@cogenta/cli 0.4.0 → 0.6.0

package/dist/commands/backup.js

@@ -0,0 +1,238 @@
+import { createWriteStream } from 'node:fs';
+import { mkdir, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import process from 'node:process';
+import { AUTH_TABLES, ensureAuthTables } from '@cogenta/auth';
+import { createDatabaseMediaStore, createDatabaseRegistry, createLogger, isCogentaError, loadConfig, MEDIA_TABLE, } from '@cogenta/core';
+import { applyRestore, buildBackupTables, createBackup, previewRestore, readBackupManifest, } from '@cogenta/export';
+import { createRedirectStore, createSchemaTables, ensureMenuTables, ensurePatternTables, MENU_TABLES, PATTERN_TABLE, REDIRECTS_TABLE, } from '@cogenta/schema';
+import { loadSchemaModule } from './serve.js';
+const BACKUP_USAGE = `Usage
+  cogenta backup create [--passphrase <text>] [--dir <path>]
+  cogenta backup list [--dir <path>]
+
+Backs up every table of the site's database — content, users (hashed
+passwords only), audit log, media references and, when the site sells
+anything, commerce — into one file, engine-independent (never \`pg_dump\`),
+with a checksum and an optional passphrase. Written to \`.cogenta/backups\`
+by default: never under the site's public storage root.
+`;
+const RESTORE_USAGE = `Usage
+  cogenta restore preview <file.zip>
+  cogenta restore apply <file.zip> [--passphrase <text>]
+
+Restores a full-site backup. **CLI only, on purpose** (fiche 26, task 4): a
+restore overwrites the very database an admin session would be running
+against, so it is not offered from the admin API at all — the admin can
+restore a *content export* instead (additive, reversible through the trash),
+never a whole-database backup.
+
+Restoring writes real rows: run "preview" first to see what already exists in
+the target, and restore only into a database you mean to overwrite (a freshly
+created one, in the common case — a moved-to or migrated-to engine).
+`;
+/** Exported for `update/` (L22 task 9) — the same default directory, never a second one to keep in sync. */
+export function defaultBackupDir(cwd) {
+    return join(cwd, '.cogenta', 'backups');
+}
+/**
+ * Opens this site's own database, the way every command in this file that
+ * touches it does. Exported for `update/` (L22 task 9): the update system's
+ * history view needs the same audit log every other admin action already
+ * writes to, which needs the same open connection — never a second way to
+ * resolve `cogenta.config.mjs` into a live `DatabaseHandle`.
+ */
+export async function openSite(options, logger) {
+    const cwd = options.cwd ?? process.cwd();
+    const env = options.env ?? process.env;
+    const loaded = await loadConfig({ cwd, env });
+    const dbSelection = await createDatabaseRegistry({ logger }).select(loaded.config.database);
+    return {
+        db: dbSelection.instance,
+        site: { name: loaded.config.site.name, url: loaded.config.site.url },
+        dispose: dbSelection.dispose,
+    };
+}
+/**
+ * Every table `cogenta backup` knows how to name, assembled from each
+ * package's own table constants — `@cogenta/export` depends on none of them
+ * by design (R1/R9), so this is the one place that has to.
+ */
+async function tablesFor(cwd) {
+    const { collections, taxonomies } = await loadSchemaModule(cwd);
+    return buildBackupTables({
+        collections,
+        taxonomies,
+        before: [...Object.values(AUTH_TABLES), MEDIA_TABLE],
+        after: [MENU_TABLES.menus, MENU_TABLES.items, REDIRECTS_TABLE, PATTERN_TABLE],
+    });
+}
+/**
+ * Creates every table a backup or restore touches, on whichever database is
+ * open — a fresh site may never have created its media, menu or redirect
+ * table (they are created lazily, at first use, the way `assembleSite` does
+ * it), and `dumpTable`'s raw `SELECT *` has no fallback for a table that
+ * simply is not there yet. Idempotent: every `ensure*` here is `create table
+ * if not exists`.
+ */
+async function ensureAllTables(db, collections, taxonomies) {
+    await createSchemaTables(db, collections, taxonomies);
+    await ensureAuthTables(db);
+    await ensureMenuTables(db);
+    await ensurePatternTables(db);
+    await createRedirectStore({ db }).ensureTable();
+    // The media store creates its table lazily on first call; `list()` is the
+    // cheapest one that does so without writing anything.
