@wildo-ai/saas-website 1.1.1

package/dist/esm/config/wildo-website-config.schemas.d.ts

@@ -0,0 +1,251 @@
+/**
+ * @wildo_source:part:start engine.saas-website.config facet:layer:engine facet:family:marketing-website
+ *
+ * Per-service marketing-website configuration block, authored in
+ * the website service folder as `wildo.website.config.ts`.
+ *
+ * # What this file's loaded value is used for TODAY
+ *
+ * This schema is the single source of truth for the marketing-site routing
+ * and origin surface. Every consumer reads here:
+ *
+ *   - `defaultLocale` + `locales` — read by `buildAstroI18nConfig(...)`,
+ *     `assertLabelPacksValid(...)`, `loadWebsitePageRuntime(...)` and
+ *     `renderWebsitePageHeadHtml(...)` via the shared `WebsiteSiteContext`.
+ *   - `publicOrigin` — read by the head renderer to compose absolute
+ *     `<link rel="canonical">`, `og:url`, hreflang `href` URLs and
+ *     the structured-data `mainEntityOfPage`. The previous
+ *     `WebsiteRootConfig.seo.siteOrigin` was deleted.
+ *   - `appOrigin` — has NO runtime consumer today. The
+ *     marketing → app handoff link surface that will read it does
+ *     not exist yet. Authored eagerly so the link-surface PR is a
+ *     single framework-owned move; until then the field is exercised
+ *     only by the schema parser.
+ *   - `csp?` — read by the website-local `sync-nginx-csp` build step,
+ *     which merges the app-static posture with `infra.csp?.<serviceKey>`,
+ *     emits the generated artifact consumed by Astro pages, and rewrites
+ *     the checked-in nginx marker file used by the website Docker image.
+ *
+ * Future companion subprocesses that introspect the marketing
+ * surface (locale-coverage audits, label-pack validation against
+ * authored locales, SEO-link sanity checks) will also read here —
+ * none exist today.
+ *
+ * # Why this is per-service website configuration
+ *
+ * Co-locating the schema with the engine package that owns its semantics
+ * keeps three concerns separate from application-root service declarations:
+ *
+ *   1. **Right reuse axis.** Marketing-site content (locales, SEO origins,
+ *      future label-pack overrides, marketing-only CTAs) is conceptually
+ *      different from saas-app-level service declarations (`path`,
+ *      `serviceName`, `frontendType`, `sessionStorage`). The marketing
+ *      config travels with the website service folder, NOT with the
+ *      SaaS app root. Two unrelated lifecycles, two different review
+ *      audiences.
+ *   2. **Engine boundary.** `platform-config-lib` no longer needs to
+ *      depend on `@wildo-ai/presets-components-models` (the home of
+ *      `AvailableLanguage`) just to type the marketing-site locale
+ *      enum. Adding a new website primitive (a new SEO field, a new
+ *      locale-pack id) belongs with the website package and its public
+ *      configuration contract.
+ *   3. **Disambiguator hazard.** The previous root-level
+ *      `marketingWebsite?` block silently assumed "one STATIC_WEBSITE
+ *      service per SaaS app" — but nothing in the schema enforced it.
+ *      Two STATIC_WEBSITE services would have silently shared one
+ *      config block with no obvious "which one wins?" answer. The
+ *      application configuration rejects more than one STATIC_WEBSITE (and
+ *      TECH_DOC) service, so the per-service config-file lookup is
+ *      deterministic by construction.
+ *
+ * # Schema decisions encoded here
+ *
+ * - `z.strictObject` so authoring an unknown key surfaces as a parse
+ *   error at `defineWebsiteConfig` time instead of being silently
+ *   dropped (same posture as `WildoSaasConfigSchema` and
+ *   `WildoTechnicalDocConfigSchema`).
+ *
+ * - **No `enabled` field.** The gate is "is there a `wildo.website.config.ts`
+ *   in a `frontendType: STATIC_WEBSITE` service folder?" — file
+ *   presence under a STATIC_WEBSITE service IS the enable signal.
+ *   The Astro build / dev companion / future audit CLI requires the
+ *   file when it walks a STATIC_WEBSITE service folder, so a
+ *   half-authored config simply cannot exist (the loader fails
+ *   closed). Removing the boolean closes a foot-gun: an authored
+ *   `enabled: false` block was previously a silent way to keep the
+ *   config "warm" without shipping anything, and consumers had to
+ *   remember to read the flag in addition to the file presence — a
+ *   future read-the-config / forget-the-flag bug waiting to happen.
+ *   A separate `services.<key>.enabled` pattern (orthogonal to
+ *   marketing-website) is the right place for any "temporarily
+ *   disable this service" story (deferred — see DASHBOARD).
+ *
+ * - URL fields are `z.url()` (Zod 4 native validator) so we get
+ *   protocol + host parsing for free, matching the rest of the
+ *   codebase.
+ *
+ * - `csp?` is typed against `WildoCspConfigSchema` from
+ *   `@wildo-ai/platform-config-lib`, mirroring the docs service's
+ *   `wildo.tech-doc.config.ts` contract. The parsed value is consumed by
+ *   the shared `resolveCspPolicy()` / `emitCspArtifacts()` generator flow.
+ *
+ * - `defaultLocale ∈ locales` cross-check via `.superRefine` —
+ *   keeping `defaultLocale` as a top-level field is product-explicit
+ *   ("which locale URL is the canonical one") and decouples it from
+ *   list ordering. Locale-path uniqueness AND locale-value
+ *   uniqueness are also enforced — duplicate paths would silently
+ *   overwrite each other in the Astro build and corrupt the sitemap;
+ *   duplicate locales would produce duplicate hreflang entries.
