@weatherboard/cms 0.5.0 → 0.6.0

package/dist/next.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/next.ts", "../src/contracts/query.ts", "../src/runtime/reader.ts", "../src/adapters/next/reader.ts", "../src/invalidation/route.ts", "../src/portable/webhook.ts"],
-  "sourcesContent": ["import \"server-only\";\nexport { createNextCmsReader } from \"./adapters/next/reader.js\";\nexport { createRevalidateRoute } from \"./invalidation/route.js\";\nexport type {\n  TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute,\n} from \"./invalidation/route.js\";\n", "/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly (\"siteHero.layout.defaulted\" | \"siteHero.tagline.dropped\" | \"siteHero.taglines.defaulted\")[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n", "import { cmsTags, defineCmsQuery, type CmsQuery, type CmsResolution } from \"../contracts/query.js\";\n\nexport type CmsFailure = \"configuration\" | \"network\" | \"timeout\" | \"rate-limit\"\n  | \"upstream\" | \"plan-limit\" | \"permission\" | \"malformed\";\nexport type CmsDiagnostic = {\n  readonly event: \"cms.fallback\" | \"cms.partial-fallback\" | \"cms.refused\";\n  readonly query: string;\n  readonly reason: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly status?: number;\n  readonly fields: readonly string[];\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsFetch = (url: string, init: RequestInit & {\n  next?: { revalidate: number; tags: string[] };\n}) => Promise<Response>;\nexport type CmsReadPolicy = {\n  readonly tags: readonly string[];\n  readonly revalidateSeconds: number;\n};\nexport type CmsAdapterResult =\n  | { readonly ok: true; readonly value: unknown }\n  | { readonly ok: false; readonly reason: CmsFailure; readonly status?: number };\nexport type CmsAdapter = {\n  readonly scope: string;\n  read(query: Pick<CmsQuery<unknown>, \"name\" | \"query\" | \"params\">,\n    policy: CmsReadPolicy): Promise<CmsAdapterResult>;\n};\nexport type CmsReadResult<T> = {\n  readonly data: T;\n  readonly source: \"cms\" | \"mixed\" | \"fallback\";\n  readonly fallbackFields: readonly string[];\n  readonly reason?: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsReaderOptions = {\n  readonly adapter: CmsAdapter;\n  readonly revalidateSeconds?: number;\n  readonly onDiagnostic?: (event: CmsDiagnostic) => void;\n};\nexport type CmsReader = {\n  read<T>(query: CmsQuery<T>, options: { readonly fallback: T }): Promise<CmsReadResult<T>>;\n};\n\nfunction resolution<T>(value: CmsResolution<T>): CmsResolution<T> {\n  if (!value || !Object.hasOwn(value, \"data\") || !Array.isArray(value.fallbackFields)\n    || ![...value.fallbackFields].every((field: unknown) => typeof field === \"string\"\n      && (field === \"$\" || /^[A-Za-z][A-Za-z0-9_.[\\]-]{0,127}$/.test(field)))) {\n    throw new TypeError(\"Invalid CMS resolution\");\n  }\n  if (value.warnings !== undefined && (!Array.isArray(value.warnings)\n    || ![...value.warnings].every((warning) => warning === \"siteHero.layout.defaulted\"\n      || warning === \"siteHero.tagline.dropped\" || warning === \"siteHero.taglines.defaulted\"))) {\n    throw new TypeError(\"Invalid CMS resolution warnings\");\n  }\n  return { data: value.data, fallbackFields: Object.freeze([...new Set(value.fallbackFields)]),\n    ...(value.warnings?.length ? { warnings: Object.freeze([...new Set(value.warnings)]) } : {}) };\n}\n\n/** Forwards cache policy; persistence and rendered-output invalidation belong to the host. */\nexport function createCmsReader(options: CmsReaderOptions): CmsReader {\n  const seconds = options?.revalidateSeconds ?? 3600;\n  if (!Number.isSafeInteger(seconds) || seconds < 3600 || !options?.adapter\n    || typeof options.adapter.read !== \"function\"\n    || (options.onDiagnostic !== undefined && typeof options.onDiagnostic !== \"function\")) {\n    throw new TypeError(\"Invalid CMS reader configuration\");\n  }\n  const adapter = options.adapter;\n  // Validate the scope without assuming any particular shared content types.\n  cmsTags(adapter.scope, { types: [\"ScopeValidation\"] });\n  const notify = (event: CmsDiagnostic): void => {\n    try {\n      if (options.onDiagnostic) options.onDiagnostic(event);\n      else console.warn(JSON.stringify(event));\n    } catch { /* Reporting must not break visitor rendering. */ }\n  };\n  return {\n    async read<T>(input: CmsQuery<T>, readOptions: { readonly fallback: T }): Promise<CmsReadResult<T>> {\n      let query: CmsQuery<T>;\n      let local: CmsResolution<T>;\n      let tags: readonly string[];\n      try {\n        query = defineCmsQuery(input);\n        tags = cmsTags(adapter.scope, query.dependencies);\n        if (!readOptions || !Object.hasOwn(readOptions, \"fallback\")) throw new TypeError();\n        // Built-in resolvers validate fallback here, before any I/O.\n        local = resolution(query.resolve(null, readOptions.fallback));\n      } catch {\n        throw new TypeError(\"Invalid CMS query or fallback configuration\");\n      }\n      const fallback = (reason: CmsFailure | \"missing\" | \"invalid-field\", status?: number, warnings?: CmsResolution<T>[\"warnings\"]): CmsReadResult<T> => {\n        notify({ event: \"cms.fallback\", query: query.name, reason, fields: [\"$\"],\n          ...(status === undefined ? {} : { status }), ...(warnings ? { warnings } : {}) });\n        return { data: local.data, source: \"fallback\", fallbackFields: [\"$\"], reason, ...(warnings ? { warnings } : {}) };\n      };\n      let result: CmsAdapterResult;\n      try {\n        result = await adapter.read({ name: query.name, query: query.query, params: query.params },\n          { tags, revalidateSeconds: seconds });\n      } catch { return fallback(\"network\"); }\n      if (!result.ok) {\n        const reasons: readonly CmsFailure[] = [\"configuration\", \"network\", \"timeout\", \"rate-limit\", \"upstream\", \"plan-limit\", \"permission\", \"malformed\"];\n        const reason = reasons.includes(result.reason) ? result.reason : \"malformed\";\n        const status = Number.isInteger(result.status) && (result.status ?? 0) >= 100 && (result.status ?? 0) <= 599 ? result.status : undefined;\n        return fallback(reason, status);\n      }\n      if (result.value === null || result.value === undefined) return fallback(\"missing\");\n      let resolved: CmsResolution<T>;\n      try { resolved = resolution(query.resolve(result.value, readOptions.fallback)); }\n      catch { return fallback(\"malformed\"); }\n      if (resolved.fallbackFields.includes(\"$\")) {\n        return { ...fallback(\"invalid-field\", undefined, resolved.warnings), data: resolved.data };\n      }\n      if (resolved.fallbackFields.length > 0) {\n        notify({ event: \"cms.partial-fallback\", query: query.name, reason: \"invalid-field\", fields: resolved.fallbackFields, ...(resolved.warnings ? { warnings: resolved.warnings } : {}) });\n        return { ...resolved, source: \"mixed\", reason: \"invalid-field\" };\n      }\n      return { ...resolved, source: \"cms\" };\n    },\n  };\n}\n", "import { createCmsReader } from \"../../runtime/reader.js\";\n\n// Keep the adapter's patched global fetch and policy intact. No second cache.\nexport const createNextCmsReader = createCmsReader;\n", "import { revalidateTag } from \"next/cache.js\";\nimport { cmsTags } from \"../contracts/query.js\";\nimport { SANITY_SIGNATURE_HEADER, verifySanityWebhook } from \"../portable/webhook.js\";\n\nexport type TypeToTags = Readonly<Record<string, readonly string[]>>;\nexport type RevalidateRouteOptions = {\n  readonly scope: string;\n  readonly secretEnv?: string;\n  readonly previousSecretEnv?: string;\n  readonly typeToTags: TypeToTags;\n  readonly env?: () => Readonly<Record<string, string | undefined>>;\n  readonly now?: () => number;\n};\nexport type CmsRouteHandler = (request: Request) => Promise<Response>;\nexport type CmsRevalidateRoute = Readonly<Record<\n  \"POST\" | \"GET\" | \"HEAD\" | \"PUT\" | \"PATCH\" | \"DELETE\" | \"OPTIONS\", CmsRouteHandler\n>>;\n\nconst BODY_LIMIT = 16 * 1024;\nconst BODY_DEADLINE_MS = 1500;\nconst encoder = new TextEncoder();\n\nfunction response(status: number, value: unknown, headers: Record<string, string> = {}, head = false): Response {\n  return new Response(head ? null : JSON.stringify(value), {\n    status, headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\", ...headers },\n  });\n}\n\nfunction copyMapping(scope: string, mapping: TypeToTags): TypeToTags {\n  if (!mapping || typeof mapping !== \"object\" || Array.isArray(mapping) || Object.keys(mapping).length === 0) {\n    throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  const copied: Record<string, readonly string[]> = Object.create(null);\n  for (const key of Reflect.ownKeys(mapping)) {\n    const descriptor = Object.getOwnPropertyDescriptor(mapping, key);\n    if (typeof key !== \"string\" || !descriptor?.enumerable || !Object.hasOwn(descriptor, \"value\")) {\n      throw new TypeError(\"Invalid CMS invalidation mapping\");\n    }\n    const types: unknown = descriptor.value;\n    if (!Array.isArray(types) || !types.includes(key)) throw new TypeError(\"Invalid CMS invalidation mapping\");\n    // Reserve the document ID tag as well as validating every local type.\n    cmsTags(scope, { types, ids: [\"validation\"] });\n    copied[key] = Object.freeze([...types] as string[]);\n  }\n  for (const types of Object.values(copied)) {\n    if (types.some((type) => !Object.hasOwn(copied, type))) throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  return Object.freeze(copied);\n}\n\nfunction validSecret(value: unknown): value is string {\n  return typeof value === \"string\" && value.trim() !== \"\" && encoder.encode(value).byteLength >= 32;\n}\n\nclass BodyFailure extends Error {\n  constructor(readonly status: 400 | 413) { super(\"Invalid CMS webhook body\"); }\n}\n\nasync function rawBody(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true });\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const deadline = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => reject(new BodyFailure(400)), BODY_DEADLINE_MS);\n  });\n  try {\n    let bytes = 0;\n    let text = \"\";\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), deadline]);\n      if (done) return text + decoder.decode();\n      bytes += value.byteLength;\n      if (bytes > BODY_LIMIT) throw new BodyFailure(413);\n      text += decoder.decode(value, { stream: true });\n    }\n  } catch (error) {\n    // Cancellation must not extend the deadline, including a stalled source.\n    void reader.cancel().catch(() => {});\n    throw error;\n  } finally {\n    clearTimeout(timer);\n    reader.releaseLock();\n  }\n}\n\nexport function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute {\n  const scope = options.scope;\n  const mapping = copyMapping(scope, options.typeToTags);\n  const secretEnv = options.secretEnv ?? \"SANITY_REVALIDATE_SECRET\";\n  const previousSecretEnv = options.previousSecretEnv ?? \"SANITY_REVALIDATE_SECRET_PREVIOUS\";\n  const env = options.env ?? (() => process.env);\n  const now = options.now ?? Date.now;\n\n  const handler: CmsRouteHandler = async (request) => {\n    if (request.method !== \"POST\") {\n      return response(405, { error: \"Method not allowed\" }, { Allow: \"POST\" }, request.method === \"HEAD\");\n    }\n    let active: string;\n    let previous: string | undefined;\n    try {\n      const values = env();\n      const activeValue = values[secretEnv];\n      const previousValue = values[previousSecretEnv];\n      if (!validSecret(activeValue) || (previousValue !== undefined && !validSecret(previousValue))) throw new Error();\n      active = activeValue;\n      previous = previousValue;\n    } catch {\n      return response(503, { error: \"COULD NOT ANSWER: revalidation configuration unavailable\" });\n    }\n    const signature = request.headers.get(SANITY_SIGNATURE_HEADER);\n    if (!signature || signature.length > 512 || !/^t=\\d+[, ]+v1=[A-Za-z0-9_-]+={0,2}$/.test(signature.trim())) {\n      return response(401, { error: \"Unauthorized\" });\n    }\n    let body: string;\n    try { body = await rawBody(request); }\n    catch (error) {\n      return error instanceof BodyFailure && error.status === 413\n        ? response(413, { error: \"Payload too large\" }) : response(400, { error: \"Invalid body\" });\n    }\n    try {\n      const clock = now();\n      if (!Number.isFinite(clock)) throw new Error();\n      const results = await Promise.all([active, ...(previous === undefined ? [] : [previous])].map((secret) =>\n        verifySanityWebhook({ secret, rawBody: body, headers: request.headers, now: clock })));\n      if (!results.some((result) => result.ok)) return response(401, { error: \"Unauthorized\" });\n    } catch { return response(401, { error: \"Unauthorized\" }); }\n\n    let payload: unknown;\n    try { payload = JSON.parse(body); }\n    catch { return response(400, { error: \"Invalid payload\" }); }\n    if (!payload || typeof payload !== \"object\" || Array.isArray(payload)\n      || Object.keys(payload).length !== 2 || !Object.hasOwn(payload, \"_type\") || !Object.hasOwn(payload, \"_id\")) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    const { _type: type, _id: id } = payload as { _type: unknown; _id: unknown };\n    if (typeof type !== \"string\" || !/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(type)\n      || typeof id !== \"string\" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id)) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    if (!Object.hasOwn(mapping, type) || /^(drafts|versions)\\./.test(id)) {\n      return response(400, { error: \"Unsupported document\" });\n    }\n    const tags = cmsTags(scope, { types: mapping[type]!, ids: [id] });\n    try {\n      for (const tag of tags) revalidateTag(tag, { expire: 0 });\n    } catch { return response(500, { error: \"Could not revalidate\" }); }\n    return response(200, { revalidated: true });\n  };\n  return Object.freeze({ POST: handler, GET: handler, HEAD: handler, PUT: handler, PATCH: handler, DELETE: handler, OPTIONS: handler });\n}\n", "/**\n * Verifying a Sanity webhook (A-590 step 1, A-592's `SANITY_WEBHOOK_SECRET`).\n *\n * -------------------------------------------------------------------------\n * WHY THIS ENDPOINT NEEDS A SIGNATURE AT ALL\n * -------------------------------------------------------------------------\n *\n * `/revalidate` throws away cache entries. A-590: \"An unauthenticated\n * revalidation endpoint is a free cache-purge and rebuild trigger for anyone\n * who finds the URL.\" On a plan whose API request allowance is a HARD cap that\n * returns 402 rather than a bill, an attacker who can empty the cache at will\n * can take a client's site content-offline for the rest of the month. So the\n * signature is not hygiene here; it is the availability control.\n *\n * -------------------------------------------------------------------------\n * THE WIRE FORMAT IS MEASURED, NOT REMEMBERED\n * -------------------------------------------------------------------------\n *\n * Read on 2026-09-16 from Sanity's own toolkit,\n * `https://raw.githubusercontent.com/sanity-io/webhook-toolkit/main/src/signature.ts`:\n *\n *   header            `sanity-webhook-signature`\n *   value             `t=<millis>,v1=<signature>`  (regex `/^t=(\\d+)[, ]+v1=([^, ]+)$/`)\n *   signed payload    `` `${timestamp}.${body}` ``\n *   algorithm         HMAC-SHA256\n *   digest encoding   base64url \u2014 standard base64 with `+`\u2192`-`, `/`\u2192`_`, padding stripped\n *   MINIMUM_TIMESTAMP 1609459200000 (2021-01-01Z), below which a value is nonsense\n *\n * `signature.test.ts` does not take that paragraph's word for it either: it\n * signs a payload with `@sanity/webhook`'s own `encodeSignatureHeader` and\n * asserts this verifier accepts it. If Sanity changes the format, that test\n * goes red rather than production quietly rejecting every webhook.\n *\n * -------------------------------------------------------------------------\n * WHAT THIS ADDS TO THE TOOLKIT, AND WHY IT IS NOT JUST IMPORTED\n * -------------------------------------------------------------------------\n *\n * Two things, both of which are `CLAUDE.md`'s \"take the safer construction\".\n *\n * First, a REPLAY WINDOW. The toolkit enforces only that the timestamp is after\n * 2021; a captured webhook is otherwise replayable forever. A replayed purge is\n * the attack in the first paragraph, executed with a request somebody was\n * legitimately sent. `verifySanityWebhook` takes a symmetric tolerance \u2014 the\n * window is symmetric for A-44's reason, since a far-future timestamp is\n * precisely how you mint a request that stays replayable for a year.\n *\n * Second, a MISSING SECRET IS A REJECTION, never a bypass. A-590 says it in as\n * many words: \"reject on absence rather than skipping the check when the secret\n * is unset.\" The degraded mode of \"no secret configured, so allow it\" is\n * produced by a deploy that forgot `wrangler secret put`, announces itself\n * nowhere, and grants strangers the purge endpoint.\n *\n * The comparison is `crypto.subtle.verify`, which compares raw digests in\n * constant time. A `===` on the base64 strings short-circuits at the first\n * differing character, which turns one 2^256 search into a few dozen sequential\n * 64-way ones against an endpoint that answers in milliseconds.\n *\n * -------------------------------------------------------------------------\n * `encodeSignatureHeader` IS ASYNC. AWAIT IT. (A-651)\n * -------------------------------------------------------------------------\n *\n * `@sanity/webhook@4.0.4` declares\n *\n *   encodeSignatureHeader(payload: string, timestamp: number, secret: string):\n *     Promise<string>\n *\n * and nothing forces you to await it. Drop the `await` and the Promise is\n * stringified into the header as the literal `[object Promise]`, which arrives\n * here, fails `SIGNATURE_VALUE`, and is rejected as `malformed-signature`. The\n * rejection is correct and the message is about the wire format, so it sends\n * you to read Sanity's header spec \u2014 the one place the bug is not. TypeScript\n * does not save you either: the value usually lands in a `Record<string,\n * string>` built by a helper, or inside a template literal, both of which take\n * a Promise without complaint.\n *\n * The rule: every call to `encodeSignatureHeader` is awaited, and the helper\n * that wraps it is `async` rather than returning the Promise for someone else\n * to forget. The content-client compatibility tests and CMS signer tests await every\n * encoder call; this note exists so the next one\n * is too, because the symptom will not tell you.