+    await createDatabaseMediaStore({ db }).list({ limit: 1 });
+}
+/**
+ * The actual work behind `cogenta backup create` — factored out so
+ * `update/restore-point.ts` calls exactly this, not a reimplementation, for
+ * "un point de restauration obligatoire avant toute mise à jour" (L22 task
+ * 9, point 2: "réutilise `backup create`/`restore apply`, déjà réels depuis
+ * L9 fiche 26"). `runBackup`'s `create` subcommand below is now this
+ * function plus CLI-shaped output, nothing else.
+ */
+export async function createSiteBackup(options) {
+    const logger = options.logger ?? createLogger({ level: 'silent' });
+    const cwd = options.cwd ?? process.cwd();
+    const dir = options.dir ?? defaultBackupDir(cwd);
+    const prefix = options.filenamePrefix ?? 'backup-';
+    const { collections, taxonomies } = await loadSchemaModule(cwd);
+    const tables = await tablesFor(cwd);
+    const { db, site, dispose } = await openSite(options, logger);
+    try {
+        await ensureAllTables(db, collections, taxonomies);
+        await mkdir(dir, { recursive: true });
+        const filename = `${prefix}${new Date().toISOString().replace(/[:.]/g, '-')}.zip`;
+        const path = join(dir, filename);
+        const stream = createWriteStream(path, { mode: 0o600 });
+        const { manifest } = await createBackup({
+            db,
+            site,
+            tables,
+            write: (chunk) => new Promise((resolve, reject) => {
+                stream.write(chunk, (error) => (error ? reject(error) : resolve()));
+            }),
+            ...(options.passphrase === undefined ? {} : { passphrase: options.passphrase }),
+        });
+        await new Promise((resolve, reject) => {
+            stream.end((error) => (error ? reject(error) : resolve()));
+        });
+        return { path, manifest };
+    }
+    finally {
+        await dispose();
+    }
+}
+export async function runBackup(options) {
+    const { out, stderr } = options;
+    const logger = options.logger ?? createLogger({ level: 'silent' });
+    const cwd = options.cwd ?? process.cwd();
+    const dir = options.dir ?? defaultBackupDir(cwd);
+    if (options.subcommand === 'list') {
+        await mkdir(dir, { recursive: true });
+        const files = (await readdir(dir)).filter((name) => name.endsWith('.zip')).sort();
+        if (files.length === 0) {
+            out.line('No backups yet.');
+            return 0;
+        }
+        for (const file of files) {
+            try {
+                const manifest = await readBackupManifest(join(dir, file));
+                const rows = manifest.tables.reduce((sum, table) => sum + table.rows, 0);
+                out.line(`${file}  ${manifest.createdAt}  ${rows} rows${manifest.encrypted ? '  encrypted' : ''}`);
+            }
+            catch {
+                out.line(`${file}  (could not read manifest)`);
+            }
+        }
+        return 0;
+    }
+    if (options.subcommand !== 'create') {
+        stderr(`Unknown subcommand "${options.subcommand ?? ''}".\n\n${BACKUP_USAGE}`);
+        return 2;
+    }
+    try {
+        const { path, manifest } = await createSiteBackup({
+            cwd,
+            dir,
+            logger,
+            ...(options.env === undefined ? {} : { env: options.env }),
+            ...(options.passphrase === undefined ? {} : { passphrase: options.passphrase }),
+        });
+        const rows = manifest.tables.reduce((sum, table) => sum + table.rows, 0);
+        out.heading('Backup created');
+        out.line(`${path}`);
+        out.line(`${manifest.tables.length} tables, ${rows} rows, checksum ${manifest.checksum}`);
+        if (manifest.encrypted)
+            out.line('Encrypted with the passphrase you supplied.');
+        return 0;
+    }
+    catch (error) {
+        return reportError(error, stderr);
+    }
+}
+export async function runRestore(options) {
+    const { out, stderr } = options;
+    const logger = options.logger ?? createLogger({ level: 'silent' });
+    if (options.subcommand === undefined) {
+        stderr(`cogenta restore needs a subcommand.\n\n${RESTORE_USAGE}`);
+        return 2;
+    }
+    if (options.subcommand !== 'preview' && options.subcommand !== 'apply') {
+        stderr(`Unknown subcommand "${options.subcommand}".\n\n${RESTORE_USAGE}`);
+        return 2;
+    }
+    if (options.file === undefined || options.file.trim().length === 0) {
+        stderr(`A backup file path is required.\n\n${RESTORE_USAGE}`);
+        return 2;
+    }
+    try {
+        const cwd = options.cwd ?? process.cwd();
+        const { collections, taxonomies } = await loadSchemaModule(cwd);
+        const { db, dispose } = await openSite(options, logger);
+        try {
+            // Preview and apply both need every table to exist: preview so a
+            // fresh site reports "0 rows existing" rather than throwing, apply so
+            // the insert has somewhere to land.
