * produced by a deploy that forgot `wrangler secret put`, announces itself\n * nowhere, and grants strangers the purge endpoint.\n *\n * The comparison is `crypto.subtle.verify`, which compares raw digests in\n * constant time. A `===` on the base64 strings short-circuits at the first\n * differing character, which turns one 2^256 search into a few dozen sequential\n * 64-way ones against an endpoint that answers in milliseconds.\n *\n * -------------------------------------------------------------------------\n * `encodeSignatureHeader` IS ASYNC. AWAIT IT. (A-651)\n * -------------------------------------------------------------------------\n *\n * `@sanity/webhook@4.0.4` declares\n *\n *   encodeSignatureHeader(payload: string, timestamp: number, secret: string):\n *     Promise<string>\n *\n * and nothing forces you to await it. Drop the `await` and the Promise is\n * stringified into the header as the literal `[object Promise]`, which arrives\n * here, fails `SIGNATURE_VALUE`, and is rejected as `malformed-signature`. The\n * rejection is correct and the message is about the wire format, so it sends\n * you to read Sanity's header spec \u2014 the one place the bug is not. TypeScript\n * does not save you either: the value usually lands in a `Record<string,\n * string>` built by a helper, or inside a template literal, both of which take\n * a Promise without complaint.\n *\n * The rule: every call to `encodeSignatureHeader` is awaited, and the helper\n * that wraps it is `async` rather than returning the Promise for someone else\n * to forget. The content-client compatibility tests and CMS signer tests await every\n * encoder call; this note exists so the next one\n * is too, because the symptom will not tell you.\n */\n\n/** Sanity's header. Lower-cased; `Headers.get` is case-insensitive either way. */\nexport const SANITY_SIGNATURE_HEADER = \"sanity-webhook-signature\";\n\n/** Sanity's own parser, character for character. See the header. */\nconst SIGNATURE_VALUE = /^t=(\\d+)[, ]+v1=([^, ]+)$/;\n\n/** 2021-01-01T00:00:00.000Z. Sanity's `MINIMUM_TIMESTAMP`; anything earlier is not a timestamp. */\nexport const MINIMUM_TIMESTAMP = 1_609_459_200_000;\n\n/**\n * How far from `now` a webhook timestamp may be, in milliseconds.\n *\n * Five minutes rather than A-44's sixty seconds: this one crosses Sanity's\n * delivery queue rather than two NTP-synced clouds, and a retried delivery is a\n * normal event. It is still a window rather than \"forever\", which is the whole\n * difference from the toolkit.\n */\nexport const DEFAULT_TOLERANCE_MS = 300_000;\n\nexport type WebhookRejection =\n  /** `SANITY_WEBHOOK_SECRET` is unset or empty. Fail closed. */\n  | \"no-secret\"\n  /** No `sanity-webhook-signature` header. */\n  | \"no-signature\"\n  /** Header present but not `t=\u2026,v1=\u2026`, or `v1` is not decodable base64url. */\n  | \"malformed-signature\"\n  /** Before 2021, or outside the tolerance in either direction. */\n  | \"stale-timestamp\"\n  /** Well-formed, in window, wrong. */\n  | \"bad-signature\";\n\nexport type WebhookVerification = { ok: true } | { ok: false; reason: WebhookRejection };\n\nconst encoder = new TextEncoder();\n\nfunction hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\n/**\n * base64url \u2192 bytes, without `Buffer`.\n *\n * `atob` rather than `node:crypto` or `Buffer` because this file is imported by\n * the Worker, and workerd has neither by default. Returns null rather than\n * throwing on rubbish, so a malformed header is a 401 and not a 500 \u2014 a\n * verifier that crashes on bad input is a verifier an attacker can use as a\n * denial of service.\n */\nfunction base64UrlToBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  if (!/^[A-Za-z0-9_-]+={0,2}$/.test(value)) return null;\n  const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  try {\n    const binary = atob(padded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);\n    return bytes;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Verify a Sanity webhook delivery.