@aotter/mantle 0.1.4 → 0.2.0-alpha.1

package/dist/spec/domain/service/EntryDataValidator.js

@@ -0,0 +1,88 @@
+import { jsonSchemaToZod, zodPathToJsonPointer, } from "./JsonSchemaToZod.js";
+import { runtimeDiagnostic } from "../../kernel/diagnostic.js";
+/**
+ * Per-collection entry-data validator.
+ *
+ * Given a parsed `SchemaManifest` and an entry payload, runs zod
+ * validation against the manifest's `spec.schema` and returns
+ * Diagnostics. Compiled zod schemas are cached per `metadata.name` so
+ * repeated `validate()` calls are cheap; the cache is content-
+ * addressed-ish — calling `validate` with two different
+ * SchemaManifests that share a `metadata.name` will reuse the first
+ * compile, which is correct because manifest names are unique within a
+ * deployment.
+ *
+ * Switched from Ajv to zod (POC issue #70) because Ajv's runtime
+ * `compile()` calls `new Function()`, which CF Workers blocks under
+ * V8's codegen-from-strings policy. zod composes builders into a
+ * plain object tree and runs them through its interpreter at parse
+ * time — no codegen, Workers-safe.
+ *
+ * The `x-mantle-ref` and `x-mcp-hint` extension keywords
+ * are tolerated (the converter ignores unknown keywords; they pass
+ * through unmodified).
+ *
+ * Output shape is `Diagnostic[]` — empty array means "valid". The
+ * dispatcher and admin-write paths surface the array directly; the
+ * `phase: "runtime"` stamp is correct for entry-write validation,
+ * which always happens at request-handling time.
+ */
+export class EntryDataValidator {
+    compiled = new Map();
+    /**
+     * Validate `data` against `manifest.spec.schema`. Returns the empty
+     * array on success; on failure, returns one or more Diagnostics
+     * with `code: "INPUT_VALIDATION_FAILED"` and `path` set to the
+     * RFC 6901 JSON Pointer of the offending field (`""` = root).
+     *
+     * `opts.partial` drops the schema's top-level `required` so a
+     * work-in-progress draft can be saved with fields still blank. Types
+     * of whatever IS present are still checked. Completeness is enforced
+     * at publish time, which validates without `partial`.
+     */
+    validate(manifest, data, opts) {
+        const compiled = this.compileFor(manifest, opts?.partial ?? false);
+        const result = compiled.safeParse(data);
+        if (result.success)
+            return [];
+        return result.error.issues.map((issue) => runtimeDiagnostic({
+            code: "INPUT_VALIDATION_FAILED",
+            severity: "error",
+            path: zodPathToJsonPointer(issue.path),
+            message: issue.message,
+        }));
+    }
+    /**
+     * Test-only escape hatch: peek at whether a given Schema has been
+     * compiled yet. The cache is otherwise an internal implementation
+     * detail. Not part of the package's public API surface.
+     *
+     * @internal
+     */
+    hasCompiled(name) {
+        return this.compiled.has(name);
+    }
+    compileFor(manifest, partial) {
+        const name = partial ? `${manifest.metadata.name}::partial` : manifest.metadata.name;
+        let compiled = this.compiled.get(name);
+        if (!compiled) {
+            const source = partial ? withoutTopLevelRequired(manifest.spec.schema) : manifest.spec.schema;
+            compiled = jsonSchemaToZod(source);
+            this.compiled.set(name, compiled);
+        }
+        return compiled;
+    }
+}
+/**
+ * Return a shallow copy of a JSON Schema with its top-level `required`
+ * dropped, so every top-level property becomes optional. Nested object
+ * `required` is left intact — it only bites when that nested object is
+ * actually present, which is the right rule for a partial draft.
+ */
+function withoutTopLevelRequired(schema) {
+    if (!schema || typeof schema !== "object")
+        return schema;
+    const { required: _dropped, ...rest } = schema;
+    return rest;
+}
+//# sourceMappingURL=EntryDataValidator.js.map

