@agentsean/actions 1.0.0

package/dist/executor.d.ts

@@ -0,0 +1,46 @@
+import type { SqliteDatabase } from "@agentsean/db";
+import type { Action, AppliedChange, SiteAdapter, ValidationContext, ValidationResult } from "./types.js";
+export type ExecuteResult = {
+    status: "applied";
+    action: Action;
+    change: AppliedChange;
+    changeId: string;
+} | {
+    status: "queued" | "rejected" | "failed";
+    action: Action;
+    validation?: ValidationResult | undefined;
+    error?: string | undefined;
+};
+export type ExecuteOptions = {
+    db: SqliteDatabase;
+    action: Action;
+    adapter: SiteAdapter;
+    approvalKey: Buffer;
+    halted: boolean;
+    now?: Date | undefined;
+    runId?: string | undefined;
+    appliedThisRun?: number | undefined;
+    budgetUsdDaily?: number | undefined;
+    estimatedCostUsd?: number | undefined;
+    dryRun?: boolean | undefined;
+};
+export declare function buildValidationContext(opts: ExecuteOptions, before: string, after: string): ValidationContext | {
+    error: string;
+};
+/**
+ * snapshot → apply → verify → record.
+ * Verify is non-negotiable: never trust a 200. Re-read the target and confirm
+ * the change landed. On verify failure, roll back from the shadow ledger.
+ */
+export declare function executeAction(opts: ExecuteOptions): Promise<ExecuteResult>;
+export declare function revertChange(opts: {
+    db: SqliteDatabase;
+    change: AppliedChange;
+    adapter: SiteAdapter;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+}>;
+//# sourceMappingURL=executor.d.ts.map

package/dist/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAepD,OAAO,KAAK,EACV,MAAM,EACN,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,aAAa,GACrB;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,GACD;IACE,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEN,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,cAAc,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC9B,CAAC;AAWF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,iBAAiB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA0BvC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAgGhF;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,EAAE,EAAE,cAAc,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAevD"}