+ *
+ * - Locale primitive is `AvailableLanguage`. The schema imports it
+ *   from `@wildo-ai/presets-components-models/public-runtime` (the
+ *   side-effect-free public-runtime seam), but **consumers authoring
+ *   `wildo.website.config.ts` must import it from
+ *   `@wildo-ai/saas-models/public-runtime`**. Both paths produce identical
+ *   values; saas-models simply re-exports the presets atom. Picking
+ *   one path consistently across consumer files prevents drift in
+ *   docs / examples / search results. Values authored in
+ *   `wildo.website.config.ts` are the lowercase BCP-47 strings
+ *   (`'en'`, `'fr'`), NOT the UPPERCASE TS enum member names
+ *   (`EN`, `FR`). `z.enum(AvailableLanguage)` parses against the
+ *   enum VALUES, which is what we want.
+ */
+import { z } from 'zod';
+import { AvailableLanguage } from '@wildo-ai/presets-components-models/public-runtime';
+/**
+ * Per-locale configuration. Each authored locale gets one entry.
+ *
+ * `path` is the locale URL prefix segment (e.g. `'en'`, `'fr'`) — the
+ * Astro builder maps `/en/...` and `/fr/...` paths via this value. We
+ * do NOT auto-derive `path` from the locale string because some
+ * deployments may want a flat root for the default locale (`/...`
+ * instead of `/en/...`); keeping it explicit per locale leaves that
+ * door open without a config-shape change.
+ */
+export declare const WebsiteLocaleConfigSchema: z.ZodObject<{
+    locale: z.ZodEnum<typeof AvailableLanguage>;
+    path: z.ZodString;
+}, z.core.$strict>;
+export type WebsiteLocaleConfig = z.infer<typeof WebsiteLocaleConfigSchema>;
+/**
+ * Per-service marketing-website configuration block.
+ *
+ * Authored as `export default defineWebsiteConfig({...})` in
+ * `<website-service-root>/wildo.website.config.ts`. The Astro
+ * build loads this file once at bootstrap via jiti and composes
+ * a `WebsiteSiteContext`; helpers consume that composed context rather than
+ * this raw value.
+ *
+ * @example
+ * ```ts
+ * import { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';
+ * import { defineWebsiteConfig } from '@wildo-ai/saas-website';
+ *
+ * export default defineWebsiteConfig({
+ *   publicOrigin: 'https://example.com',
+ *   appOrigin: 'https://app.example.com',
+ *   defaultLocale: AvailableLanguage.EN,
+ *   locales: [
+ *     { locale: AvailableLanguage.EN, path: 'en' },
+ *     { locale: AvailableLanguage.FR, path: 'fr' },
+ *   ],
+ *   csp: { enabled: true, reportOnly: true },
+ * });
+ * ```
+ */
+export declare const WildoMarketingWebsiteConfigSchema: z.ZodObject<{
+    /**
+     * Public origin of the marketing site (apex / www) — canonical
+     * input the Astro head renderer emits as absolute URLs
+     * (`<link rel="canonical">`, `og:url`, hreflang `href`,
+     * sitemap base, structured-data `mainEntityOfPage`).
+     *
+     * MUST NOT end with `/` — the head renderer composes
+     * `${publicOrigin}${routePath}` and a trailing slash would emit
+     * `https://example.com//`. Surface the constraint loudly here
+     * rather than silently corrupting URLs at build time.
+     */
+    publicOrigin: z.ZodURL;
+    /**
+     * Origin of the SaaS application the marketing site links into
+     * (signup / login / pricing → checkout).
+     *
+     * **Today**: NO runtime consumer. The cross-origin handoff
+     * surface that will read it does not exist yet. Authored
+     * eagerly so the link-surface PR is a single framework-owned move
+     * — until then the field is exercised only by the schema
+     * parser.
+     *
+     * Distinct from the general `WildoSaasConfig.services.<name>`
+     * URL surface because the marketing site is a separate Astro
+     * project that does not load the full SaaS app graph at build
+     * time.
+     */
+    appOrigin: z.ZodURL;
+    /**
+     * Backend API origin the marketing site POSTs to for anonymous
+     * captures (lead / draft-note forms) — e.g.
+     * `https://api.example.com`. Threaded through
+     * `WebsiteRuntimeContext.apiOrigin` into the React island that
+     * constructs the `WebsiteAnonymousSessionClient`.
+     *
+     * OPTIONAL because a pure brochure site with no capture forms never
+     * talks to an API — only sites that host an anonymous-capture
+     * section need it. When such a section renders without a resolved
+     * `apiOrigin`, the section surfaces a loud misconfiguration rather
+     * than silently POSTing nowhere.
+     *
+     * MUST NOT end with `/` — the anon client composes
+     * `${apiOrigin}${MAIN_API_BASE_PATH}${path}` and a trailing slash
+     * would emit a doubled `//` in the request URL. (The client also
+     * defensively strips trailing slashes, but the refine surfaces the
+     * mistake at authoring time.)
+     *
+     * Distinct from `appOrigin` (the human-facing app the marketing CTAs
+     * link into) and `publicOrigin` (the marketing site's own canonical
+     * origin): this is the machine-to-machine API host.
+     */
+    apiOrigin: z.ZodOptional<z.ZodURL>;
+    /**
+     * Optional Content-Security-Policy override for the marketing site.
+     * Consumed by the website-local `sync-nginx-csp` step, which emits
+     * the generated artifact for Astro page injection and rewrites the
+     * website nginx marker file from the same resolved output.
+     */
+    csp: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        reportOnly: z.ZodDefault<z.ZodBoolean>;
+        mergeStrategy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/platform-config-lib").CspMergeStrategy>>;
+        directives: z.ZodDefault<z.ZodObject<Record<"default-src" | "script-src" | "style-src" | "img-src" | "connect-src" | "font-src" | "frame-src" | "frame-ancestors" | "object-src" | "form-action" | "base-uri" | "manifest-src" | "media-src" | "worker-src", z.ZodOptional<z.ZodArray<z.ZodString>>>, z.core.$strict>>;
+        reportUri: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    /**
+     * Default locale the marketing site serves for unmatched URLs
+     * and as the canonical hreflang signal. Must appear in
+     * `locales` below (cross-check enforced by the schema-level
+     * `.superRefine`).