package/dist/spec/domain/service/EntryDataValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntryDataValidator.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/EntryDataValidator.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAmB,MAAM,4BAA4B,CAAC;AAGhF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,kBAAkB;IACZ,QAAQ,GAAyB,IAAI,GAAG,EAAE,CAAC;IAE5D;;;;;;;;;;OAUG;IACH,QAAQ,CACN,QAAwB,EACxB,IAAa,EACb,IAA4B;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,iBAAiB,CAAC;YAChB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,UAAU,CAAC,QAAwB,EAAE,OAAgB;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrF,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9F,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,MAAwC;IACvE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACzD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;IAC1E,OAAO,IAAwC,CAAC;AAClD,CAAC"}

package/dist/spec/domain/service/JsonSchemaToZod.d.ts

@@ -0,0 +1,29 @@
+import { z, type ZodType } from "zod";
+import type { JsonSchema } from "../model/ManifestGrammar.js";
+/**
+ * Thin boundary around Zod's official JSON Schema importer. Mantle keeps
+ * only its legacy `nullable` normalization, an input-depth guard and the
+ * length-before-pattern order here; JSON Schema semantics belong to Zod.
+ */
+export declare function jsonSchemaToZod(schema: JsonSchema): ZodType;
+/**
+ * `schema.safeParse(value)`, where anything the validator throws other than a Zod issue (a stack overflow on a schema nobody
+ * checked) is a failed parse: a value the schema cannot check is not accepted, and the caller reports it as it reports any.
+ */
+export declare function safeParseJson<T extends ZodType>(schema: T, value: unknown): ReturnType<T["safeParse"]>;
+/**
+ * Convert a zod issue path (`PropertyKey[]`) to an RFC 6901 JSON
+ * Pointer string. Empty path → `""`; `["foo", 0, "bar"]` → `"/foo/0/bar"`;
+ * field names containing `/` or `~` are escaped per the spec
+ * (`~` → `~0`, `/` → `~1`).
+ */
+export declare function zodPathToJsonPointer(path: ReadonlyArray<PropertyKey>): string;
+/**
+ * Translate a zod `safeParse` failure to the (instancePath, message)
+ * shape the dispatcher's diagnostic emitter expects.
+ */
+export declare function firstZodIssueAsJsonPointer(err: z.ZodError): {
+    instancePath: string;
+    message: string;
+};
+//# sourceMappingURL=JsonSchemaToZod.d.ts.map

package/dist/spec/domain/service/JsonSchemaToZod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSchemaToZod.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/JsonSchemaToZod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,KAAK,OAAO,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAS3D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAOtG;AAoGD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,MAAM,CAQ7E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,CAAC,CAAC,QAAQ,GACd;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAI3C"}