package/dist/executor.js

@@ -0,0 +1,150 @@
+import { randomUUID } from "node:crypto";
+import { findings, pages } from "@agentsean/db";
+import { eq } from "drizzle-orm";
+import { validateParsed } from "./validator.js";
+import { countsForLedger, loadAllowlist, loadEntities, loadPages, loadSitePolicy, loadTwoKey, recordChange, saveAction, } from "./persist.js";
+function afterText(action, before) {
+    if ("title" in action.payload) {
+        return before;
+    }
+    if ("body" in action.payload)
+        return action.payload.body;
+    if ("metaDescription" in action.payload)
+        return action.payload.metaDescription;
+    return before;
+}
+export function buildValidationContext(opts, before, after) {
+    const site = loadSitePolicy(opts.db, opts.action.siteId);
+    if (!site)
+        return { error: `unknown site ${opts.action.siteId}` };
+    const now = opts.now ?? new Date();
+    const counts = countsForLedger(opts.db, opts.action.siteId, now);
+    return {
+        now,
+        site,
+        pages: loadPages(opts.db, opts.action.siteId),
+        allowlist: loadAllowlist(opts.db, opts.action.siteId),
+        entities: loadEntities(opts.db, opts.action.siteId),
+        appliedThisRun: opts.appliedThisRun ?? 0,
+        appliedThisHour: counts.appliedThisHour,
+        appliedThisDay: counts.appliedThisDay,
+        newPagesToday: counts.newPagesToday,
+        contentRefreshToday: counts.contentRefreshToday,
+        spentUsdToday: counts.spentUsdToday,
+        budgetUsdDaily: opts.budgetUsdDaily ?? 8,
+        estimatedCostUsd: opts.estimatedCostUsd ?? 0,
+        twoKeyApprovals: loadTwoKey(opts.db, opts.action.id),
+        halted: opts.halted,
+        beforeText: before,
+        afterText: after,
+        runId: opts.runId ?? randomUUID(),
+        approvalKey: opts.approvalKey,
+    };
+}
+/**
+ * snapshot → apply → verify → record.
+ * Verify is non-negotiable: never trust a 200. Re-read the target and confirm
+ * the change landed. On verify failure, roll back from the shadow ledger.
+ */
+export async function executeAction(opts) {
+    const action = opts.action;
+    saveAction(opts.db, action, "proposed");
+    let before = "";
+    try {
+        const read = await opts.adapter.read(action.target);
+        before = read.body;
+    }
+    catch (e) {
+        const error = e instanceof Error ? e.message : String(e);
+        saveAction(opts.db, action, "failed", { error });
+        return { status: "failed", action, error };
+    }
+    const dry = await opts.adapter.dryRun(action);
+    const ctx = buildValidationContext(opts, before, dry.after || afterText(action, before));
+    if ("error" in ctx) {
+        saveAction(opts.db, action, "failed", { error: ctx.error });
+        return { status: "failed", action, error: ctx.error };
+    }
+    const validation = validateParsed(action, ctx);
+    if (!validation.ok) {
+        const queued = validation.vetoes.every((v) => v.code === "OBSERVE_PERIOD" || v.code === "TWO_KEY" || v.code === "POLICY_TIER");
+        const observeOnly = validation.vetoes.every((v) => v.code === "OBSERVE_PERIOD");
+        const state = observeOnly || queued ? "queued" : "rejected";
+        saveAction(opts.db, action, state, {
+            error: validation.vetoes.map((v) => v.code).join(","),
+        });
+        return { status: state === "queued" ? "queued" : "rejected", action, validation };
+    }
+    if (opts.dryRun) {
+        saveAction(opts.db, action, "proposed");
+        return { status: "queued", action, validation };
+    }
+    let applied;
+    try {
+        applied = await opts.adapter.apply(action);
+    }
+    catch (e) {
+        const error = e instanceof Error ? e.message : String(e);
+        saveAction(opts.db, action, "failed", { error });
+        return { status: "failed", action, error };
+    }
+    const change = {
+        id: randomUUID(),
+        actionId: action.id,
+        siteId: action.siteId,
+        targetRef: applied.targetRef,
+        before: applied.before,
+        after: applied.after,
+        summary: applied.summary,
+        ...(applied.branch ? { branch: applied.branch } : {}),
+        ...(applied.commitSha ? { commitSha: applied.commitSha } : {}),
+        ...(applied.prUrl ? { prUrl: applied.prUrl } : {}),
+    };
+    const verified = await opts.adapter.verify(change);
+    if (!verified.ok) {
+        try {
+            await opts.adapter.rollback(change);
+        }
+        catch {
+            /* shadow ledger still holds the before snapshot */
+        }
+        saveAction(opts.db, action, "failed", {
+            error: `verify failed: ${verified.detail}`,
+        });
+        return { status: "failed", action, error: `verify failed: ${verified.detail}` };
+    }
+    const { changeId } = recordChange(opts.db, action, change);
+    saveAction(opts.db, action, "applied");
+    for (const fid of action.findingIds) {
+        opts.db
+            .update(findings)
+            .set({ status: "applied", resolvedAt: new Date().toISOString() })
+            .where(eq(findings.id, fid))
+            .run();
+    }
+    if ("title" in action.payload) {
+        opts.db
+            .update(pages)
+            .set({ title: action.payload.title })
+            .where(eq(pages.id, action.target.pageId))
+            .run();
+    }
+    return { status: "applied", action, change: { ...change, id: changeId }, changeId };
+}
+export async function revertChange(opts) {
+    const verifiedBefore = await opts.adapter.rollback(opts.change);
+    const check = {
+        ...opts.change,
+        after: verifiedBefore.after,
+        before: verifiedBefore.before,
+    };
+    const verified = await opts.adapter.verify({
+        ...check,
+        after: opts.change.before,
+    });
+    if (!verified.ok) {
+        return { ok: false, error: `revert verify failed: ${verified.detail}` };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=executor.js.map