+     *
+     * Read by `buildAstroI18nConfig(...)` (drives Astro's own
+     * `i18n.defaultLocale`) and by the head renderer (drives
+     * `<html lang="...">`, `og:locale`, hreflang `x-default`).
+     */
+    defaultLocale: z.ZodEnum<typeof AvailableLanguage>;
+    /**
+     * Ordered list of locales the marketing site builds. Order is
+     * preserved (used by the language switcher rendering and by
+     * the sitemap emitter — when the sitemap surface lands).
+     *
+     * Read by `buildAstroI18nConfig(...)` (Astro `i18n.locales`),
+     * by `assertLabelPacksValid(...)` (one label pack per locale),
+     * by `loadWebsitePageRuntime(...)` (per-page locale resolution),
+     * and by the head renderer (hreflang alternates).
+     */
+    locales: z.ZodArray<z.ZodObject<{
+        locale: z.ZodEnum<typeof AvailableLanguage>;
+        path: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WildoMarketingWebsiteConfig = z.infer<typeof WildoMarketingWebsiteConfigSchema>;
+export type WildoMarketingWebsiteConfigInput = z.input<typeof WildoMarketingWebsiteConfigSchema>;
+/** @wildo_source:part:end engine.saas-website.config */
+//# sourceMappingURL=wildo-website-config.schemas.d.ts.map

package/dist/esm/config/wildo-website-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildo-website-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/config/wildo-website-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AAEvF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;kBASpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,iCAAiC;IAE1C;;;;;;;;;;OAUG;;IASH;;;;;;;;;;;;;;OAcG;;IAGH;;;;;;;;;;;;;;;;;;;;;;OAsBG;;IAWH;;;;;OAKG;;;;;;;;IAGH;;;;;;;;;OASG;;IAGH;;;;;;;;;OASG;;;;;kBAqDH,CAAC;AACL,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AACjG,wDAAwD"}

package/dist/esm/config/wildo-website-config.schemas.js

@@ -0,0 +1,302 @@
+/**
+ * @wildo_source:part:start engine.saas-website.config facet:layer:engine facet:family:marketing-website
+ *
+ * Per-service marketing-website configuration block, authored in
+ * the website service folder as `wildo.website.config.ts`.
+ *
+ * # What this file's loaded value is used for TODAY
+ *
+ * This schema is the single source of truth for the marketing-site routing
+ * and origin surface. Every consumer reads here:
+ *
+ *   - `defaultLocale` + `locales` — read by `buildAstroI18nConfig(...)`,
+ *     `assertLabelPacksValid(...)`, `loadWebsitePageRuntime(...)` and
+ *     `renderWebsitePageHeadHtml(...)` via the shared `WebsiteSiteContext`.
+ *   - `publicOrigin` — read by the head renderer to compose absolute
+ *     `<link rel="canonical">`, `og:url`, hreflang `href` URLs and
+ *     the structured-data `mainEntityOfPage`. The previous
+ *     `WebsiteRootConfig.seo.siteOrigin` was deleted.
+ *   - `appOrigin` — has NO runtime consumer today. The
+ *     marketing → app handoff link surface that will read it does
+ *     not exist yet. Authored eagerly so the link-surface PR is a
+ *     single framework-owned move; until then the field is exercised
+ *     only by the schema parser.
+ *   - `csp?` — read by the website-local `sync-nginx-csp` build step,
+ *     which merges the app-static posture with `infra.csp?.<serviceKey>`,
+ *     emits the generated artifact consumed by Astro pages, and rewrites
+ *     the checked-in nginx marker file used by the website Docker image.
+ *
+ * Future companion subprocesses that introspect the marketing
+ * surface (locale-coverage audits, label-pack validation against
+ * authored locales, SEO-link sanity checks) will also read here —
+ * none exist today.
+ *
+ * # Why this is per-service website configuration
+ *
+ * Co-locating the schema with the engine package that owns its semantics
+ * keeps three concerns separate from application-root service declarations:
+ *
+ *   1. **Right reuse axis.** Marketing-site content (locales, SEO origins,
+ *      future label-pack overrides, marketing-only CTAs) is conceptually
+ *      different from saas-app-level service declarations (`path`,
+ *      `serviceName`, `frontendType`, `sessionStorage`). The marketing
+ *      config travels with the website service folder, NOT with the
+ *      SaaS app root. Two unrelated lifecycles, two different review
+ *      audiences.
+ *   2. **Engine boundary.** `platform-config-lib` no longer needs to
+ *      depend on `@wildo-ai/presets-components-models` (the home of
+ *      `AvailableLanguage`) just to type the marketing-site locale
+ *      enum. Adding a new website primitive (a new SEO field, a new
+ *      locale-pack id) belongs with the website package and its public
+ *      configuration contract.
+ *   3. **Disambiguator hazard.** The previous root-level
+ *      `marketingWebsite?` block silently assumed "one STATIC_WEBSITE
+ *      service per SaaS app" — but nothing in the schema enforced it.
+ *      Two STATIC_WEBSITE services would have silently shared one
+ *      config block with no obvious "which one wins?" answer. The
+ *      application configuration rejects more than one STATIC_WEBSITE (and
+ *      TECH_DOC) service, so the per-service config-file lookup is
+ *      deterministic by construction.
+ *
+ * # Schema decisions encoded here
+ *
+ * - `z.strictObject` so authoring an unknown key surfaces as a parse
+ *   error at `defineWebsiteConfig` time instead of being silently
+ *   dropped (same posture as `WildoSaasConfigSchema` and
+ *   `WildoTechnicalDocConfigSchema`).