package/dist/spec/domain/service/JsonSchemaToZod.js

@@ -0,0 +1,156 @@
+import { z } from "zod";
+/**
+ * Thin boundary around Zod's official JSON Schema importer. Mantle keeps
+ * only its legacy `nullable` normalization, an input-depth guard and the
+ * length-before-pattern order here; JSON Schema semantics belong to Zod.
+ */
+export function jsonSchemaToZod(schema) {
+    let imported;
+    try {
+        imported = lengthBeforePattern(z.fromJSONSchema(normalizeNullable(schema)));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        imported = z.never({ error: `Invalid JSON Schema: ${message}` });
+    }
+    return jsonValueWithinLimits().pipe(imported);
+}
+/**
+ * `schema.safeParse(value)`, where anything the validator throws other than a Zod issue (a stack overflow on a schema nobody
+ * checked) is a failed parse: a value the schema cannot check is not accepted, and the caller reports it as it reports any.
+ */
+export function safeParseJson(schema, value) {
+    try {
+        return schema.safeParse(value);
+    }
+    catch (error) {
+        const message = `the schema cannot check this value: ${error instanceof Error ? error.message : String(error)}`;
+        return { success: false, error: new z.ZodError([{ code: "custom", path: [], message, input: value }]) };
+    }
+}
+/**
+ * Zod checks a string's `maxLength` before its `pattern` but runs the pattern even when the length failed. The CLI bounds a
+ * pattern's backtracking only up to the declared maxLength (branches × maxLength^e), so a longer string must stop at the length check:
+ * every string schema's maxLength check aborts the checks after it.
+ */
+function lengthBeforePattern(root) {
+    const seen = new WeakSet();
+    const visit = (node) => {
+        if (!node || typeof node !== "object" || seen.has(node))
+            return;
+        seen.add(node);
+        const def = node._zod?.def;
+        if (!def) {
+            for (const child of Array.isArray(node) ? node : Object.values(node))
+                visit(child);
+            return;
+        }
+        if (def["type"] === "string") {
+            for (const check of (def["checks"] ?? [])) {
+                if (check._zod.def.check === "max_length")
+                    check._zod.def.abort = true;
+            }
+        }
+        for (const [key, child] of Object.entries(def)) {
+            if (key === "checks")
+                continue;
+            visit(key === "getter" && typeof child === "function" ? child() : child);
+        }
+    };
+    visit(root);
+    return root;
+}
+function normalizeNullable(schema) {
+    const transform = (node) => {
+        const out = { ...node };
+        if (node.format === "url")
+            out["format"] = "uri";
+        if (node.properties) {
+            out["properties"] = Object.fromEntries(Object.entries(node.properties).map(([name, child]) => [name, transform(child)]));
+        }
+        if (node.$defs) {
+            out["$defs"] = Object.fromEntries(Object.entries(node.$defs).map(([name, child]) => [name, transform(child)]));
+        }
+        if (node.items)
+            out["items"] = transform(node.items);
+        if (typeof node.additionalProperties === "object") {
+            out["additionalProperties"] = transform(node.additionalProperties);
+        }
+        if (node.oneOf)
+            out["oneOf"] = node.oneOf.map(transform);
+        delete out["nullable"];
+        if (node.nullable === true) {
+            if (typeof node.type === "string")
+                out["type"] = [node.type, "null"];
+            else if (Array.isArray(node.type) && !node.type.includes("null")) {
+                out["type"] = [...node.type, "null"];
+            }
+            else if (node.type === undefined) {
+                const { $defs, ...base } = out;
+                const definitions = $defs;
+                return {
+                    ...(definitions ? { $defs: definitions } : {}),
+                    oneOf: [base, { type: "null" }],
+                };
+            }
+        }
+        return out;
+    };
+    return transform(schema);
+}
+function jsonValueWithinLimits() {
+    return z.unknown().superRefine((value, ctx) => {
+        const stack = [{ value, depth: 0 }];
+        const active = new WeakSet();
+        let nodes = 0;
+        while (stack.length > 0) {
+            const current = stack.pop();
+            if (current.value === null || typeof current.value !== "object")
+                continue;
+            if (current.exit) {
+                active.delete(current.value);
+                continue;
+            }
+            if (active.has(current.value)) {
+                ctx.addIssue({ code: "custom", message: "value must not contain object cycles" });
+                return;
+            }
+            active.add(current.value);
+            if (current.depth > 100 || ++nodes > 10_000) {
+                ctx.addIssue({ code: "custom", message: "value exceeds JSON Schema validation limits" });
+                return;
+            }
+            stack.push({ ...current, exit: true });
+            for (const child of Array.isArray(current.value)
+                ? current.value
+                : Object.values(current.value)) {
+                stack.push({ value: child, depth: current.depth + 1 });
+            }
+        }
+    });
+}
+/**
+ * Convert a zod issue path (`PropertyKey[]`) to an RFC 6901 JSON
+ * Pointer string. Empty path → `""`; `["foo", 0, "bar"]` → `"/foo/0/bar"`;
+ * field names containing `/` or `~` are escaped per the spec
+ * (`~` → `~0`, `/` → `~1`).
+ */
+export function zodPathToJsonPointer(path) {
+    if (path.length === 0)
+        return "";
+    return ("/" +
+        path
+            .map((seg) => String(seg).replace(/~/g, "~0").replace(/\//g, "~1"))
+            .join("/"));
+}
+/**
+ * Translate a zod `safeParse` failure to the (instancePath, message)
+ * shape the dispatcher's diagnostic emitter expects.
+ */
+export function firstZodIssueAsJsonPointer(err) {
+    const issue = err.issues[0];
+    if (!issue)
+        return { instancePath: "", message: "validation failed" };
+    return { instancePath: zodPathToJsonPointer(issue.path), message: issue.message };
+}
+//# sourceMappingURL=JsonSchemaToZod.js.map

