@bluefly/openstandardagents 0.2.8 → 0.3.0

package/dist/utils/path-validator.js

@@ -0,0 +1,70 @@
+/**
+ * Path Validation Utility
+ * Prevents path traversal attacks and validates file access
+ */
+import { resolve, normalize } from 'path';
+import { existsSync, statSync } from 'fs';
+export class PathValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PathValidationError';
+    }
+}
+/**
+ * Validates a file path for security and existence
+ * @param filePath - The file path to validate
+ * @param basePath - Optional base path to restrict access (defaults to null for no restriction)
+ * @returns Absolute, validated file path
+ * @throws PathValidationError if path is invalid or inaccessible
+ */
+export function validateFilePath(filePath, basePath = null) {
+    // Normalize and resolve path
+    const normalized = normalize(filePath);
+    const resolved = resolve(normalized);
+    // If basePath is provided, enforce path traversal protection
+    if (basePath !== null) {
+        const baseResolved = resolve(basePath);
+        if (!resolved.startsWith(baseResolved)) {
+            throw new PathValidationError(`Access denied: Path '${filePath}' attempts to escape base directory`);
+        }
+    }
+    // Check if path exists
+    if (!existsSync(resolved)) {
+        throw new PathValidationError(`File not found: ${filePath}`);
+    }
+    // Ensure it's a file, not a directory
+    const stats = statSync(resolved);
+    if (!stats.isFile()) {
+        throw new PathValidationError(`Path is not a file: ${filePath}`);
+    }
+    return resolved;
+}
+/**
+ * Validates a directory path for security and existence
+ * @param dirPath - The directory path to validate
+ * @param basePath - Optional base path to restrict access (defaults to null for no restriction)
+ * @returns Absolute, validated directory path
+ * @throws PathValidationError if path is invalid or inaccessible
+ */
+export function validateDirectoryPath(dirPath, basePath = null) {
+    const normalized = normalize(dirPath);
+    const resolved = resolve(normalized);
+    // If basePath is provided, enforce path traversal protection
+    if (basePath !== null) {
+        const baseResolved = resolve(basePath);
+        if (!resolved.startsWith(baseResolved)) {
+            throw new PathValidationError(`Access denied: Path '${dirPath}' attempts to escape base directory`);
+        }
+    }
+    // Check if path exists
+    if (!existsSync(resolved)) {
+        throw new PathValidationError(`Directory not found: ${dirPath}`);
+    }
+    // Ensure it's a directory
+    const stats = statSync(resolved);
+    if (!stats.isDirectory()) {
+        throw new PathValidationError(`Path is not a directory: ${dirPath}`);
+    }
+    return resolved;
+}
+//# sourceMappingURL=path-validator.js.map

package/dist/utils/path-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validator.js","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAE1C,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,WAA0B,IAAI;IAC/E,6BAA6B;IAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErC,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,QAAQ,qCAAqC,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,WAA0B,IAAI;IACnF,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErC,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,OAAO,qCAAqC,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,0BAA0B;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/utils/version.d.ts