\n */\n\n/** Sanity's header. Lower-cased; `Headers.get` is case-insensitive either way. */\nexport const SANITY_SIGNATURE_HEADER = \"sanity-webhook-signature\";\n\n/** Sanity's own parser, character for character. See the header. */\nconst SIGNATURE_VALUE = /^t=(\\d+)[, ]+v1=([^, ]+)$/;\n\n/** 2021-01-01T00:00:00.000Z. Sanity's `MINIMUM_TIMESTAMP`; anything earlier is not a timestamp. */\nexport const MINIMUM_TIMESTAMP = 1_609_459_200_000;\n\n/**\n * How far from `now` a webhook timestamp may be, in milliseconds.\n *\n * Five minutes rather than A-44's sixty seconds: this one crosses Sanity's\n * delivery queue rather than two NTP-synced clouds, and a retried delivery is a\n * normal event. It is still a window rather than \"forever\", which is the whole\n * difference from the toolkit.\n */\nexport const DEFAULT_TOLERANCE_MS = 300_000;\n\nexport type WebhookRejection =\n  /** `SANITY_WEBHOOK_SECRET` is unset or empty. Fail closed. */\n  | \"no-secret\"\n  /** No `sanity-webhook-signature` header. */\n  | \"no-signature\"\n  /** Header present but not `t=\u2026,v1=\u2026`, or `v1` is not decodable base64url. */\n  | \"malformed-signature\"\n  /** Before 2021, or outside the tolerance in either direction. */\n  | \"stale-timestamp\"\n  /** Well-formed, in window, wrong. */\n  | \"bad-signature\";\n\nexport type WebhookVerification = { ok: true } | { ok: false; reason: WebhookRejection };\n\nconst encoder = new TextEncoder();\n\nfunction hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\n/**\n * base64url \u2192 bytes, without `Buffer`.\n *\n * `atob` rather than `node:crypto` or `Buffer` because this file is imported by\n * the Worker, and workerd has neither by default. Returns null rather than\n * throwing on rubbish, so a malformed header is a 401 and not a 500 \u2014 a\n * verifier that crashes on bad input is a verifier an attacker can use as a\n * denial of service.\n */\nfunction base64UrlToBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  if (!/^[A-Za-z0-9_-]+={0,2}$/.test(value)) return null;\n  const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  try {\n    const binary = atob(padded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);\n    return bytes;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Verify a Sanity webhook delivery.\n *\n * `rawBody` must be the bytes as received \u2014 `await request.text()`, never\n * `JSON.stringify(await request.json())`. A parse-and-restringify is not a\n * byte-for-byte round trip (key order, number formatting, whitespace) and one\n * byte changes the whole digest, so the symptom is every webhook failing after\n * a refactor that looked like tidying.\n *\n * The `reason` is for our logs and our tests. It is never returned to the\n * caller: \"your signature was fine but your clock is stale\" is the next step in\n * an attack, handed over free.\n */\nexport async function verifySanityWebhook(options: {\n  secret: string | undefined;\n  rawBody: string;\n  headers: { get(name: string): string | null };\n  now?: number;\n  toleranceMs?: number;\n}): Promise<WebhookVerification> {\n  const { secret, rawBody, headers } = options;\n  const now = options.now ?? Date.now();\n  const toleranceMs = options.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n\n  if (!secret || secret.length === 0) return { ok: false, reason: \"no-secret\" };\n\n  const header = headers.get(SANITY_SIGNATURE_HEADER);\n  if (!header) return { ok: false, reason: \"no-signature\" };\n\n  const match = SIGNATURE_VALUE.exec(header.trim());\n  if (match === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const timestamp = Number(match[1]);\n  const provided = match[2] ?? \"\";\n  if (!Number.isSafeInteger(timestamp)) return { ok: false, reason: \"malformed-signature\" };\n  if (timestamp < MINIMUM_TIMESTAMP) return { ok: false, reason: \"stale-timestamp\" };\n  if (Math.abs(now - timestamp) > toleranceMs) return { ok: false, reason: \"stale-timestamp\" };\n\n  const signature = base64UrlToBytes(provided);\n  if (signature === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const key = await hmacKey(secret);\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    signature,\n    encoder.encode(`${timestamp}.${rawBody}`),\n  );\n  return valid ? { ok: true } : { ok: false, reason: \"bad-signature\" };\n}\n"],
-  "mappings": "AAAA,MAAO,cCmBP,IAAMA,EAAO,+BACPC,EAAK,qCACLC,EAAQ,0CAEd,SAASC,EAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACN,EAAK,KAAKM,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMG,EAAMH,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWI,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACP,EAAG,KAAKO,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIH,CAAK,EAAE,KAAO,IAAI,IAAIE,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOF,CAAK,EAAG,GAAIE,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASE,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcT,EAAiBO,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CAEO,SAASM,EAAQC,EAAeb,EAAkD,CACvF,GAAI,OAAOa,GAAU,UAAYA,EAAM,OAAS,IAAM,CAACf,EAAM,KAAKe,CAAK,EAAG,MAAM,IAAI,UAAU,mBAAmB,EACjH,IAAML,EAAST,EAAiBC,CAAY,EACtCc,EAAO,CACX,GAAG,CAAC,GAAG,IAAI,IAAIN,EAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAKN,GAAS,OAAOW,CAAK,SAASX,CAAI,EAAE,EAC9E,GAAG,CAAC,GAAG,IAAI,IAAIM,EAAO,KAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAKJ,GAAO,OAAOS,CAAK,OAAOT,CAAE,EAAE,CAC9E,EACA,OAAO,OAAO,OAAOU,CAAI,CAC3B,CC/BA,SAASC,EAAcC,EAA2C,CAChE,GAAI,CAACA,GAAS,CAAC,OAAO,OAAOA,EAAO,MAAM,GAAK,CAAC,MAAM,QAAQA,EAAM,cAAc,GAC7E,CAAC,CAAC,GAAGA,EAAM,cAAc,EAAE,MAAOC,GAAmB,OAAOA,GAAU,WACnEA,IAAU,KAAO,qCAAqC,KAAKA,CAAK,EAAE,EACxE,MAAM,IAAI,UAAU,wBAAwB,EAE9C,GAAID,EAAM,WAAa,SAAc,CAAC,MAAM,QAAQA,EAAM,QAAQ,GAC7D,CAAC,CAAC,GAAGA,EAAM,QAAQ,EAAE,MAAOE,GAAYA,IAAY,6BAClDA,IAAY,4BAA8BA,IAAY,6BAA6B,GACxF,MAAM,IAAI,UAAU,iCAAiC,EAEvD,MAAO,CAAE,KAAMF,EAAM,KAAM,eAAgB,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,cAAc,CAAC,CAAC,EACzF,GAAIA,EAAM,UAAU,OAAS,CAAE,SAAU,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,QAAQ,CAAC,CAAC,CAAE,EAAI,CAAC,CAAG,CACjG,CAGO,SAASG,EAAgBC,EAAsC,CACpE,IAAMC,EAAUD,GAAS,mBAAqB,KAC9C,GAAI,CAAC,OAAO,cAAcC,CAAO,GAAKA,EAAU,MAAQ,CAACD,GAAS,SAC7D,OAAOA,EAAQ,QAAQ,MAAS,YAC/BA,EAAQ,eAAiB,QAAa,OAAOA,EAAQ,cAAiB,WAC1E,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAME,EAAUF,EAAQ,QAExBG,EAAQD,EAAQ,MAAO,CAAE,MAAO,CAAC,iBAAiB,CAAE,CAAC,EACrD,IAAME,EAAUC,GAA+B,CAC7C,GAAI,CACEL,EAAQ,aAAcA,EAAQ,aAAaK,CAAK,EAC/C,QAAQ,KAAK,KAAK,UAAUA,CAAK,CAAC,CACzC,MAAQ,CAAoD,CAC9D,EACA,MAAO,CACL,MAAM,KAAQC,EAAoBC,EAAkE,CAClG,IAAIC,EACAC,EACAC,EACJ,GAAI,CAGF,GAFAF,EAAQG,EAAeL,CAAK,EAC5BI,EAAOP,EAAQD,EAAQ,MAAOM,EAAM,YAAY,EAC5C,CAACD,GAAe,CAAC,OAAO,OAAOA,EAAa,UAAU,EAAG,MAAM,IAAI,UAEvEE,EAAQd,EAAWa,EAAM,QAAQ,KAAMD,EAAY,QAAQ,CAAC,CAC9D,MAAQ,CACN,MAAM,IAAI,UAAU,6CAA6C,CACnE,CACA,IAAMK,EAAW,CAACC,EAAkDC,EAAiBC,KACnFX,EAAO,CAAE,MAAO,eAAgB,MAAOI,EAAM,KAAM,OAAAK,EAAQ,OAAQ,CAAC,GAAG,EACrE,GAAIC,IAAW,OAAY,CAAC,EAAI,CAAE,OAAAA,CAAO,EAAI,GAAIC,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CAAC,EAC3E,CAAE,KAAMN,EAAM,KAAM,OAAQ,WAAY,eAAgB,CAAC,GAAG,EAAG,OAAAI,EAAQ,GAAIE,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,GAE9GC,EACJ,GAAI,CACFA,EAAS,MAAMd,EAAQ,KAAK,CAAE,KAAMM,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQA,EAAM,MAAO,EACvF,CAAE,KAAAE,EAAM,kBAAmBT,CAAQ,CAAC,CACxC,MAAQ,CAAE,OAAOW,EAAS,SAAS,CAAG,CACtC,GAAI,CAACI,EAAO,GAAI,CAEd,IAAMH,EADiC,CAAC,gBAAiB,UAAW,UAAW,aAAc,WAAY,aAAc,aAAc,WAAW,EACzH,SAASG,EAAO,MAAM,EAAIA,EAAO,OAAS,YAC3DF,EAAS,OAAO,UAAUE,EAAO,MAAM,IAAMA,EAAO,QAAU,IAAM,MAAQA,EAAO,QAAU,IAAM,IAAMA,EAAO,OAAS,OAC/H,OAAOJ,EAASC,EAAQC,CAAM,CAChC,CACA,GAAIE,EAAO,QAAU,MAAQA,EAAO,QAAU,OAAW,OAAOJ,EAAS,SAAS,EAClF,IAAIK,EACJ,GAAI,CAAEA,EAAWtB,EAAWa,EAAM,QAAQQ,EAAO,MAAOT,EAAY,QAAQ,CAAC,CAAG,MAC1E,CAAE,OAAOK,EAAS,WAAW,CAAG,CACtC,OAAIK,EAAS,eAAe,SAAS,GAAG,EAC/B,CAAE,GAAGL,EAAS,gBAAiB,OAAWK,EAAS,QAAQ,EAAG,KAAMA,EAAS,IAAK,EAEvFA,EAAS,eAAe,OAAS,GACnCb,EAAO,CAAE,MAAO,uBAAwB,MAAOI,EAAM,KAAM,OAAQ,gBAAiB,OAAQS,EAAS,eAAgB,GAAIA,EAAS,SAAW,CAAE,SAAUA,EAAS,QAAS,EAAI,CAAC,CAAG,CAAC,EAC7K,CAAE,GAAGA,EAAU,OAAQ,QAAS,OAAQ,eAAgB,GAE1D,CAAE,GAAGA,EAAU,OAAQ,KAAM,CACtC,CACF,CACF,CCpHO,IAAMC,EAAsBC,ECHnC,OAAS,iBAAAC,MAAqB,gBCmFvB,IAAMC,EAA0B,2BAGjCC,EAAkB,4BA6BxB,IAAMC,EAAU,IAAI,YAEpB,SAASC,EAAQC,EAAoC,CACnD,OAAO,OAAO,OAAO,UACnB,MACAF,EAAQ,OAAOE,CAAM,EACrB,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,OAAQ,QAAQ,CACnB,CACF,CAWA,SAASC,EAAiBC,EAA+C,CACvE,GAAI,CAAC,yBAAyB,KAAKA,CAAK,EAAG,OAAO,KAClD,IAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACzD,GAAI,CACF,IAAME,EAAS,KAAKD,CAAM,EACpBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,GAAK,EAAGD,EAAMC,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACzE,OAAOD,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAeA,eAAsBE,EAAoBC,EAMT,CAC/B,GAAM,CAAE,OAAAR,EAAQ,QAAAS,EAAS,QAAAC,CAAQ,EAAIF,EAC/BG,EAAMH,EAAQ,KAAO,KAAK,IAAI,EAC9BI,EAAcJ,EAAQ,aAAe,IAE3C,GAAI,CAACR,GAAUA,EAAO,SAAW,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,WAAY,EAE5E,IAAMa,EAASH,EAAQ,IAAII,CAAuB,EAClD,GAAI,CAACD,EAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,EAExD,IAAME,EAAQC,EAAgB,KAAKH,EAAO,KAAK,CAAC,EAChD,GAAIE,IAAU,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAEtE,IAAME,EAAY,OAAOF,EAAM,CAAC,CAAC,EAC3BG,EAAWH,EAAM,CAAC,GAAK,GAC7B,GAAI,CAAC,OAAO,cAAcE,CAAS,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EACxF,GAAIA,EAAY,WAAmB,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACjF,GAAI,KAAK,IAAIN,EAAMM,CAAS,EAAIL,EAAa,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EAE3F,IAAMO,EAAYlB,EAAiBiB,CAAQ,EAC3C,GAAIC,IAAc,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAE1E,IAAMC,EAAM,MAAMrB,EAAQC,CAAM,EAOhC,OANc,MAAM,OAAO,OAAO,OAChC,OACAoB,EACAD,EACArB,EAAQ,OAAO,GAAGmB,CAAS,IAAIR,CAAO,EAAE,CAC1C,EACe,CAAE,GAAI,EAAK,EAAI,CAAE,GAAI,GAAO,OAAQ,eAAgB,CACrE,CDpLA,IAAMY,EAAa,GAAK,KAClBC,EAAmB,KACnBC,EAAU,IAAI,YAEpB,SAASC,EAASC,EAAgBC,EAAgBC,EAAkC,CAAC,EAAGC,EAAO,GAAiB,CAC9G,OAAO,IAAI,SAASA,EAAO,KAAO,KAAK,UAAUF,CAAK,EAAG,CACvD,OAAAD,EAAQ,QAAS,CAAE,eAAgB,mBAAoB,gBAAiB,WAAY,GAAGE,CAAQ,CACjG,CAAC,CACH,CAEA,SAASE,EAAYC,EAAeC,EAAiC,CACnE,GAAI,CAACA,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAAK,OAAO,KAAKA,CAAO,EAAE,SAAW,EACvG,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAA4C,OAAO,OAAO,IAAI,EACpE,QAAWC,KAAO,QAAQ,QAAQF,CAAO,EAAG,CAC1C,IAAMG,EAAa,OAAO,yBAAyBH,EAASE,CAAG,EAC/D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAY,YAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,EAC1F,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAAiBD,EAAW,MAClC,GAAI,CAAC,MAAM,QAAQC,CAAK,GAAK,CAACA,EAAM,SAASF,CAAG,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEzGG,EAAQN,EAAO,CAAE,MAAAK,EAAO,IAAK,CAAC,YAAY,CAAE,CAAC,EAC7CH,EAAOC,CAAG,EAAI,OAAO,OAAO,CAAC,GAAGE,CAAK,CAAa,CACpD,CACA,QAAWA,KAAS,OAAO,OAAOH,CAAM,EACtC,GAAIG,EAAM,KAAME,GAAS,CAAC,OAAO,OAAOL,EAAQK,CAAI,CAAC,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEhH,OAAO,OAAO,OAAOL,CAAM,CAC7B,CAEA,SAASM,EAAYZ,EAAiC,CACpD,OAAO,OAAOA,GAAU,UAAYA,EAAM,KAAK,IAAM,IAAMH,EAAQ,OAAOG,CAAK,EAAE,YAAc,EACjG,CAEA,IAAMa,EAAN,cAA0B,KAAM,CAC9B,YAAqBd,EAAmB,CAAE,MAAM,0BAA0B,EAArD,YAAAA,CAAwD,CAAxD,MACvB,EAEA,eAAee,EAAQC,EAAmC,CACxD,IAAMC,EAASD,EAAQ,MAAM,UAAU,EACvC,GAAI,CAACC,EAAQ,MAAO,GACpB,IAAMC,EAAU,IAAI,YAAY,QAAS,CAAE,MAAO,GAAM,UAAW,EAAK,CAAC,EACrEC,EACEC,EAAW,IAAI,QAAe,CAACC,EAAUC,IAAW,CACxDH,EAAQ,WAAW,IAAMG,EAAO,IAAIR,EAAY,GAAG,CAAC,EAAGjB,CAAgB,CACzE,CAAC,EACD,GAAI,CACF,IAAI0B,EAAQ,EACRC,EAAO,GACX,OAAa,CACX,GAAM,CAAE,KAAAC,EAAM,MAAAxB,CAAM,EAAI,MAAM,QAAQ,KAAK,CAACgB,EAAO,KAAK,EAAGG,CAAQ,CAAC,EACpE,GAAIK,EAAM,OAAOD,EAAON,EAAQ,OAAO,EAEvC,GADAK,GAAStB,EAAM,WACXsB,EAAQ3B,EAAY,MAAM,IAAIkB,EAAY,GAAG,EACjDU,GAAQN,EAAQ,OAAOjB,EAAO,CAAE,OAAQ,EAAK,CAAC,CAChD,CACF,OAASyB,EAAO,CAEd,MAAKT,EAAO,OAAO,EAAE,MAAM,IAAM,CAAC,CAAC,EAC7BS,CACR,QAAE,CACA,aAAaP,CAAK,EAClBF,EAAO,YAAY,CACrB,CACF,CAEO,SAASU,EAAsBC,EAAqD,CACzF,IAAMvB,EAAQuB,EAAQ,MAChBtB,EAAUF,EAAYC,EAAOuB,EAAQ,UAAU,EAC/CC,EAAYD,EAAQ,WAAa,2BACjCE,EAAoBF,EAAQ,mBAAqB,oCACjDG,EAAMH,EAAQ,MAAQ,IAAM,QAAQ,KACpCI,EAAMJ,EAAQ,KAAO,KAAK,IAE1BK,EAA2B,MAAOjB,GAAY,CAClD,GAAIA,EAAQ,SAAW,OACrB,OAAOjB,EAAS,IAAK,CAAE,MAAO,oBAAqB,EAAG,CAAE,MAAO,MAAO,EAAGiB,EAAQ,SAAW,MAAM,EAEpG,IAAIkB,EACAC,EACJ,GAAI,CACF,IAAMC,EAASL,EAAI,EACbM,EAAcD,EAAOP,CAAS,EAC9BS,EAAgBF,EAAON,CAAiB,EAC9C,GAAI,CAACjB,EAAYwB,CAAW,GAAMC,IAAkB,QAAa,CAACzB,EAAYyB,CAAa,EAAI,MAAM,IAAI,MACzGJ,EAASG,EACTF,EAAWG,CACb,MAAQ,CACN,OAAOvC,EAAS,IAAK,CAAE,MAAO,0DAA2D,CAAC,CAC5F,CACA,IAAMwC,EAAYvB,EAAQ,QAAQ,IAAIwB,CAAuB,EAC7D,GAAI,CAACD,GAAaA,EAAU,OAAS,KAAO,CAAC,sCAAsC,KAAKA,EAAU,KAAK,CAAC,EACtG,OAAOxC,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,EAEhD,IAAI0C,EACJ,GAAI,CAAEA,EAAO,MAAM1B,EAAQC,CAAO,CAAG,OAC9BU,EAAO,CACZ,OAAOA,aAAiBZ,GAAeY,EAAM,SAAW,IACpD3B,EAAS,IAAK,CAAE,MAAO,mBAAoB,CAAC,EAAIA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC7F,CACA,GAAI,CACF,IAAM2C,EAAQV,EAAI,EAClB,GAAI,CAAC,OAAO,SAASU,CAAK,EAAG,MAAM,IAAI,MAGvC,GAAI,EAFY,MAAM,QAAQ,IAAI,CAACR,EAAQ,GAAIC,IAAa,OAAY,CAAC,EAAI,CAACA,CAAQ,CAAE,EAAE,IAAKQ,GAC7FC,EAAoB,CAAE,OAAAD,EAAQ,QAASF,EAAM,QAASzB,EAAQ,QAAS,IAAK0B,CAAM,CAAC,CAAC,CAAC,GAC1E,KAAMG,GAAWA,EAAO,EAAE,EAAG,OAAO9C,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC1F,MAAQ,CAAE,OAAOA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAAG,CAE3D,IAAI+C,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAML,CAAI,CAAG,MAC5B,CAAE,OAAO1C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,CAAG,CAC5D,GAAI,CAAC+C,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAC/D,OAAO,KAAKA,CAAO,EAAE,SAAW,GAAK,CAAC,OAAO,OAAOA,EAAS,OAAO,GAAK,CAAC,OAAO,OAAOA,EAAS,KAAK,EACzG,OAAO/C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAM,CAAE,MAAOa,EAAM,IAAKmC,CAAG,EAAID,EACjC,GAAI,OAAOlC,GAAS,UAAY,CAAC,+BAA+B,KAAKA,CAAI,GACpE,OAAOmC,GAAO,UAAY,CAAC,qCAAqC,KAAKA,CAAE,EAC1E,OAAOhD,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAI,CAAC,OAAO,OAAOO,EAASM,CAAI,GAAK,uBAAuB,KAAKmC,CAAE,EACjE,OAAOhD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,EAExD,IAAMiD,EAAOrC,EAAQN,EAAO,CAAE,MAAOC,EAAQM,CAAI,EAAI,IAAK,CAACmC,CAAE,CAAE,CAAC,EAChE,GAAI,CACF,QAAWE,KAAOD,EAAME,EAAcD,EAAK,CAAE,OAAQ,CAAE,CAAC,CAC1D,MAAQ,CAAE,OAAOlD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,CAAG,CACnE,OAAOA,EAAS,IAAK,CAAE,YAAa,EAAK,CAAC,CAC5C,EACA,OAAO,OAAO,OAAO,CAAE,KAAMkC,EAAS,IAAKA,EAAS,KAAMA,EAAS,IAAKA,EAAS,MAAOA,EAAS,OAAQA,EAAS,QAASA,CAAQ,CAAC,CACtI",
-  "names": ["TYPE", "ID", "SCOPE", "dependenciesCopy", "dependencies", "types", "type", "ids", "id", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "cmsTags", "scope", "tags", "resolution", "value", "field", "warning", "createCmsReader", "options", "seconds", "adapter", "cmsTags", "notify", "event", "input", "readOptions", "query", "local", "tags", "defineCmsQuery", "fallback", "reason", "status", "warnings", "result", "resolved", "createNextCmsReader", "createCmsReader", "revalidateTag", "SANITY_SIGNATURE_HEADER", "SIGNATURE_VALUE", "encoder", "hmacKey", "secret", "base64UrlToBytes", "value", "padded", "binary", "bytes", "i", "verifySanityWebhook", "options", "rawBody", "headers", "now", "toleranceMs", "header", "SANITY_SIGNATURE_HEADER", "match", "SIGNATURE_VALUE", "timestamp", "provided", "signature", "key", "BODY_LIMIT", "BODY_DEADLINE_MS", "encoder", "response", "status", "value", "headers", "head", "copyMapping", "scope", "mapping", "copied", "key", "descriptor", "types", "cmsTags", "type", "validSecret", "BodyFailure", "rawBody", "request", "reader", "decoder", "timer", "deadline", "_resolve", "reject", "bytes", "text", "done", "error", "createRevalidateRoute", "options", "secretEnv", "previousSecretEnv", "env", "now", "handler", "active", "previous", "values", "activeValue", "previousValue", "signature", "SANITY_SIGNATURE_HEADER", "body", "clock", "secret", "verifySanityWebhook", "result", "payload", "id", "tags", "tag", "revalidateTag"]
+  "sources": ["../src/next.ts", "../src/portable/array.ts", "../src/portable/menu-options.ts", "../src/portable/menu.ts", "../src/portable/site-content.ts", "../src/contracts/query.ts", "../src/runtime/reader.ts", "../src/adapters/next/reader.ts", "../src/invalidation/route.ts", "../src/portable/webhook.ts"],
+  "sourcesContent": ["import \"server-only\";\nexport { createNextCmsReader } from \"./adapters/next/reader.js\";\nexport { createRevalidateRoute } from \"./invalidation/route.js\";\nexport type {\n  TypeToTags, RevalidateRouteOptions, CmsRouteHandler, CmsRevalidateRoute,\n} from \"./invalidation/route.js\";\nexport { MENU_LAYOUTS, MENU_DECORATIONS, MENU_LAYOUT_DEFAULTS, parseMenuDocument, menuTags } from \"./portable/menu.js\";\nexport { menuQuery } from \"./contracts/query.js\";\nexport type { MenuDocument, MenuVariant, MenuSection, MenuItem, MenuPrice, MenuExtra, MenuMoney, MenuLayout, MenuDecoration, MenuSectionInput } from \"./portable/menu.js\";\n", "/** Content lists must contain an own entry at every index. */\nexport function isDenseArray(value: unknown): value is unknown[] {\n  if (!Array.isArray(value)) return false;\n  for (let index = 0; index < value.length; index += 1) {\n    if (!Object.hasOwn(value, index)) return false;\n  }\n  return true;\n}\n", "export const MENU_LAYOUTS = [\"stacked\", \"columns\"] as const;\nexport const MENU_DECORATIONS = [\"none\", \"playful\"] as const;\nexport const MENU_LAYOUT_DEFAULTS = { layout: \"stacked\", decoration: \"none\" } as const;\n\n/** Explicit saved fields, shared by the standalone query and page dereference. */\nexport const MENU_DOCUMENT_PROJECTION = `_type, _id, _rev, _updatedAt, title, locationKeys, note, signOff,\n  variants[]{_key, label, note, sections[]{_key, title, service, items[]{\n    _key, name, description, priceNote, dietary, allergenNote, availability,\n    prices[]{_key, label, amount{minor, currency}}, extras[]{_key, name, amount{minor, currency}}\n  }}}`;\n\n", "import { isDenseArray } from \"./array.js\";\nimport { MalformedContentError } from \"./site-content.js\";\nimport { cmsTags } from \"../contracts/query.js\";\n\nimport { MENU_LAYOUTS, MENU_DECORATIONS } from \"./menu-options.js\";\nexport { MENU_LAYOUTS, MENU_DECORATIONS, MENU_LAYOUT_DEFAULTS } from \"./menu-options.js\";\nexport type MenuLayout = (typeof MENU_LAYOUTS)[number];\nexport type MenuDecoration = (typeof MENU_DECORATIONS)[number];\n\n/** CMS-owned saved shapes. `_key` remains the mapper's stable array identity. */\nexport type MenuMoney = { readonly minor: number; readonly currency: string };\nexport type MenuPrice = { readonly _key: string; readonly amount: MenuMoney; readonly label?: string };\nexport type MenuExtra = { readonly _key: string; readonly name: string; readonly amount: MenuMoney };\nexport type MenuItem = {\n  readonly _key: string; readonly name: string; readonly description?: string;\n  readonly prices: readonly MenuPrice[]; readonly priceNote?: string;\n  readonly extras: readonly MenuExtra[]; readonly dietary: readonly string[];\n  readonly allergenNote?: string; readonly availability: \"available\" | \"sold-out\" | \"hidden\";\n};\nexport type MenuSection = { readonly _key: string; readonly title: string; readonly service?: string; readonly items: readonly MenuItem[] };\nexport type MenuVariant = { readonly _key: string; readonly label: string; readonly note?: string; readonly sections: readonly MenuSection[] };\nexport type MenuDocument = {\n  /** The schema discriminator is required by the consuming site's mapper. */\n  readonly _type: \"menu\";\n  readonly _id: string; readonly _rev: string;\n  /** The real published update date, preserved verbatim for stale displays. */\n  readonly _updatedAt: string;\n  readonly title: string; readonly locationKeys: readonly string[];\n  readonly variants: readonly MenuVariant[]; readonly note?: string;\n  /** Approval is opaque to this reader. The site validates it with its contract. */\n  readonly signOff?: unknown;\n};\nexport type MenuSectionInput = { readonly kind: \"menu\"; readonly layout: MenuLayout; readonly decoration: MenuDecoration; readonly menu: MenuDocument };\n\n/** Uses the same scoped type/id tags as every other CMS query. */\nexport function menuTags(scope: string, id?: string): readonly string[] {\n  return cmsTags(scope, { types: [\"menu\"], ...