package/dist/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,eAAe,EACf,aAAa,EACb,YAAY,EACZ,SAAS,EACT,cAAc,EACd,UAAU,EACV,YAAY,EACZ,UAAU,GAEX,MAAM,cAAc,CAAC;AAqCtB,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc;IAC/C,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACzD,IAAI,iBAAiB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,MAAc,EACd,KAAa;IAEb,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjE,OAAO;QACL,GAAG;QACH,IAAI;QACJ,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7C,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACrD,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACnD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;QACxC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;QACxC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC;QAC5C,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAExC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzD,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,sBAAsB,CAChC,IAAI,EACJ,MAAM,EACN,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CACvC,CAAC;IACF,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CACpC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAClF,CAAC;QACF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;QAChF,MAAM,KAAK,GAAsB,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/E,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACjC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzD,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAkB;QAC5B,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YACpC,KAAK,EAAE,kBAAkB,QAAQ,CAAC,MAAM,EAAE;SAC3C,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,EAAE;aACJ,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAChE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;aAC3B,GAAG,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;aACJ,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;aACpC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;aACzC,GAAG,EAAE,CAAC;IACX,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAIlC;IACC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,KAAK,GAAkB;QAC3B,GAAG,IAAI,CAAC,MAAM;QACd,KAAK,EAAE,cAAc,CAAC,KAAK;QAC3B,MAAM,EAAE,cAAc,CAAC,MAAM;KAC9B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,GAAG,KAAK;QACR,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/hmac.d.ts

@@ -0,0 +1,4 @@
+import type { Action } from "./types.js";
+export declare function signApproval(key: Buffer, action: Action, actor: string): string;
+export declare function verifyApproval(key: Buffer, action: Action, actor: string, hmac: string): boolean;
+//# sourceMappingURL=hmac.d.ts.map

package/dist/hmac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac.d.ts","sourceRoot":"","sources":["../src/hmac.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAWzC,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI/E;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAMT"}

package/dist/hmac.js

@@ -0,0 +1,23 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+function canonicalPayload(action) {
+    return JSON.stringify({
+        id: action.id,
+        kind: action.kind,
+        target: action.target,
+        payload: action.payload,
+    });
+}
+export function signApproval(key, action, actor) {
+    return createHmac("sha256", key)
+        .update(`${actor}\n${canonicalPayload(action)}`)
+        .digest("hex");
+}
+export function verifyApproval(key, action, actor, hmac) {
+    const expected = signApproval(key, action, actor);
+    const a = Buffer.from(expected, "hex");
+    const b = Buffer.from(hmac, "hex");
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+//# sourceMappingURL=hmac.js.map

package/dist/hmac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac.js","sourceRoot":"","sources":["../src/hmac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG1D,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,MAAc,EAAE,KAAa;IACrE,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SAC7B,MAAM,CAAC,GAAG,KAAK,KAAK,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;SAC/C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,MAAc,EACd,KAAa,EACb,IAAY;IAEZ,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/html.d.ts

@@ -0,0 +1,15 @@
+/** Live HTML is the only verify surface. Never trust a 200 from a write API. */
+export declare function htmlTitle(html: string): string | null;
+export declare function patchHtmlTitle(html: string, title: string): string;
+export declare function escapeHtml(value: string): string;
+export declare function fetchHtml(url: string, fetchFn?: typeof fetch, headers?: Record<string, string>): Promise<string>;
+export declare function verifyLiveTitle(url: string, expected: string, fetchFn?: typeof fetch): Promise<{
+    ok: boolean;
+    detail: string;
+    html: string;
+}>;
+export declare function titleFromPayload(payload: {
+    title?: string;
+}): string | null;
+export declare function requireTitle(payload: unknown): string;
+//# sourceMappingURL=html.d.ts.map

package/dist/html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.d.ts","sourceRoot":"","sources":["../src/html.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAclE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,KAAa,EAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAWxD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAE3E;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAUrD"}