+ *
+ * - **No `enabled` field.** The gate is "is there a `wildo.website.config.ts`
+ *   in a `frontendType: STATIC_WEBSITE` service folder?" — file
+ *   presence under a STATIC_WEBSITE service IS the enable signal.
+ *   The Astro build / dev companion / future audit CLI requires the
+ *   file when it walks a STATIC_WEBSITE service folder, so a
+ *   half-authored config simply cannot exist (the loader fails
+ *   closed). Removing the boolean closes a foot-gun: an authored
+ *   `enabled: false` block was previously a silent way to keep the
+ *   config "warm" without shipping anything, and consumers had to
+ *   remember to read the flag in addition to the file presence — a
+ *   future read-the-config / forget-the-flag bug waiting to happen.
+ *   A separate `services.<key>.enabled` pattern (orthogonal to
+ *   marketing-website) is the right place for any "temporarily
+ *   disable this service" story (deferred — see DASHBOARD).
+ *
+ * - URL fields are `z.url()` (Zod 4 native validator) so we get
+ *   protocol + host parsing for free, matching the rest of the
+ *   codebase.
+ *
+ * - `csp?` is typed against `WildoCspConfigSchema` from
+ *   `@wildo-ai/platform-config-lib`, mirroring the docs service's
+ *   `wildo.tech-doc.config.ts` contract. The parsed value is consumed by
+ *   the shared `resolveCspPolicy()` / `emitCspArtifacts()` generator flow.
+ *
+ * - `defaultLocale ∈ locales` cross-check via `.superRefine` —
+ *   keeping `defaultLocale` as a top-level field is product-explicit
+ *   ("which locale URL is the canonical one") and decouples it from
+ *   list ordering. Locale-path uniqueness AND locale-value
+ *   uniqueness are also enforced — duplicate paths would silently
+ *   overwrite each other in the Astro build and corrupt the sitemap;
+ *   duplicate locales would produce duplicate hreflang entries.
+ *
+ * - Locale primitive is `AvailableLanguage`. The schema imports it
+ *   from `@wildo-ai/presets-components-models/public-runtime` (the
+ *   side-effect-free public-runtime seam), but **consumers authoring
+ *   `wildo.website.config.ts` must import it from
+ *   `@wildo-ai/saas-models/public-runtime`**. Both paths produce identical
+ *   values; saas-models simply re-exports the presets atom. Picking
+ *   one path consistently across consumer files prevents drift in
+ *   docs / examples / search results. Values authored in
+ *   `wildo.website.config.ts` are the lowercase BCP-47 strings
+ *   (`'en'`, `'fr'`), NOT the UPPERCASE TS enum member names
+ *   (`EN`, `FR`). `z.enum(AvailableLanguage)` parses against the
+ *   enum VALUES, which is what we want.
+ */
+import { WildoCspConfigSchema } from '@wildo-ai/platform-config-lib';
+import { z } from 'zod';
+import { AvailableLanguage } from '@wildo-ai/presets-components-models/public-runtime';
+/**
+ * Per-locale configuration. Each authored locale gets one entry.
+ *
+ * `path` is the locale URL prefix segment (e.g. `'en'`, `'fr'`) — the
+ * Astro builder maps `/en/...` and `/fr/...` paths via this value. We
+ * do NOT auto-derive `path` from the locale string because some
+ * deployments may want a flat root for the default locale (`/...`
+ * instead of `/en/...`); keeping it explicit per locale leaves that
+ * door open without a config-shape change.
+ */
+export const WebsiteLocaleConfigSchema = z.strictObject({
+    locale: z.enum(AvailableLanguage),
+    path: z
+        .string()
+        .min(1)
+        .regex(/^[a-z0-9-]+$/, 'locale path must be lowercase alphanumeric with hyphens (becomes a URL segment)'),
+});
+/**
+ * Per-service marketing-website configuration block.
+ *
+ * Authored as `export default defineWebsiteConfig({...})` in
+ * `<website-service-root>/wildo.website.config.ts`. The Astro
+ * build loads this file once at bootstrap via jiti and composes
+ * a `WebsiteSiteContext`; helpers consume that composed context rather than
+ * this raw value.
+ *
+ * @example
+ * ```ts
+ * import { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';
+ * import { defineWebsiteConfig } from '@wildo-ai/saas-website';
+ *
+ * export default defineWebsiteConfig({
+ *   publicOrigin: 'https://example.com',
+ *   appOrigin: 'https://app.example.com',
+ *   defaultLocale: AvailableLanguage.EN,
+ *   locales: [
+ *     { locale: AvailableLanguage.EN, path: 'en' },
+ *     { locale: AvailableLanguage.FR, path: 'fr' },
+ *   ],
+ *   csp: { enabled: true, reportOnly: true },
+ * });
+ * ```
+ */
+export const WildoMarketingWebsiteConfigSchema = z
+    .strictObject({
+    /**
+     * Public origin of the marketing site (apex / www) — canonical
+     * input the Astro head renderer emits as absolute URLs
+     * (`<link rel="canonical">`, `og:url`, hreflang `href`,
+     * sitemap base, structured-data `mainEntityOfPage`).
+     *
+     * MUST NOT end with `/` — the head renderer composes
+     * `${publicOrigin}${routePath}` and a trailing slash would emit
+     * `https://example.com//`. Surface the constraint loudly here
+     * rather than silently corrupting URLs at build time.
+     */
+    publicOrigin: z
+        .url()
+        .refine((value) => !value.endsWith('/'), {
+        error: 'WildoMarketingWebsiteConfig.publicOrigin must NOT end with "/" (the head ' +
+            'renderer concatenates publicOrigin + routePath; trailing slash would emit "//")',
+    }),
+    /**
+     * Origin of the SaaS application the marketing site links into
+     * (signup / login / pricing → checkout).