+            await ensureAllTables(db, collections, taxonomies);
+            if (options.subcommand === 'preview') {
+                const { manifest, tables } = await previewRestore(options.file, db, options.passphrase === undefined ? {} : { passphrase: options.passphrase });
+                out.heading('Restore preview');
+                out.line(`Backup from ${manifest.createdAt} (${manifest.dialect})`);
+                for (const table of tables) {
+                    const note = table.rowsExisting > 0 ? `  — ${table.rowsExisting} rows already there` : '';
+                    out.line(`${table.name}: ${table.rowsInBackup} rows in backup${note}`);
+                }
+                return 0;
+            }
+            const report = await applyRestore(options.file, {
+                db,
+                ...(options.passphrase === undefined ? {} : { passphrase: options.passphrase }),
+            });
+            out.heading('Restore applied');
+            for (const table of report.tables)
+                out.line(`${table.name}: ${table.rows} rows restored`);
+            return 0;
+        }
+        finally {
+            await dispose();
+        }
+    }
+    catch (error) {
+        return reportError(error, stderr);
+    }
+}
+function reportError(error, stderr) {
+    if (isCogentaError(error)) {
+        stderr(`${error.code}: ${error.message}\n`);
+        if (error.hint !== undefined)
+            stderr(`${error.hint}\n`);
+    }
+    else {
+        stderr(`${error instanceof Error ? error.stack : String(error)}\n`);
+    }
+    return 1;
+}
+//# sourceMappingURL=backup.js.map

package/dist/commands/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,EAEZ,cAAc,EAEd,UAAU,EACV,WAAW,GACZ,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAEL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,aAAa,EACb,eAAe,GAEhB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AA4B7C,MAAM,YAAY,GAAG;;;;;;;;;CASpB,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;;;CAarB,CAAA;AAED,4GAA4G;AAC5G,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAqF,EACrF,MAAc;IAMd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC3F,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,QAAQ;QACxB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACpE,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC/D,OAAO,iBAAiB,CAAC;QACvB,WAAW;QACX,UAAU;QACV,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QACpD,KAAK,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,eAAe,EAAE,aAAa,CAAC;KAC9E,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,EAAkB,EAClB,WAA4C,EAC5C,UAAyC;IAEzC,MAAM,kBAAkB,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;IACrD,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC1B,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC1B,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAA;IAC7B,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC/C,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;AAC3D,CAAC;AAwBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,SAAS,CAAA;IAElD,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAClD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAA;QACjF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC;YACtC,EAAE;YACF,IAAI;YACJ,MAAM;YACN,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACrE,CAAC,CAAC;YACJ,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC,CAAA;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAEhD,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACjF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC3B,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBACxE,GAAG,CAAC,IAAI,CACN,GAAG,IAAI,KAAK,QAAQ,CAAC,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CACzF,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,uBAAuB,OAAO,CAAC,UAAU,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC,CAAA;QAC9E,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC;YAChD,GAAG;YACH,GAAG;YACH,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACxE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC7B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;QACnB,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,YAAY,IAAI,mBAAmB,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QACzF,IAAI,QAAQ,CAAC,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;QAC/E,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAElE,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,0CAA0C,aAAa,EAAE,CAAC,CAAA;QACjE,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACvE,MAAM,CAAC,uBAAuB,OAAO,CAAC,UAAU,SAAS,aAAa,EAAE,CAAC,CAAA;QACzE,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,sCAAsC,aAAa,EAAE,CAAC,CAAA;QAC7D,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;QACxC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC/D,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC;YACH,iEAAiE;YACjE,sEAAsE;YACtE,oCAAoC;YACpC,MAAM,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;YAClD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAC/C,OAAO,CAAC,IAAI,EACZ,EAAE,EACF,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAC3E,CAAA;gBACD,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;gBAC9B,GAAG,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAA;gBACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,YAAY,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAA;oBACzF,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,kBAAkB,IAAI,EAAE,CAAC,CAAA;gBACxE,CAAC;gBACD,OAAO,CAAC,CAAA;YACV,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE;gBAC9C,EAAE;gBACF,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;aAChF,CAAC,CAAA;YACF,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;YAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC,CAAA;YACzF,OAAO,CAAC,CAAA;QACV,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAA;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAc;IACjD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;IACzD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/commands/channels.d.ts

@@ -0,0 +1,47 @@
+import { type Logger } from '@cogenta/core';
+import type { Output, Writer } from '../output.js';
+/**
+ * `cogenta channels` — L22 task 2's answer to "constructor cette contrainte
+ * de déploiement, jamais la contourner": Telegram long-polling is safe per
+ * process only with exactly one dedicated instance running it (or a webhook,
+ * which this project deliberately does not use yet — see the adapters'
+ * own doc comments); Slack Socket Mode and Discord Gateway are each a single
+ * persistent connection by nature. Starting any of the three from every
+ * `cogenta serve` web replica would either duplicate every inbound update or
+ * fight over one connection slot. So none of them start inside `cogenta
+ * serve` at all — this is a separate, optional, single-instance process that
+ * owns exactly that job and nothing else: `cogenta serve` keeps serving HTTP
+ * (including outbound notices, unaffected) whether or not this process is
+ * running anywhere.