package/dist/html.js

@@ -0,0 +1,52 @@
+/** Live HTML is the only verify surface. Never trust a 200 from a write API. */
+export function htmlTitle(html) {
+    const m = /<title[^>]*>([\s\S]*?)<\/title>/i.exec(html);
+    return m?.[1] ? m[1].trim() : null;
+}
+export function patchHtmlTitle(html, title) {
+    if (/<title[^>]*>[\s\S]*?<\/title>/i.test(html)) {
+        return html.replace(/<title[^>]*>[\s\S]*?<\/title>/i, `<title>${escapeHtml(title)}</title>`);
+    }
+    if (/<head[^>]*>/i.test(html)) {
+        return html.replace(/<head[^>]*>/i, (h) => `${h}<title>${escapeHtml(title)}</title>`);
+    }
+    return `<!doctype html><html><head><title>${escapeHtml(title)}</title></head><body></body></html>`;
+}
+export function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+export async function fetchHtml(url, fetchFn = fetch, headers) {
+    const res = await fetchFn(url, { headers: headers ?? {} });
+    if (!res.ok)
+        throw new Error(`GET ${url} → ${res.status}`);
+    return res.text();
+}
+export async function verifyLiveTitle(url, expected, fetchFn = fetch) {
+    const html = await fetchHtml(url, fetchFn);
+    const got = htmlTitle(html);
+    if (got === expected) {
+        return { ok: true, detail: `live <title> is ${expected}`, html };
+    }
+    return {
+        ok: false,
+        detail: `live <title> is ${got ?? "(missing)"}; expected ${expected}`,
+        html,
+    };
+}
+export function titleFromPayload(payload) {
+    return typeof payload.title === "string" ? payload.title : null;
+}
+export function requireTitle(payload) {
+    if (payload &&
+        typeof payload === "object" &&
+        "title" in payload &&
+        typeof payload.title === "string") {
+        return payload.title;
+    }
+    throw new Error("action payload has no title");
+}
+//# sourceMappingURL=html.js.map

package/dist/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../src/html.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa;IACxD,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,OAAO,CACjB,gCAAgC,EAChC,UAAU,UAAU,CAAC,KAAK,CAAC,UAAU,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CACjB,cAAc,EACd,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,KAAK,CAAC,UAAU,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,qCAAqC,UAAU,CAAC,KAAK,CAAC,qCAAqC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,UAAwB,KAAK,EAC7B,OAAgC;IAEhC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,QAAgB,EAChB,UAAwB,KAAK;IAE7B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,mBAAmB,GAAG,IAAI,WAAW,cAAc,QAAQ,EAAE;QACrE,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,OAAO,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,IACE,OAAO;QACP,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,IAAI,OAAO;QAClB,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { ACTION_KINDS, KIND_TIER, TWO_KEY_KINDS, NEW_PAGE_KINDS, CONTENT_GEN_KINDS, CONTENT_REFRESH_KINDS, isActionKind, type ActionKind, } from "./kinds.js";
+export { parseAction } from "./payloads.js";
+export { validateAction, validateParsed } from "./validator.js";
+export { executeAction, revertChange, buildValidationContext } from "./executor.js";
+export { planTitleActions, proposeTitle } from "./planner.js";
+export { signApproval, verifyApproval } from "./hmac.js";
+export { saveAction, recordChange, loadChange, markReverted, loadSitePolicy, loadPages, loadAllowlist, loadEntities, loadTwoKey, addTwoKey, recordEntity, upsertGitConnection, loadGitConnection, upsertAdapterConnection, loadAdapterConnection, listAdapterConnections, countsForLedger, actionFromRow, envelopeOf, } from "./persist.js";
+export { bannedHits, encodedPayloadHits, invisibleHits, collectActionText, stripInvisible, } from "./scan.js";
+export { extractUrls, extractDomains, sameSite } from "./urls.js";
+export { BLAST, DIFF_CAPS, TITLE_MAX, META_MAX, OBSERVE_DEFAULT_MS, OBSERVE_MIN_MS, type Action, type ActionPayload, type ActionTarget, type Impact, type ValidationContext, type ValidationResult, type Veto, type SiteAdapter, type AppliedChange, type AdapterApplyResult, type AdapterCapabilities, type AdapterDryRun, type AdapterRead, type AdapterVerifyResult, type SitePolicy, type PageRow, } from "./types.js";
+export { htmlTitle, patchHtmlTitle, fetchHtml, verifyLiveTitle, titleFromPayload, requireTitle, } from "./html.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,SAAS,EACT,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,SAAS,EACT,aAAa,EACb,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EACL,KAAK,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,kBAAkB,EAClB,cAAc,EACd,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,cAAc,EACd,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+export { ACTION_KINDS, KIND_TIER, TWO_KEY_KINDS, NEW_PAGE_KINDS, CONTENT_GEN_KINDS, CONTENT_REFRESH_KINDS, isActionKind, } from "./kinds.js";
+export { parseAction } from "./payloads.js";
+export { validateAction, validateParsed } from "./validator.js";
+export { executeAction, revertChange, buildValidationContext } from "./executor.js";
+export { planTitleActions, proposeTitle } from "./planner.js";
+export { signApproval, verifyApproval } from "./hmac.js";
+export { saveAction, recordChange, loadChange, markReverted, loadSitePolicy, loadPages, loadAllowlist, loadEntities, loadTwoKey, addTwoKey, recordEntity, upsertGitConnection, loadGitConnection, upsertAdapterConnection, loadAdapterConnection, listAdapterConnections, countsForLedger, actionFromRow, envelopeOf, } from "./persist.js";
+export { bannedHits, encodedPayloadHits, invisibleHits, collectActionText, stripInvisible, } from "./scan.js";
+export { extractUrls, extractDomains, sameSite } from "./urls.js";
+export { BLAST, DIFF_CAPS, TITLE_MAX, META_MAX, OBSERVE_DEFAULT_MS, OBSERVE_MIN_MS, } from "./types.js";
+export { htmlTitle, patchHtmlTitle, fetchHtml, verifyLiveTitle, titleFromPayload, requireTitle, } from "./html.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,SAAS,EACT,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,GAEb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,cAAc,EACd,SAAS,EACT,aAAa,EACb,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EACL,KAAK,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,kBAAkB,EAClB,cAAc,GAiBf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,cAAc,EACd,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAC"}