+     *
+     * **Today**: NO runtime consumer. The cross-origin handoff
+     * surface that will read it does not exist yet. Authored
+     * eagerly so the link-surface PR is a single framework-owned move
+     * — until then the field is exercised only by the schema
+     * parser.
+     *
+     * Distinct from the general `WildoSaasConfig.services.<name>`
+     * URL surface because the marketing site is a separate Astro
+     * project that does not load the full SaaS app graph at build
+     * time.
+     */
+    appOrigin: z.url(),
+    /**
+     * Backend API origin the marketing site POSTs to for anonymous
+     * captures (lead / draft-note forms) — e.g.
+     * `https://api.example.com`. Threaded through
+     * `WebsiteRuntimeContext.apiOrigin` into the React island that
+     * constructs the `WebsiteAnonymousSessionClient`.
+     *
+     * OPTIONAL because a pure brochure site with no capture forms never
+     * talks to an API — only sites that host an anonymous-capture
+     * section need it. When such a section renders without a resolved
+     * `apiOrigin`, the section surfaces a loud misconfiguration rather
+     * than silently POSTing nowhere.
+     *
+     * MUST NOT end with `/` — the anon client composes
+     * `${apiOrigin}${MAIN_API_BASE_PATH}${path}` and a trailing slash
+     * would emit a doubled `//` in the request URL. (The client also
+     * defensively strips trailing slashes, but the refine surfaces the
+     * mistake at authoring time.)
+     *
+     * Distinct from `appOrigin` (the human-facing app the marketing CTAs
+     * link into) and `publicOrigin` (the marketing site's own canonical
+     * origin): this is the machine-to-machine API host.
+     */
+    apiOrigin: z
+        .url()
+        .refine((value) => !value.endsWith('/'), {
+        error: 'WildoMarketingWebsiteConfig.apiOrigin must NOT end with "/" (the anonymous ' +
+            'client concatenates apiOrigin + MAIN_API_BASE_PATH + path; a trailing slash ' +
+            'would emit "//")',
+    })
+        .optional(),
+    /**
+     * Optional Content-Security-Policy override for the marketing site.
+     * Consumed by the website-local `sync-nginx-csp` step, which emits
+     * the generated artifact for Astro page injection and rewrites the
+     * website nginx marker file from the same resolved output.
+     */
+    csp: WildoCspConfigSchema.optional(),
+    /**
+     * Default locale the marketing site serves for unmatched URLs
+     * and as the canonical hreflang signal. Must appear in
+     * `locales` below (cross-check enforced by the schema-level
+     * `.superRefine`).
+     *
+     * Read by `buildAstroI18nConfig(...)` (drives Astro's own
+     * `i18n.defaultLocale`) and by the head renderer (drives
+     * `<html lang="...">`, `og:locale`, hreflang `x-default`).
+     */
+    defaultLocale: z.enum(AvailableLanguage),
+    /**
+     * Ordered list of locales the marketing site builds. Order is
+     * preserved (used by the language switcher rendering and by
+     * the sitemap emitter — when the sitemap surface lands).
+     *
+     * Read by `buildAstroI18nConfig(...)` (Astro `i18n.locales`),
+     * by `assertLabelPacksValid(...)` (one label pack per locale),
+     * by `loadWebsitePageRuntime(...)` (per-page locale resolution),
+     * and by the head renderer (hreflang alternates).
+     */
+    locales: z.array(WebsiteLocaleConfigSchema).min(1),
+})
+    .superRefine((config, ctx) => {
+    const declaredLocales = new Set(config.locales.map((entry) => entry.locale));
+    if (!declaredLocales.has(config.defaultLocale)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['defaultLocale'],
+            message: `defaultLocale '${config.defaultLocale}' is not declared in 'locales' ` +
+                `(declared: [${[...declaredLocales].join(', ')}]). The default locale ` +
+                `must be one of the locales the site actually builds.`,
+        });
+    }
+    // Locale-path uniqueness: two entries collapsing to the same URL
+    // segment would silently overwrite each other in the Astro build
+    // and corrupt the sitemap. Fail closed at parse time.
+    const pathOwners = new Map();
+    for (const entry of config.locales) {
+        const previous = pathOwners.get(entry.path);
+        if (previous !== undefined) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['locales'],
+                message: `Locale path '${entry.path}' is declared by both '${previous}' and ` +
+                    `'${entry.locale}'. Each locale must have a unique URL path segment.`,
+            });
+            continue;
+        }
+        pathOwners.set(entry.path, entry.locale);
+    }
+    // Locale-value uniqueness: same locale appearing twice would
+    // produce duplicate hreflang entries and ambiguous default-locale
+    // resolution.