@@ -2,22 +2,26 @@
  * OSSA Version Utilities
  *
  * Provides dynamic version detection from package.json
- * NEVER hardcode version strings - use these utilities
+ *
+ * CRITICAL: NO HARDCODED VERSION STRINGS ANYWHERE
+ * All versions MUST be derived from package.json or environment variables.
+ *
+ * NOTE: This module is designed to work with both ESM and CommonJS (Jest).
  */
 export interface VersionInfo {
-    /** Full version string (e.g., "0.2.8") */
+    /** Full version string (e.g., "0.3.0") - dynamically derived */
     version: string;
-    /** Major version (e.g., 0) */
+    /** Major version */
     major: number;
-    /** Minor version (e.g., 2) */
+    /** Minor version */
     minor: number;
-    /** Patch version (e.g., 8) */
+    /** Patch version */
     patch: number;
     /** Prerelease tag if any (e.g., "RC", "beta") */
     prerelease?: string;
-    /** Schema directory name (e.g., "v0.2.8") */
+    /** Schema directory name (e.g., "v0.3.0") */
     schemaDir: string;
-    /** Schema filename (e.g., "ossa-0.2.8.schema.json") */
+    /** Schema filename (e.g., "ossa-0.3.0.schema.json") */
     schemaFile: string;
     /** Full schema path relative to project root */
     schemaPath: string;
@@ -29,6 +33,7 @@ export interface VersionInfo {
  *
  * @param forceRefresh - If true, bypasses cache and re-reads package.json
  * @returns VersionInfo object with all version details
+ * @throws Error if version cannot be determined dynamically
  *
  * @example
  * const { version, schemaPath, apiVersion } = getVersionInfo();
@@ -49,7 +54,7 @@ export declare function getSchemaPath(): string;
  */
 export declare function getApiVersion(): string;
 /**
- * Get the schema directory (e.g., "v0.2.8")
+ * Get the schema directory (e.g., "v0.3.0")
  */
 export declare function getSchemaDir(): string;
 /**
@@ -65,4 +70,8 @@ export declare function getSupportedVersions(): string[];
  * Resolve absolute path to schema file
  */
 export declare function resolveSchemaPath(projectRoot?: string): string;
+/**
+ * Clear the cached version info (useful for testing)
+ */
+export declare function clearVersionCache(): void;
 //# sourceMappingURL=version.d.ts.map

package/dist/utils/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAoCD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,YAAY,UAAQ,GAAG,WAAW,CAiDhE;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAc/C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAG9D"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAmHD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,YAAY,UAAQ,GAAG,WAAW,CAoBhE;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAc/C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/utils/version.js