package/dist/kinds.d.ts

@@ -0,0 +1,12 @@
+/** Closed ActionKind enum — ~40 members. The LLM cannot invent a new kind. */
+export declare const ACTION_KINDS: readonly ["observe_snapshot", "record_finding", "inspect_indexation", "rewrite_title", "rewrite_meta_description", "rewrite_og_title", "rewrite_og_description", "rewrite_alt_text", "fix_heading", "add_h1", "repair_broken_internal_link", "regenerate_sitemap", "submit_sitemap", "add_lang", "add_viewport", "fix_title_length", "fix_meta_length", "add_image_dimensions", "insert_internal_link", "add_jsonld", "update_jsonld", "remove_invalid_jsonld", "refresh_content", "create_page", "add_breadcrumb", "add_faq_schema", "add_article_schema", "add_product_schema", "add_og_image", "edit_robots_txt", "edit_meta_robots", "add_redirect", "change_canonical", "change_hreflang", "delete_page", "send_outreach_email", "submit_disavow", "edit_llms_txt", "buy_link", "build_pbn", "exchange_links", "cloak", "sneaky_redirect", "hide_text", "write_third_party", "gate_reviews", "incentivize_reviews", "scrape_serp", "generate_ymyl", "generate_affiliate", "create_city_service_page"];
+export type ActionKind = (typeof ACTION_KINDS)[number];
+export declare const ACTION_KIND_SET: ReadonlySet<string>;
+/** Policy matrix from PLAN §4. T3/T4 are not overridable. */
+export declare const KIND_TIER: Record<ActionKind, 0 | 1 | 2 | 3 | 4>;
+export declare const TWO_KEY_KINDS: ReadonlySet<ActionKind>;
+export declare const NEW_PAGE_KINDS: ReadonlySet<ActionKind>;
+export declare const CONTENT_REFRESH_KINDS: ReadonlySet<ActionKind>;
+export declare const CONTENT_GEN_KINDS: ReadonlySet<ActionKind>;
+export declare function isActionKind(value: string): value is ActionKind;
+//# sourceMappingURL=kinds.d.ts.map

package/dist/kinds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kinds.d.ts","sourceRoot":"","sources":["../src/kinds.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,eAAO,MAAM,YAAY,48BAoDf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAAyB,CAAC;AAE1E,6DAA6D;AAC7D,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAoD3D,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,UAAU,CAUhD,CAAC;AAEH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,UAAU,CAA4B,CAAC;AAEhF,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,UAAU,CAExD,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,UAAU,CAMpD,CAAC;AAEH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D"}