+    const localeOwners = new Map();
+    for (const entry of config.locales) {
+        const previousPath = localeOwners.get(entry.locale);
+        if (previousPath !== undefined) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['locales'],
+                message: `Locale '${entry.locale}' is declared twice (paths '${previousPath}' ` +
+                    `and '${entry.path}'). Each locale must appear at most once.`,
+            });
+            continue;
+        }
+        localeOwners.set(entry.locale, entry.path);
+    }
+});
+/** @wildo_source:part:end engine.saas-website.config */
+//# sourceMappingURL=wildo-website-config.schemas.js.map

package/dist/esm/config/wildo-website-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildo-website-config.schemas.js","sourceRoot":"","sources":["../../../../src/config/wildo-website-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AAEvF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACjC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,cAAc,EACd,iFAAiF,CAClF;CACJ,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,YAAY,CAAC;IACZ;;;;;;;;;;OAUG;IACH,YAAY,EAAE,CAAC;SACZ,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACvC,KAAK,EACH,2EAA2E;YAC3E,iFAAiF;KACpF,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;IAElB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,EAAE,CAAC;SACT,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACvC,KAAK,EACH,6EAA6E;YAC7E,8EAA8E;YAC9E,kBAAkB;KACrB,CAAC;SACD,QAAQ,EAAE;IAEb;;;;;OAKG;IACH,GAAG,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAEpC;;;;;;;;;OASG;IACH,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAExC;;;;;;;;;OASG;IACH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnD,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,kBAAkB,MAAM,CAAC,aAAa,iCAAiC;gBACvE,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB;gBACvE,sDAAsD;SACzD,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EACL,gBAAgB,KAAK,CAAC,IAAI,0BAA0B,QAAQ,QAAQ;oBACpE,IAAI,KAAK,CAAC,MAAM,qDAAqD;aACxE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,6DAA6D;IAC7D,kEAAkE;IAClE,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EACL,WAAW,KAAK,CAAC,MAAM,+BAA+B,YAAY,IAAI;oBACtE,QAAQ,KAAK,CAAC,IAAI,2CAA2C;aAChE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,wDAAwD","sourcesContent":["/**\n * @wildo_source:part:start engine.saas-website.config facet:layer:engine facet:family:marketing-website\n *\n * Per-service marketing-website configuration block, authored in\n * the website service folder as `wildo.website.config.ts`.\n *\n * # What this file's loaded value is used for TODAY\n *\n * This schema is the single source of truth for the marketing-site routing\n * and origin surface. Every consumer reads here:\n *\n *   - `defaultLocale` + `locales` — read by `buildAstroI18nConfig(...)`,\n *     `assertLabelPacksValid(...)`, `loadWebsitePageRuntime(...)` and\n *     `renderWebsitePageHeadHtml(...)` via the shared `WebsiteSiteContext`.\n *   - `publicOrigin` — read by the head renderer to compose absolute\n *     `<link rel=\"canonical\">`, `og:url`, hreflang `href` URLs and\n *     the structured-data `mainEntityOfPage`. The previous\n *     `WebsiteRootConfig.seo.siteOrigin` was deleted.\n *   - `appOrigin` — has NO runtime consumer today. The\n *     marketing → app handoff link surface that will read it does\n *     not exist yet. Authored eagerly so the link-surface PR is a\n *     single framework-owned move; until then the field is exercised\n *     only by the schema parser.\n *   - `csp?` — read by the website-local `sync-nginx-csp` build step,\n *     which merges the app-static posture with `infra.csp?.<serviceKey>`,\n *     emits the generated artifact consumed by Astro pages, and rewrites\n *     the checked-in nginx marker file used by the website Docker image.\n *\n * Future companion subprocesses that introspect the marketing\n * surface (locale-coverage audits, label-pack validation against\n * authored locales, SEO-link sanity checks) will also read here —\n * none exist today.\n *\n * # Why this is per-service website configuration\n *\n * Co-locating the schema with the engine package that owns its semantics\n * keeps three concerns separate from application-root service declarations:\n *\n *   1. **Right reuse axis.** Marketing-site content (locales, SEO origins,\n *      future label-pack overrides, marketing-only CTAs) is conceptually\n *      different from saas-app-level service declarations (`path`,\n *      `serviceName`, `frontendType`, `sessionStorage`). The marketing\n *      config travels with the website service folder, NOT with the\n *      SaaS app root. Two unrelated lifecycles, two different review\n *      audiences.\n *   2. **Engine boundary.** `platform-config-lib` no longer needs to\n *      depend on `@wildo-ai/presets-components-models` (the home of\n *      `AvailableLanguage`) just to type the marketing-site locale\n *      enum. Adding a new website primitive (a new SEO field, a new\n *      locale-pack id) belongs with the website package and its public\n *      configuration contract.\n *   3. **Disambiguator hazard.** The previous root-level\n *      `marketingWebsite?` block silently assumed \"one STATIC_WEBSITE\n *      service per SaaS app\" — but nothing in the schema enforced it.\n *      Two STATIC_WEBSITE services would have silently shared one\n *      config block with no obvious \"which one wins?\" answer. The\n *      application configuration rejects more than one STATIC_WEBSITE (and\n *      TECH_DOC) service, so the per-service config-file lookup is\n *      deterministic by construction.\n *\n * # Schema decisions encoded here\n *\n * - `z.strictObject` so authoring an unknown key surfaces as a parse\n *   error at `defineWebsiteConfig` time instead of being silently\n *   dropped (same posture as `WildoSaasConfigSchema` and\n *   `WildoTechnicalDocConfigSchema`).\n *\n * - **No `enabled` field.** The gate is \"is there a `wildo.website.config.ts`\n *   in a `frontendType: STATIC_WEBSITE` service folder?\" — file\n *   presence under a STATIC_WEBSITE service IS the enable signal.