+ *
+ * Built the same way `cogenta mcp` is (`mcp.ts`): a second, independent
+ * entry point onto the *same* database and the *same* `.cogenta/
+ * agents-runtime` agent declarations `cogenta serve` uses — never a second
+ * copy of either, and never an HTTP round-trip back into a `cogenta serve`
+ * that may not even be running on this host. `@cogenta/channels`' chat
+ * bridge (`createAgentChatBridge`) is the one piece of real work this file
+ * wires in: an inbound message resolves to the linked Cogenta account (L6's
+ * already-tested one-time-code linking, `ChannelLinkStore`), and only runs
+ * an agent when that account itself holds `admin` — the same role `POST
+ * /api/agents/:name/run` itself requires, so a channel can never grant more
+ * than the linked account's own standing already would over HTTP (R4).
+ *
+ * Bot credentials are secrets and never touch `cogenta.config.mjs` (R7):
+ * each provider is configured entirely from environment variables, and a
+ * provider whose token is absent is simply not started — a site that wires
+ * up Telegram alone runs Telegram alone, with zero code path towards Slack
+ * or Discord (R1).
+ */
+export interface ChannelsOptions {
+    readonly cwd?: string;
+    readonly env?: Record<string, string | undefined>;
+    readonly logger?: Logger;
+    readonly out: Output;
+    readonly stderr: Writer;
+    /** Aborting stops every adapter, closes the database, and resolves `run()` — the graceful-shutdown seam tests use, mirroring `runServe`'s own `signal`. */
+    readonly signal?: AbortSignal;
+}
+declare const USAGE = "Usage\n  cogenta channels\n\nConnects this site to Telegram/Slack/Discord and routes inbound messages to\nan agent, running with the linked Cogenta account's own permissions. A\nsingle, dedicated process \u2014 do not run more than one per site, and never\nstart it from inside a load-balanced \"cogenta serve\" fleet (see the module\ndoc comment in packages/cli/src/commands/channels.ts).\n\nReads bot credentials from the environment, never from cogenta.config.mjs:\n  COGENTA_CHANNELS_TELEGRAM_BOT_TOKEN\n  COGENTA_CHANNELS_SLACK_BOT_TOKEN, COGENTA_CHANNELS_SLACK_APP_TOKEN\n  COGENTA_CHANNELS_DISCORD_BOT_TOKEN\nA provider with no token set is simply not started.\n";
+export declare function runChannels(options: ChannelsOptions): Promise<number>;
+export { USAGE as CHANNELS_USAGE };
+//# sourceMappingURL=channels.d.ts.map

package/dist/commands/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../src/commands/channels.ts"],"names":[],"mappings":"AAgBA,OAAO,EAOL,KAAK,MAAM,EAEZ,MAAM,eAAe,CAAA;AAYtB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAIlD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,2JAA2J;IAC3J,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,QAAA,MAAM,KAAK,kqBAcV,CAAA;AA8JD,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA4I3E;AAED,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,CAAA"}

package/dist/commands/channels.js

@@ -0,0 +1,277 @@
+import { dirname, join } from 'node:path';
+import process from 'node:process';
+import { SUPERAGENT_NAME } from '@cogenta/agents';
+import { createContentService, createPermissionLayer } from '@cogenta/api';
+import { createAuditLog, createUserStore } from '@cogenta/auth';
+import { createAgentChatBridge, createChannelLinkStore, createCommandRouter, createDiscordAdapter, createSlackAdapter, createTelegramAdapter, ensureChannelTables, } from '@cogenta/channels';
+import { CogentaError, createDatabaseMediaStore, createDatabaseRegistry, createLogger, isCogentaError, loadConfig, } from '@cogenta/core';
+import { createContentStore, createNotFoundLogStore, createRedirectStore, createRolePermissionOverlay, createRolePermissionStore, createSchemaTables, } from '@cogenta/schema';
+import { buildAgentRuntime } from './agent-runtime.js';
+import { loadSchemaModule } from './serve.js';
+const USAGE = `Usage
+  cogenta channels
+
+Connects this site to Telegram/Slack/Discord and routes inbound messages to
+an agent, running with the linked Cogenta account's own permissions. A
+single, dedicated process — do not run more than one per site, and never
+start it from inside a load-balanced "cogenta serve" fleet (see the module
+doc comment in packages/cli/src/commands/channels.ts).