package/dist/kinds.js

@@ -0,0 +1,135 @@
+/** Closed ActionKind enum — ~40 members. The LLM cannot invent a new kind. */
+export const ACTION_KINDS = [
+    "observe_snapshot",
+    "record_finding",
+    "inspect_indexation",
+    "rewrite_title",
+    "rewrite_meta_description",
+    "rewrite_og_title",
+    "rewrite_og_description",
+    "rewrite_alt_text",
+    "fix_heading",
+    "add_h1",
+    "repair_broken_internal_link",
+    "regenerate_sitemap",
+    "submit_sitemap",
+    "add_lang",
+    "add_viewport",
+    "fix_title_length",
+    "fix_meta_length",
+    "add_image_dimensions",
+    "insert_internal_link",
+    "add_jsonld",
+    "update_jsonld",
+    "remove_invalid_jsonld",
+    "refresh_content",
+    "create_page",
+    "add_breadcrumb",
+    "add_faq_schema",
+    "add_article_schema",
+    "add_product_schema",
+    "add_og_image",
+    "edit_robots_txt",
+    "edit_meta_robots",
+    "add_redirect",
+    "change_canonical",
+    "change_hreflang",
+    "delete_page",
+    "send_outreach_email",
+    "submit_disavow",
+    "edit_llms_txt",
+    "buy_link",
+    "build_pbn",
+    "exchange_links",
+    "cloak",
+    "sneaky_redirect",
+    "hide_text",
+    "write_third_party",
+    "gate_reviews",
+    "incentivize_reviews",
+    "scrape_serp",
+    "generate_ymyl",
+    "generate_affiliate",
+    "create_city_service_page",
+];
+export const ACTION_KIND_SET = new Set(ACTION_KINDS);
+/** Policy matrix from PLAN §4. T3/T4 are not overridable. */
+export const KIND_TIER = {
+    observe_snapshot: 0,
+    record_finding: 0,
+    inspect_indexation: 0,
+    rewrite_title: 1,
+    rewrite_meta_description: 1,
+    rewrite_og_title: 1,
+    rewrite_og_description: 1,
+    rewrite_alt_text: 1,
+    fix_heading: 1,
+    add_h1: 1,
+    repair_broken_internal_link: 1,
+    regenerate_sitemap: 1,
+    submit_sitemap: 1,
+    add_lang: 1,
+    add_viewport: 1,
+    fix_title_length: 1,
+    fix_meta_length: 1,
+    add_image_dimensions: 1,
+    insert_internal_link: 2,
+    add_jsonld: 2,
+    update_jsonld: 2,
+    remove_invalid_jsonld: 2,
+    refresh_content: 2,
+    create_page: 2,
+    add_breadcrumb: 2,
+    add_faq_schema: 2,
+    add_article_schema: 2,
+    add_product_schema: 2,
+    add_og_image: 2,
+    edit_robots_txt: 3,
+    edit_meta_robots: 3,
+    add_redirect: 3,
+    change_canonical: 3,
+    change_hreflang: 3,
+    delete_page: 3,
+    send_outreach_email: 3,
+    submit_disavow: 3,
+    edit_llms_txt: 3,
+    buy_link: 4,
+    build_pbn: 4,
+    exchange_links: 4,
+    cloak: 4,
+    sneaky_redirect: 4,
+    hide_text: 4,
+    write_third_party: 4,
+    gate_reviews: 4,
+    incentivize_reviews: 4,
+    scrape_serp: 4,
+    generate_ymyl: 4,
+    generate_affiliate: 4,
+    create_city_service_page: 4,
+};
+export const TWO_KEY_KINDS = new Set([
+    "edit_robots_txt",
+    "edit_meta_robots",
+    "add_redirect",
+    "change_canonical",
+    "change_hreflang",
+    "delete_page",
+    "submit_disavow",
+    "edit_llms_txt",
+    "send_outreach_email",
+]);
+export const NEW_PAGE_KINDS = new Set(["create_page"]);
+export const CONTENT_REFRESH_KINDS = new Set([
+    "refresh_content",
+]);
+export const CONTENT_GEN_KINDS = new Set([
+    "refresh_content",
+    "create_page",
+    "generate_ymyl",
+    "generate_affiliate",
+    "create_city_service_page",
+]);
+export function isActionKind(value) {
+    return ACTION_KIND_SET.has(value);
+}
+//# sourceMappingURL=kinds.js.map