(id === undefined ? {} : { ids: [id] }) });\n}\n\ntype Raw = Record<string, unknown>;\nfunction fail(path: string, reason: string): never {\n  throw new MalformedContentError(\"menu\", [`${path} ${reason}`]);\n}\n/** Capture each own data property once; never invoke an accessor or caller get trap. */\nfunction snapshot(value: unknown, path: string, ancestors = new Set<object>(), identity?: PropertyDescriptor): unknown {\n  if (value === null || typeof value === \"string\" || typeof value === \"boolean\") return value;\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  if (typeof value !== \"object\" || value === null) return fail(path, \"is not plain JSON data\");\n  try {\n    if (ancestors.has(value)) return fail(path, \"is not acyclic JSON data\");\n    const array = Array.isArray(value);\n    const prototype: unknown = Object.getPrototypeOf(value);\n    if (array ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null) {\n      return fail(path, \"is not an ordinary saved object\");\n    }\n    ancestors.add(value);\n    const keys = Reflect.ownKeys(value);\n    const copied: Record<string, unknown> | unknown[] = array ? [] : {};\n    let length = 0;\n    let entries = 0;\n    for (const key of keys) {\n      if (typeof key !== \"string\") return fail(path, \"has a symbol key\");\n      const at = array && key !== \"length\" ? `${path}[${key}]` : `${path}.${key}`;\n      let descriptor: PropertyDescriptor | undefined;\n      try { descriptor = key === \"_id\" && identity !== undefined ? identity : Object.getOwnPropertyDescriptor(value, key); }\n      catch { return fail(at, \"could not be snapshotted as plain JSON data\"); }\n      if (!descriptor || !Object.hasOwn(descriptor, \"value\")) return fail(at, \"is not a saved data property\");\n      if (array && key === \"length\") {\n        const savedLength: unknown = descriptor.value;\n        if (typeof savedLength !== \"number\" || !Number.isSafeInteger(savedLength) || savedLength < 0) return fail(at, \"is not a saved list length\");\n        length = savedLength;\n        continue;\n      }\n      if (!descriptor.enumerable || (array && !/^(0|[1-9]\\d*)$/.test(key))) return fail(at, \"is not a JSON data property\");\n      const saved: unknown = descriptor.value;\n      const entry = snapshot(saved, at, ancestors);\n      Object.defineProperty(copied, key, { value: entry, enumerable: true, writable: true, configurable: true });\n      entries++;\n    }\n    if (array && (entries !== length || (copied as unknown[]).length !== length)) return fail(path, \"is not a complete saved list\");\n    return copied;\n  } catch (error) {\n    if (error instanceof MalformedContentError) throw error;\n    return fail(path, \"could not be snapshotted as plain JSON data\");\n  } finally {\n    ancestors.delete(value);\n  }\n}\nfunction object(value: unknown, path: string): Raw {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)\n    || (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)) return fail(path, \"is not an ordinary saved object\");\n  return value as Raw;\n}\nfunction text(value: unknown, path: string, required = true): string {\n  if (typeof value !== \"string\" || (required && value.trim() === \"\")) return fail(path, \"is not saved text\");\n  return value;\n}\nfunction optional(raw: Raw, field: string, path: string): Record<string, string> {\n  return raw[field] === undefined || raw[field] === null ? {} : { [field]: text(raw[field], `${path}.${field}`, false) };\n}\nfunction list<T>(value: unknown, path: string, read: (value: unknown, path: string) => T): T[] {\n  if (value === undefined || value === null) return [];\n  if (!isDenseArray(value)) return fail(path, \"is not a complete saved list\");\n  return value.map((entry, index) => read(entry, `${path}[${String(index)}]`));\n}\nfunction money(value: unknown, path: string): MenuMoney {\n  const raw = object(value, path);\n  if (typeof raw.minor !== \"number\" || !Number.isSafeInteger(raw.minor) || raw.minor < 0) return fail(`${path}.minor`, \"is not a whole non-negative safe amount\");\n  const currency = text(raw.currency, `${path}.currency`);\n  if (!/^[A-Z]{3}$/.test(currency)) return fail(`${path}.currency`, \"is not a three-letter currency code\");\n  return { minor: raw.minor, currency };\n}\nfunction price(value: unknown, path: string): MenuPrice {\n  const raw = object(value, path);\n  return { _key: text(raw._key, `${path}._key`), amount: money(raw.amount, `${path}.amount`), ...optional(raw, \"label\", path) };\n}\nfunction extra(value: unknown, path: string): MenuExtra {\n  const raw = object(value, path);\n  return { _key: text(raw._key, `${path}._key`), name: text(raw.name, `${path}.name`), amount: money(raw.amount, `${path}.amount`) };\n}\nfunction item(value: unknown, path: string): MenuItem {\n  const raw = object(value, path);\n  const availability = raw.availability ?? \"available\";\n  if (availability !== \"available\" && availability !== \"sold-out\" && availability !== \"hidden\") return fail(`${path}.availability`, \"is not an availability choice\");\n  return {\n    _key: text(raw._key, `${path}._key`), name: text(raw.name, `${path}.name`),\n    ...optional(raw, \"description\", path), ...optional(raw, \"priceNote\", path), ...optional(raw, \"allergenNote\", path),\n    prices: list(raw.prices, `${path}.prices`, price), extras: list(raw.extras, `${path}.extras`, extra),\n    dietary: list(raw.dietary, `${path}.dietary`, text), availability,\n  };\n}\nfunction section(value: unknown, path: string): MenuSection {\n  const raw = object(value, path);\n  return { _key: text(raw._key, `${path}._key`), title: text(raw.title, `${path}.title`), ...optional(raw, \"service\", path), items: list(raw.items, `${path}.items`, item) };\n}\nfunction variant(value: unknown, path: string): MenuVariant {\n  const raw = object(value, path);\n  return { _key: text(raw._key, `${path}._key`), label: text(raw.label, `${path}.label`), ...optional(raw, \"note\", path), sections: list(raw.sections, `${path}.sections`, section) };\n}\n\n/** A reference has resolved only when it carries a published document identity. */\nfunction isPublishedMenuDocument(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false;\n  const id = (value as Raw)._id;\n  return typeof id === \"string\" && id.trim() !== \"\" && !/^(drafts|versions)\\./.test(id);\n}\n\n/** Validate saved field shapes without inferring approval or changing copy/order. */\nexport function parseMenuDocument(document: unknown, where = \"menu\"): MenuDocument {\n  return parseSnapshot(snapshot(document, where), where);\n}\n\n/** Page references use the same single snapshot before checking their identity. */\nexport function parseReferencedMenuDocument(document: unknown, where: string): MenuDocument | null {\n  if (document === undefined || document === null) return null;\n  if (typeof document !== \"object\") return null;\n  // Missing/draft references remain warnings. Cache the identity descriptor so\n  // an available document still contributes each caller property exactly once.\n  let identity: PropertyDescriptor | undefined;\n  try { identity = Object.getOwnPropertyDescriptor(document, \"_id\"); }\n  catch { return fail(`${where}._id`, \"could not be snapshotted as plain JSON data\"); }\n  if (identity && !Object.hasOwn(identity, \"value\")) return fail(`${where}._id`, \"is not a saved data property\");\n  const id: unknown = identity?.value;\n  if (typeof id !== \"string\" || id.trim() === \"\" || /^(drafts|versions)\\./.test(id)) return null;\n  return parseSnapshot(snapshot(document, where, new Set(), identity), where);\n}\n\nfunction parseSnapshot(document: unknown, where: string): MenuDocument {\n  const raw = object(document, where);\n  if (raw._type !== \"menu\") return fail(`${where}._type`, \"is not menu\");\n  if (!isPublishedMenuDocument(raw)) return fail(`${where}._id`, \"is not a published menu identity\");\n  const updatedAt = text(raw._updatedAt, `${where}._updatedAt`);\n  if (!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$/.test(updatedAt) || !Number.isFinite(Date.parse(updatedAt))) return fail(`${where}._updatedAt`, \"is not an update date\");\n  const variants = list(raw.variants, `${where}.variants`, variant);\n  if (variants.length === 0) return fail(`${where}.variants`, \"has no menu choices\");\n  return {\n    _type: \"menu\", _id: text(raw._id, `${where}._id`), _rev: text(raw._rev, `${where}._rev`), _updatedAt: updatedAt,\n    title: text(raw.title, `${where}.title`), locationKeys: list(raw.locationKeys, `${where}.locationKeys`, text),\n    variants, ...optional(raw, \"note\", where), ...(Object.hasOwn(raw, \"signOff\") ? { signOff: raw.signOff } : {}),\n  };\n}\n\nexport function validMenuFallback(value: unknown): value is MenuDocument | null {\n  if (value === null) return true;\n  try { parseMenuDocument(value); return true; } catch { return false; }\n}\n", "/**\n * A-1713. The site content model, read: the home page, content pages and site\n * settings, validated on read and returned in the shape a site's page\n * composition consumes.\n *\n * ===========================================================================\n * READ ONLY, BY CONSTRUCTION\n * ===========================================================================\n *\n * A client site reads its content with a read-only token. All editing goes\n * through the studio's dashboard, which writes to Sanity; nothing on a client\n * site writes, and this module has no write path to call. It is handed a\n * `ContentClient` (a `query` function) and nothing else.\n *\n * ===========================================================================\n * VALIDATED ON READ, BECAUSE SANITY VALIDATION ONLY ADVISES\n * ===========================================================================\n *\n * The schema's rules warn an editor; they do not refuse a publish, and\n * anything writing over the API skips them entirely. So every document is\n * checked here again, and a malformed one is refused BY NAME\n * (`MalformedContentError`, code `malformed-content`) listing every problem\n * with its path, rather than rendered half-empty. A page that renders with a\n * missing headline and a page whose content is broken look identical to a\n * visitor; a build that fails naming `hero.headline` does not.\n *\n * Absent is not malformed: `null` from `home()` means nobody has created the\n * home page yet, and a site decides what to do about that.\n *\n * ===========================================================================\n * THE SHAPE IT RETURNS\n * ===========================================================================\n *\n * The INPUT shape of a site's composition schema (the reference build's\n * frontmatter): a copy value is a plain string for the client's own words\n * with no claim about their source, `{ text, copySource: \"captured\" }` for\n * words claimed verbatim from the capture (the site checks every such claim\n * against its capture evidence, so the claim must survive Sanity), and\n * `{ text, copySource: \"proposed\" }` for studio-written words awaiting\n * approval. All three round-trip exactly; a photo is its library slug; every key a block declares is\n * present, `null` where there is nothing. So a site validates this with the\n * same schema it validates its Markdown frontmatter with, and its components\n * never know where the content came from.\n *\n * Mapping from the generic model to the composition's names:\n *\n *   hero.headline / subline / lead      hero.heading / subline / intro\n *   hero.photos[0], [1]                 hero.image, hero.inset\n *   hero.primaryAction / secondary...   hero.cta / secondaryCta\n *   campaign (when shown)               the FIRST block, kind `campaign`, and\n *                                       the page body (`# title` + its text)\n *   featureStoriesBlock                 kind `feature_stories`\n *   surfaceCardBlock                    kind `cta`\n *   accentBandBlock                     kind `accent_band`\n *   locationsBlock                      kind `locations` (jumpLink \u2192 anchor)\n *\n * A content page's `sections[]` (A-1915) reads those four kinds plus\n * `text_media`, `faq`, `gallery` and `contact` into `PageContent.sections`,\n * with their named warnings in `PageContent.warnings`. `sections.ts` holds the\n * kinds, the A-1876 layout names and the warning codes.\n *\n * Two places the composition cannot carry a proposed marker: a `cta` block's\n * plain strings, and the campaign's title and body (which travel as Markdown).\n * There the text is returned plain and the line is still listed in\n * `proposedCopy`, which is the list a dashboard and a site both read for\n * approval. Nothing is dropped silently.\n */\n\nimport { parseReferencedMenuDocument } from \"./menu.js\";\nimport { MENU_DECORATIONS, MENU_DOCUMENT_PROJECTION, MENU_LAYOUT_DEFAULTS, MENU_LAYOUTS } from \"./menu-options.js\";\nimport { isDenseArray } from \"./array.js\";\nimport { defineCmsQuery, type CmsQuery, type CmsResolution } from \"../contracts/query.js\";\nimport { validHomeFallback, validPageFallback, validSettingsFallback } from \"./fallback.js\";\nimport {\n  HEADING_LIST_LAYOUTS, READER_GALLERY_PHOTO_LIMIT, READER_GALLERY_PHOTO_MIN, SECTION_LAYOUT_DEFAULTS, SECTION_WARNINGS,\n  SPLIT_LAYOUTS, STAGGER_ROW_LAYOUTS,\n  type FaqSectionInput, type PageSectionInput, type SectionImageInput, type SectionWarning,\n} from \"./sections.js\";\n\n// ---------------------------------------------------------------------------\n// Output types\n// ---------------------------------------------------------------------------\n\nexport type CopyInput = string | { readonly text: string; readonly copySource: \"captured\" | \"proposed\" };\nexport type ActionInput = { readonly label: CopyInput; readonly href: string };\n\nexport type HeroInput = {\n  readonly heading: CopyInput;\n  readonly subline: CopyInput | null;\n  readonly intro: CopyInput | null;\n  readonly image: string | null;\n  readonly inset: string | null;\n  readonly cta: ActionInput | null;\n  readonly secondaryCta: ActionInput | null;\n};\n\nexport type StoryInput = {\n  readonly heading: CopyInput;\n  readonly body: CopyInput;\n  readonly action: ActionInput;\n  readonly image: string | null;\n  readonly shape: \"wide\" | \"tall\" | \"round\" | \"free\";\n  readonly card: boolean;\n};\n\nexport type CompositionBlockInput =\n  | { readonly kind: \"campaign\"; readonly action: ActionInput | null; readonly images: readonly string[] }\n  | {\n      readonly kind: \"locations\";\n      readonly anchor: string | null;\n      readonly heading: CopyInput;\n      readonly tail: CopyInput | null;\n      readonly image: string | null;\n    }\n  | {\n      readonly kind: \"feature_stories\";\n      readonly heading: CopyInput;\n      readonly tail: CopyInput | null;\n      readonly items: readonly StoryInput[];\n    }\n  | {\n      readonly kind: \"accent_band\";\n      readonly heading: CopyInput;\n      readonly body: CopyInput;\n      readonly action: ActionInput | null;\n      readonly image: string | null;\n    }\n  | {\n      readonly kind: \"cta\";\n      readonly heading: string;\n      readonly body: string | null;\n      readonly link: { readonly label: string; readonly href: string };\n    };\n\nexport type CompositionInput = {\n  readonly intro: string | null;\n  readonly photo: string | null;\n  readonly hero: HeroInput | null;\n  readonly blocks: readonly CompositionBlockInput[];\n};\n\n/** One line of studio-written copy awaiting approval, and where it is in the document. */\nexport type ProposedCopy = { readonly where: string; readonly text: string };\n\nexport type CampaignState = \"shown\" | \"off\" | \"not-started\" | \"ended\" | \"none\";\n\nexport type HomeContent = {\n  readonly composition: CompositionInput;\n  /** The page body as Markdown: the campaign's title and text when it is shown, otherwise empty. */\n  readonly body: string;\n  readonly campaign: CampaignState;\n  readonly proposedCopy: readonly ProposedCopy[];\n};\n\nexport type PageContent = {\n  readonly slug: string;\n  readonly title: string;\n  readonly composition: CompositionInput;\n  readonly body: string;\n  readonly migrated: boolean;\n  readonly proposedCopy: readonly ProposedCopy[];\n  /**\n   * A-1915. Present only when the stored page has a `sections` list, so a page\n   * written before sections existed reads exactly as it did in 0.2.0.\n   */\n  readonly sections?: readonly PageSectionInput[];\n  /** A-1915. Present with `sections`: every named section warning, with its path. */\n  readonly warnings?: readonly SectionWarning[];\n};\n\nexport type SiteSettingsContent = {\n  readonly name: string;\n  readonly description: string | null;\n  readonly contact: { readonly email: string | null; readonly phone: string | null };\n  readonly social: readonly { readonly network: string; readonly url: string }[];\n};\n\n// ---------------------------------------------------------------------------\n// The refusal\n// ---------------------------------------------------------------------------\n\nexport const MALFORMED_CONTENT = \"malformed-content\";\n\nexport class MalformedContentError extends Error {\n  readonly code = MALFORMED_CONTENT;\n  readonly documentId: string;\n  readonly problems: readonly string[];\n\n  constructor(documentId: string, problems: readonly string[]) {\n    super(`${MALFORMED_CONTENT}: ${documentId}: ${problems.join(\"; \")}`);\n    this.name = \"MalformedContentError\";\n    this.documentId = documentId;\n    this.problems = problems;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// The rules restated\n// ---------------------------------------------------------------------------\n\n/*\n * Runtime-free rules shared with schema-base. The schema adapter imports these\n * objects; content-client compatibility tests pin the shared references.