@@ -2,11 +2,14 @@
  * OSSA Version Utilities
  *
  * Provides dynamic version detection from package.json
- * NEVER hardcode version strings - use these utilities
+ *
+ * CRITICAL: NO HARDCODED VERSION STRINGS ANYWHERE
+ * All versions MUST be derived from package.json or environment variables.
+ *
+ * NOTE: This module is designed to work with both ESM and CommonJS (Jest).
  */
 import * as fs from 'fs';
 import * as path from 'path';
-import { fileURLToPath } from 'url';
 // Cache the version info once resolved
 let cachedVersionInfo = null;
 /**
@@ -33,59 +36,104 @@ function parseVersion(version) {
     // Handle versions like "0.2.8", "0.2.8-RC", "0.2.8-beta.1"
     const match = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-(.+))?$/);
     if (!match) {
-        throw new Error(`Invalid version format: ${version}`);
+        throw new Error(`Invalid version format: ${version}. Version must be read from package.json.`);
     }
     return {
         major: parseInt(match[1], 10),
         minor: parseInt(match[2], 10),
         patch: parseInt(match[3], 10),
-        prerelease: match[4]
+        prerelease: match[4],
     };
 }
 /**
- * Get OSSA version information dynamically from package.json
+ * Read version from package.json - the ONLY source of truth
  *
- * @param forceRefresh - If true, bypasses cache and re-reads package.json
- * @returns VersionInfo object with all version details
+ * Strategy order:
+ * 1. OSSA_VERSION environment variable (for CI/CD overrides)
+ * 2. package.json from process.cwd()
+ * 3. package.json from __dirname (CommonJS)
  *
- * @example
- * const { version, schemaPath, apiVersion } = getVersionInfo();
- * console.log(`Using OSSA ${version}`);
- * console.log(`Schema at: ${schemaPath}`);
+ * THROWS if no version can be determined - we NEVER use fallback hardcoded versions.
  */
-export function getVersionInfo(forceRefresh = false) {
-    if (cachedVersionInfo && !forceRefresh) {
-        return cachedVersionInfo;
+function readVersionFromPackageJson() {
+    // Strategy 1: Environment variable override (for CI/CD)
+    if (process.env.OSSA_VERSION) {
+        return process.env.OSSA_VERSION;
     }
-    let version = '0.2.8'; // Ultimate fallback
-    // Try to find package.json
-    // Strategy 1: From this file's location (works in dist)
+    // Strategy 2: From process.cwd() - most common case
     try {
-        const __filename = fileURLToPath(import.meta.url);
-        const __dirname = path.dirname(__filename);
-        const pkgPath = findPackageJson(__dirname);
+        const pkgPath = findPackageJson(process.cwd());
         if (pkgPath) {
             const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-            version = pkg.version;
+            if (pkg.version && pkg.version !== '{{VERSION}}') {
+                return pkg.version;
+            }
+            // If version is {{VERSION}} placeholder, continue to next strategy
         }
     }
     catch {
-        // Strategy 2: From process.cwd()
+        // Continue to next strategy
+    }
+    // Strategy 3: From __dirname (CommonJS/Jest)
+    if (typeof __dirname !== 'undefined') {
         try {
-            const pkgPath = findPackageJson(process.cwd());
+            const pkgPath = findPackageJson(__dirname);
             if (pkgPath) {
                 const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-                version = pkg.version;
+                if (pkg.version && pkg.version !== '{{VERSION}}') {
+                    return pkg.version;
+                }
             }
         }
         catch {
-            // Use fallback
+            // Continue to next strategy
         }
     }
-    // Strategy 3: Check environment variable override
-    if (process.env.OSSA_VERSION) {
-        version = process.env.OSSA_VERSION;
+    // Strategy 4: Check for spec directories to infer version
+    // Look for existing schema directories and use the latest
+    try {
+        const specDir = path.resolve(process.cwd(), 'spec');
+        if (fs.existsSync(specDir)) {
+            const versions = fs
+                .readdirSync(specDir)
+                .filter((d) => d.startsWith('v') && fs.statSync(path.join(specDir, d)).isDirectory())
+                .map((d) => d.substring(1)) // Remove 'v' prefix
+                .filter((v) => /^\d+\.\d+\.\d+/.test(v))
+                .sort((a, b) => {
+                const [aMajor, aMinor, aPatch] = a.split('.').map(Number);
+                const [bMajor, bMinor, bPatch] = b.split('.').map(Number);
+                return bMajor - aMajor || bMinor - aMinor || bPatch - aPatch;
+            });
+            if (versions.length > 0) {
+                return versions[0];
+            }
+        }
+    }
+    catch {
+        // Continue
+    }
+    // NO FALLBACK - fail loudly
+    throw new Error('OSSA_VERSION_ERROR: Could not determine version dynamically. ' +
+        'Ensure package.json exists with a valid version, or set OSSA_VERSION env var. ' +
+        'NEVER hardcode version strings.');
+}
+/**
+ * Get OSSA version information dynamically from package.json
+ *
+ * @param forceRefresh - If true, bypasses cache and re-reads package.json
+ * @returns VersionInfo object with all version details
+ * @throws Error if version cannot be determined dynamically
+ *
+ * @example
+ * const { version, schemaPath, apiVersion } = getVersionInfo();
+ * console.log(`Using OSSA ${version}`);
+ * console.log(`Schema at: ${schemaPath}`);
+ */
+export function getVersionInfo(forceRefresh = false) {
+    if (cachedVersionInfo && !forceRefresh) {
+        return cachedVersionInfo;
     }
+    const version = readVersionFromPackageJson();
     const parsed = parseVersion(version);
     const schemaDir = `v${version}`;
     const schemaFile = `ossa-${version}.schema.json`;
@@ -95,7 +143,7 @@ export function getVersionInfo(forceRefresh = false) {
         schemaDir,
         schemaFile,
         schemaPath: `spec/${schemaDir}/${schemaFile}`,
-        apiVersion: `ossa.io/${schemaDir}`
+        apiVersion: `ossa/${schemaDir}`,
     };
     return cachedVersionInfo;
 }
@@ -118,7 +166,7 @@ export function getApiVersion() {
     return getVersionInfo().apiVersion;
 }
 /**
- * Get the schema directory (e.g., "v0.2.8")
+ * Get the schema directory (e.g., "v0.3.0")
  */
 export function getSchemaDir() {
     return getVersionInfo().schemaDir;
@@ -153,4 +201,10 @@ export function resolveSchemaPath(projectRoot) {
     const root = projectRoot || process.cwd();
     return path.resolve(root, getVersionInfo().schemaPath);
 }
+/**
+ * Clear the cached version info (useful for testing)
+ */
+export function clearVersionCache() {
+    cachedVersionInfo = null;
+}
 //# sourceMappingURL=version.js.map