+
+Reads bot credentials from the environment, never from cogenta.config.mjs:
+  COGENTA_CHANNELS_TELEGRAM_BOT_TOKEN
+  COGENTA_CHANNELS_SLACK_BOT_TOKEN, COGENTA_CHANNELS_SLACK_APP_TOKEN
+  COGENTA_CHANNELS_DISCORD_BOT_TOKEN
+A provider with no token set is simply not started.
+`;
+/** Duplicated from `mcp.ts` rather than shared — the two commands otherwise have nothing in common, and this is a dozen lines. */
+function storeForFactory(db, collections) {
+    const cache = new Map();
+    return (collection) => {
+        const existing = cache.get(collection.name);
+        if (existing !== undefined)
+            return existing;
+        const created = createContentStore({ db, collection, siblings: collections });
+        cache.set(collection.name, created);
+        return created;
+    };
+}
+function notConfigured(name, missing) {
+    return new CogentaError({
+        code: 'CHANNEL_PROVIDER_NOT_CONFIGURED',
+        message: `${name} has no bot credentials in the environment.`,
+        hint: `Set ${missing.join(' and ')} to connect ${name}, or leave it unset to skip it.`,
+        details: { channel: name },
+    });
+}
+function reportFailure(stderr, error) {
+    if (isCogentaError(error)) {
+        stderr(`${error.code}: ${error.message}\n`);
+        if (error.hint !== undefined)
+            stderr(`${error.hint}\n`);
+    }
+    else {
+        stderr(`${error instanceof Error ? (error.stack ?? error.message) : String(error)}\n`);
+    }
+    return 1;
+}
+/**
+ * Builds the router+bridge for one channel and, if its credentials are
+ * present in `env`, the live adapter itself — `undefined` otherwise, which
+ * is how a site with only Telegram configured ends up starting only
+ * Telegram (R1). `runner`/`agentExists`/`getUserRoles`/`linkStore` are
+ * shared across all three providers; only the credentials and the resulting
+ * adapter differ per channel.
+ */
+async function buildTelegram(deps) {
+    const token = deps.env.COGENTA_CHANNELS_TELEGRAM_BOT_TOKEN;
+    if (token === undefined)
+        throw notConfigured('telegram', ['COGENTA_CHANNELS_TELEGRAM_BOT_TOKEN']);
+    const router = createCommandRouter({
+        getUserRoles: deps.getUserRoles,
+        chat: createAgentChatBridge({
+            runner: { run: deps.run },
+            agents: { has: deps.agentExists },
+            defaultAgentName: SUPERAGENT_NAME,
+            getUserRoles: deps.getUserRoles,
+            channelName: 'telegram',
+            reply: async (identity, message) => {
+                if (identity.linkedUserId === null)
+                    return;
+                await adapter.send({ id: identity.channelUserId }, message);
+            },
+        }),
+    });
+    const adapter = createTelegramAdapter({ token, linkStore: deps.linkStore, router });
+    return Object.assign(adapter, {
+        start: () => adapter.start(),
+        stop: () => adapter.stop(),
+    });
+}
+async function buildSlack(deps) {
+    const botToken = deps.env.COGENTA_CHANNELS_SLACK_BOT_TOKEN;
+    const appToken = deps.env.COGENTA_CHANNELS_SLACK_APP_TOKEN;
+    if (botToken === undefined || appToken === undefined) {
+        throw notConfigured('slack', [
+            'COGENTA_CHANNELS_SLACK_BOT_TOKEN',
+            'COGENTA_CHANNELS_SLACK_APP_TOKEN',
+        ]);
+    }
+    const router = createCommandRouter({
+        getUserRoles: deps.getUserRoles,
+        chat: createAgentChatBridge({
+            runner: { run: deps.run },
+            agents: { has: deps.agentExists },
+            defaultAgentName: SUPERAGENT_NAME,
+            getUserRoles: deps.getUserRoles,
+            channelName: 'slack',
+            reply: async (identity, message) => {
+                if (identity.linkedUserId === null)
+                    return;
+                await adapter.send({ id: identity.channelUserId }, message);
+            },
+        }),
+    });
+    const adapter = createSlackAdapter({ botToken, appToken, linkStore: deps.linkStore, router });
+    return Object.assign(adapter, {
+        start: () => adapter.start(),
+        stop: () => adapter.stop(),
+    });
+}
+async function buildDiscord(deps) {
+    const botToken = deps.env.COGENTA_CHANNELS_DISCORD_BOT_TOKEN;
+    if (botToken === undefined)
+        throw notConfigured('discord', ['COGENTA_CHANNELS_DISCORD_BOT_TOKEN']);
+    const router = createCommandRouter({
+        getUserRoles: deps.getUserRoles,
+        chat: createAgentChatBridge({
+            runner: { run: deps.run },
+            agents: { has: deps.agentExists },
+            defaultAgentName: SUPERAGENT_NAME,
+            getUserRoles: deps.getUserRoles,
+            channelName: 'discord',
+            reply: async (identity, message) => {
+                if (identity.linkedUserId === null)
+                    return;
+                await adapter.send({ id: identity.channelUserId }, message);
+            },
+        }),