\n */\nexport const READER_PHOTO_SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nexport const READER_ACTION_HREF =\n  /^(?:\\/(?![/\\\\])[^\\s]*|#[a-z][a-z0-9]*(?:-[a-z0-9]+)*|mailto:[^\\s@]+@[^\\s@]+|tel:\\+?[0-9][0-9 ()-]*|https?:\\/\\/[^\\s/]+[^\\s]*)$/;\nexport const READER_JUMP_LINK = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;\nexport const READER_STORY_LAYOUTS = [\"wide\", \"tall\", \"round\", \"free\"] as const;\nexport const READER_HOME_PAGE_ID = \"homePage\";\nexport const READER_SITE_SETTINGS_ID = \"siteSettings\";\n\n// ---------------------------------------------------------------------------\n// A small path-aware reader\n// ---------------------------------------------------------------------------\n\ntype Raw = Record<string, unknown>;\n\nclass Reading {\n  readonly problems: string[] = [];\n  readonly proposed: ProposedCopy[] = [];\n\n  fail(path: string, message: string): null {\n    this.problems.push(`${path} ${message}`);\n    return null;\n  }\n\n  object(value: unknown, path: string): Raw | null {\n    if (typeof value === \"object\" && value !== null && !Array.isArray(value)) return value as Raw;\n    return this.fail(path, \"is not an object\");\n  }\n\n  dense(value: unknown[], path: string): boolean {\n    if (isDenseArray(value)) return true;\n    this.fail(path, \"contains missing entries\");\n    return false;\n  }\n\n  optionalString(value: unknown, path: string): string | null {\n    if (value === undefined || value === null) return null;\n    if (typeof value === \"string\") return value.trim() === \"\" ? null : value;\n    return this.fail(path, \"is not text\");\n  }\n\n  /** A copy value, or null when absent or empty. Records a proposed line. */\n  copy(value: unknown, path: string): CopyInput | null {\n    if (value === undefined || value === null) return null;\n    const raw = this.object(value, path);\n    if (raw === null) return null;\n    const text = raw[\"text\"];\n    const source = raw[\"copySource\"];\n    if (text !== undefined && typeof text !== \"string\") return this.fail(`${path}.text`, \"is not text\");\n    if (source !== undefined && source !== \"captured\" && source !== \"proposed\") {\n      return this.fail(`${path}.copySource`, `is ${JSON.stringify(source)}, not captured or proposed`);\n    }\n    if (typeof text !== \"string\" || text.trim() === \"\") return null;\n    if (source === \"proposed\") {\n      this.proposed.push({ where: path, text });\n      return { text, copySource: \"proposed\" };\n    }\n    if (source === \"captured\") return { text, copySource: \"captured\" };\n    return text;\n  }\n\n  requiredCopy(value: unknown, path: string): CopyInput | null {\n    const copy = this.copy(value, path);\n    if (copy === null && !this.problems.some((p) => p.startsWith(path))) this.fail(path, \"is missing its words\");\n    return copy;\n  }\n\n  photo(value: unknown, path: string): string | null {\n    if (value === undefined || value === null) return null;\n    if (typeof value === \"string\" && READER_PHOTO_SLUG.test(value)) return value;\n    return this.fail(path, `is ${JSON.stringify(value)}, not a photo library slug`);\n  }\n\n  photos(value: unknown, path: string, max: number): string[] {\n    if (value === undefined || value === null) return [];\n    if (!Array.isArray(value)) {\n      this.fail(path, \"is not a list of photos\");\n      return [];\n    }\n    if (!this.dense(value, path)) return [];\n    if (value.length > max) this.fail(path, `holds ${String(value.length)} photos; at most ${String(max)}`);\n    return value.map((entry, index) => this.photo(entry, `${path}[${String(index)}]`)).filter((p): p is string => p !== null);\n  }\n\n  action(value: unknown, path: string): ActionInput | null {\n    if (value === undefined || value === null) return null;\n    const raw = this.object(value, path);\n    if (raw === null) return null;\n    const label = this.requiredCopy(raw[\"label\"], `${path}.label`);\n    const href = raw[\"href\"];\n    if (typeof href !== \"string\" || !READER_ACTION_HREF.test(href)) {\n      return this.fail(`${path}.href`, `is ${JSON.stringify(href)}, not a site path, #jump-link, mailto:, tel: or web address`);\n    }\n    return label === null ? null : { label, href };\n  }\n\n  requiredAction(value: unknown, path: string): ActionInput | null {\n    if (value === undefined || value === null) return this.fail(path, \"is missing\");\n    return this.action(value, path);\n  }\n}\n\nfunction plain(copy: CopyInput): string {\n  return typeof copy === \"string\" ? copy : copy.text;\n}\n\n// ---------------------------------------------------------------------------\n// Portable Text to Markdown\n// ---------------------------------------------------------------------------\n\n/**\n * The narrow Portable Text `portableText` declares, back to Markdown: normal,\n * h2, h3 and quote blocks, bullet and numbered lists, bold, italic, code and\n * links. It is the inverse of the seed package's Markdown mapper, and the\n * round-trip test holds the two to each other.\n *\n * An uploaded image inside rich text is REFUSED, not dropped: nothing can\n * upload one yet (the dashboard slice decides how), so one arriving means\n * something wrote the document by hand, and a page silently missing a picture\n * is the failure this reader exists to prevent.\n */\nexport function portableTextToMarkdown(value: unknown): string {\n  const reading = new Reading();\n  const markdown = richTextToMarkdown(value, \"body\", reading);\n  if (reading.problems.length > 0) throw new MalformedContentError(\"body\", reading.problems);\n  return markdown;\n}\n\nfunction richTextToMarkdown(value: unknown, path: string, reading: Reading): string {\n  if (value === undefined || value === null) return \"\";\n  if (!Array.isArray(value)) {\n    reading.fail(path, \"is not rich text\");\n    return \"\";\n  }\n  if (!reading.dense(value, path)) return \"\";\n  const out: string[] = [];\n  let previousWasList = false;\n  value.forEach((member, index) => {\n    const at = `${path}[${String(index)}]`;\n    const block = reading.object(member, at);\n    if (block === null) return;\n    if (block[\"_type\"] !== \"block\") {\n      reading.fail(at, `is a ${JSON.stringify(block[\"_type\"])}; only text is supported in rich text so far`);\n      return;\n    }\n    const text = spansToMarkdown(block, at, reading);\n    const listItem = block[\"listItem\"];\n    const style = block[\"style\"] ?? \"normal\";\n    let line: string;\n    if (listItem === \"bullet\" || listItem === \"number\") {\n      const level = typeof block[\"level\"] === \"number\" && block[\"level\"] > 1 ? block[\"level\"] : 1;\n      line = `${\"  \".repeat(level - 1)}${listItem === \"bullet\" ? \"-\" : \"1.\"} ${text}`;\n    } else if (style === \"h2\") line = `## ${text}`;\n    else if (style === \"h3\") line = `### ${text}`;\n    else if (style === \"blockquote\") line = `> ${text}`;\n    else if (style === \"normal\") line = text;\n    else {\n      reading.fail(`${at}.style`, `is ${JSON.stringify(style)}, which the schema does not offer`);\n      return;\n    }\n    const isList = listItem === \"bullet\" || listItem === \"number\";\n    if (out.length > 0) out.push(isList && previousWasList ? \"\\n\" : \"\\n\\n\");\n    out.push(line);\n    previousWasList = isList;\n  });\n  return out.join(\"\");\n}\n\nconst DECORATORS: Record<string, string> = { strong: \"**\", em: \"*\", code: \"`\" };\n\nfunction spansToMarkdown(block: Raw, path: string, reading: Reading): string {\n  const links = new Map<string, string>();\n  const markDefs = Array.isArray(block[\"markDefs\"]) ? (block[\"markDefs\"] as unknown[]) : [];\n  if (!reading.dense(markDefs, `${path}.markDefs`)) return \"\";\n  for (const def of markDefs) {\n    const d = def as Raw;\n    if (d[\"_type\"] === \"link\" && typeof d[\"_key\"] === \"string\" && typeof d[\"href\"] === \"string\") links.set(d[\"_key\"], d[\"href\"]);\n  }\n  const children = Array.isArray(block[\"children\"]) ? (block[\"children\"] as unknown[]) : [];\n  if (!reading.dense(children, `${path}.children`)) return \"\";\n  return children\n    .map((child, index) => {\n      const span = child as Raw;\n      if (span[\"_type\"] !== \"span\" || typeof span[\"text\"] !== \"string\") {\n        reading.fail(`${path}.children[${String(index)}]`, \"is not a text span\");\n        return \"\";\n      }\n      let text = span[\"text\"];\n      const marks = Array.isArray(span[\"marks\"]) ? (span[\"marks\"] as unknown[]) : [];\n      if (!reading.dense(marks, `${path}.children[${String(index)}].marks`)) return \"\";\n      let href: string | null = null;\n      for (const mark of marks) {\n        if (typeof mark !== \"string\") continue;\n        const fence = DECORATORS[mark];\n        if (fence !== undefined) text = `${fence}${text}${fence}`;\n        else if (links.has(mark)) href = links.get(mark) ?? null;\n        else reading.fail(`${path}.children[${String(index)}].marks`, `names ${JSON.stringify(mark)}, which is neither a style nor a link`);\n      }\n      return href === null ? text : `[${text}](${href})`;\n    })\n    .join(\"\");\n}\n\n// ---------------------------------------------------------------------------\n// The home page\n// ---------------------------------------------------------------------------\n\n/** Whether a campaign is shown at `now`, and if not, why not. */\nexport function campaignState(campaign: unknown, now: Date): CampaignState {\n  if (typeof campaign !== \"object\" || campaign === null) return \"none\";\n  const c = campaign as Raw;\n  if (c[\"enabled\"] !== true) return \"off\";\n  const starts = typeof c[\"startsAt\"] === \"string\" ? Date.parse(c[\"startsAt\"]) : null;\n  const ends = typeof c[\"endsAt\"] === \"string\" ? Date.parse(c[\"endsAt\"]) : null;\n  if (starts !== null && now.getTime() < starts) return \"not-started\";\n  if (ends !== null && now.getTime() >= ends) return \"ended\";\n  return \"shown\";\n}\n\nfunction keyed(path: string, raw: Raw, index: number): string {\n  return typeof raw[\"_key\"] === \"string\" ? `${path}[_key==\"${raw[\"_key\"]}\"]` : `${path}[${String(index)}]`;\n}\n\n/**\n * A stored home page document, validated and mapped. Throws\n * `MalformedContentError` naming every problem. `now` decides whether a\n * scheduled campaign is shown, and is a parameter so a build, a preview and a\n * test each say which moment they mean.\n */\nexport function parseHomePage(document: unknown, options: { readonly now: Date }): HomeContent {\n  const reading = new Reading();\n  const doc = reading.object(document, \"homePage\");\n  if (doc === null) throw new MalformedContentError(READER_HOME_PAGE_ID, reading.problems);\n  const id = typeof doc[\"_id\"] === \"string\" ? doc[\"_id\"] : READER_HOME_PAGE_ID;\n  if (doc[\"_type\"] !== \"homePage\") reading.fail(\"_type\", `is ${JSON.stringify(doc[\"_type\"])}, not homePage`);\n\n  let hero: HeroInput | null = null;\n  const rawHero = doc[\"hero\"] === undefined ? reading.fail(\"hero\", \"is missing\") : reading.object(doc[\"hero\"], \"hero\");\n  if (rawHero !== null) {\n    const photos = reading.photos(rawHero[\"photos\"], \"hero.photos\", 2);\n    const heading = reading.requiredCopy(rawHero[\"headline\"], \"hero.headline\");\n    const subline = reading.copy(rawHero[\"subline\"], \"hero.subline\");\n    const intro = reading.copy(rawHero[\"lead\"], \"hero.lead\");\n    const cta = reading.action(rawHero[\"primaryAction\"], \"hero.primaryAction\");\n    const secondaryCta = reading.action(rawHero[\"secondaryAction\"], \"hero.secondaryAction\");\n    if (heading !== null) {\n      hero = { heading, subline, intro, image: photos[0] ?? null, inset: photos[1] ?? null, cta, secondaryCta };\n    }\n  }\n\n  const blocks: CompositionBlockInput[] = [];\n  const blockJumps: { where: string; href: string }[] = [];\n  let body = \"\";\n  const state = campaignState(doc[\"campaign\"], options.now);\n  if (state === \"shown\") {\n    const campaign = reading.object(doc[\"campaign\"], \"campaign\");\n    if (campaign !== null) {\n      const title = reading.requiredCopy(campaign[\"title\"], \"campaign.title\");\n      const images = reading.photos(campaign[\"photos\"], \"campaign.photos\", 3);\n      if (images.length === 0) reading.fail(\"campaign.photos\", \"is empty; a shown campaign needs at least one photo\");\n      const text = richTextToMarkdown(campaign[\"body\"], \"campaign.body\", reading);\n      if (text === \"\") reading.fail(\"campaign.body\", \"is empty; a shown campaign needs its text\");\n      if (campaign[\"bodyCopySource\"] === \"proposed\") reading.proposed.push({ where: \"campaign.body\", text });\n      const action = reading.action(campaign[\"action\"], \"campaign.action\");\n      if (action !== null) blockJumps.push({ where: \"campaign.action.href\", href: action.href });\n      if (title !== null) body = `# ${plain(title)}\\n\\n${text}`;\n      blocks.push({ kind: \"campaign\", action, images });\n    }\n  }\n\n  const anchors: string[] = [];\n  const rawBlocks = doc[\"blocks\"] ?? [];\n  if (!Array.isArray(rawBlocks)) reading.fail(\"blocks\", \"is not a list\");\n  else if (reading.dense(rawBlocks, \"blocks\")) {\n    rawBlocks.forEach((member, index) => {\n      const raw = reading.object(member, `blocks[${String(index)}]`);\n      if (raw === null) return;\n      const at = keyed(\"blocks\", raw, index);\n      const mapped = mapBlock(raw, at, reading);\n      if (mapped === null) return;\n      blockJumps.push(...buttonsOf(mapped, raw, at));\n      if (mapped.kind === \"locations\" && mapped.anchor !== null) {\n        if (anchors.includes(mapped.anchor)) reading.fail(`${at}.jumpLink`, `repeats \"${mapped.anchor}\", already used by another section`);\n        anchors.push(mapped.anchor);\n      }\n      blocks.push(mapped);\n    });\n  }\n\n  // A jump link on ANY button must land on a section of this page.\n  const jumps: { where: string; href: string }[] = [];\n  if (hero?.cta) jumps.push({ where: \"hero.primaryAction.href\", href: hero.cta.href });\n  if (hero?.secondaryCta) jumps.push({ where: \"hero.secondaryAction.href\", href: hero.secondaryCta.href });\n  jumps.push(...blockJumps);\n  for (const { where, href } of jumps) {\n    if (href.startsWith(\"#\") && !anchors.includes(href.slice(1))) {\n      reading.fail(where, `jumps to ${href}, which no section on the page is named`);\n    }\n  }\n\n  if (reading.problems.length > 0) throw new MalformedContentError(id, reading.problems);\n  return {\n    composition: { intro: null, photo: null, hero, blocks },\n    body,\n    campaign: state,\n    proposedCopy: reading.proposed,\n  };\n}\n\n/** Every button a mapped section carries, with its path in the stored document. */\nfunction buttonsOf(block: CompositionBlockInput, raw: Raw, at: string): { where: string; href: string }[] {\n  switch (block.kind) {\n    case \"feature_stories\": {\n      const stories = Array.isArray(raw[\"stories\"]) ? (raw[\"stories\"] as Raw[]) : [];\n      return block.items.map((item, index) => ({\n        where: `${keyed(`${at}.stories`, stories[index] ?? {}, index)}.action.href`,\n        href: item.action.href,\n      }));\n    }\n    case \"accent_band\":\n      return block.action === null ? [] : [{ where: `${at}.action.href`, href: block.action.href }];\n    case \"cta\":\n      return [{ where: `${at}.action.href`, href: block.link.href }];\n    default:\n      return [];\n  }\n}\n\nfunction jumpLinkOf(raw: Raw, at: string, reading: Reading): string | null {\n  const jump = raw[\"jumpLink\"];\n  if (jump === undefined || jump === null || jump === \"\") return null;\n  if (typeof jump !== \"string\" || !READER_JUMP_LINK.test(jump)) return reading.fail(`${at}.jumpLink`, `is ${JSON.stringify(jump)}, not lowercase words joined by hyphens`);\n  return jump;\n}\n\nfunction mapBlock(raw: Raw, at: string, reading: Reading): CompositionBlockInput | null {\n  switch (raw[\"_type\"]) {\n    case \"featureStoriesBlock\": {\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const tail = reading.copy(raw[\"tail\"], `${at}.tail`);\n      const stories = raw[\"stories\"];\n      if (!Array.isArray(stories) || stories.length === 0) return reading.fail(`${at}.stories`, \"has no stories\");\n      if (!reading.dense(stories, `${at}.stories`)) return null;\n      const items: StoryInput[] = [];\n      stories.forEach((member, index) => {\n        const story = reading.object(member, `${at}.stories[${String(index)}]`);\n        if (story === null) return;\n        const sat = keyed(`${at}.stories`, story, index);\n        const sHeading = reading.requiredCopy(story[\"heading\"], `${sat}.heading`);\n        const sBody = reading.requiredCopy(story[\"body\"], `${sat}.body`);\n        const action = reading.requiredAction(story[\"action\"], `${sat}.action`);\n        const image = reading.photo(story[\"photo\"], `${sat}.photo`);\n        const layout = story[\"layout\"] ?? \"wide\";\n        if (!(READER_STORY_LAYOUTS as readonly unknown[]).includes(layout)) {\n          reading.fail(`${sat}.layout`, `is ${JSON.stringify(layout)}, not wide, tall, round or free`);\n          return;\n        }\n        const onCard = story[\"onCard\"] ?? false;\n        if (typeof onCard !== \"boolean\") {\n          reading.fail(`${sat}.onCard`, \"is not on or off\");\n          return;\n        }\n        if (sHeading === null || sBody === null || action === null) return;\n        items.push({ heading: sHeading, body: sBody, action, image, shape: layout as StoryInput[\"shape\"], card: onCard });\n      });\n      return heading === null ? null : { kind: \"feature_stories\", heading, tail, items };\n    }\n    case \"surfaceCardBlock\": {\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const body = reading.copy(raw[\"body\"], `${at}.body`);\n      const action = reading.requiredAction(raw[\"action\"], `${at}.action`);\n      if (heading === null || action === null) return null;\n      return {\n        kind: \"cta\",\n        heading: plain(heading),\n        body: body === null ? null : plain(body),\n        link: { label: plain(action.label), href: action.href },\n      };\n    }\n    case \"accentBandBlock\": {\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const body = reading.requiredCopy(raw[\"body\"], `${at}.body`);\n      const action = reading.action(raw[\"action\"], `${at}.action`);\n      const image = reading.photo(raw[\"photo\"], `${at}.photo`);\n      if (heading === null || body === null) return null;\n      return { kind: \"accent_band\", heading, body, action, image };\n    }\n    case \"locationsBlock\": {\n      const anchor = jumpLinkOf(raw, at, reading);\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const tail = reading.copy(raw[\"tail\"], `${at}.tail`);\n      const image = reading.photo(raw[\"photo\"], `${at}.photo`);\n      return heading === null ? null : { kind: \"locations\", anchor, heading, tail, image };\n    }\n    default:\n      return reading.fail(`${at}._type`, `is ${JSON.stringify(raw[\"_type\"])}, not a section type this reader knows`);\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Page sections (A-1915)\n// ---------------------------------------------------------------------------\n\n/** A stored `layout`, or the composition default with a named warning. Never throws. */\nfunction sectionLayout<T extends string>(raw: Raw, at: string, layouts: readonly T[], fallback: T, warnings: SectionWarning[]): T {\n  const value = raw[\"layout\"];\n  const layout = layouts.find((name) => name === value);\n  if (layout !