package/dist/utils/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,uCAAuC;AACvC,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAuBjD;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,YAAY,GAAG,KAAK;IACjD,IAAI,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,GAAG,OAAO,CAAC,CAAC,oBAAoB;IAE3C,2BAA2B;IAC3B,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,OAAO,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,OAAO,cAAc,CAAC;IAEjD,iBAAiB,GAAG;QAClB,OAAO;QACP,GAAG,MAAM;QACT,SAAS;QACT,UAAU;QACV,UAAU,EAAE,QAAQ,SAAS,IAAI,UAAU,EAAE;QAC7C,UAAU,EAAE,WAAW,SAAS,EAAE;KACnC,CAAC;IAEF,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,cAAc,EAAE,CAAC,OAAO,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,cAAc,EAAE,CAAC,UAAU,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,cAAc,EAAE,CAAC,UAAU,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,EAAE,CAAC,SAAS,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,0CAA0C;IAC1C,8CAA8C;IAC9C,MAAM,QAAQ,GAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,4CAA4C;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAoB;IACpD,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,uCAAuC;AACvC,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAuBjD;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CACnB,OAAe;IAEf,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,2CAA2C,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B;IACjC,wDAAwD;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAClC,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;gBACjD,OAAO,GAAG,CAAC,OAAO,CAAC;YACrB,CAAC;YACD,mEAAmE;QACrE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;oBACjD,OAAO,GAAG,CAAC,OAAO,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,EAAE;iBAChB,WAAW,CAAC,OAAO,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBACpF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;iBAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACb,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,MAAM,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,CAAC;YAC/D,CAAC,CAAC,CAAC;YAEL,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IAED,4BAA4B;IAC5B,MAAM,IAAI,KAAK,CACb,+DAA+D;QAC7D,gFAAgF;QAChF,iCAAiC,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,YAAY,GAAG,KAAK;IACjD,IAAI,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,OAAO,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,QAAQ,OAAO,cAAc,CAAC;IAEjD,iBAAiB,GAAG;QAClB,OAAO;QACP,GAAG,MAAM;QACT,SAAS;QACT,UAAU;QACV,UAAU,EAAE,QAAQ,SAAS,IAAI,UAAU,EAAE;QAC7C,UAAU,EAAE,QAAQ,SAAS,EAAE;KAChC,CAAC;IAEF,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,cAAc,EAAE,CAAC,OAAO,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,cAAc,EAAE,CAAC,UAAU,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,cAAc,EAAE,CAAC,UAAU,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,EAAE,CAAC,SAAS,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,0CAA0C;IAC1C,8CAA8C;IAC9C,MAAM,QAAQ,GAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,4CAA4C;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAoB;IACpD,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC"}