+    });
+    const adapter = createDiscordAdapter({ botToken, linkStore: deps.linkStore, router });
+    return Object.assign(adapter, {
+        start: () => adapter.start(),
+        stop: () => adapter.stop(),
+    });
+}
+export async function runChannels(options) {
+    const { out, stderr } = options;
+    const env = options.env ?? process.env;
+    const logger = options.logger ?? createLogger({ level: 'silent' });
+    let loaded;
+    try {
+        loaded = await loadConfig({
+            ...(options.cwd === undefined ? {} : { cwd: options.cwd }),
+            env,
+        });
+    }
+    catch (error) {
+        return reportFailure(stderr, error);
+    }
+    const projectRoot = loaded.path === null ? (options.cwd ?? process.cwd()) : dirname(loaded.path);
+    if (loaded.config.auth.signingKey === undefined) {
+        stderr('COGENTA_AUTH_SIGNING_KEY is not set.\n');
+        stderr('cogenta channels needs the same signing key cogenta serve uses, to read the same\n');
+        stderr('agent and provider configuration. Export COGENTA_AUTH_SIGNING_KEY and try again.\n');
+        return 1;
+    }
+    let collections;
+    let taxonomies;
+    try {
+        const loadedSchema = await loadSchemaModule(projectRoot);
+        collections = loadedSchema.collections;
+        taxonomies = loadedSchema.taxonomies;
+    }
+    catch (error) {
+        return reportFailure(stderr, error);
+    }
+    const selection = await createDatabaseRegistry({ logger }).select(loaded.config.database);
+    const db = selection.instance;
+    const live = [];
+    try {
+        await createSchemaTables(db, collections, []);
+        await ensureChannelTables(db);
+        // Fiche 63, ADR-0028: same reasoning as `cogenta mcp` — `cogenta
+        // channels` builds its own `PermissionLayer` and must consult the same
+        // override table, or an inbound chat command could keep an already
+        // revoked grant until this long-lived process restarts.
+        const rolePermissionOverlay = await createRolePermissionOverlay(createRolePermissionStore({ db, collections, taxonomies }));
+        const permissions = createPermissionLayer({
+            collections,
+            rolePermissionOverrides: rolePermissionOverlay,
+        });
+        const storeFor = storeForFactory(db, collections);
+        const contentService = createContentService({ collections, permissions, storeFor });
+        const mediaStore = createDatabaseMediaStore({ db });
+        const auditLog = createAuditLog(db);
+        const users = createUserStore(db);
+        const linkStore = createChannelLinkStore(db);
+        const notFoundLog = createNotFoundLogStore({ db });
+        await notFoundLog.ensureTable();
+        const redirects = createRedirectStore({ db });
+        await redirects.ensureTable();
+        const agentsRuntime = await buildAgentRuntime({
+            dataDir: join(projectRoot, '.cogenta', 'agents-runtime'),
+            projectRoot,
+            signingKey: loaded.config.auth.signingKey,
+            site: {
+                name: loaded.config.site.name,
+                ...(loaded.config.site.url === undefined ? {} : { url: loaded.config.site.url }),
+                locales: loaded.config.site.locales,
+                defaultLocale: loaded.config.site.defaultLocale,
+            },
+            contentService,
+            mediaStore,
+            auditLog,
+            logger,
+            collections,
+            notFoundLog,
+            redirects,
+        });
+        const getUserRoles = async (userId) => {
+            const user = await users.byId(userId);
+            return user === null ? [] : user.roles;
+        };
+        const run = (name, instruction, trigger) => agentsRuntime.agentRunner.run(name, instruction, trigger);
+        const agentExists = (name) => agentsRuntime.agentRegistry.get(name) !== undefined;
+        const builders = [
+            ['telegram', () => buildTelegram({ env, linkStore, getUserRoles, run, agentExists })],
+            ['slack', () => buildSlack({ env, linkStore, getUserRoles, run, agentExists })],
+            ['discord', () => buildDiscord({ env, linkStore, getUserRoles, run, agentExists })],
+        ];
+        for (const [name, build] of builders) {
+            try {
+                const adapter = await build();
+                await adapter.start();
+                live.push(adapter);
+                out.detail(`${name}: connected.`);
+            }
+            catch (error) {
+                if (isCogentaError(error) && error.code === 'CHANNEL_PROVIDER_NOT_CONFIGURED') {
+                    out.detail(`${name}: not configured, skipped.`);
+                    continue;
+                }
+                throw error;
+            }
+        }
+        if (live.length === 0) {
+            out.detail('No channel is configured — set COGENTA_CHANNELS_TELEGRAM_BOT_TOKEN, ' +