== undefined) return layout;\n  warnings.push({ code: SECTION_WARNINGS.layoutDefaulted, where: `${at}.layout` });\n  return fallback;\n}\n\n/** An `imageWithHotspot`, or null. Without alt text or an asset it is dropped with a named warning. */\nfunction sectionImage(value: unknown, path: string, reading: Reading, warnings: SectionWarning[]): SectionImageInput | null {\n  if (value === undefined || value === null) return null;\n  const raw = reading.object(value, path);\n  if (raw === null) return null;\n  const asset = raw[\"asset\"];\n  const ref = typeof asset === \"object\" && asset !== null ? (asset as Raw)[\"_ref\"] : undefined;\n  if (typeof ref !== \"string\" || ref === \"\") {\n    warnings.push({ code: SECTION_WARNINGS.imageMissingAsset, where: `${path}.asset` });\n    return null;\n  }\n  const alt = raw[\"alt\"];\n  if (typeof alt !== \"string\" || alt.trim() === \"\") {\n    warnings.push({ code: SECTION_WARNINGS.imageMissingAlt, where: `${path}.alt` });\n    return null;\n  }\n  const caption = reading.optionalString(raw[\"caption\"], `${path}.caption`);\n  let hotspot: SectionImageInput[\"hotspot\"] = null;\n  if (raw[\"hotspot\"] !== undefined && raw[\"hotspot\"] !== null) {\n    const spot = reading.object(raw[\"hotspot\"], `${path}.hotspot`);\n    const x = spot?.[\"x\"];\n    const y = spot?.[\"y\"];\n    if (typeof x === \"number\" && typeof y === \"number\" && x >= 0 && x <= 1 && y >= 0 && y <= 1) hotspot = { x, y };\n    else if (spot !== null) reading.fail(`${path}.hotspot`, \"is not a point inside the image\");\n  }\n  return { asset: ref, alt, caption, hotspot };\n}\n\n/** Only a bounded schema name may travel in a warning; never coerce non-text values. */\nfunction sectionTypeForWarning(value: unknown): string {\n  return typeof value === \"string\" ? value.slice(0, 64).replace(/[^A-Za-z0-9_.-]/g, \"?\") : \"?\";\n}\n\nfunction mapSection(raw: Raw, at: string, reading: Reading, warnings: SectionWarning[]): PageSectionInput | null {\n  switch (raw[\"_type\"]) {\n    case \"menuBlock\": {\n      const menu = parseReferencedMenuDocument(raw[\"menu\"], `${at}.menu`);\n      if (menu === null) {\n        warnings.push({ code: SECTION_WARNINGS.menuUnavailable, where: `${at}.menu` });\n        return null;\n      }\n      const layout = sectionLayout(raw, at, MENU_LAYOUTS, MENU_LAYOUT_DEFAULTS.layout, warnings);\n      const decoration = MENU_DECORATIONS.find((name) => name === raw[\"decoration\"]);\n      if (decoration === undefined) warnings.push({ code: SECTION_WARNINGS.layoutDefaulted, where: `${at}.decoration` });\n      return { kind: \"menu\", menu, layout, decoration: decoration ?? MENU_LAYOUT_DEFAULTS.decoration };\n    }\n    case \"featureStoriesBlock\":\n    case \"surfaceCardBlock\":\n    case \"accentBandBlock\":\n    case \"locationsBlock\": {\n      const block = mapBlock(raw, at, reading);\n      return block === null || block.kind === \"campaign\" ? null : block;\n    }\n    case \"textMediaBlock\": {\n      const anchor = jumpLinkOf(raw, at, reading);\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const tail = reading.copy(raw[\"tail\"], `${at}.tail`);\n      const body = reading.requiredCopy(raw[\"body\"], `${at}.body`);\n      const action = reading.action(raw[\"action\"], `${at}.action`);\n      const image = sectionImage(raw[\"photo\"], `${at}.photo`, reading, warnings);\n      const layout = sectionLayout(raw, at, SPLIT_LAYOUTS, SECTION_LAYOUT_DEFAULTS.Split, warnings);\n      if (heading === null || body === null) return null;\n      return { kind: \"text_media\", anchor, layout, heading, tail, body, action, image };\n    }\n    case \"faqBlock\": {\n      const anchor = jumpLinkOf(raw, at, reading);\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const tail = reading.copy(raw[\"tail\"], `${at}.tail`);\n      const intro = reading.copy(raw[\"intro\"], `${at}.intro`);\n      const layout = sectionLayout(raw, at, HEADING_LIST_LAYOUTS, SECTION_LAYOUT_DEFAULTS.HeadingList, warnings);\n      const rawItems = raw[\"items\"];\n      if (!Array.isArray(rawItems) || rawItems.length === 0) return reading.fail(`${at}.items`, \"has no questions\");\n      if (!reading.dense(rawItems, `${at}.items`)) return null;\n      const items: FaqSectionInput[\"items\"][number][] = [];\n      rawItems.forEach((member, index) => {\n        const item = reading.object(member, `${at}.items[${String(index)}]`);\n        if (item === null) return;\n        const iat = keyed(`${at}.items`, item, index);\n        if (item[\"_type\"] !== undefined && item[\"_type\"] !== \"faqItem\") {\n          reading.fail(`${iat}._type`, `is ${JSON.stringify(item[\"_type\"])}, not faqItem`);\n          return;\n        }\n        const question = reading.requiredCopy(item[\"question\"], `${iat}.question`);\n        const answer = reading.requiredCopy(item[\"answer\"], `${iat}.answer`);\n        if (question !== null && answer !== null) items.push({ question, answer });\n      });\n      return heading === null ? null : { kind: \"faq\", anchor, layout, heading, tail, intro, items };\n    }\n    case \"galleryBlock\": {\n      const anchor = jumpLinkOf(raw, at, reading);\n      const heading = reading.copy(raw[\"heading\"], `${at}.heading`);\n      const layout = sectionLayout(raw, at, STAGGER_ROW_LAYOUTS, SECTION_LAYOUT_DEFAULTS.StaggerRow, warnings);\n      const photos = raw[\"photos\"] ?? [];\n      if (!Array.isArray(photos)) return reading.fail(`${at}.photos`, \"is not a list of photos\");\n      if (!reading.dense(photos, `${at}.photos`)) return null;\n      if (photos.length < READER_GALLERY_PHOTO_MIN || photos.length > READER_GALLERY_PHOTO_LIMIT) {\n        return reading.fail(`${at}.photos`, `holds ${String(photos.length)} photos; a gallery shows ${String(READER_GALLERY_PHOTO_MIN)} to ${String(READER_GALLERY_PHOTO_LIMIT)}`);\n      }\n      const images = photos.flatMap((photo, index) => {\n        const image = sectionImage(photo, keyed(`${at}.photos`, typeof photo === \"object\" && photo !== null ? (photo as Raw) : {}, index), reading, warnings);\n        return image === null ? [] : [image];\n      });\n      if (images.length === 0) {\n        warnings.push({ code: SECTION_WARNINGS.emptySkipped, where: at });\n        return null;\n      }\n      return { kind: \"gallery\", anchor, layout, heading, images };\n    }\n    case \"contactBlock\": {\n      const anchor = jumpLinkOf(raw, at, reading);\n      const heading = reading.requiredCopy(raw[\"heading\"], `${at}.heading`);\n      const body = reading.copy(raw[\"body\"], `${at}.body`);\n      const shown = (field: \"showEmail\" | \"showPhone\"): boolean => {\n        const value = raw[field] ?? true;\n        if (typeof value === \"boolean\") return value;\n        reading.fail(`${at}.${field}`, \"is not on or off\");\n        return false;\n      };\n      const showEmail = shown(\"showEmail\");\n      const showPhone = shown(\"showPhone\");\n      const action = reading.action(raw[\"action\"], `${at}.action`);\n      const image = sectionImage(raw[\"photo\"], `${at}.photo`, reading, warnings);\n      const layout = sectionLayout(raw, at, SPLIT_LAYOUTS, SECTION_LAYOUT_DEFAULTS.Split, warnings);\n      if (heading === null) return null;\n      if (!showEmail && !showPhone && body === null && action === null) {\n        warnings.push({ code: SECTION_WARNINGS.emptySkipped, where: at });\n        return null;\n      }\n      return { kind: \"contact\", anchor, layout, heading, body, showEmail, showPhone, action, image };\n    }\n    default:\n      warnings.push({ code: SECTION_WARNINGS.unknownType, where: `${at}._type`, type: sectionTypeForWarning(raw[\"_type\"]) });\n      return null;\n  }\n}\n\n/** Every button a mapped page section carries, with its path in the stored document. */\nfunction sectionButtons(section: PageSectionInput, raw: Raw, at: string): { where: string; href: string }[] {\n  switch (section.kind) {\n    case \"text_media\":\n    case \"contact\":\n      return section.action === null ? [] : [{ where: `${at}.action.href`, href: section.action.href }];\n    case \"menu\":\n    case \"faq\":\n    case \"gallery\":\n      return [];\n    default:\n      return buttonsOf(section, raw, at);\n  }\n}\n\n/** `page.sections[]`, mapped in order. Unknown types are skipped with a warning; malformed content is a problem. */\nfunction parseSections(value: unknown, reading: Reading): { sections: PageSectionInput[]; warnings: SectionWarning[] } {\n  const sections: PageSectionInput[] = [];\n  const warnings: SectionWarning[] = [];\n  if (!Array.isArray(value)) {\n    reading.fail(\"sections\", \"is not a list\");\n    return { sections, warnings };\n  }\n  if (!reading.dense(value, \"sections\")) return { sections, warnings };\n  const anchors: string[] = [];\n  const jumps: { where: string; href: string }[] = [];\n  value.forEach((member, index) => {\n    const raw = reading.object(member, `sections[${String(index)}]`);\n    if (raw === null) return;\n    const at = keyed(\"sections\", raw, index);\n    const section = mapSection(raw, at, reading, warnings);\n    if (section === null) return;\n    jumps.push(...sectionButtons(section, raw, at));\n    const anchor = \"anchor\" in section ? section.anchor : null;\n    if (anchor !== null) {\n      if (anchors.includes(anchor)) reading.fail(`${at}.jumpLink`, `repeats \"${anchor}\", already used by another section`);\n      anchors.push(anchor);\n    }\n    sections.push(section);\n  });\n  for (const { where, href } of jumps) {\n    if (href.startsWith(\"#\") && !anchors.includes(href.slice(1))) reading.fail(where, `jumps to ${href}, which no section on the page is named`);\n  }\n  return { sections, warnings };\n}\n\n// ---------------------------------------------------------------------------\n// Content pages and settings\n// ---------------------------------------------------------------------------\n\nexport function parseContentPage(document: unknown): PageContent {\n  const reading = new Reading();\n  const doc = reading.object(document, \"page\");\n  if (doc === null) throw new MalformedContentError(\"page\", reading.problems);\n  const id = typeof doc[\"_id\"] === \"string\" ? doc[\"_id\"] : \"page\";\n  if (doc[\"_type\"] !== \"page\") reading.fail(\"_type\", `is ${JSON.stringify(doc[\"_type\"])}, not page`);\n  const title = reading.optionalString(doc[\"title\"], \"title\");\n  if (title === null) reading.fail(\"title\", \"is missing\");\n  if (doc[\"titleCopySource\"] === \"proposed\" && title !== null) reading.proposed.push({ where: \"title\", text: title });\n  const slugObject = doc[\"slug\"] as Raw | undefined;\n  const slug = typeof slugObject?.[\"current\"] === \"string\" && slugObject[\"current\"] !== \"\" ? slugObject[\"current\"] : null;\n  if (slug === null) reading.fail(\"slug.current\", \"is missing\");\n  const lead = reading.copy(doc[\"lead\"], \"lead\");\n  const photo = reading.photo(doc[\"photo\"], \"photo\");\n  const body = richTextToMarkdown(doc[\"body\"], \"body\", reading);\n  if (doc[\"bodyCopySource\"] === \"proposed\") reading.proposed.push({ where: \"body\", text: body });\n  const sections = doc[\"sections\"] === undefined || doc[\"sections\"] === null ? null : parseSections(doc[\"sections\"], reading);\n  if (reading.problems.length > 0 || title === null || slug === null) throw new MalformedContentError(id, reading.problems);\n  return {\n    slug,\n    title,\n    composition: { intro: lead === null ? null : plain(lead), photo, hero: null, blocks: [] },\n    body,\n    migrated: doc[\"migrated\"] === true,\n    proposedCopy: reading.proposed,\n    ...(sections === null ? {} : sections),\n  };\n}\n\nexport function parseSiteSettings(document: unknown): SiteSettingsContent {\n  const reading = new Reading();\n  const doc = reading.object(document, \"siteSettings\");\n  if (doc === null) throw new MalformedContentError(READER_SITE_SETTINGS_ID, reading.problems);\n  const name = reading.optionalString(doc[\"title\"], \"title\");\n  if (name === null) reading.fail(\"title\", \"is missing; a site needs its name\");\n  const description = reading.optionalString(doc[\"description\"], \"description\");\n  const contact = doc[\"contact\"] === undefined ? {} : (reading.object(doc[\"contact\"], \"contact\") ?? {});\n  const email = reading.optionalString(contact[\"email\"], \"contact.email\");\n  const phone = reading.optionalString(contact[\"phone\"], \"contact.phone\");\n  const social: { network: string; url: string }[] = [];\n  const rawSocial = doc[\"social\"] ?? [];\n  if (!Array.isArray(rawSocial)) reading.fail(\"social\", \"is not a list\");\n  else if (reading.dense(rawSocial, \"social\"))\n    rawSocial.forEach((member, index) => {\n      const link = reading.object(member, `social[${String(index)}]`);\n      if (link === null) return;\n      const network = reading.optionalString(link[\"network\"], `social[${String(index)}].network`);\n      const url = reading.optionalString(link[\"url\"], `social[${String(index)}].url`);\n      if (network === null || url === null || !/^https?:\\/\\//.test(url)) {\n        reading.fail(`social[${String(index)}]`, \"needs a network and a web address\");\n        return;\n      }\n      social.push({ network, url });\n    });\n  if (reading.problems.length > 0 || name === null) throw new MalformedContentError(READER_SITE_SETTINGS_ID, reading.problems);\n  return { name, description, contact: { email, phone }, social };\n}\n\n// ---------------------------------------------------------------------------\n// Queries\n// ---------------------------------------------------------------------------\n\n/** By fixed id: a second home page at a random id is never read. */\nexport const HOME_PAGE_DOCUMENT_QUERY = `*[_id == $id][0]`;\nconst MENU_PAGE_PROJECTION = `{..., \"sections\": coalesce(sections[]{..., _type == \"menuBlock\" => {menu->{${MENU_DOCUMENT_PROJECTION}}}}, sections)}`;\nexport const CONTENT_PAGES_QUERY = `*[_type == \"page\" && defined(slug.current)]|order(slug.current asc)${MENU_PAGE_PROJECTION}`;\nexport const CONTENT_PAGE_BY_SLUG_QUERY = `*[_type == \"page\" && slug.current == $slug][0]${MENU_PAGE_PROJECTION}`;\n\nexport interface SiteContentReader {\n  /** `null` when no home page document exists yet. */\n  home: (options: { readonly now: Date }) => Promise<HomeContent | null>;\n  pages: () => Promise<PageContent[]>;\n  /** `null` when no page has that slug. */\n  pageBySlug: (slug: string) => Promise<PageContent | null>;\n  /** `null` before anyone has filled in the site's details. */\n  siteSettings: () => Promise<SiteSettingsContent | null>;\n}\n\nexport function createSiteContentReader(client: { query: <T>(groq: string, options?: { params?: Record<string, unknown>; tags?: readonly string[] }) => Promise<T> }): SiteContentReader {\n  return {\n    home: async ({ now }) => {\n      const doc = await client.query<unknown>(HOME_PAGE_DOCUMENT_QUERY, { params: { id: READER_HOME_PAGE_ID } });\n      return doc === null || doc === undefined ? null : parseHomePage(doc, { now });\n    },\n    pages: async () => {\n      const docs = await client.query<unknown>(CONTENT_PAGES_QUERY);\n      if (!Array.isArray(docs)) throw new MalformedContentError(\"page\", [\"the page query did not return a list\"]);\n      if (!isDenseArray(docs)) throw new MalformedContentError(\"page\", [\"the page query contains missing entries\"]);\n      return docs.map((doc) => parseContentPage(doc));\n    },\n    pageBySlug: async (slug) => {\n      const doc = await client.query<unknown>(CONTENT_PAGE_BY_SLUG_QUERY, { params: { slug } });\n      return doc === null || doc === undefined ? null : parseContentPage(doc);\n    },\n    siteSettings: async () => {\n      const doc = await client.query<unknown>(HOME_PAGE_DOCUMENT_QUERY, { params: { id: READER_SITE_SETTINGS_ID } });\n      return doc === null || doc === undefined ? null : parseSiteSettings(doc);\n    },\n  };\n}\n\nfunction atomic<T>(raw: unknown, fallback: T, parse: (value: unknown) => T, validFallback: (value: unknown) => boolean): CmsResolution<T> {\n  if (!validFallback(fallback)) throw new TypeError(\"Invalid CMS content fallback\");\n  if (raw === null || raw === undefined) return { data: fallback, fallbackFields: [\"$\"] };\n  // The server reader catches parser errors and classifies the whole fallback\n  // as malformed. Returning fallback here would lose that diagnostic reason.\n  return { data: parse(raw), fallbackFields: [] };\n}\n\nexport function homeContentQuery(now: Date): CmsQuery<HomeContent | null> {\n  if (!(now instanceof Date) || !Number.isFinite(now.getTime())) throw new TypeError(\"Invalid CMS campaign date\");\n  const captured = now.getTime();\n  return defineCmsQuery({\n    name: \"homePage.v1\", query: HOME_PAGE_DOCUMENT_QUERY, params: { id: READER_HOME_PAGE_ID },\n    dependencies: { types: [\"homePage\"], ids: [READER_HOME_PAGE_ID] },\n    resolve: (raw, fallback) => atomic(raw, fallback, (value) => parseHomePage(value, { now: new Date(captured) }), validHomeFallback),\n  });\n}\n\nexport function contentPageQuery(slug: string): CmsQuery<PageContent | null> {\n  if (typeof slug !== \"string\" || slug === \"\") throw new TypeError(\"Invalid CMS page slug\");\n  return defineCmsQuery({\n    name: \"page.v1\", query: CONTENT_PAGE_BY_SLUG_QUERY, params: { slug }, dependencies: { types: [\"page\", \"menu\"] },\n    resolve: (raw, fallback) => atomic(raw, fallback, parseContentPage, validPageFallback),\n  });\n}\n\nexport function contentPagesQuery(): CmsQuery<readonly PageContent[]> {\n  return defineCmsQuery({\n    name: \"pages.v1\", query: CONTENT_PAGES_QUERY, params: {}, dependencies: { types: [\"page\", \"menu\"] },\n    resolve: (raw, fallback) => atomic(raw, fallback, (value) => {\n      if (!Array.isArray(value)) throw new MalformedContentError(\"page\", [\"the page query did not return a list\"]);\n      if (!isDenseArray(value)) throw new MalformedContentError(\"page\", [\"the page query contains missing entries\"]);\n      return value.map((document: unknown) => parseContentPage(document));\n    }, (value) => isDenseArray(value) && value.every((page: unknown) => page !