package/dist/spec/domain/service/JsonSchemaToZod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSchemaToZod.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/JsonSchemaToZod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAgB,MAAM,KAAK,CAAC;AAGtC;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,qBAAqB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAoB,MAAS,EAAE,KAAc;IACxE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAA+B,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,uCAAuC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EAAgC,CAAC;IACxI,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAChE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,GAAG,GAAI,IAAqD,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA6D,EAAE,CAAC;gBACtG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,YAAY;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;YACzE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC/B,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAuB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,SAAS,GAAG,CAAC,IAAgB,EAAc,EAAE;QACjD,MAAM,GAAG,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;YAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QACjD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,GAAG,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,EAAE,CAAC;YAClD,GAAG,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;iBAChE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;gBAC/B,MAAM,WAAW,GAAG,KAA4B,CAAC;gBACjD,OAAO;oBACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,KAAK,EAAE,CAAC,IAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;iBAC9C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAiB,CAAC;IAC3B,CAAC,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,KAAK,GAA6D,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAC1E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,KAAK,GAAG,GAAG,IAAI,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;gBAC5C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC9C,CAAC,CAAC,OAAO,CAAC,KAAK;gBACf,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAgC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,CACL,GAAG;QACH,IAAI;aACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;aAClE,IAAI,CAAC,GAAG,CAAC,CACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAe;IAEf,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IACtE,OAAO,EAAE,YAAY,EAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACpF,CAAC"}

package/dist/spec/domain/service/LifecycleStateMachine.d.ts

@@ -0,0 +1,75 @@
+import type { ContentState } from "../model/ContentState.js";
+import type { LifecycleMode } from "../model/ManifestGrammar.js";
+/**
+ * Per-Schema lifecycle state machine. Each Schema declares
+ * `spec.lifecycle: 'publishing' | 'operational'` (default `'publishing'`);
+ * this module translates that into allowed state transitions.
+ *
+ * Pure functions — no env, no DB. Feeds the dispatcher's
+ * requestPublish branching and runtime state-transition validation.
+ */
+/**
+ * Structural shape of a Schema manifest as far as the state machine
+ * cares — just `spec.lifecycle?`. The full `SchemaManifest` type
+ * lives in `domain/model/ManifestGrammar.ts` and conforms to this
+ * structurally, so callers can pass either one.
+ */
+export interface LifecycleSchemaLike {
+    readonly spec: {
+        readonly lifecycle?: LifecycleMode;
+        /** Present when publishing an entry requires a published parent (ADR-0010). */
+        readonly translates?: unknown;
+    };
+}
+export declare function resolveLifecycle(schema: LifecycleSchemaLike | undefined): LifecycleMode;
+/** Publishing Schemas keep drafts, protect published entries and gate public reads. */
+export declare function isPublishing(schema: LifecycleSchemaLike | undefined): boolean;
+/**
+ * One row mutation as the lifecycle sees it. `to` is an explicitly
+ * requested status (publish, unpublish, archive, restore); `data` says
+ * whether the mutation also changes field values.
+ */
+export type LifecycleWrite = {
+    readonly op: "insert";
+} | {
+    readonly op: "update";
+    readonly from: ContentState;
+    readonly to?: ContentState;
+    readonly data: boolean;
+} | {
+    readonly op: "delete";
+    readonly from: ContentState;
+};
+/**
+ * `validate` is how much of the Schema the resulting data must satisfy:
+ * drafts save incomplete (`partial`), live entries must be complete
+ * (`full`), and a pure status change that is not a publish checks nothing.
+ */
+export type LifecycleDecision = {
+    readonly allowed: true;
+    readonly status: ContentState;
+    readonly validate: "partial" | "full" | "none";
+    /** Publishing a translation requires its parent to be published first. */
+    readonly publishedParent: boolean;
+} | {
+    readonly allowed: false;
+    readonly reason: "transition" | "not-editable" | "published-protected";
+};
+/**
+ * The single lifecycle rule set for every row write (ADR-0032 decision 1):
+ * initial status, editability, transitions and published protection.
+ * Pure; the caller performs the reads it asks for (`publishedParent`).
+ */
+export declare function decideLifecycleWrite(schema: LifecycleSchemaLike | undefined, write: LifecycleWrite): LifecycleDecision;
+/**
+ * Allowed status transitions per lifecycle. Used by the MCP handler
+ * and admin endpoints to gate operations. Unknown transitions return
+ * `false` and the caller should reject with `CONFLICT`.
+ *
+ * Publishing lifecycle:
+ *   draft → published, draft → archived
+ *   published → archived, published → draft (unpublish-as-edit)
+ *   archived → draft
+ */
+export declare function canTransition(schema: LifecycleSchemaLike | undefined, from: ContentState, to: ContentState): boolean;
+//# sourceMappingURL=LifecycleStateMachine.d.ts.map