package/dist/utils/yaml-parser.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Safe YAML Parser
+ * Prevents YAML injection attacks and DoS vulnerabilities
+ */
+export interface SafeYAMLOptions {
+    maxAliasCount?: number;
+    allowCustomTags?: boolean;
+    allowMergeKeys?: boolean;
+}
+/**
+ * Safely parses YAML content with security protections
+ * @param content - YAML string to parse
+ * @param options - Optional security configuration
+ * @returns Parsed YAML object
+ */
+export declare function safeParseYAML<T = unknown>(content: string, options?: SafeYAMLOptions): T;
+/**
+ * Safely stringifies an object to YAML
+ * @param obj - Object to stringify
+ * @returns YAML string
+ */
+export declare function safeStringifyYAML(obj: unknown): string;
+//# sourceMappingURL=yaml-parser.d.ts.map

package/dist/utils/yaml-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-parser.d.ts","sourceRoot":"","sources":["../../src/utils/yaml-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,CAAC,CAW5F;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAMtD"}

package/dist/utils/yaml-parser.js

@@ -0,0 +1,34 @@
+/**
+ * Safe YAML Parser
+ * Prevents YAML injection attacks and DoS vulnerabilities
+ */
+import YAML from 'yaml';
+/**
+ * Safely parses YAML content with security protections
+ * @param content - YAML string to parse
+ * @param options - Optional security configuration
+ * @returns Parsed YAML object
+ */
+export function safeParseYAML(content, options = {}) {
+    const { maxAliasCount = 100, allowCustomTags = false, allowMergeKeys = false } = options;
+    // Parse with security restrictions
+    const parsed = YAML.parse(content, {
+        maxAliasCount, // Prevent billion laughs attack
+        customTags: allowCustomTags ? undefined : [], // Disable custom tags
+        merge: allowMergeKeys, // Disable merge keys (<<)
+    });
+    return parsed;
+}
+/**
+ * Safely stringifies an object to YAML
+ * @param obj - Object to stringify
+ * @returns YAML string
+ */
+export function safeStringifyYAML(obj) {
+    // Convert undefined to null for consistent output
+    const value = obj === undefined ? null : obj;
+    return YAML.stringify(value, {
+    // No security restrictions needed for stringify
+    });
+}
+//# sourceMappingURL=yaml-parser.js.map

package/dist/utils/yaml-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-parser.js","sourceRoot":"","sources":["../../src/utils/yaml-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAc,OAAe,EAAE,UAA2B,EAAE;IACvF,MAAM,EAAE,aAAa,GAAG,GAAG,EAAE,eAAe,GAAG,KAAK,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEzF,mCAAmC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;QACjC,aAAa,EAAE,gCAAgC;QAC/C,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,sBAAsB;QACpE,KAAK,EAAE,cAAc,EAAE,0BAA0B;KAClD,CAAC,CAAC;IAEH,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,kDAAkD;IAClD,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;IAC3B,gDAAgD;KACjD,CAAC,CAAC;AACL,CAAC"}