+                'COGENTA_CHANNELS_SLACK_BOT_TOKEN+COGENTA_CHANNELS_SLACK_APP_TOKEN, or ' +
+                'COGENTA_CHANNELS_DISCORD_BOT_TOKEN to connect one.');
+        }
+        else {
+            out.detail(`cogenta channels running — ${live.length} channel(s) connected.`);
+        }
+        // Runs until told to stop — this process has no other exit condition
+        // while at least the intent to run exists (mirrors `runServe`'s own
+        // `signal`-driven shutdown).
+        await new Promise((resolvePromise) => {
+            if (options.signal === undefined)
+                return;
+            if (options.signal.aborted) {
+                resolvePromise();
+                return;
+            }
+            options.signal.addEventListener('abort', () => resolvePromise(), { once: true });
+        });
+        return 0;
+    }
+    catch (error) {
+        return reportFailure(stderr, error);
+    }
+    finally {
+        for (const adapter of live)
+            await adapter.stop();
+        await selection.dispose();
+    }
+}
+export { USAGE as CHANNELS_USAGE };
+//# sourceMappingURL=channels.js.map

package/dist/commands/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/commands/channels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,EAGL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,EAEZ,cAAc,EAEd,UAAU,GACX,MAAM,eAAe,CAAA;AACtB,OAAO,EAGL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,kBAAkB,GAEnB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AA6C7C,MAAM,KAAK,GAAG;;;;;;;;;;;;;;CAcb,CAAA;AAED,kIAAkI;AAClI,SAAS,eAAe,CACtB,EAAkB,EAClB,WAA4C;IAE5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC7C,OAAO,CAAC,UAAU,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7E,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAA0B;IAC7D,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,GAAG,IAAI,6CAA6C;QAC7D,IAAI,EAAE,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,iCAAiC;QACtF,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KAC3B,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,KAAc;IACnD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;IACzD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAQD;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAAC,IAU5B;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAA;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,qCAAqC,CAAC,CAAC,CAAA;IACjG,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,qBAAqB,CAAC;YAC1B,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE;YACjC,gBAAgB,EAAE,eAAe;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,UAAU;YACvB,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;gBACjC,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI;oBAAE,OAAM;gBAC1C,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC;KACH,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;KAC3B,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAUzB;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAA;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAA;IAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,aAAa,CAAC,OAAO,EAAE;YAC3B,kCAAkC;YAClC,kCAAkC;SACnC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,qBAAqB,CAAC;YAC1B,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE;YACjC,gBAAgB,EAAE,eAAe;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,OAAO;YACpB,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;gBACjC,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI;oBAAE,OAAM;gBAC1C,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC;KACH,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7F,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;KAC3B,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAU3B;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,kCAAkC,CAAA;IAC5D,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAClG,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,qBAAqB,CAAC;YAC1B,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE;YACjC,gBAAgB,EAAE,eAAe;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;gBACjC,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI;oBAAE,OAAM;gBAC1C,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,CAAA;YAC7D,CAAC;SACF,CAAC;KACH,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;KAC3B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB;IACxD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAElE,IAAI,MAA8C,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC;YACxB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1D,GAAG;SACJ,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEhG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,CAAC,wCAAwC,CAAC,CAAA;QAChD,MAAM,CAAC,oFAAoF,CAAC,CAAA;QAC5F,MAAM,CAAC,oFAAoF,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,WAA4C,CAAA;IAChD,IAAI,UAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAA;QACxD,WAAW,GAAG,YAAY,CAAC,WAAW,CAAA;QACtC