package/dist/spec/domain/service/LifecycleStateMachine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LifecycleStateMachine.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/LifecycleStateMachine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;QACnC,+EAA+E;QAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAID,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,aAAa,CAEvF;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAE7E;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAE3D;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC,GACD;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,qBAAqB,CAAA;CAAE,CAAC;AAExG;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,KAAK,EAAE,cAAc,GACpB,iBAAiB,CA6BnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,IAAI,EAAE,YAAY,EAClB,EAAE,EAAE,YAAY,GACf,OAAO,CAGT"}

package/dist/spec/domain/service/LifecycleStateMachine.js

@@ -0,0 +1,76 @@
+const DEFAULT_LIFECYCLE = "publishing";
+export function resolveLifecycle(schema) {
+    return schema?.spec.lifecycle ?? DEFAULT_LIFECYCLE;
+}
+/** Publishing Schemas keep drafts, protect published entries and gate public reads. */
+export function isPublishing(schema) {
+    return resolveLifecycle(schema) === "publishing";
+}
+/**
+ * The single lifecycle rule set for every row write (ADR-0032 decision 1):
+ * initial status, editability, transitions and published protection.
+ * Pure; the caller performs the reads it asks for (`publishedParent`).
+ */
+export function decideLifecycleWrite(schema, write) {
+    const publishing = isPublishing(schema);
+    if (write.op === "insert") {
+        // Operational records have no publish step; they are live the moment they exist.
+        return publishing
+            ? { allowed: true, status: "draft", validate: "partial", publishedParent: false }
+            : { allowed: true, status: "published", validate: "full", publishedParent: false };
+    }
+    if (write.op === "delete") {
+        return publishing && write.from === "published"
+            ? { allowed: false, reason: "published-protected" }
+            : { allowed: true, status: write.from, validate: "none", publishedParent: false };
+    }
+    // An explicit status must be a legal transition, even when it equals the current one.
+    if (write.to !== undefined && !canTransition(schema, write.from, write.to)) {
+        return { allowed: false, reason: "transition" };
+    }
+    // Only drafts are editable on publishing Schemas; operational records edit in place.
+    if (write.data && publishing && write.from !== "draft") {
+        return { allowed: false, reason: "not-editable" };
+    }
+    const status = write.to ?? write.from;
+    const publish = write.to === "published";
+    return {
+        allowed: true,
+        status,
+        validate: publish || (write.data && !publishing) ? "full" : write.data ? "partial" : "none",
+        publishedParent: publish && schema?.spec.translates !== undefined,
+    };
+}
+/**
+ * Allowed status transitions per lifecycle. Used by the MCP handler
+ * and admin endpoints to gate operations. Unknown transitions return
+ * `false` and the caller should reject with `CONFLICT`.
+ *
+ * Publishing lifecycle:
+ *   draft → published, draft → archived
+ *   published → archived, published → draft (unpublish-as-edit)
+ *   archived → draft
+ */
+export function canTransition(schema, from, to) {
+    const allowed = transitionsFor(resolveLifecycle(schema));
+    return allowed[from]?.has(to) ?? false;
+}
+const PUBLISHING_TRANSITIONS = {
+    draft: new Set(["published", "archived"]),
+    published: new Set(["archived", "draft"]),
+    archived: new Set(["draft"]),
+};
+/** `lifecycle: operational` — orders, snapshots, audit
+ *  rows). No content workflow: entries are live on creation, editable
+ *  in place, and never publish/unpublish/archive. */
+const OPERATIONAL_TRANSITIONS = {
+    draft: new Set(),
+    published: new Set(),
+    archived: new Set(),
+};
+function transitionsFor(mode) {
+    if (mode === "operational")
+        return OPERATIONAL_TRANSITIONS;
+    return PUBLISHING_TRANSITIONS;
+}
+//# sourceMappingURL=LifecycleStateMachine.js.map