== null && validPageFallback(page))),\n  });\n}\n\nexport function siteSettingsQuery(): CmsQuery<SiteSettingsContent | null> {\n  return defineCmsQuery({\n    name: \"siteSettings.v1\", query: HOME_PAGE_DOCUMENT_QUERY, params: { id: READER_SITE_SETTINGS_ID },\n    dependencies: { types: [\"siteSettings\"], ids: [READER_SITE_SETTINGS_ID] },\n    resolve: (raw, fallback) => atomic(raw, fallback, parseSiteSettings, validSettingsFallback),\n  });\n}\n", "import { MalformedContentError } from \"../portable/site-content.js\";\nimport { MENU_DOCUMENT_PROJECTION } from \"../portable/menu-options.js\";\nimport { parseMenuDocument, validMenuFallback, type MenuDocument } from \"../portable/menu.js\";\n\n/** A-1822 S1 owns this implementation. S0 registers the public signatures. */\nexport type CmsParams = Readonly<Record<string, string | number | boolean | null>>;\nexport type CmsDependencies = {\n  readonly types: readonly string[];\n  readonly ids?: readonly string[];\n};\nexport type CmsResolution<T> = {\n  readonly data: T;\n  readonly fallbackFields: readonly string[];\n  readonly warnings?: readonly (\"siteHero.layout.defaulted\" | \"siteHero.tagline.dropped\" | \"siteHero.taglines.defaulted\")[];\n};\nexport type CmsQuery<T> = {\n  readonly name: string;\n  readonly query: string;\n  readonly params: CmsParams;\n  readonly dependencies: CmsDependencies;\n  readonly resolve: (raw: unknown, fallback: T) => CmsResolution<T>;\n};\n\nconst TYPE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;\nconst ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;\nconst SCOPE = /^[a-z0-9]{6,12}\\.[a-z][a-z0-9_-]{0,63}$/;\n\nfunction dependenciesCopy(dependencies: CmsDependencies): CmsDependencies {\n  if (!dependencies || !Array.isArray(dependencies.types) || dependencies.types.length === 0) {\n    throw new TypeError(\"CMS dependencies require document types\");\n  }\n  const types = [...dependencies.types];\n  for (const type of types) {\n    if (typeof type !== \"string\" || !TYPE.test(type)) throw new TypeError(\"Invalid CMS document type\");\n  }\n  if (dependencies.ids !== undefined && !Array.isArray(dependencies.ids)) throw new TypeError(\"Invalid CMS document IDs\");\n  const ids = dependencies.ids === undefined ? undefined : [...dependencies.ids];\n  for (const id of ids ?? []) {\n    if (typeof id !== \"string\" || !ID.test(id) || /^(drafts|versions)\\./.test(id)) {\n      throw new TypeError(\"Invalid CMS document ID\");\n    }\n  }\n  if (new Set(types).size + new Set(ids).size > 128) throw new TypeError(\"Too many CMS tags\");\n  return Object.freeze({ types: Object.freeze(types), ...(ids === undefined ? {} : { ids: Object.freeze(ids) }) });\n}\n\nexport function defineCmsQuery<T>(query: CmsQuery<T>): CmsQuery<T> {\n  if (!query || typeof query.name !== \"string\" || !/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(query.name)\n    || typeof query.query !== \"string\" || query.query.trim() === \"\" || typeof query.resolve !== \"function\") {\n    throw new TypeError(\"Invalid CMS query configuration\");\n  }\n  const params = query.params;\n  if (!params || typeof params !== \"object\" || (Object.getPrototypeOf(params) !== Object.prototype && Object.getPrototypeOf(params) !== null)) {\n    throw new TypeError(\"CMS params must be plain JSON scalars\");\n  }\n  const copied: Record<string, string | number | boolean | null> = {};\n  for (const key of Reflect.ownKeys(params)) {\n    const descriptor = Object.getOwnPropertyDescriptor(params, key);\n    if (typeof key !== \"string\" || !descriptor || !Object.hasOwn(descriptor, \"value\") || !descriptor.enumerable) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    const value: unknown = descriptor.value;\n    if (!(value === null || typeof value === \"string\" || typeof value === \"boolean\" || (typeof value === \"number\" && Number.isFinite(value)))) {\n      throw new TypeError(\"CMS params must be plain JSON scalars\");\n    }\n    Object.defineProperty(copied, key, { value, enumerable: true });\n  }\n  return Object.freeze({ name: query.name, query: query.query, params: Object.freeze(copied), dependencies: dependenciesCopy(query.dependencies), resolve: query.resolve });\n}\n\nexport function cmsTags(scope: string, dependencies: CmsDependencies): readonly string[] {\n  if (typeof scope !== \"string\" || scope.length > 77 || !SCOPE.test(scope)) throw new TypeError(\"Invalid CMS scope\");\n  const copied = dependenciesCopy(dependencies);\n  const tags = [\n    ...[...new Set(copied.types)].sort().map((type) => `cms:${scope}:type:${type}`),\n    ...[...new Set(copied.ids ?? [])].sort().map((id) => `cms:${scope}:id:${id}`),\n  ];\n  return Object.freeze(tags);\n}\n\n/** Read one published menu by its document id; host supplies the last good snapshot. */\nexport function menuQuery(id: string): CmsQuery<MenuDocument | null> {\n  return defineCmsQuery({\n    name: \"menu.v1\",\n    query: `*[_type == \"menu\" && _id == $id && !(_id in path(\"drafts.**\")) && !(_id in path(\"versions.**\"))][0]{${MENU_DOCUMENT_PROJECTION}}`,\n    params: { id }, dependencies: { types: [\"menu\"], ids: [id] },\n    resolve: (raw, fallback) => {\n      if (!validMenuFallback(fallback) || (fallback !== null && fallback._id !== id)) throw new TypeError(\"Invalid CMS menu fallback\");\n      if (raw === null || raw === undefined) return { data: fallback, fallbackFields: [\"$\"] };\n      const data = parseMenuDocument(raw);\n      if (data._id !== id) throw new MalformedContentError(\"menu\", [\"menu._id does not match the requested document\"]);\n      return { data, fallbackFields: [] };\n    },\n  });\n}\n", "import { cmsTags, defineCmsQuery, type CmsQuery, type CmsResolution } from \"../contracts/query.js\";\n\nexport type CmsFailure = \"configuration\" | \"network\" | \"timeout\" | \"rate-limit\"\n  | \"upstream\" | \"plan-limit\" | \"permission\" | \"malformed\";\nexport type CmsDiagnostic = {\n  readonly event: \"cms.fallback\" | \"cms.partial-fallback\" | \"cms.refused\";\n  readonly query: string;\n  readonly reason: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly status?: number;\n  readonly fields: readonly string[];\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsFetch = (url: string, init: RequestInit & {\n  next?: { revalidate: number; tags: string[] };\n}) => Promise<Response>;\nexport type CmsReadPolicy = {\n  readonly tags: readonly string[];\n  readonly revalidateSeconds: number;\n};\nexport type CmsAdapterResult =\n  | { readonly ok: true; readonly value: unknown }\n  | { readonly ok: false; readonly reason: CmsFailure; readonly status?: number };\nexport type CmsAdapter = {\n  readonly scope: string;\n  read(query: Pick<CmsQuery<unknown>, \"name\" | \"query\" | \"params\">,\n    policy: CmsReadPolicy): Promise<CmsAdapterResult>;\n};\nexport type CmsReadResult<T> = {\n  readonly data: T;\n  readonly source: \"cms\" | \"mixed\" | \"fallback\";\n  readonly fallbackFields: readonly string[];\n  readonly reason?: CmsFailure | \"missing\" | \"invalid-field\";\n  readonly warnings?: CmsResolution<unknown>[\"warnings\"];\n};\nexport type CmsReaderOptions = {\n  readonly adapter: CmsAdapter;\n  readonly revalidateSeconds?: number;\n  readonly onDiagnostic?: (event: CmsDiagnostic) => void;\n};\nexport type CmsReader = {\n  read<T>(query: CmsQuery<T>, options: { readonly fallback: T }): Promise<CmsReadResult<T>>;\n};\n\nfunction resolution<T>(value: CmsResolution<T>): CmsResolution<T> {\n  if (!value || !Object.hasOwn(value, \"data\") || !Array.isArray(value.fallbackFields)\n    || ![...value.fallbackFields].every((field: unknown) => typeof field === \"string\"\n      && (field === \"$\" || /^[A-Za-z][A-Za-z0-9_.[\\]-]{0,127}$/.test(field)))) {\n    throw new TypeError(\"Invalid CMS resolution\");\n  }\n  if (value.warnings !== undefined && (!Array.isArray(value.warnings)\n    || ![...value.warnings].every((warning) => warning === \"siteHero.layout.defaulted\"\n      || warning === \"siteHero.tagline.dropped\" || warning === \"siteHero.taglines.defaulted\"))) {\n    throw new TypeError(\"Invalid CMS resolution warnings\");\n  }\n  return { data: value.data, fallbackFields: Object.freeze([...new Set(value.fallbackFields)]),\n    ...(value.warnings?.length ? { warnings: Object.freeze([...new Set(value.warnings)]) } : {}) };\n}\n\n/** Forwards cache policy; persistence and rendered-output invalidation belong to the host. */\nexport function createCmsReader(options: CmsReaderOptions): CmsReader {\n  const seconds = options?.revalidateSeconds ?? 3600;\n  if (!Number.isSafeInteger(seconds) || seconds < 3600 || !options?.adapter\n    || typeof options.adapter.read !== \"function\"\n    || (options.onDiagnostic !== undefined && typeof options.onDiagnostic !== \"function\")) {\n    throw new TypeError(\"Invalid CMS reader configuration\");\n  }\n  const adapter = options.adapter;\n  // Validate the scope without assuming any particular shared content types.\n  cmsTags(adapter.scope, { types: [\"ScopeValidation\"] });\n  const notify = (event: CmsDiagnostic): void => {\n    try {\n      if (options.onDiagnostic) options.onDiagnostic(event);\n      else console.warn(JSON.stringify(event));\n    } catch { /* Reporting must not break visitor rendering. */ }\n  };\n  return {\n    async read<T>(input: CmsQuery<T>, readOptions: { readonly fallback: T }): Promise<CmsReadResult<T>> {\n      let query: CmsQuery<T>;\n      let local: CmsResolution<T>;\n      let tags: readonly string[];\n      try {\n        query = defineCmsQuery(input);\n        tags = cmsTags(adapter.scope, query.dependencies);\n        if (!readOptions || !Object.hasOwn(readOptions, \"fallback\")) throw new TypeError();\n        // Built-in resolvers validate fallback here, before any I/O.\n        local = resolution(query.resolve(null, readOptions.fallback));\n      } catch {\n        throw new TypeError(\"Invalid CMS query or fallback configuration\");\n      }\n      const fallback = (reason: CmsFailure | \"missing\" | \"invalid-field\", status?: number, warnings?: CmsResolution<T>[\"warnings\"]): CmsReadResult<T> => {\n        notify({ event: \"cms.fallback\", query: query.name, reason, fields: [\"$\"],\n          ...(status === undefined ? {} : { status }), ...(warnings ? { warnings } : {}) });\n        return { data: local.data, source: \"fallback\", fallbackFields: [\"$\"], reason, ...(warnings ? { warnings } : {}) };\n      };\n      let result: CmsAdapterResult;\n      try {\n        result = await adapter.read({ name: query.name, query: query.query, params: query.params },\n          { tags, revalidateSeconds: seconds });\n      } catch { return fallback(\"network\"); }\n      if (!result.ok) {\n        const reasons: readonly CmsFailure[] = [\"configuration\", \"network\", \"timeout\", \"rate-limit\", \"upstream\", \"plan-limit\", \"permission\", \"malformed\"];\n        const reason = reasons.includes(result.reason) ? result.reason : \"malformed\";\n        const status = Number.isInteger(result.status) && (result.status ?? 0) >= 100 && (result.status ?? 0) <= 599 ? result.status : undefined;\n        return fallback(reason, status);\n      }\n      if (result.value === null || result.value === undefined) return fallback(\"missing\");\n      let resolved: CmsResolution<T>;\n      try { resolved = resolution(query.resolve(result.value, readOptions.fallback)); }\n      catch { return fallback(\"malformed\"); }\n      if (resolved.fallbackFields.includes(\"$\")) {\n        return { ...fallback(\"invalid-field\", undefined, resolved.warnings), data: resolved.data };\n      }\n      if (resolved.fallbackFields.length > 0) {\n        notify({ event: \"cms.partial-fallback\", query: query.name, reason: \"invalid-field\", fields: resolved.fallbackFields, ...(resolved.warnings ? { warnings: resolved.warnings } : {}) });\n        return { ...resolved, source: \"mixed\", reason: \"invalid-field\" };\n      }\n      return { ...resolved, source: \"cms\" };\n    },\n  };\n}\n", "import { createCmsReader } from \"../../runtime/reader.js\";\n\n// Keep the adapter's patched global fetch and policy intact. No second cache.\nexport const createNextCmsReader = createCmsReader;\n", "import { revalidateTag } from \"next/cache.js\";\nimport { cmsTags } from \"../contracts/query.js\";\nimport { SANITY_SIGNATURE_HEADER, verifySanityWebhook } from \"../portable/webhook.js\";\n\nexport type TypeToTags = Readonly<Record<string, readonly string[]>>;\nexport type RevalidateRouteOptions = {\n  readonly scope: string;\n  readonly secretEnv?: string;\n  readonly previousSecretEnv?: string;\n  readonly typeToTags: TypeToTags;\n  readonly env?: () => Readonly<Record<string, string | undefined>>;\n  readonly now?: () => number;\n};\nexport type CmsRouteHandler = (request: Request) => Promise<Response>;\nexport type CmsRevalidateRoute = Readonly<Record<\n  \"POST\" | \"GET\" | \"HEAD\" | \"PUT\" | \"PATCH\" | \"DELETE\" | \"OPTIONS\", CmsRouteHandler\n>>;\n\nconst BODY_LIMIT = 16 * 1024;\nconst BODY_DEADLINE_MS = 1500;\nconst encoder = new TextEncoder();\n\nfunction response(status: number, value: unknown, headers: Record<string, string> = {}, head = false): Response {\n  return new Response(head ? null : JSON.stringify(value), {\n    status, headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\", ...headers },\n  });\n}\n\nfunction copyMapping(scope: string, mapping: TypeToTags): TypeToTags {\n  if (!mapping || typeof mapping !== \"object\" || Array.isArray(mapping) || Object.keys(mapping).length === 0) {\n    throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  const copied: Record<string, readonly string[]> = Object.create(null);\n  for (const key of Reflect.ownKeys(mapping)) {\n    const descriptor = Object.getOwnPropertyDescriptor(mapping, key);\n    if (typeof key !== \"string\" || !descriptor?.enumerable || !Object.hasOwn(descriptor, \"value\")) {\n      throw new TypeError(\"Invalid CMS invalidation mapping\");\n    }\n    const types: unknown = descriptor.value;\n    if (!Array.isArray(types) || !types.includes(key)) throw new TypeError(\"Invalid CMS invalidation mapping\");\n    // Reserve the document ID tag as well as validating every local type.\n    cmsTags(scope, { types, ids: [\"validation\"] });\n    copied[key] = Object.freeze([...types] as string[]);\n  }\n  for (const types of Object.values(copied)) {\n    if (types.some((type) => !Object.hasOwn(copied, type))) throw new TypeError(\"Invalid CMS invalidation mapping\");\n  }\n  return Object.freeze(copied);\n}\n\nfunction validSecret(value: unknown): value is string {\n  return typeof value === \"string\" && value.trim() !== \"\" && encoder.encode(value).byteLength >= 32;\n}\n\nclass BodyFailure extends Error {\n  constructor(readonly status: 400 | 413) { super(\"Invalid CMS webhook body\"); }\n}\n\nasync function rawBody(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true });\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const deadline = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => reject(new BodyFailure(400)), BODY_DEADLINE_MS);\n  });\n  try {\n    let bytes = 0;\n    let text = \"\";\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), deadline]);\n      if (done) return text + decoder.decode();\n      bytes += value.byteLength;\n      if (bytes > BODY_LIMIT) throw new BodyFailure(413);\n      text += decoder.decode(value, { stream: true });\n    }\n  } catch (error) {\n    // Cancellation must not extend the deadline, including a stalled source.\n    void reader.cancel().catch(() => {});\n    throw error;\n  } finally {\n    clearTimeout(timer);\n    reader.releaseLock();\n  }\n}\n\nexport function createRevalidateRoute(options: RevalidateRouteOptions): CmsRevalidateRoute {\n  const scope = options.scope;\n  const mapping = copyMapping(scope, options.typeToTags);\n  const secretEnv = options.secretEnv ?? \"SANITY_REVALIDATE_SECRET\";\n  const previousSecretEnv = options.previousSecretEnv ?? \"SANITY_REVALIDATE_SECRET_PREVIOUS\";\n  const env = options.env ?? (() => process.env);\n  const now = options.now ?? Date.now;\n\n  const handler: CmsRouteHandler = async (request) => {\n    if (request.method !== \"POST\") {\n      return response(405, { error: \"Method not allowed\" }, { Allow: \"POST\" }, request.method === \"HEAD\");\n    }\n    let active: string;\n    let previous: string | undefined;\n    try {\n      const values = env();\n      const activeValue = values[secretEnv];\n      const previousValue = values[previousSecretEnv];\n      if (!validSecret(activeValue) || (previousValue !== undefined && !validSecret(previousValue))) throw new Error();\n      active = activeValue;\n      previous = previousValue;\n    } catch {\n      return response(503, { error: \"COULD NOT ANSWER: revalidation configuration unavailable\" });\n    }\n    const signature = request.headers.get(SANITY_SIGNATURE_HEADER);\n    if (!signature || signature.length > 512 || !/^t=\\d+[, ]+v1=[A-Za-z0-9_-]+={0,2}$/.test(signature.trim())) {\n      return response(401, { error: \"Unauthorized\" });\n    }\n    let body: string;\n    try { body = await rawBody(request); }\n    catch (error) {\n      return error instanceof BodyFailure && error.status === 413\n        ? response(413, { error: \"Payload too large\" }) : response(400, { error: \"Invalid body\" });\n    }\n    try {\n      const clock = now();\n      if (!Number.isFinite(clock)) throw new Error();\n      const results = await Promise.all([active, ...(previous === undefined ? [] : [previous])].map((secret) =>\n        verifySanityWebhook({ secret, rawBody: body, headers: request.headers, now: clock })));\n      if (!results.some((result) => result.ok)) return response(401, { error: \"Unauthorized\" });\n    } catch { return response(401, { error: \"Unauthorized\" }); }\n\n    let payload: unknown;\n    try { payload = JSON.parse(body); }\n    catch { return response(400, { error: \"Invalid payload\" }); }\n    if (!payload || typeof payload !== \"object\" || Array.isArray(payload)\n      || Object.keys(payload).length !== 2 || !Object.hasOwn(payload, \"_type\") || !Object.hasOwn(payload, \"_id\")) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    const { _type: type, _id: id } = payload as { _type: unknown; _id: unknown };\n    if (typeof type !== \"string\" || !/^[A-Za-z][A-Za-z0-9_]{0,63}$/.test(type)\n      || typeof id !