package/dist/kinds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kinds.js","sourceRoot":"","sources":["../src/kinds.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,kBAAkB;IAClB,gBAAgB;IAChB,oBAAoB;IACpB,eAAe;IACf,0BAA0B;IAC1B,kBAAkB;IAClB,wBAAwB;IACxB,kBAAkB;IAClB,aAAa;IACb,QAAQ;IACR,6BAA6B;IAC7B,oBAAoB;IACpB,gBAAgB;IAChB,UAAU;IACV,cAAc;IACd,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;IACtB,YAAY;IACZ,eAAe;IACf,uBAAuB;IACvB,iBAAiB;IACjB,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;IACpB,cAAc;IACd,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,qBAAqB;IACrB,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,OAAO;IACP,iBAAiB;IACjB,WAAW;IACX,mBAAmB;IACnB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,eAAe;IACf,oBAAoB;IACpB,0BAA0B;CAClB,CAAC;AAIX,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAA0C;IAC9D,gBAAgB,EAAE,CAAC;IACnB,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;IACrB,aAAa,EAAE,CAAC;IAChB,wBAAwB,EAAE,CAAC;IAC3B,gBAAgB,EAAE,CAAC;IACnB,sBAAsB,EAAE,CAAC;IACzB,gBAAgB,EAAE,CAAC;IACnB,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,2BAA2B,EAAE,CAAC;IAC9B,kBAAkB,EAAE,CAAC;IACrB,cAAc,EAAE,CAAC;IACjB,QAAQ,EAAE,CAAC;IACX,YAAY,EAAE,CAAC;IACf,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,CAAC;IACvB,oBAAoB,EAAE,CAAC;IACvB,UAAU,EAAE,CAAC;IACb,aAAa,EAAE,CAAC;IAChB,qBAAqB,EAAE,CAAC;IACxB,eAAe,EAAE,CAAC;IAClB,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,CAAC;IACrB,YAAY,EAAE,CAAC;IACf,eAAe,EAAE,CAAC;IAClB,gBAAgB,EAAE,CAAC;IACnB,YAAY,EAAE,CAAC;IACf,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,CAAC;IAClB,WAAW,EAAE,CAAC;IACd,mBAAmB,EAAE,CAAC;IACtB,cAAc,EAAE,CAAC;IACjB,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,cAAc,EAAE,CAAC;IACjB,KAAK,EAAE,CAAC;IACR,eAAe,EAAE,CAAC;IAClB,SAAS,EAAE,CAAC;IACZ,iBAAiB,EAAE,CAAC;IACpB,YAAY,EAAE,CAAC;IACf,mBAAmB,EAAE,CAAC;IACtB,WAAW,EAAE,CAAC;IACd,aAAa,EAAE,CAAC;IAChB,kBAAkB,EAAE,CAAC;IACrB,wBAAwB,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAA4B,IAAI,GAAG,CAAC;IAC5D,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAA4B,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,qBAAqB,GAA4B,IAAI,GAAG,CAAC;IACpE,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAA4B,IAAI,GAAG,CAAC;IAChE,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,oBAAoB;IACpB,0BAA0B;CAC3B,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/payloads.d.ts

@@ -0,0 +1,13 @@
+import { ACTION_KIND_SET } from "./kinds.js";
+import { type Action } from "./types.js";
+export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
+/** Closed-schema parse. Unknown keys, open enums, and free-string URLs fail. */
+export declare function parseAction(raw: unknown): {
+    ok: true;
+    action: Action;
+} | {
+    ok: false;
+    error: string;
+};
+export { ACTION_KIND_SET };
+//# sourceMappingURL=payloads.d.ts.map

package/dist/payloads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payloads.d.ts","sourceRoot":"","sources":["../src/payloads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA4C,MAAM,YAAY,CAAC;AACvF,OAAO,EAKL,KAAK,MAAM,EAIZ,MAAM,YAAY,CAAC;AAKpB,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9E;AA0SD,gFAAgF;AAChF,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA6C7D;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}