\n *\n * `rawBody` must be the bytes as received \u2014 `await request.text()`, never\n * `JSON.stringify(await request.json())`. A parse-and-restringify is not a\n * byte-for-byte round trip (key order, number formatting, whitespace) and one\n * byte changes the whole digest, so the symptom is every webhook failing after\n * a refactor that looked like tidying.\n *\n * The `reason` is for our logs and our tests. It is never returned to the\n * caller: \"your signature was fine but your clock is stale\" is the next step in\n * an attack, handed over free.\n */\nexport async function verifySanityWebhook(options: {\n  secret: string | undefined;\n  rawBody: string;\n  headers: { get(name: string): string | null };\n  now?: number;\n  toleranceMs?: number;\n}): Promise<WebhookVerification> {\n  const { secret, rawBody, headers } = options;\n  const now = options.now ?? Date.now();\n  const toleranceMs = options.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n\n  if (!secret || secret.length === 0) return { ok: false, reason: \"no-secret\" };\n\n  const header = headers.get(SANITY_SIGNATURE_HEADER);\n  if (!header) return { ok: false, reason: \"no-signature\" };\n\n  const match = SIGNATURE_VALUE.exec(header.trim());\n  if (match === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const timestamp = Number(match[1]);\n  const provided = match[2] ?? \"\";\n  if (!Number.isSafeInteger(timestamp)) return { ok: false, reason: \"malformed-signature\" };\n  if (timestamp < MINIMUM_TIMESTAMP) return { ok: false, reason: \"stale-timestamp\" };\n  if (Math.abs(now - timestamp) > toleranceMs) return { ok: false, reason: \"stale-timestamp\" };\n\n  const signature = base64UrlToBytes(provided);\n  if (signature === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const key = await hmacKey(secret);\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    signature,\n    encoder.encode(`${timestamp}.${rawBody}`),\n  );\n  return valid ? { ok: true } : { ok: false, reason: \"bad-signature\" };\n}\n"],
+  "mappings": "AAmFO,IAAMA,EAA0B,2BAGjCC,EAAkB,4BAGXC,EAAoB,WAUpBC,EAAuB,IAgB9BC,EAAU,IAAI,YAEpB,SAASC,EAAQC,EAAoC,CACnD,OAAO,OAAO,OAAO,UACnB,MACAF,EAAQ,OAAOE,CAAM,EACrB,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,OAAQ,QAAQ,CACnB,CACF,CAWA,SAASC,EAAiBC,EAA+C,CACvE,GAAI,CAAC,yBAAyB,KAAKA,CAAK,EAAG,OAAO,KAClD,IAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACzD,GAAI,CACF,IAAME,EAAS,KAAKD,CAAM,EACpBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,GAAK,EAAGD,EAAMC,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACzE,OAAOD,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAeA,eAAsBE,EAAoBC,EAMT,CAC/B,GAAM,CAAE,OAAAR,EAAQ,QAAAS,EAAS,QAAAC,CAAQ,EAAIF,EAC/BG,EAAMH,EAAQ,KAAO,KAAK,IAAI,EAC9BI,EAAcJ,EAAQ,aAAe,IAE3C,GAAI,CAACR,GAAUA,EAAO,SAAW,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,WAAY,EAE5E,IAAMa,EAASH,EAAQ,IAAIhB,CAAuB,EAClD,GAAI,CAACmB,EAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,EAExD,IAAMC,EAAQnB,EAAgB,KAAKkB,EAAO,KAAK,CAAC,EAChD,GAAIC,IAAU,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAEtE,IAAMC,EAAY,OAAOD,EAAM,CAAC,CAAC,EAC3BE,EAAWF,EAAM,CAAC,GAAK,GAC7B,GAAI,CAAC,OAAO,cAAcC,CAAS,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EACxF,GAAIA,EAAY,WAAmB,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACjF,GAAI,KAAK,IAAIJ,EAAMI,CAAS,EAAIH,EAAa,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EAE3F,IAAMK,EAAYhB,EAAiBe,CAAQ,EAC3C,GAAIC,IAAc,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAE1E,IAAMC,EAAM,MAAMnB,EAAQC,CAAM,EAOhC,OANc,MAAM,OAAO,OAAO,OAChC,OACAkB,EACAD,EACAnB,EAAQ,OAAO,GAAGiB,CAAS,IAAIN,CAAO,EAAE,CAC1C,EACe,CAAE,GAAI,EAAK,EAAI,CAAE,GAAI,GAAO,OAAQ,eAAgB,CACrE",
+  "names": ["SANITY_SIGNATURE_HEADER", "SIGNATURE_VALUE", "MINIMUM_TIMESTAMP", "DEFAULT_TOLERANCE_MS", "encoder", "hmacKey", "secret", "base64UrlToBytes", "value", "padded", "binary", "bytes", "i", "verifySanityWebhook", "options", "rawBody", "headers", "now", "toleranceMs", "header", "match", "timestamp", "provided", "signature", "key"]
+}