\n *   The Astro build / dev companion / future audit CLI requires the\n *   file when it walks a STATIC_WEBSITE service folder, so a\n *   half-authored config simply cannot exist (the loader fails\n *   closed). Removing the boolean closes a foot-gun: an authored\n *   `enabled: false` block was previously a silent way to keep the\n *   config \"warm\" without shipping anything, and consumers had to\n *   remember to read the flag in addition to the file presence — a\n *   future read-the-config / forget-the-flag bug waiting to happen.\n *   A separate `services.<key>.enabled` pattern (orthogonal to\n *   marketing-website) is the right place for any \"temporarily\n *   disable this service\" story (deferred — see DASHBOARD).\n *\n * - URL fields are `z.url()` (Zod 4 native validator) so we get\n *   protocol + host parsing for free, matching the rest of the\n *   codebase.\n *\n * - `csp?` is typed against `WildoCspConfigSchema` from\n *   `@wildo-ai/platform-config-lib`, mirroring the docs service's\n *   `wildo.tech-doc.config.ts` contract. The parsed value is consumed by\n *   the shared `resolveCspPolicy()` / `emitCspArtifacts()` generator flow.\n *\n * - `defaultLocale ∈ locales` cross-check via `.superRefine` —\n *   keeping `defaultLocale` as a top-level field is product-explicit\n *   (\"which locale URL is the canonical one\") and decouples it from\n *   list ordering. Locale-path uniqueness AND locale-value\n *   uniqueness are also enforced — duplicate paths would silently\n *   overwrite each other in the Astro build and corrupt the sitemap;\n *   duplicate locales would produce duplicate hreflang entries.\n *\n * - Locale primitive is `AvailableLanguage`. The schema imports it\n *   from `@wildo-ai/presets-components-models/public-runtime` (the\n *   side-effect-free public-runtime seam), but **consumers authoring\n *   `wildo.website.config.ts` must import it from\n *   `@wildo-ai/saas-models/public-runtime`**. Both paths produce identical\n *   values; saas-models simply re-exports the presets atom. Picking\n *   one path consistently across consumer files prevents drift in\n *   docs / examples / search results. Values authored in\n *   `wildo.website.config.ts` are the lowercase BCP-47 strings\n *   (`'en'`, `'fr'`), NOT the UPPERCASE TS enum member names\n *   (`EN`, `FR`). `z.enum(AvailableLanguage)` parses against the\n *   enum VALUES, which is what we want.\n */\n\nimport { WildoCspConfigSchema } from '@wildo-ai/platform-config-lib';\nimport { z } from 'zod';\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Per-locale configuration. Each authored locale gets one entry.\n *\n * `path` is the locale URL prefix segment (e.g. `'en'`, `'fr'`) — the\n * Astro builder maps `/en/...` and `/fr/...` paths via this value. We\n * do NOT auto-derive `path` from the locale string because some\n * deployments may want a flat root for the default locale (`/...`\n * instead of `/en/...`); keeping it explicit per locale leaves that\n * door open without a config-shape change.\n */\nexport const WebsiteLocaleConfigSchema = z.strictObject({\n  locale: z.enum(AvailableLanguage),\n  path: z\n    .string()\n    .min(1)\n    .regex(\n      /^[a-z0-9-]+$/,\n      'locale path must be lowercase alphanumeric with hyphens (becomes a URL segment)',\n    ),\n});\nexport type WebsiteLocaleConfig = z.infer<typeof WebsiteLocaleConfigSchema>;\n\n/**\n * Per-service marketing-website configuration block.\n *\n * Authored as `export default defineWebsiteConfig({...})` in\n * `<website-service-root>/wildo.website.config.ts`. The Astro\n * build loads this file once at bootstrap via jiti and composes\n * a `WebsiteSiteContext`; helpers consume that composed context rather than\n * this raw value.\n *\n * @example\n * ```ts\n * import { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n * import { defineWebsiteConfig } from '@wildo-ai/saas-website';\n *\n * export default defineWebsiteConfig({\n *   publicOrigin: 'https://example.com',\n *   appOrigin: 'https://app.example.com',\n *   defaultLocale: AvailableLanguage.EN,\n *   locales: [\n *     { locale: AvailableLanguage.EN, path: 'en' },\n *     { locale: AvailableLanguage.FR, path: 'fr' },\n *   ],\n *   csp: { enabled: true, reportOnly: true },\n * });\n * ```\n */\nexport const WildoMarketingWebsiteConfigSchema = z\n  .strictObject({\n    /**\n     * Public origin of the marketing site (apex / www) — canonical\n     * input the Astro head renderer emits as absolute URLs\n     * (`<link rel=\"canonical\">`, `og:url`, hreflang `href`,\n     * sitemap base, structured-data `mainEntityOfPage`).\n     *\n     * MUST NOT end with `/` — the head renderer composes\n     * `${publicOrigin}${routePath}` and a trailing slash would emit\n     * `https://example.com//`. Surface the constraint loudly here\n     * rather than silently corrupting URLs at build time.\n     */\n    publicOrigin: z\n      .url()\n      .refine((value) => !value.endsWith('/'), {\n        error:\n          'WildoMarketingWebsiteConfig.publicOrigin must NOT end with \"/\" (the head ' +\n          'renderer concatenates publicOrigin + routePath; trailing slash would emit \"//\")',\n      }),\n\n    /**\n     * Origin of the SaaS application the marketing site links into\n     * (signup / login / pricing → checkout).\n     *\n     * **Today**: NO runtime consumer. The cross-origin handoff\n     * surface that will read it does not exist yet. Authored\n     * eagerly so the link-surface PR is a single framework-owned move\n     * — until then the field is exercised only by the schema\n     * parser.\n     *\n     * Distinct from the general `WildoSaasConfig.services.<name>`\n     * URL surface because the marketing site is a separate Astro\n     * project that does not load the full SaaS app graph at build\n     * time.\n     */\n    appOrigin: z.url(),\n\n    /**\n     * Backend API origin the marketing site POSTs to for anonymous\n     * captures (lead / draft-note forms) — e.g.\n     * `https://api.example.com`. Threaded through\n     * `WebsiteRuntimeContext.apiOrigin` into the React island that\n     * constructs the `WebsiteAnonymousSessionClient`.\n     *\n     * OPTIONAL because a pure brochure site with no capture forms never\n     * talks to an API — only sites that host an anonymous-capture\n     * section need it. When such a section renders without a resolved\n     * `apiOrigin`, the section surfaces a loud misconfiguration rather\n     * than silently POSTing nowhere.