package/examples/adapters/drupal-eca-mapping.yaml

@@ -0,0 +1,153 @@
+# Example: ECA (Event-Condition-Action) to OSSA Task Mapping
+# Demonstrates how Drupal ECA rules map to OSSA Task/Workflow manifests
+apiVersion: ossa/v0.3.0
+kind: Task
+metadata:
+  name: eca-content-published-notify
+  version: 1.0.0
+  description: Send notification when content is published (ECA rule mapping)
+  labels:
+    runtime: drupal
+    engine: eca
+    domain: content
+  annotations:
+    drupal.ossa.io/eca-model: content_published_notification
+    drupal.ossa.io/eca-version: "1.0"
+
+spec:
+  execution:
+    type: deterministic
+    runtime: drupal
+    entrypoint: "Drupal\\ossa_adapter\\TaskHandler\\ECAHandler::execute"
+    timeout_seconds: 30
+
+  # ECA Event → OSSA Trigger
+  triggers:
+    - type: event
+      source: drupal.entity
+      event: node.insert
+      filter:
+        bundle: article
+        status: 1  # Published
+    - type: event
+      source: drupal.entity
+      event: node.update
+      filter:
+        bundle: article
+        status: 1
+        _previous_status: 0  # Was unpublished
+
+  # ECA Conditions → OSSA Input Schema
+  input:
+    type: object
+    properties:
+      entity:
+        type: object
+        description: The Drupal node entity
+        properties:
+          nid:
+            type: integer
+          title:
+            type: string
+          bundle:
+            type: string
+          uid:
+            type: integer
+          status:
+            type: integer
+      user:
+        type: object
+        description: The user who triggered the action
+        properties:
+          uid:
+            type: integer
+          mail:
+            type: string
+          name:
+            type: string
+      event_type:
+        type: string
+        enum: [insert, update]
+    required:
+      - entity
+      - user
+
+  # ECA Actions → OSSA Capabilities
+  capabilities:
+    - send_email
+    - log_message
+    - create_entity
+    - queue_item
+
+  output:
+    type: object
+    properties:
+      notifications_sent:
+        type: integer
+      log_id:
+        type: string
+      success:
+        type: boolean
+
+  # Error handling
+  error_handling:
+    on_error: log_and_continue
+    fallback:
+      log_level: error
+      notify_admin: true
+
+  observability:
+    logging:
+      level: info
+    metrics:
+      enabled: true
+      custom_labels:
+        content_type: "${{ input.entity.bundle }}"
+        event_type: "${{ input.event_type }}"
+
+# Drupal-specific runtime bindings
+runtime:
+  type: drupal
+  bindings:
+    # Map OSSA capabilities to ECA plugins
+    send_email:
+      plugin: "eca_mail:send"
+      config:
+        to: "admin@example.com"
+        subject: "Content Published: ${{ input.entity.title }}"
+        body: |
+          A new article has been published:
+
+          Title: ${{ input.entity.title }}
+          Author: ${{ input.user.name }}
+          URL: /node/${{ input.entity.nid }}
+
+    log_message:
+      plugin: "eca_log:message"
+      config:
+        level: info
+        message: "Content published notification sent for node ${{ input.entity.nid }}"
+
+    create_entity:
+      plugin: "eca_content:create_entity"
+      config:
+        entity_type: notification
+        bundle: content_alert
+
+    queue_item:
+      plugin: "eca_queue:add"
+      config:
+        queue_name: content_notifications
+
+  # ECA-specific configuration
+  eca:
+    model_id: content_published_notification
+    event_plugins:
+      - eca_content:entity_insert
+      - eca_content:entity_update
+    condition_plugins:
+      - eca_content:entity_bundle
+      - eca_content:entity_field_value
+    action_plugins:
+      - eca_mail:send
+      - eca_log:message

package/examples/adapters/drupal-eca-task.yaml

@@ -0,0 +1,48 @@
+apiVersion: ossa/v0.3.0
+kind: Task
+metadata:
+  name: drupal-content-moderation
+  description: Content moderation workflow using Drupal ECA
+  labels:
+    drupal.module: eca
+    drupal.version: "11.x"
+spec:
+  steps:
+    - name: validate-content
+      action: drupal.eca.condition
+      inputs:
+        condition_type: entity_field_value
+        entity_type: node
+        field: moderation_state
+        operator: equals
+        value: draft
+    
+    - name: check-permissions
+      action: drupal.eca.condition
+      inputs:
+        condition_type: user_permission
+        permission: moderate content
+    
+    - name: update-state
+      action: drupal.eca.action
+      inputs:
+        action_type: entity_set_field_value
+        entity_type: node
+        field: moderation_state
+        value: published
+    
+    - name: notify-author
+      action: drupal.eca.action
+      inputs:
+        action_type: send_email
+        to: "{{ entity.author.email }}"
+        subject: "Your content has been published"
+        template: content_published
+
+runtime:
+  drupal:
+    module: eca
+    event: entity_presave
+    entity_type: node
+    bundle: article
+    priority: 100