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAA;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzF,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAA;IAE7B,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;QAC7C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAA;QAE7B,iEAAiE;QACjE,uEAAuE;QACvE,mEAAmE;QACnE,wDAAwD;QACxD,MAAM,qBAAqB,GAAG,MAAM,2BAA2B,CAC7D,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAC3D,CAAA;QACD,MAAM,WAAW,GAAG,qBAAqB,CAAC;YACxC,WAAW;YACX,uBAAuB,EAAE,qBAAqB;SAC/C,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,cAAc,GAAG,oBAAoB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAA;QACnF,MAAM,UAAU,GAAG,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAA;QAC5C,MAAM,WAAW,GAAG,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAClD,MAAM,WAAW,CAAC,WAAW,EAAE,CAAA;QAC/B,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7C,MAAM,SAAS,CAAC,WAAW,EAAE,CAAA;QAE7B,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,gBAAgB,CAAC;YACxD,WAAW;YACX,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;YACzC,IAAI,EAAE;gBACJ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;gBAC7B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO;gBACnC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;aAChD;YACD,cAAc;YACd,UAAU;YACV,QAAQ;YACR,MAAM;YACN,WAAW;YACX,WAAW;YACX,SAAS;SACV,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,KAAK,EAAE,MAAc,EAA8B,EAAE;YACxE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QACxC,CAAC,CAAA;QACD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,OAAgB,EAAE,EAAE,CAClE,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QAC3D,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAAA;QAEzF,MAAM,QAAQ,GAAqE;YACjF,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YACrF,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/E,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;SACpF,CAAA;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,KAAK,EAAE,CAAA;gBAC7B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;gBACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;oBAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;oBAC/C,SAAQ;gBACV,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CACR,sEAAsE;gBACpE,wEAAwE;gBACxE,oDAAoD,CACvD,CAAA;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,8BAA8B,IAAI,CAAC,MAAM,wBAAwB,CAAC,CAAA;QAC/E,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,6BAA6B;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,EAAE;YACzC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAM;YACxC,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,cAAc,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;QAEF,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrC,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,OAAO,IAAI,IAAI;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAChD,MAAM,SAAS,CAAC,OAAO,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,CAAA"}

package/dist/commands/default-logo.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The default Cogenta logo served on the public site (fiche L21 task 8).
+ *
+ * Embedded as base64 rather than shipped as a loose file: `@cogenta/cli`'s
+ * `package.json` `"files"` is `["dist"]` only, and a binary asset would need
+ * its own build-time copy step to reach a published tarball (the way
+ * `dist/admin-assets` gets one) — a single small PNG is cheap enough to
+ * embed directly instead.
+ *
+ * This is the icon-only mark, exported straight from the corrected source
+ * the user supplied (`docs/logo/logo-cogenta-icon.png`) — a properly
+ * composed, generously padded 500×500 icon-only asset, not the earlier
+ * icon+wordmark lockup this once had to be manually cropped out of. No trim
+ * or crop is applied here: the source already fills most of its own canvas
+ * (~78% width, ~95% height), so a straight resize to 128×128 is the only
+ * processing step, spent entirely on the mark at a size sharp enough for
+ * the 32–40px footer/login contexts that display it.
+ *
+ * Served at `DEFAULT_LOGO_PATH`, exactly like `STYLESHEET_PATH`
+ * (`theme-render.ts`): one URL, one long `Cache-Control: immutable`, since
+ * the bytes only ever change with a new `@cogenta/cli` release.
+ */
+/** Mount point on the public site — under `/_cogenta/`, the same reserved namespace `STYLESHEET_PATH` uses, so no collection route can ever claim it. */
+export declare const DEFAULT_LOGO_PATH = "/_cogenta/logo-cogenta.png";
+export declare const DEFAULT_LOGO_CONTENT_TYPE = "image/png";
+export declare function defaultLogoBytes(): Uint8Array;
+//# sourceMappingURL=default-logo.d.ts.map

package/dist/commands/default-logo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-logo.d.ts","sourceRoot":"","sources":["../../src/commands/default-logo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,yJAAyJ;AACzJ,eAAO,MAAM,iBAAiB,+BAA+B,CAAA;AAE7D,eAAO,MAAM,yBAAyB,cAAc,CAAA;AAEpD,wBAAgB,gBAAgB,IAAI,UAAU,CAE7C"}