package/dist/spec/domain/service/LifecycleStateMachine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LifecycleStateMachine.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/LifecycleStateMachine.ts"],"names":[],"mappings":"AA0BA,MAAM,iBAAiB,GAAkB,YAAY,CAAC;AAEtD,MAAM,UAAU,gBAAgB,CAAC,MAAuC;IACtE,OAAO,MAAM,EAAE,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC;AACrD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,MAAuC;IAClE,OAAO,gBAAgB,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC;AACnD,CAAC;AA2BD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAuC,EACvC,KAAqB;IAErB,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC1B,iFAAiF;QACjF,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE;YACjF,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAC7C,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE;YACnD,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACtF,CAAC;IACD,sFAAsF;IACtF,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClD,CAAC;IACD,qFAAqF;IACrF,IAAI,KAAK,CAAC,IAAI,IAAI,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,KAAK,WAAW,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,QAAQ,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAC3F,eAAe,EAAE,OAAO,IAAI,MAAM,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAuC,EACvC,IAAkB,EAClB,EAAgB;IAEhB,MAAM,OAAO,GAAG,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;AACzC,CAAC;AAED,MAAM,sBAAsB,GAA8D;IACxF,KAAK,EAAE,IAAI,GAAG,CAAe,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvD,SAAS,EAAE,IAAI,GAAG,CAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACvD,QAAQ,EAAE,IAAI,GAAG,CAAe,CAAC,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF;;qDAEqD;AACrD,MAAM,uBAAuB,GAA8D;IACzF,KAAK,EAAE,IAAI,GAAG,EAAE;IAChB,SAAS,EAAE,IAAI,GAAG,EAAE;IACpB,QAAQ,EAAE,IAAI,GAAG,EAAE;CACpB,CAAC;AAEF,SAAS,cAAc,CAAC,IAAmB;IACzC,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,uBAAuB,CAAC;IAC3D,OAAO,sBAAsB,CAAC;AAChC,CAAC"}

package/dist/spec/domain/service/LocaleCanonicalizer.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Accepts `zh-TW`, `zh-tw`, `zh_TW`, `zhTW`, `ZH-tw`, `en` etc. Returns
+ * canonical BCP 47 form (`zh-TW`, `en`). Throws `InvalidLocaleError` for
+ * anything that doesn't shape up.
+ */
+export declare function toCanonicalLocale(input: string): string;
+/** Canonical → URL form (always lowercase). */
+export declare function toUrlLocale(canonical: string): string;
+/**
+ * Best-effort canonicalization. Unlike `toCanonicalLocale`, never
+ * throws — returns the original input unchanged when it's malformed.
+ * Used for query-side comparisons where a malformed filter value
+ * should simply match nothing rather than error.
+ */
+export declare function safeCanonicalLocale(input: string): string;
+/**
+ * Canonicalize an array of locale strings, separating valid from
+ * invalid in one pass. The caller decides whether to reject (write
+ * paths) or warn (read paths) on `invalid.length > 0`.
+ *
+ * Preserves input order in `valid`; canonicalizes each entry; dedupes
+ * the result so `["zh-tw", "zh-TW"]` collapses to `["zh-TW"]`.
+ */
+export declare function canonicalizeLocaleList(inputs: ReadonlyArray<string>): {
+    readonly valid: string[];
+    readonly invalid: string[];
+};
+export declare function containsScriptSubtagLocale(inputs: ReadonlyArray<string>): boolean;
+//# sourceMappingURL=LocaleCanonicalizer.d.ts.map

package/dist/spec/domain/service/LocaleCanonicalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocaleCanonicalizer.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/LocaleCanonicalizer.ts"],"names":[],"mappings":"AAuBA;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAkBvD;AAED,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMzD;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAC5B;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAgB1D;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAC5B,OAAO,CAET"}