== \"string\" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(id)) {\n      return response(400, { error: \"Invalid payload\" });\n    }\n    if (!Object.hasOwn(mapping, type) || /^(drafts|versions)\\./.test(id)) {\n      return response(400, { error: \"Unsupported document\" });\n    }\n    const tags = cmsTags(scope, { types: mapping[type]!, ids: [id] });\n    try {\n      for (const tag of tags) revalidateTag(tag, { expire: 0 });\n    } catch { return response(500, { error: \"Could not revalidate\" }); }\n    return response(200, { revalidated: true });\n  };\n  return Object.freeze({ POST: handler, GET: handler, HEAD: handler, PUT: handler, PATCH: handler, DELETE: handler, OPTIONS: handler });\n}\n", "/**\n * Verifying a Sanity webhook (A-590 step 1, A-592's `SANITY_WEBHOOK_SECRET`).\n *\n * -------------------------------------------------------------------------\n * WHY THIS ENDPOINT NEEDS A SIGNATURE AT ALL\n * -------------------------------------------------------------------------\n *\n * `/revalidate` throws away cache entries. A-590: \"An unauthenticated\n * revalidation endpoint is a free cache-purge and rebuild trigger for anyone\n * who finds the URL.\" On a plan whose API request allowance is a HARD cap that\n * returns 402 rather than a bill, an attacker who can empty the cache at will\n * can take a client's site content-offline for the rest of the month. So the\n * signature is not hygiene here; it is the availability control.\n *\n * -------------------------------------------------------------------------\n * THE WIRE FORMAT IS MEASURED, NOT REMEMBERED\n * -------------------------------------------------------------------------\n *\n * Read on 2026-09-16 from Sanity's own toolkit,\n * `https://raw.githubusercontent.com/sanity-io/webhook-toolkit/main/src/signature.ts`:\n *\n *   header            `sanity-webhook-signature`\n *   value             `t=<millis>,v1=<signature>`  (regex `/^t=(\\d+)[, ]+v1=([^, ]+)$/`)\n *   signed payload    `` `${timestamp}.${body}` ``\n *   algorithm         HMAC-SHA256\n *   digest encoding   base64url \u2014 standard base64 with `+`\u2192`-`, `/`\u2192`_`, padding stripped\n *   MINIMUM_TIMESTAMP 1609459200000 (2021-01-01Z), below which a value is nonsense\n *\n * `signature.test.ts` does not take that paragraph's word for it either: it\n * signs a payload with `@sanity/webhook`'s own `encodeSignatureHeader` and\n * asserts this verifier accepts it. If Sanity changes the format, that test\n * goes red rather than production quietly rejecting every webhook.\n *\n * -------------------------------------------------------------------------\n * WHAT THIS ADDS TO THE TOOLKIT, AND WHY IT IS NOT JUST IMPORTED\n * -------------------------------------------------------------------------\n *\n * Two things, both of which are `CLAUDE.md`'s \"take the safer construction\".\n *\n * First, a REPLAY WINDOW. The toolkit enforces only that the timestamp is after\n * 2021; a captured webhook is otherwise replayable forever. A replayed purge is\n * the attack in the first paragraph, executed with a request somebody was\n * legitimately sent. `verifySanityWebhook` takes a symmetric tolerance \u2014 the\n * window is symmetric for A-44's reason, since a far-future timestamp is\n * precisely how you mint a request that stays replayable for a year.\n *\n * Second, a MISSING SECRET IS A REJECTION, never a bypass. A-590 says it in as\n * many words: \"reject on absence rather than skipping the check when the secret\n * is unset.\" The degraded mode of \"no secret configured, so allow it\" is\n * produced by a deploy that forgot `wrangler secret put`, announces itself\n * nowhere, and grants strangers the purge endpoint.\n *\n * The comparison is `crypto.subtle.verify`, which compares raw digests in\n * constant time. A `===` on the base64 strings short-circuits at the first\n * differing character, which turns one 2^256 search into a few dozen sequential\n * 64-way ones against an endpoint that answers in milliseconds.\n *\n * -------------------------------------------------------------------------\n * `encodeSignatureHeader` IS ASYNC. AWAIT IT. (A-651)\n * -------------------------------------------------------------------------\n *\n * `@sanity/webhook@4.0.4` declares\n *\n *   encodeSignatureHeader(payload: string, timestamp: number, secret: string):\n *     Promise<string>\n *\n * and nothing forces you to await it. Drop the `await` and the Promise is\n * stringified into the header as the literal `[object Promise]`, which arrives\n * here, fails `SIGNATURE_VALUE`, and is rejected as `malformed-signature`. The\n * rejection is correct and the message is about the wire format, so it sends\n * you to read Sanity's header spec \u2014 the one place the bug is not. TypeScript\n * does not save you either: the value usually lands in a `Record<string,\n * string>` built by a helper, or inside a template literal, both of which take\n * a Promise without complaint.\n *\n * The rule: every call to `encodeSignatureHeader` is awaited, and the helper\n * that wraps it is `async` rather than returning the Promise for someone else\n * to forget. The content-client compatibility tests and CMS signer tests await every\n * encoder call; this note exists so the next one\n * is too, because the symptom will not tell you.\n */\n\n/** Sanity's header. Lower-cased; `Headers.get` is case-insensitive either way. */\nexport const SANITY_SIGNATURE_HEADER = \"sanity-webhook-signature\";\n\n/** Sanity's own parser, character for character. See the header. */\nconst SIGNATURE_VALUE = /^t=(\\d+)[, ]+v1=([^, ]+)$/;\n\n/** 2021-01-01T00:00:00.000Z. Sanity's `MINIMUM_TIMESTAMP`; anything earlier is not a timestamp. */\nexport const MINIMUM_TIMESTAMP = 1_609_459_200_000;\n\n/**\n * How far from `now` a webhook timestamp may be, in milliseconds.\n *\n * Five minutes rather than A-44's sixty seconds: this one crosses Sanity's\n * delivery queue rather than two NTP-synced clouds, and a retried delivery is a\n * normal event. It is still a window rather than \"forever\", which is the whole\n * difference from the toolkit.\n */\nexport const DEFAULT_TOLERANCE_MS = 300_000;\n\nexport type WebhookRejection =\n  /** `SANITY_WEBHOOK_SECRET` is unset or empty. Fail closed. */\n  | \"no-secret\"\n  /** No `sanity-webhook-signature` header. */\n  | \"no-signature\"\n  /** Header present but not `t=\u2026,v1=\u2026`, or `v1` is not decodable base64url. */\n  | \"malformed-signature\"\n  /** Before 2021, or outside the tolerance in either direction. */\n  | \"stale-timestamp\"\n  /** Well-formed, in window, wrong. */\n  | \"bad-signature\";\n\nexport type WebhookVerification = { ok: true } | { ok: false; reason: WebhookRejection };\n\nconst encoder = new TextEncoder();\n\nfunction hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\n/**\n * base64url \u2192 bytes, without `Buffer`.\n *\n * `atob` rather than `node:crypto` or `Buffer` because this file is imported by\n * the Worker, and workerd has neither by default. Returns null rather than\n * throwing on rubbish, so a malformed header is a 401 and not a 500 \u2014 a\n * verifier that crashes on bad input is a verifier an attacker can use as a\n * denial of service.\n */\nfunction base64UrlToBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  if (!/^[A-Za-z0-9_-]+={0,2}$/.test(value)) return null;\n  const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  try {\n    const binary = atob(padded);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);\n    return bytes;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Verify a Sanity webhook delivery.\n *\n * `rawBody` must be the bytes as received \u2014 `await request.text()`, never\n * `JSON.stringify(await request.json())`. A parse-and-restringify is not a\n * byte-for-byte round trip (key order, number formatting, whitespace) and one\n * byte changes the whole digest, so the symptom is every webhook failing after\n * a refactor that looked like tidying.\n *\n * The `reason` is for our logs and our tests. It is never returned to the\n * caller: \"your signature was fine but your clock is stale\" is the next step in\n * an attack, handed over free.\n */\nexport async function verifySanityWebhook(options: {\n  secret: string | undefined;\n  rawBody: string;\n  headers: { get(name: string): string | null };\n  now?: number;\n  toleranceMs?: number;\n}): Promise<WebhookVerification> {\n  const { secret, rawBody, headers } = options;\n  const now = options.now ?? Date.now();\n  const toleranceMs = options.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n\n  if (!secret || secret.length === 0) return { ok: false, reason: \"no-secret\" };\n\n  const header = headers.get(SANITY_SIGNATURE_HEADER);\n  if (!header) return { ok: false, reason: \"no-signature\" };\n\n  const match = SIGNATURE_VALUE.exec(header.trim());\n  if (match === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const timestamp = Number(match[1]);\n  const provided = match[2] ?? \"\";\n  if (!Number.isSafeInteger(timestamp)) return { ok: false, reason: \"malformed-signature\" };\n  if (timestamp < MINIMUM_TIMESTAMP) return { ok: false, reason: \"stale-timestamp\" };\n  if (Math.abs(now - timestamp) > toleranceMs) return { ok: false, reason: \"stale-timestamp\" };\n\n  const signature = base64UrlToBytes(provided);\n  if (signature === null) return { ok: false, reason: \"malformed-signature\" };\n\n  const key = await hmacKey(secret);\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    signature,\n    encoder.encode(`${timestamp}.${rawBody}`),\n  );\n  return valid ? { ok: true } : { ok: false, reason: \"bad-signature\" };\n}\n"],
+  "mappings": "AAAA,MAAO,cCCA,SAASA,EAAaC,EAAoC,CAC/D,GAAI,CAAC,MAAM,QAAQA,CAAK,EAAG,MAAO,GAClC,QAASC,EAAQ,EAAGA,EAAQD,EAAM,OAAQC,GAAS,EACjD,GAAI,CAAC,OAAO,OAAOD,EAAOC,CAAK,EAAG,MAAO,GAE3C,MAAO,EACT,CCPO,IAAMC,EAAe,CAAC,UAAW,SAAS,EACpCC,EAAmB,CAAC,OAAQ,SAAS,EACrCC,EAAuB,CAAE,OAAQ,UAAW,WAAY,MAAO,EAG/DC,EAA2B;AAAA;AAAA;AAAA;OC8BjC,SAASC,EAASC,EAAeC,EAAgC,CACtE,OAAOC,EAAQF,EAAO,CAAE,MAAO,CAAC,MAAM,EAAG,GAAIC,IAAO,OAAY,CAAC,EAAI,CAAE,IAAK,CAACA,CAAE,CAAE,CAAG,CAAC,CACvF,CAGA,SAASE,EAAKC,EAAcC,EAAuB,CACjD,MAAM,IAAIC,EAAsB,OAAQ,CAAC,GAAGF,CAAI,IAAIC,CAAM,EAAE,CAAC,CAC/D,CAEA,SAASE,EAASC,EAAgBJ,EAAcK,EAAY,IAAI,IAAeC,EAAwC,CAErH,GADIF,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAChE,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,EAAG,OAAOA,EAChE,GAAI,OAAOA,GAAU,UAAYA,IAAU,KAAM,OAAOL,EAAKC,EAAM,wBAAwB,EAC3F,GAAI,CACF,GAAIK,EAAU,IAAID,CAAK,EAAG,OAAOL,EAAKC,EAAM,0BAA0B,EACtE,IAAMO,EAAQ,MAAM,QAAQH,CAAK,EAC3BI,EAAqB,OAAO,eAAeJ,CAAK,EACtD,GAAIG,EAAQC,IAAc,MAAM,UAAYA,IAAc,OAAO,WAAaA,IAAc,KAC1F,OAAOT,EAAKC,EAAM,iCAAiC,EAErDK,EAAU,IAAID,CAAK,EACnB,IAAMK,EAAO,QAAQ,QAAQL,CAAK,EAC5BM,EAA8CH,EAAQ,CAAC,EAAI,CAAC,EAC9DI,EAAS,EACTC,EAAU,EACd,QAAWC,KAAOJ,EAAM,CACtB,GAAI,OAAOI,GAAQ,SAAU,OAAOd,EAAKC,EAAM,kBAAkB,EACjE,IAAMc,EAAKP,GAASM,IAAQ,SAAW,GAAGb,CAAI,IAAIa,CAAG,IAAM,GAAGb,CAAI,IAAIa,CAAG,GACrEE,EACJ,GAAI,CAAEA,EAAaF,IAAQ,OAASP,IAAa,OAAYA,EAAW,OAAO,yBAAyBF,EAAOS,CAAG,CAAG,MAC/G,CAAE,OAAOd,EAAKe,EAAI,6CAA6C,CAAG,CACxE,GAAI,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,EAAG,OAAOhB,EAAKe,EAAI,8BAA8B,EACtG,GAAIP,GAASM,IAAQ,SAAU,CAC7B,IAAMG,EAAuBD,EAAW,MACxC,GAAI,OAAOC,GAAgB,UAAY,CAAC,OAAO,cAAcA,CAAW,GAAKA,EAAc,EAAG,OAAOjB,EAAKe,EAAI,4BAA4B,EAC1IH,EAASK,EACT,QACF,CACA,GAAI,CAACD,EAAW,YAAeR,GAAS,CAAC,iBAAiB,KAAKM,CAAG,EAAI,OAAOd,EAAKe,EAAI,6BAA6B,EACnH,IAAMG,EAAiBF,EAAW,MAC5BG,EAAQf,EAASc,EAAOH,EAAIT,CAAS,EAC3C,OAAO,eAAeK,EAAQG,EAAK,CAAE,MAAOK,EAAO,WAAY,GAAM,SAAU,GAAM,aAAc,EAAK,CAAC,EACzGN,GACF,CACA,OAAIL,IAAUK,IAAYD,GAAWD,EAAqB,SAAWC,GAAgBZ,EAAKC,EAAM,8BAA8B,EACvHU,CACT,OAASS,EAAO,CACd,GAAIA,aAAiBjB,EAAuB,MAAMiB,EAClD,OAAOpB,EAAKC,EAAM,6CAA6C,CACjE,QAAE,CACAK,EAAU,OAAOD,CAAK,CACxB,CACF,CACA,SAASgB,EAAOhB,EAAgBJ,EAAmB,CACjD,OAAII,IAAU,MAAQ,OAAOA,GAAU,UAAY,MAAM,QAAQA,CAAK,GAChE,OAAO,eAAeA,CAAK,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAK,IAAM,KAAcL,EAAKC,EAAM,iCAAiC,EAC/II,CACT,CACA,SAASiB,EAAKjB,EAAgBJ,EAAcsB,EAAW,GAAc,CACnE,OAAI,OAAOlB,GAAU,UAAakB,GAAYlB,EAAM,KAAK,IAAM,GAAYL,EAAKC,EAAM,mBAAmB,EAClGI,CACT,CACA,SAASmB,EAASC,EAAUC,EAAezB,EAAsC,CAC/E,OAAOwB,EAAIC,CAAK,IAAM,QAAaD,EAAIC,CAAK,IAAM,KAAO,CAAC,EAAI,CAAE,CAACA,CAAK,EAAGJ,EAAKG,EAAIC,CAAK,EAAG,GAAGzB,CAAI,IAAIyB,CAAK,GAAI,EAAK,CAAE,CACvH,CACA,SAASC,EAAQtB,EAAgBJ,EAAc2B,EAAgD,CAC7F,OAA2BvB,GAAU,KAAa,CAAC,EAC9CwB,EAAaxB,CAAK,EAChBA,EAAM,IAAI,CAACc,EAAOW,IAAUF,EAAKT,EAAO,GAAGlB,CAAI,IAAI,OAAO6B,CAAK,CAAC,GAAG,CAAC,EAD1C9B,EAAKC,EAAM,8BAA8B,CAE5E,CACA,SAAS8B,EAAM1B,EAAgBJ,EAAyB,CACtD,IAAMwB,EAAMJ,EAAOhB,EAAOJ,CAAI,EAC9B,GAAI,OAAOwB,EAAI,OAAU,UAAY,CAAC,OAAO,cAAcA,EAAI,KAAK,GAAKA,EAAI,MAAQ,EAAG,OAAOzB,EAAK,GAAGC,CAAI,SAAU,yCAAyC,EAC9J,IAAM+B,EAAWV,EAAKG,EAAI,SAAU,GAAGxB,CAAI,WAAW,EACtD,MAAK,aAAa,KAAK+B,CAAQ,EACxB,CAAE,MAAOP,EAAI,MAAO,SAAAO,CAAS,EADKhC,EAAK,GAAGC,CAAI,YAAa,qCAAqC,CAEzG,CACA,SAASgC,EAAM5B,EAAgBJ,EAAyB,CACtD,IAAMwB,EAAMJ,EAAOhB,EAAOJ,CAAI,EAC9B,MAAO,CAAE,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EAAG,OAAQ8B,EAAMN,EAAI,OAAQ,GAAGxB,CAAI,SAAS,EAAG,GAAGuB,EAASC,EAAK,QAASxB,CAAI,CAAE,CAC9H,CACA,SAASiC,EAAM7B,EAAgBJ,EAAyB,CACtD,IAAMwB,EAAMJ,EAAOhB,EAAOJ,CAAI,EAC9B,MAAO,CAAE,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EAAG,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EAAG,OAAQ8B,EAAMN,EAAI,OAAQ,GAAGxB,CAAI,SAAS,CAAE,CACnI,CACA,SAASkC,EAAK9B,EAAgBJ,EAAwB,CACpD,IAAMwB,EAAMJ,EAAOhB,EAAOJ,CAAI,EACxBmC,EAAeX,EAAI,cAAgB,YACzC,OAAIW,IAAiB,aAAeA,IAAiB,YAAcA,IAAiB,SAAiBpC,EAAK,GAAGC,CAAI,gBAAiB,+BAA+B,EAC1J,CACL,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EAAG,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EACzE,GAAGuB,EAASC,EAAK,cAAexB,CAAI,EAAG,GAAGuB,EAASC,EAAK,YAAaxB,CAAI,EAAG,GAAGuB,EAASC,EAAK,eAAgBxB,CAAI,EACjH,OAAQ0B,EAAKF,EAAI,OAAQ,GAAGxB,CAAI,UAAWgC,CAAK,EAAG,OAAQN,EAAKF,EAAI,OAAQ,GAAGxB,CAAI,UAAWiC,CAAK,EACnG,QAASP,EAAKF,EAAI,QAAS,GAAGxB,CAAI,WAAYqB,CAAI,EAAG,aAAAc,CACvD,CACF,CACA,SAASC,EAAQhC,EAAgBJ,EAA2B,CAC1D,IAAMwB,EAAMJ,EAAOhB,EAAOJ,CAAI,EAC9B,MAAO,CAAE,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EAAG,MAAOqB,EAAKG,EAAI,MAAO,GAAGxB,CAAI,QAAQ,EAAG,GAAGuB,EAASC,EAAK,UAAWxB,CAAI,EAAG,MAAO0B,EAAKF,EAAI,MAAO,GAAGxB,CAAI,SAAUkC,CAAI,CAAE,CAC3K,CACA,SAASG,EAAQjC,EAAgBJ,EAA2B,CAC1D,IAAMwB,EAAMJ,EAAOhB,EAAOJ,CAAI,EAC9B,MAAO,CAAE,KAAMqB,EAAKG,EAAI,KAAM,GAAGxB,CAAI,OAAO,EAAG,MAAOqB,EAAKG,EAAI,MAAO,GAAGxB,CAAI,QAAQ,EAAG,GAAGuB,EAASC,EAAK,OAAQxB,CAAI,EAAG,SAAU0B,EAAKF,EAAI,SAAU,GAAGxB,CAAI,YAAaoC,CAAO,CAAE,CACpL,CAGA,SAASE,GAAwBlC,EAAyB,CACxD,GAAIA,IAAU,MAAQ,OAAOA,GAAU,UAAY,MAAM,QAAQA,CAAK,EAAG,MAAO,GAChF,IAAMP,EAAMO,EAAc,IAC1B,OAAO,OAAOP,GAAO,UAAYA,EAAG,KAAK,IAAM,IAAM,CAAC,uBAAuB,KAAKA,CAAE,CACtF,CAGO,SAAS0C,EAAkBC,EAAmBC,EAAQ,OAAsB,CACjF,OAAOC,GAAcvC,EAASqC,EAAUC,CAAK,EAAGA,CAAK,CACvD,CAiBA,SAASE,GAAcC,EAAmBC,EAA6B,CACrE,IAAMC,EAAMC,EAAOH,EAAUC,CAAK,EAClC,GAAIC,EAAI,QAAU,OAAQ,OAAOE,EAAK,GAAGH,CAAK,SAAU,aAAa,EACrE,GAAI,CAACI,GAAwBH,CAAG,EAAG,OAAOE,EAAK,GAAGH,CAAK,OAAQ,kCAAkC,EACjG,IAAMK,EAAYC,EAAKL,EAAI,WAAY,GAAGD,CAAK,aAAa,EAC5D,GAAI,CAAC,uEAAuE,KAAKK,CAAS,GAAK,CAAC,OAAO,SAAS,KAAK,MAAMA,CAAS,CAAC,EAAG,OAAOF,EAAK,GAAGH,CAAK,cAAe,uBAAuB,EAClM,IAAMO,EAAWC,EAAKP,EAAI,SAAU,GAAGD,CAAK,YAAaS,CAAO,EAChE,OAAIF,EAAS,SAAW,EAAUJ,EAAK,GAAGH,CAAK,YAAa,qBAAqB,EAC1E,CACL,MAAO,OAAQ,IAAKM,EAAKL,EAAI,IAAK,GAAGD,CAAK,MAAM,EAAG,KAAMM,EAAKL,EAAI,KAAM,GAAGD,CAAK,OAAO,EAAG,WAAYK,EACtG,MAAOC,EAAKL,EAAI,MAAO,GAAGD,CAAK,QAAQ,EAAG,aAAcQ,EAAKP,EAAI,aAAc,GAAGD,CAAK,gBAAiBM,CAAI,EAC5G,SAAAC,EAAU,GAAGG,EAAST,EAAK,OAAQD,CAAK,EAAG,GAAI,OAAO,OAAOC,EAAK,SAAS,EAAI,CAAE,QAASA,EAAI,OAAQ,EAAI,CAAC,CAC7G,CACF,CAEO,SAASU,EAAkBC,EAA8C,CAC9E,GAAIA,IAAU,KAAM,MAAO,GAC3B,GAAI,CAAE,OAAAC,EAAkBD,CAAK,EAAU,EAAM,MAAQ,CAAE,MAAO,EAAO,CACvE,CCJO,IAAME,EAAoB,oBAEpBC,EAAN,cAAoC,KAAM,CACtC,KAAOD,EACP,WACA,SAET,YAAYE,EAAoBC,EAA6B,CAC3D,MAAM,GAAGH,CAAiB,KAAKE,CAAU,KAAKC,EAAS,KAAK,IAAI,CAAC,EAAE,EACnE,KAAK,KAAO,wBACZ,KAAK,WAAaD,EAClB,KAAK,SAAWC,CAClB,CACF,EA+pBA,IAAMC,EAAuB,8EAA8EC,CAAwB,kBACtHC,GAAsB,sEAAsEF,CAAoB,GAChHG,GAA6B,iDAAiDH,CAAoB,GC50B/G,IAAMI,GAAO,+BACPC,GAAK,qCACLC,GAAQ,0CAEd,SAASC,EAAiBC,EAAgD,CACxE,GAAI,CAACA,GAAgB,CAAC,MAAM,QAAQA,EAAa,KAAK,GAAKA,EAAa,MAAM,SAAW,EACvF,MAAM,IAAI,UAAU,yCAAyC,EAE/D,IAAMC,EAAQ,CAAC,GAAGD,EAAa,KAAK,EACpC,QAAWE,KAAQD,EACjB,GAAI,OAAOC,GAAS,UAAY,CAACN,GAAK,KAAKM,CAAI,EAAG,MAAM,IAAI,UAAU,2BAA2B,EAEnG,GAAIF,EAAa,MAAQ,QAAa,CAAC,MAAM,QAAQA,EAAa,GAAG,EAAG,MAAM,IAAI,UAAU,0BAA0B,EACtH,IAAMG,EAAMH,EAAa,MAAQ,OAAY,OAAY,CAAC,GAAGA,EAAa,GAAG,EAC7E,QAAWI,KAAMD,GAAO,CAAC,EACvB,GAAI,OAAOC,GAAO,UAAY,CAACP,GAAG,KAAKO,CAAE,GAAK,uBAAuB,KAAKA,CAAE,EAC1E,MAAM,IAAI,UAAU,yBAAyB,EAGjD,GAAI,IAAI,IAAIH,CAAK,EAAE,KAAO,IAAI,IAAIE,CAAG,EAAE,KAAO,IAAK,MAAM,IAAI,UAAU,mBAAmB,EAC1F,OAAO,OAAO,OAAO,CAAE,MAAO,OAAO,OAAOF,CAAK,EAAG,GAAIE,IAAQ,OAAY,CAAC,EAAI,CAAE,IAAK,OAAO,OAAOA,CAAG,CAAE,CAAG,CAAC,CACjH,CAEO,SAASE,EAAkBC,EAAiC,CACjE,GAAI,CAACA,GAAS,OAAOA,EAAM,MAAS,UAAY,CAAC,kCAAkC,KAAKA,EAAM,IAAI,GAC7F,OAAOA,EAAM,OAAU,UAAYA,EAAM,MAAM,KAAK,IAAM,IAAM,OAAOA,EAAM,SAAY,WAC5F,MAAM,IAAI,UAAU,iCAAiC,EAEvD,IAAMC,EAASD,EAAM,OACrB,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAa,OAAO,eAAeA,CAAM,IAAM,OAAO,WAAa,OAAO,eAAeA,CAAM,IAAM,KACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAA2D,CAAC,EAClE,QAAWC,KAAO,QAAQ,QAAQF,CAAM,EAAG,CACzC,IAAMG,EAAa,OAAO,yBAAyBH,EAAQE,CAAG,EAC9D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,GAAK,CAACA,EAAW,WAC/F,MAAM,IAAI,UAAU,uCAAuC,EAE7D,IAAMC,EAAiBD,EAAW,MAClC,GAAI,EAAEC,IAAU,MAAQ,OAAOA,GAAU,UAAY,OAAOA,GAAU,WAAc,OAAOA,GAAU,UAAY,OAAO,SAASA,CAAK,GACpI,MAAM,IAAI,UAAU,uCAAuC,EAE7D,OAAO,eAAeH,EAAQC,EAAK,CAAE,MAAAE,EAAO,WAAY,EAAK,CAAC,CAChE,CACA,OAAO,OAAO,OAAO,CAAE,KAAML,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQ,OAAO,OAAOE,CAAM,EAAG,aAAcT,EAAiBO,EAAM,YAAY,EAAG,QAASA,EAAM,OAAQ,CAAC,CAC1K,CAEO,SAASM,EAAQC,EAAeb,EAAkD,CACvF,GAAI,OAAOa,GAAU,UAAYA,EAAM,OAAS,IAAM,CAACf,GAAM,KAAKe,CAAK,EAAG,MAAM,IAAI,UAAU,mBAAmB,EACjH,IAAML,EAAST,EAAiBC,CAAY,EACtCc,EAAO,CACX,GAAG,CAAC,GAAG,IAAI,IAAIN,EAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAKN,GAAS,OAAOW,CAAK,SAASX,CAAI,EAAE,EAC9E,GAAG,CAAC,GAAG,IAAI,IAAIM,EAAO,KAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAKJ,GAAO,OAAOS,CAAK,OAAOT,CAAE,EAAE,CAC9E,EACA,OAAO,OAAO,OAAOU,CAAI,CAC3B,CAGO,SAASC,GAAUX,EAA2C,CACnE,OAAOC,EAAe,CACpB,KAAM,UACN,MAAO,uGAAuGW,CAAwB,IACtI,OAAQ,CAAE,GAAAZ,CAAG,EAAG,aAAc,CAAE,MAAO,CAAC,MAAM,EAAG,IAAK,CAACA,CAAE,CAAE,EAC3D,QAAS,CAACa,EAAKC,IAAa,CAC1B,GAAI,CAACC,EAAkBD,CAAQ,GAAMA,IAAa,MAAQA,EAAS,MAAQd,EAAK,MAAM,IAAI,UAAU,2BAA2B,EAC/H,GAAIa,GAAQ,KAA2B,MAAO,CAAE,KAAMC,EAAU,eAAgB,CAAC,GAAG,CAAE,EACtF,IAAME,EAAOC,EAAkBJ,CAAG,EAClC,GAAIG,EAAK,MAAQhB,EAAI,MAAM,IAAIkB,EAAsB,OAAQ,CAAC,gDAAgD,CAAC,EAC/G,MAAO,CAAE,KAAAF,EAAM,eAAgB,CAAC,CAAE,CACpC,CACF,CAAC,CACH,CCnDA,SAASG,EAAcC,EAA2C,CAChE,GAAI,CAACA,GAAS,CAAC,OAAO,OAAOA,EAAO,MAAM,GAAK,CAAC,MAAM,QAAQA,EAAM,cAAc,GAC7E,CAAC,CAAC,GAAGA,EAAM,cAAc,EAAE,MAAOC,GAAmB,OAAOA,GAAU,WACnEA,IAAU,KAAO,qCAAqC,KAAKA,CAAK,EAAE,EACxE,MAAM,IAAI,UAAU,wBAAwB,EAE9C,GAAID,EAAM,WAAa,SAAc,CAAC,MAAM,QAAQA,EAAM,QAAQ,GAC7D,CAAC,CAAC,GAAGA,EAAM,QAAQ,EAAE,MAAOE,GAAYA,IAAY,6BAClDA,IAAY,4BAA8BA,IAAY,6BAA6B,GACxF,MAAM,IAAI,UAAU,iCAAiC,EAEvD,MAAO,CAAE,KAAMF,EAAM,KAAM,eAAgB,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,cAAc,CAAC,CAAC,EACzF,GAAIA,EAAM,UAAU,OAAS,CAAE,SAAU,OAAO,OAAO,CAAC,GAAG,IAAI,IAAIA,EAAM,QAAQ,CAAC,CAAC,CAAE,EAAI,CAAC,CAAG,CACjG,CAGO,SAASG,EAAgBC,EAAsC,CACpE,IAAMC,EAAUD,GAAS,mBAAqB,KAC9C,GAAI,CAAC,OAAO,cAAcC,CAAO,GAAKA,EAAU,MAAQ,CAACD,GAAS,SAC7D,OAAOA,EAAQ,QAAQ,MAAS,YAC/BA,EAAQ,eAAiB,QAAa,OAAOA,EAAQ,cAAiB,WAC1E,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAME,EAAUF,EAAQ,QAExBG,EAAQD,EAAQ,MAAO,CAAE,MAAO,CAAC,iBAAiB,CAAE,CAAC,EACrD,IAAME,EAAUC,GAA+B,CAC7C,GAAI,CACEL,EAAQ,aAAcA,EAAQ,aAAaK,CAAK,EAC/C,QAAQ,KAAK,KAAK,UAAUA,CAAK,CAAC,CACzC,MAAQ,CAAoD,CAC9D,EACA,MAAO,CACL,MAAM,KAAQC,EAAoBC,EAAkE,CAClG,IAAIC,EACAC,EACAC,EACJ,GAAI,CAGF,GAFAF,EAAQG,EAAeL,CAAK,EAC5BI,EAAOP,EAAQD,EAAQ,MAAOM,EAAM,YAAY,EAC5C,CAACD,GAAe,CAAC,OAAO,OAAOA,EAAa,UAAU,EAAG,MAAM,IAAI,UAEvEE,EAAQd,EAAWa,EAAM,QAAQ,KAAMD,EAAY,QAAQ,CAAC,CAC9D,MAAQ,CACN,MAAM,IAAI,UAAU,6CAA6C,CACnE,CACA,IAAMK,EAAW,CAACC,EAAkDC,EAAiBC,KACnFX,EAAO,CAAE,MAAO,eAAgB,MAAOI,EAAM,KAAM,OAAAK,EAAQ,OAAQ,CAAC,GAAG,EACrE,GAAIC,IAAW,OAAY,CAAC,EAAI,CAAE,OAAAA,CAAO,EAAI,GAAIC,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,CAAC,EAC3E,CAAE,KAAMN,EAAM,KAAM,OAAQ,WAAY,eAAgB,CAAC,GAAG,EAAG,OAAAI,EAAQ,GAAIE,EAAW,CAAE,SAAAA,CAAS,EAAI,CAAC,CAAG,GAE9GC,EACJ,GAAI,CACFA,EAAS,MAAMd,EAAQ,KAAK,CAAE,KAAMM,EAAM,KAAM,MAAOA,EAAM,MAAO,OAAQA,EAAM,MAAO,EACvF,CAAE,KAAAE,EAAM,kBAAmBT,CAAQ,CAAC,CACxC,MAAQ,CAAE,OAAOW,EAAS,SAAS,CAAG,CACtC,GAAI,CAACI,EAAO,GAAI,CAEd,IAAMH,EADiC,CAAC,gBAAiB,UAAW,UAAW,aAAc,WAAY,aAAc,aAAc,WAAW,EACzH,SAASG,EAAO,MAAM,EAAIA,EAAO,OAAS,YAC3DF,EAAS,OAAO,UAAUE,EAAO,MAAM,IAAMA,EAAO,QAAU,IAAM,MAAQA,EAAO,QAAU,IAAM,IAAMA,EAAO,OAAS,OAC/H,OAAOJ,EAASC,EAAQC,CAAM,CAChC,CACA,GAAIE,EAAO,QAAU,MAAQA,EAAO,QAAU,OAAW,OAAOJ,EAAS,SAAS,EAClF,IAAIK,EACJ,GAAI,CAAEA,EAAWtB,EAAWa,EAAM,QAAQQ,EAAO,MAAOT,EAAY,QAAQ,CAAC,CAAG,MAC1E,CAAE,OAAOK,EAAS,WAAW,CAAG,CACtC,OAAIK,EAAS,eAAe,SAAS,GAAG,EAC/B,CAAE,GAAGL,EAAS,gBAAiB,OAAWK,EAAS,QAAQ,EAAG,KAAMA,EAAS,IAAK,EAEvFA,EAAS,eAAe,OAAS,GACnCb,EAAO,CAAE,MAAO,uBAAwB,MAAOI,EAAM,KAAM,OAAQ,gBAAiB,OAAQS,EAAS,eAAgB,GAAIA,EAAS,SAAW,CAAE,SAAUA,EAAS,QAAS,EAAI,CAAC,CAAG,CAAC,EAC7K,CAAE,GAAGA,EAAU,OAAQ,QAAS,OAAQ,eAAgB,GAE1D,CAAE,GAAGA,EAAU,OAAQ,KAAM,CACtC,CACF,CACF,CCpHO,IAAMC,GAAsBC,ECHnC,OAAS,iBAAAC,OAAqB,gBCmFvB,IAAMC,EAA0B,2BAGjCC,GAAkB,4BA6BxB,IAAMC,EAAU,IAAI,YAEpB,SAASC,GAAQC,EAAoC,CACnD,OAAO,OAAO,OAAO,UACnB,MACAF,EAAQ,OAAOE,CAAM,EACrB,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,OAAQ,QAAQ,CACnB,CACF,CAWA,SAASC,GAAiBC,EAA+C,CACvE,GAAI,CAAC,yBAAyB,KAAKA,CAAK,EAAG,OAAO,KAClD,IAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACzD,GAAI,CACF,IAAME,EAAS,KAAKD,CAAM,EACpBE,EAAQ,IAAI,WAAWD,EAAO,MAAM,EAC1C,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,GAAK,EAAGD,EAAMC,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACzE,OAAOD,CACT,MAAQ,CACN,OAAO,IACT,CACF,CAeA,eAAsBE,EAAoBC,EAMT,CAC/B,GAAM,CAAE,OAAAR,EAAQ,QAAAS,EAAS,QAAAC,CAAQ,EAAIF,EAC/BG,EAAMH,EAAQ,KAAO,KAAK,IAAI,EAC9BI,EAAcJ,EAAQ,aAAe,IAE3C,GAAI,CAACR,GAAUA,EAAO,SAAW,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,WAAY,EAE5E,IAAMa,EAASH,EAAQ,IAAII,CAAuB,EAClD,GAAI,CAACD,EAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,EAExD,IAAME,EAAQC,GAAgB,KAAKH,EAAO,KAAK,CAAC,EAChD,GAAIE,IAAU,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAEtE,IAAME,EAAY,OAAOF,EAAM,CAAC,CAAC,EAC3BG,EAAWH,EAAM,CAAC,GAAK,GAC7B,GAAI,CAAC,OAAO,cAAcE,CAAS,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EACxF,GAAIA,EAAY,WAAmB,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACjF,GAAI,KAAK,IAAIN,EAAMM,CAAS,EAAIL,EAAa,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EAE3F,IAAMO,EAAYlB,GAAiBiB,CAAQ,EAC3C,GAAIC,IAAc,KAAM,MAAO,CAAE,GAAI,GAAO,OAAQ,qBAAsB,EAE1E,IAAMC,EAAM,MAAMrB,GAAQC,CAAM,EAOhC,OANc,MAAM,OAAO,OAAO,OAChC,OACAoB,EACAD,EACArB,EAAQ,OAAO,GAAGmB,CAAS,IAAIR,CAAO,EAAE,CAC1C,EACe,CAAE,GAAI,EAAK,EAAI,CAAE,GAAI,GAAO,OAAQ,eAAgB,CACrE,CDpLA,IAAMY,GAAa,GAAK,KAClBC,GAAmB,KACnBC,GAAU,IAAI,YAEpB,SAASC,EAASC,EAAgBC,EAAgBC,EAAkC,CAAC,EAAGC,EAAO,GAAiB,CAC9G,OAAO,IAAI,SAASA,EAAO,KAAO,KAAK,UAAUF,CAAK,EAAG,CACvD,OAAAD,EAAQ,QAAS,CAAE,eAAgB,mBAAoB,gBAAiB,WAAY,GAAGE,CAAQ,CACjG,CAAC,CACH,CAEA,SAASE,GAAYC,EAAeC,EAAiC,CACnE,GAAI,CAACA,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAAK,OAAO,KAAKA,CAAO,EAAE,SAAW,EACvG,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAA4C,OAAO,OAAO,IAAI,EACpE,QAAWC,KAAO,QAAQ,QAAQF,CAAO,EAAG,CAC1C,IAAMG,EAAa,OAAO,yBAAyBH,EAASE,CAAG,EAC/D,GAAI,OAAOA,GAAQ,UAAY,CAACC,GAAY,YAAc,CAAC,OAAO,OAAOA,EAAY,OAAO,EAC1F,MAAM,IAAI,UAAU,kCAAkC,EAExD,IAAMC,EAAiBD,EAAW,MAClC,GAAI,CAAC,MAAM,QAAQC,CAAK,GAAK,CAACA,EAAM,SAASF,CAAG,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEzGG,EAAQN,EAAO,CAAE,MAAAK,EAAO,IAAK,CAAC,YAAY,CAAE,CAAC,EAC7CH,EAAOC,CAAG,EAAI,OAAO,OAAO,CAAC,GAAGE,CAAK,CAAa,CACpD,CACA,QAAWA,KAAS,OAAO,OAAOH,CAAM,EACtC,GAAIG,EAAM,KAAME,GAAS,CAAC,OAAO,OAAOL,EAAQK,CAAI,CAAC,EAAG,MAAM,IAAI,UAAU,kCAAkC,EAEhH,OAAO,OAAO,OAAOL,CAAM,CAC7B,CAEA,SAASM,EAAYZ,EAAiC,CACpD,OAAO,OAAOA,GAAU,UAAYA,EAAM,KAAK,IAAM,IAAMH,GAAQ,OAAOG,CAAK,EAAE,YAAc,EACjG,CAEA,IAAMa,EAAN,cAA0B,KAAM,CAC9B,YAAqBd,EAAmB,CAAE,MAAM,0BAA0B,EAArD,YAAAA,CAAwD,CAAxD,MACvB,EAEA,eAAee,GAAQC,EAAmC,CACxD,IAAMC,EAASD,EAAQ,MAAM,UAAU,EACvC,GAAI,CAACC,EAAQ,MAAO,GACpB,IAAMC,EAAU,IAAI,YAAY,QAAS,CAAE,MAAO,GAAM,UAAW,EAAK,CAAC,EACrEC,EACEC,EAAW,IAAI,QAAe,CAACC,EAAUC,IAAW,CACxDH,EAAQ,WAAW,IAAMG,EAAO,IAAIR,EAAY,GAAG,CAAC,EAAGjB,EAAgB,CACzE,CAAC,EACD,GAAI,CACF,IAAI0B,EAAQ,EACRC,EAAO,GACX,OAAa,CACX,GAAM,CAAE,KAAAC,EAAM,MAAAxB,CAAM,EAAI,MAAM,QAAQ,KAAK,CAACgB,EAAO,KAAK,EAAGG,CAAQ,CAAC,EACpE,GAAIK,EAAM,OAAOD,EAAON,EAAQ,OAAO,EAEvC,GADAK,GAAStB,EAAM,WACXsB,EAAQ3B,GAAY,MAAM,IAAIkB,EAAY,GAAG,EACjDU,GAAQN,EAAQ,OAAOjB,EAAO,CAAE,OAAQ,EAAK,CAAC,CAChD,CACF,OAASyB,EAAO,CAEd,MAAKT,EAAO,OAAO,EAAE,MAAM,IAAM,CAAC,CAAC,EAC7BS,CACR,QAAE,CACA,aAAaP,CAAK,EAClBF,EAAO,YAAY,CACrB,CACF,CAEO,SAASU,GAAsBC,EAAqD,CACzF,IAAMvB,EAAQuB,EAAQ,MAChBtB,EAAUF,GAAYC,EAAOuB,EAAQ,UAAU,EAC/CC,EAAYD,EAAQ,WAAa,2BACjCE,EAAoBF,EAAQ,mBAAqB,oCACjDG,EAAMH,EAAQ,MAAQ,IAAM,QAAQ,KACpCI,EAAMJ,EAAQ,KAAO,KAAK,IAE1BK,EAA2B,MAAOjB,GAAY,CAClD,GAAIA,EAAQ,SAAW,OACrB,OAAOjB,EAAS,IAAK,CAAE,MAAO,oBAAqB,EAAG,CAAE,MAAO,MAAO,EAAGiB,EAAQ,SAAW,MAAM,EAEpG,IAAIkB,EACAC,EACJ,GAAI,CACF,IAAMC,EAASL,EAAI,EACbM,EAAcD,EAAOP,CAAS,EAC9BS,EAAgBF,EAAON,CAAiB,EAC9C,GAAI,CAACjB,EAAYwB,CAAW,GAAMC,IAAkB,QAAa,CAACzB,EAAYyB,CAAa,EAAI,MAAM,IAAI,MACzGJ,EAASG,EACTF,EAAWG,CACb,MAAQ,CACN,OAAOvC,EAAS,IAAK,CAAE,MAAO,0DAA2D,CAAC,CAC5F,CACA,IAAMwC,EAAYvB,EAAQ,QAAQ,IAAIwB,CAAuB,EAC7D,GAAI,CAACD,GAAaA,EAAU,OAAS,KAAO,CAAC,sCAAsC,KAAKA,EAAU,KAAK,CAAC,EACtG,OAAOxC,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,EAEhD,IAAI0C,EACJ,GAAI,CAAEA,EAAO,MAAM1B,GAAQC,CAAO,CAAG,OAC9BU,EAAO,CACZ,OAAOA,aAAiBZ,GAAeY,EAAM,SAAW,IACpD3B,EAAS,IAAK,CAAE,MAAO,mBAAoB,CAAC,EAAIA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC7F,CACA,GAAI,CACF,IAAM2C,EAAQV,EAAI,EAClB,GAAI,CAAC,OAAO,SAASU,CAAK,EAAG,MAAM,IAAI,MAGvC,GAAI,EAFY,MAAM,QAAQ,IAAI,CAACR,EAAQ,GAAIC,IAAa,OAAY,CAAC,EAAI,CAACA,CAAQ,CAAE,EAAE,IAAKQ,GAC7FC,EAAoB,CAAE,OAAAD,EAAQ,QAASF,EAAM,QAASzB,EAAQ,QAAS,IAAK0B,CAAM,CAAC,CAAC,CAAC,GAC1E,KAAMG,GAAWA,EAAO,EAAE,EAAG,OAAO9C,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAC1F,MAAQ,CAAE,OAAOA,EAAS,IAAK,CAAE,MAAO,cAAe,CAAC,CAAG,CAE3D,IAAI+C,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAML,CAAI,CAAG,MAC5B,CAAE,OAAO1C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,CAAG,CAC5D,GAAI,CAAC+C,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,GAC/D,OAAO,KAAKA,CAAO,EAAE,SAAW,GAAK,CAAC,OAAO,OAAOA,EAAS,OAAO,GAAK,CAAC,OAAO,OAAOA,EAAS,KAAK,EACzG,OAAO/C,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAM,CAAE,MAAOa,EAAM,IAAKmC,CAAG,EAAID,EACjC,GAAI,OAAOlC,GAAS,UAAY,CAAC,+BAA+B,KAAKA,CAAI,GACpE,OAAOmC,GAAO,UAAY,CAAC,qCAAqC,KAAKA,CAAE,EAC1E,OAAOhD,EAAS,IAAK,CAAE,MAAO,iBAAkB,CAAC,EAEnD,GAAI,CAAC,OAAO,OAAOO,EAASM,CAAI,GAAK,uBAAuB,KAAKmC,CAAE,EACjE,OAAOhD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,EAExD,IAAMiD,EAAOrC,EAAQN,EAAO,CAAE,MAAOC,EAAQM,CAAI,EAAI,IAAK,CAACmC,CAAE,CAAE,CAAC,EAChE,GAAI,CACF,QAAWE,KAAOD,EAAME,GAAcD,EAAK,CAAE,OAAQ,CAAE,CAAC,CAC1D,MAAQ,CAAE,OAAOlD,EAAS,IAAK,CAAE,MAAO,sBAAuB,CAAC,CAAG,CACnE,OAAOA,EAAS,IAAK,CAAE,YAAa,EAAK,CAAC,CAC5C,EACA,OAAO,OAAO,OAAO,CAAE,KAAMkC,EAAS,IAAKA,EAAS,KAAMA,EAAS,IAAKA,EAAS,MAAOA,EAAS,OAAQA,EAAS,QAASA,CAAQ,CAAC,CACtI",
+  "names": ["isDenseArray", "value", "index", "MENU_LAYOUTS", "MENU_DECORATIONS", "MENU_LAYOUT_DEFAULTS", "MENU_DOCUMENT_PROJECTION", "menuTags", "scope", "id", "cmsTags", "fail", "path", "reason", "MalformedContentError", "snapshot", "value", "ancestors", "identity", "array", "prototype", "keys", "copied", "length", "entries", "key", "at", "descriptor", "savedLength", "saved", "entry", "error", "object", "text", "required", "optional", "raw", "field", "list", "read", "isDenseArray", "index", "money", "currency", "price", "extra", "item", "availability", "section", "variant", "isPublishedMenuDocument", "parseMenuDocument", "document", "where", "parseSnapshot", "parseSnapshot", "document", "where", "raw", "object", "fail", "isPublishedMenuDocument", "updatedAt", "text", "variants", "list", "variant", "optional", "validMenuFallback", "value", "parseMenuDocument", "MALFORMED_CONTENT", "MalformedContentError", "documentId", "problems", "MENU_PAGE_PROJECTION", "MENU_DOCUMENT_PROJECTION", "CONTENT_PAGES_QUERY", "CONTENT_PAGE_BY_SLUG_QUERY", "TYPE", "ID", "SCOPE", "dependenciesCopy", "dependencies", "types", "type", "ids", "id", "defineCmsQuery", "query", "params", "copied", "key", "descriptor", "value", "cmsTags", "scope", "tags", "menuQuery", "MENU_DOCUMENT_PROJECTION", "raw", "fallback", "validMenuFallback", "data", "parseMenuDocument", "MalformedContentError", "resolution", "value", "field", "warning", "createCmsReader", "options", "seconds", "adapter", "cmsTags", "notify", "event", "input", "readOptions", "query", "local", "tags", "defineCmsQuery", "fallback", "reason", "status", "warnings", "result", "resolved", "createNextCmsReader", "createCmsReader", "revalidateTag", "SANITY_SIGNATURE_HEADER", "SIGNATURE_VALUE", "encoder", "hmacKey", "secret", "base64UrlToBytes", "value", "padded", "binary", "bytes", "i", "verifySanityWebhook", "options", "rawBody", "headers", "now", "toleranceMs", "header", "SANITY_SIGNATURE_HEADER", "match", "SIGNATURE_VALUE", "timestamp", "provided", "signature", "key", "BODY_LIMIT", "BODY_DEADLINE_MS", "encoder", "response", "status", "value", "headers", "head", "copyMapping", "scope", "mapping", "copied", "key", "descriptor", "types", "cmsTags", "type", "validSecret", "BodyFailure", "rawBody", "request", "reader", "decoder", "timer", "deadline", "_resolve", "reject", "bytes", "text", "done", "error", "createRevalidateRoute", "options", "secretEnv", "previousSecretEnv", "env", "now", "handler", "active", "previous", "values", "activeValue", "previousValue", "signature", "SANITY_SIGNATURE_HEADER", "body", "clock", "secret", "verifySanityWebhook", "result", "payload", "id", "tags", "tag", "revalidateTag"]
 }

package/dist/portable/menu-options.d.cts

@@ -0,0 +1,8 @@
+export declare const MENU_LAYOUTS: readonly ["stacked", "columns"];
+export declare const MENU_DECORATIONS: readonly ["none", "playful"];
+export declare const MENU_LAYOUT_DEFAULTS: {
+    readonly layout: "stacked";
+    readonly decoration: "none";
+};
+/** Explicit saved fields, shared by the standalone query and page dereference. */
+export declare const MENU_DOCUMENT_PROJECTION = "_type, _id, _rev, _updatedAt, title, locationKeys, note, signOff,\n  variants[]{_key, label, note, sections[]{_key, title, service, items[]{\n    _key, name, description, priceNote, dietary, allergenNote, availability,\n    prices[]{_key, label, amount{minor, currency}}, extras[]{_key, name, amount{minor, currency}}\n  }}}";

package/dist/portable/menu-options.d.mts

@@ -0,0 +1,8 @@
+export declare const MENU_LAYOUTS: readonly ["stacked", "columns"];
+export declare const MENU_DECORATIONS: readonly ["none", "playful"];
+export declare const MENU_LAYOUT_DEFAULTS: {
+    readonly layout: "stacked";
+    readonly decoration: "none";
+};
+/** Explicit saved fields, shared by the standalone query and page dereference. */
+export declare const MENU_DOCUMENT_PROJECTION = "_type, _id, _rev, _updatedAt, title, locationKeys, note, signOff,\n  variants[]{_key, label, note, sections[]{_key, title, service, items[]{\n    _key, name, description, priceNote, dietary, allergenNote, availability,\n    prices[]{_key, label, amount{minor, currency}}, extras[]{_key, name, amount{minor, currency}}\n  }}}";

package/dist/portable/menu-options.d.ts

@@ -0,0 +1,8 @@
+export declare const MENU_LAYOUTS: readonly ["stacked", "columns"];
+export declare const MENU_DECORATIONS: readonly ["none", "playful"];
+export declare const MENU_LAYOUT_DEFAULTS: {
+    readonly layout: "stacked";
+    readonly decoration: "none";
+};
+/** Explicit saved fields, shared by the standalone query and page dereference. */
+export declare const MENU_DOCUMENT_PROJECTION = "_type, _id, _rev, _updatedAt, title, locationKeys, note, signOff,\n  variants[]{_key, label, note, sections[]{_key, title, service, items[]{\n    _key, name, description, priceNote, dietary, allergenNote, availability,\n    prices[]{_key, label, amount{minor, currency}}, extras[]{_key, name, amount{minor, currency}}\n  }}}";

package/dist/portable/menu.d.cts

@@ -0,0 +1,69 @@
+import { MENU_LAYOUTS, MENU_DECORATIONS } from "./menu-options.cjs";
+export { MENU_LAYOUTS, MENU_DECORATIONS, MENU_LAYOUT_DEFAULTS } from "./menu-options.cjs";
+export type MenuLayout = (typeof MENU_LAYOUTS)[number];
+export type MenuDecoration = (typeof MENU_DECORATIONS)[number];
+/** CMS-owned saved shapes. `_key` remains the mapper's stable array identity. */
+export type MenuMoney = {
+    readonly minor: number;
+    readonly currency: string;
+};
+export type MenuPrice = {
+    readonly _key: string;
+    readonly amount: MenuMoney;
+    readonly label?: string;
+};
+export type MenuExtra = {
+    readonly _key: string;
+    readonly name: string;
+    readonly amount: MenuMoney;
+};
+export type MenuItem = {
+    readonly _key: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly prices: readonly MenuPrice[];
+    readonly priceNote?: string;
+    readonly extras: readonly MenuExtra[];
+    readonly dietary: readonly string[];
+    readonly allergenNote?: string;
+    readonly availability: "available" | "sold-out" | "hidden";
+};
+export type MenuSection = {
+    readonly _key: string;
+    readonly title: string;
+    readonly service?: string;
+    readonly items: readonly MenuItem[];
+};
+export type MenuVariant = {
+    readonly _key: string;
+    readonly label: string;
+    readonly note?: string;
+    readonly sections: readonly MenuSection[];
+};
+export type MenuDocument = {
+    /** The schema discriminator is required by the consuming site's mapper. */
+    readonly _type: "menu";
+    readonly _id: string;
+    readonly _rev: string;
+    /** The real published update date, preserved verbatim for stale displays. */
+    readonly _updatedAt: string;
+    readonly title: string;
+    readonly locationKeys: readonly string[];
+    readonly variants: readonly MenuVariant[];
+    readonly note?: string;
+    /** Approval is opaque to this reader. The site validates it with its contract. */
+    readonly signOff?: unknown;
+};
+export type MenuSectionInput = {
+    readonly kind: "menu";
+    readonly layout: MenuLayout;
+    readonly decoration: MenuDecoration;
+    readonly menu: MenuDocument;
+};
+/** Uses the same scoped type/id tags as every other CMS query. */
+export declare function menuTags(scope: string, id?: string): readonly string[];
+/** Validate saved field shapes without inferring approval or changing copy/order. */
+export declare function parseMenuDocument(document: unknown, where?: string): MenuDocument;
+/** Page references use the same single snapshot before checking their identity. */
+export declare function parseReferencedMenuDocument(document: unknown, where: string): MenuDocument | null;
+export declare function validMenuFallback(value: unknown): value is MenuDocument | null;

package/dist/portable/menu.d.mts

@@ -0,0 +1,69 @@
+import { MENU_LAYOUTS, MENU_DECORATIONS } from "./menu-options.mjs";
+export { MENU_LAYOUTS, MENU_DECORATIONS, MENU_LAYOUT_DEFAULTS } from "./menu-options.mjs";
+export type MenuLayout = (typeof MENU_LAYOUTS)[number];
+export type MenuDecoration = (typeof MENU_DECORATIONS)[number];
+/** CMS-owned saved shapes. `_key` remains the mapper's stable array identity. */
+export type MenuMoney = {
+    readonly minor: number;
+    readonly currency: string;
+};
+export type MenuPrice = {
+    readonly _key: string;
+    readonly amount: MenuMoney;
+    readonly label?: string;
+};
+export type MenuExtra = {
+    readonly _key: string;
+    readonly name: string;
+    readonly amount: MenuMoney;
+};
+export type MenuItem = {
+    readonly _key: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly prices: readonly MenuPrice[];
+    readonly priceNote?: string;
+    readonly extras: readonly MenuExtra[];
+    readonly dietary: readonly string[];
+    readonly allergenNote?: string;
+    readonly availability: "available" | "sold-out" | "hidden";
+};
+export type MenuSection = {
+    readonly _key: string;
+    readonly title: string;
+    readonly service?: string;
+    readonly items: readonly MenuItem[];
+};
+export type MenuVariant = {
+    readonly _key: string;
+    readonly label: string;
+    readonly note?: string;
+    readonly sections: readonly MenuSection[];
+};
+export type MenuDocument = {
+    /** The schema discriminator is required by the consuming site's mapper. */
+    readonly _type: "menu";
+    readonly _id: string;
+    readonly _rev: string;
+    /** The real published update date, preserved verbatim for stale displays. */
+    readonly _updatedAt: string;
+    readonly title: string;
+    readonly locationKeys: readonly string[];
+    readonly variants: readonly MenuVariant[];
+    readonly note?: string;
+    /** Approval is opaque to this reader. The site validates it with its contract. */
+    readonly signOff?: unknown;
+};
+export type MenuSectionInput = {
+    readonly kind: "menu";
+    readonly layout: MenuLayout;
+    readonly decoration: MenuDecoration;
+    readonly menu: MenuDocument;
+};
+/** Uses the same scoped type/id tags as every other CMS query. */
+export declare function menuTags(scope: string, id?: string): readonly string[];
+/** Validate saved field shapes without inferring approval or changing copy/order. */
+export declare function parseMenuDocument(document: unknown, where?: string): MenuDocument;
+/** Page references use the same single snapshot before checking their identity. */
+export declare function parseReferencedMenuDocument(document: unknown, where: string): MenuDocument | null;
+export declare function validMenuFallback(value: unknown): value is MenuDocument | null;