\n     *\n     * MUST NOT end with `/` — the anon client composes\n     * `${apiOrigin}${MAIN_API_BASE_PATH}${path}` and a trailing slash\n     * would emit a doubled `//` in the request URL. (The client also\n     * defensively strips trailing slashes, but the refine surfaces the\n     * mistake at authoring time.)\n     *\n     * Distinct from `appOrigin` (the human-facing app the marketing CTAs\n     * link into) and `publicOrigin` (the marketing site's own canonical\n     * origin): this is the machine-to-machine API host.\n     */\n    apiOrigin: z\n      .url()\n      .refine((value) => !value.endsWith('/'), {\n        error:\n          'WildoMarketingWebsiteConfig.apiOrigin must NOT end with \"/\" (the anonymous ' +\n          'client concatenates apiOrigin + MAIN_API_BASE_PATH + path; a trailing slash ' +\n          'would emit \"//\")',\n      })\n      .optional(),\n\n    /**\n     * Optional Content-Security-Policy override for the marketing site.\n     * Consumed by the website-local `sync-nginx-csp` step, which emits\n     * the generated artifact for Astro page injection and rewrites the\n     * website nginx marker file from the same resolved output.\n     */\n    csp: WildoCspConfigSchema.optional(),\n\n    /**\n     * Default locale the marketing site serves for unmatched URLs\n     * and as the canonical hreflang signal. Must appear in\n     * `locales` below (cross-check enforced by the schema-level\n     * `.superRefine`).\n     *\n     * Read by `buildAstroI18nConfig(...)` (drives Astro's own\n     * `i18n.defaultLocale`) and by the head renderer (drives\n     * `<html lang=\"...\">`, `og:locale`, hreflang `x-default`).\n     */\n    defaultLocale: z.enum(AvailableLanguage),\n\n    /**\n     * Ordered list of locales the marketing site builds. Order is\n     * preserved (used by the language switcher rendering and by\n     * the sitemap emitter — when the sitemap surface lands).\n     *\n     * Read by `buildAstroI18nConfig(...)` (Astro `i18n.locales`),\n     * by `assertLabelPacksValid(...)` (one label pack per locale),\n     * by `loadWebsitePageRuntime(...)` (per-page locale resolution),\n     * and by the head renderer (hreflang alternates).\n     */\n    locales: z.array(WebsiteLocaleConfigSchema).min(1),\n  })\n  .superRefine((config, ctx) => {\n    const declaredLocales = new Set(config.locales.map((entry) => entry.locale));\n    if (!declaredLocales.has(config.defaultLocale)) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['defaultLocale'],\n        message:\n          `defaultLocale '${config.defaultLocale}' is not declared in 'locales' ` +\n          `(declared: [${[...declaredLocales].join(', ')}]). The default locale ` +\n          `must be one of the locales the site actually builds.`,\n      });\n    }\n\n    // Locale-path uniqueness: two entries collapsing to the same URL\n    // segment would silently overwrite each other in the Astro build\n    // and corrupt the sitemap. Fail closed at parse time.\n    const pathOwners = new Map<string, AvailableLanguage>();\n    for (const entry of config.locales) {\n      const previous = pathOwners.get(entry.path);\n      if (previous !== undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['locales'],\n          message:\n            `Locale path '${entry.path}' is declared by both '${previous}' and ` +\n            `'${entry.locale}'. Each locale must have a unique URL path segment.`,\n        });\n        continue;\n      }\n      pathOwners.set(entry.path, entry.locale);\n    }\n\n    // Locale-value uniqueness: same locale appearing twice would\n    // produce duplicate hreflang entries and ambiguous default-locale\n    // resolution.\n    const localeOwners = new Map<AvailableLanguage, string>();\n    for (const entry of config.locales) {\n      const previousPath = localeOwners.get(entry.locale);\n      if (previousPath !== undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['locales'],\n          message:\n            `Locale '${entry.locale}' is declared twice (paths '${previousPath}' ` +\n            `and '${entry.path}'). Each locale must appear at most once.`,\n        });\n        continue;\n      }\n      localeOwners.set(entry.locale, entry.path);\n    }\n  });\nexport type WildoMarketingWebsiteConfig = z.infer<typeof WildoMarketingWebsiteConfigSchema>;\nexport type WildoMarketingWebsiteConfigInput = z.input<typeof WildoMarketingWebsiteConfigSchema>;\n/** @wildo_source:part:end engine.saas-website.config */\n"]}

package/dist/esm/config-loader.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @wildo-package @wildo-ai/saas-website (Node-only config-loader entry)
+ *
+ * Dedicated subpath for the per-service `wildo.website.config.ts`
+ * loader (`saas-website-slice.md` Step 7.5 — mirrors the
+ * `saas-technical-doc.md` Step 7.5 ship). Consumers:
+ *
+ *   - `examples/wonder-todos/website/astro.config.ts` — wires the
+ *     loader into the Astro build's `i18n` config.
+ *   - Future companion subprocesses that introspect the marketing
+ *     surface (locale coverage audits, SEO-link sanity checks).
+ *
+ * @wildo-boundary
+ *   This entry is on the **Node-only** side of the bundle boundary.
+ *   It re-exports `loadWebsiteConfig` (which transitively pulls
+ *   `loadConfig` from `@wildo-ai/platform-config-lib` — jiti-backed,
+ *   uses `node:fs` / `node:path` / `node:crypto`) and is therefore
+ *   carved into its own package subpath so it cannot leak into the
+ *   browser-side React-island bundle.
+ *
+ *   Enforced by `engine/saas-website/src/__tests__/bundle-isolation.test.ts`:
+ *     - This file IS in `ENTRY_FILES` (so the closure walker covers it).
+ *     - `@wildo-ai/platform-config-lib` is in `ALLOWED_BARE_SPECIFIERS`
+ *       AND `SSR_ONLY_BARE_SPECIFIERS`, which together prove the
+ *       specifier reaches the closure ONLY through this entry — never
+ *       through `index.ts`, `companion-exports.ts`, or `astro-island.ts`.
+ *
+ *   Re-exporting `loadWebsiteConfig` from `index.ts` would (a) drag
+ *   `@wildo-ai/platform-config-lib`'s heavy graph into the marketing-
+ *   site browser bundle and (b) trip the SSR-tier negative test
+ *   above — both fail-loud signals that this subpath separation
+ *   exists for a reason.
+ */
+export * from './config/load-website-config';
+//# sourceMappingURL=config-loader.d.ts.map

package/dist/esm/config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../../src/config-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc,8BAA8B,CAAC"}