package/dist/spec/domain/service/LocaleCanonicalizer.js

@@ -0,0 +1,96 @@
+import { InvalidLocaleError } from "../model/Locale.js";
+/**
+ * Mantle v0.1 locale canonicalization. This is a deliberately narrow
+ * subset of BCP 47, shared across the SDK: manifest parsing,
+ * `site_config.locales` writes, content-ops `data.locale` validation,
+ * public router URL segments, boot-time site-config check.
+ *
+ * 2- or 3-letter ISO 639 language (covers `en`, `ja`, plus 3-letter
+ * codes like `fil`, `haw`) + optional 2-letter ISO 3166 region. No
+ * script subtag (`zh-Hant`), no variants (`de-1996`). Extend the
+ * regexes below — they are the only place the restriction lives.
+ *
+ * Note: `URL_LOCALE` is stricter than `LANG` (2-letter only) because
+ * 3-letter languages don't appear in published URL paths today. If
+ * you accept a 3-letter site locale, audit URL_LOCALE consumers
+ * before flipping it.
+ */
+const LANG = /^[a-z]{2,3}$/;
+const REGION = /^[a-z]{2}$/;
+const SCRIPT_SUBTAG_SHAPE = /^[a-z]{2,3}[-_][a-z]{4}(?:[-_][a-z]{2})?$/i;
+/**
+ * Accepts `zh-TW`, `zh-tw`, `zh_TW`, `zhTW`, `ZH-tw`, `en` etc. Returns
+ * canonical BCP 47 form (`zh-TW`, `en`). Throws `InvalidLocaleError` for
+ * anything that doesn't shape up.
+ */
+export function toCanonicalLocale(input) {
+    if (typeof input !== "string" || input.length === 0) {
+        throw new InvalidLocaleError(String(input));
+    }
+    // Split on `-` or `_`; if neither, allow `zhTW` style by inserting
+    // the boundary at position 2 (most common 2+2 form).
+    let parts = input.replace(/_/g, "-").split("-");
+    const head = parts[0];
+    if (head === undefined)
+        throw new InvalidLocaleError(input);
+    if (parts.length === 1 && head.length === 4) {
+        parts = [head.slice(0, 2), head.slice(2)];
+    }
+    const lang = parts[0].toLowerCase();
+    if (!LANG.test(lang))
+        throw new InvalidLocaleError(input);
+    if (parts.length === 1)
+        return lang;
+    const region = parts[1].toLowerCase();
+    if (!REGION.test(region))
+        throw new InvalidLocaleError(input);
+    return `${lang}-${region.toUpperCase()}`;
+}
+/** Canonical → URL form (always lowercase). */
+export function toUrlLocale(canonical) {
+    return canonical.toLowerCase();
+}
+/**
+ * Best-effort canonicalization. Unlike `toCanonicalLocale`, never
+ * throws — returns the original input unchanged when it's malformed.
+ * Used for query-side comparisons where a malformed filter value
+ * should simply match nothing rather than error.
+ */
+export function safeCanonicalLocale(input) {
+    try {
+        return toCanonicalLocale(input);
+    }
+    catch {
+        return input;
+    }
+}
+/**
+ * Canonicalize an array of locale strings, separating valid from
+ * invalid in one pass. The caller decides whether to reject (write
+ * paths) or warn (read paths) on `invalid.length > 0`.
+ *
+ * Preserves input order in `valid`; canonicalizes each entry; dedupes
+ * the result so `["zh-tw", "zh-TW"]` collapses to `["zh-TW"]`.
+ */
+export function canonicalizeLocaleList(inputs) {
+    const valid = [];
+    const invalid = [];
+    const seen = new Set();
+    for (const raw of inputs) {
+        try {
+            const canonical = toCanonicalLocale(raw);
+            if (!seen.has(canonical)) {
+                seen.add(canonical);
+                valid.push(canonical);
+            }
+        }
+        catch {
+            invalid.push(raw);
+        }
+    }
+    return { valid, invalid };
+}
+export function containsScriptSubtagLocale(inputs) {
+    return inputs.some((raw) => SCRIPT_SUBTAG_SHAPE.test(raw));
+}
+//# sourceMappingURL=LocaleCanonicalizer.js.map

package/dist/spec/domain/service/LocaleCanonicalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocaleCanonicalizer.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/LocaleCanonicalizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,IAAI,GAAG,cAAc,CAAC;AAC5B,MAAM,MAAM,GAAG,YAAY,CAAC;AAC5B,MAAM,mBAAmB,GAAG,4CAA4C,CAAC;AAEzE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,mEAAmE;IACnE,qDAAqD;IACrD,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA6B;IAE7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAA6B;IAE7B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC"}