@cogenta/import 0.1.4 → 0.2.2

package/dist/mapping.js

@@ -0,0 +1,41 @@
+import { CogentaError } from '@cogenta/core';
+/** Proposes target field names by matching source header names case-insensitively (task 2's "correspondances proposées automatiquement"). */
+export function proposeFieldMapping(sourceFields, collection) {
+    const targetNames = new Map(Object.keys(collection.fields).map((name) => [name.toLowerCase(), name]));
+    const fields = {};
+    for (const source of sourceFields) {
+        fields[source] = targetNames.get(source.toLowerCase()) ?? null;
+    }
+    return { targetCollection: collection.name, fields };
+}
+export function resolveMapping(mapping, collections) {
+    const collection = collections.find((c) => c.name === mapping.targetCollection);
+    if (collection === undefined) {
+        throw new CogentaError({
+            code: 'IMPORT_MAPPING_INVALID',
+            message: `Collection "${mapping.targetCollection}" does not exist on this site.`,
+            hint: 'Pick a collection this site declares, or use the field-mapping screen to change the target.',
+            details: { collection: mapping.targetCollection },
+        });
+    }
+    const targetFieldNames = new Set(Object.keys(collection.fields));
+    const fields = new Map();
+    const ignored = [];
+    for (const [source, target] of Object.entries(mapping.fields)) {
+        if (target === null) {
+            ignored.push(source);
+            continue;
+        }
+        if (!targetFieldNames.has(target)) {
+            throw new CogentaError({
+                code: 'IMPORT_MAPPING_INVALID',
+                message: `Collection "${collection.name}" has no field "${target}".`,
+                hint: 'Point this source column at an existing field, or map it to "ignore".',
+                details: { collection: collection.name, field: target },
+            });
+        }
+        fields.set(source, target);
+    }
+    return { collection, fields, ignored };
+}
+//# sourceMappingURL=mapping.js.map

package/dist/mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.js","sourceRoot":"","sources":["../src/mapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAuB5C,6IAA6I;AAC7I,MAAM,UAAU,mBAAmB,CACjC,YAA+B,EAC/B,UAAgC;IAEhC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAU,CAAC,CAClF,CAAA;IACD,MAAM,MAAM,GAAkC,EAAE,CAAA;IAChD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAA;IAChE,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,OAAqB,EACrB,WAA4C;IAE5C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,eAAe,OAAO,CAAC,gBAAgB,gCAAgC;YAChF,IAAI,EAAE,6FAA6F;YACnG,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE;SAClD,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,eAAe,UAAU,CAAC,IAAI,mBAAmB,MAAM,IAAI;gBACpE,IAAI,EAAE,uEAAuE;gBAC7E,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;aACxD,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACxC,CAAC"}

package/dist/ssrf.d.ts

@@ -0,0 +1,12 @@
+import { lookup } from 'node:dns/promises';
+export declare function isPrivateAddress(ip: string): boolean;
+/**
+ * Resolves the URL's host and throws if it (or any of its resolved
+ * addresses) is a loopback, link-local or otherwise private address —
+ * checked on the resolved IP, not the hostname, so `http://a.b.c` that
+ * resolves to `127.0.0.1` (DNS rebinding) is refused just the same.
+ */
+export declare function assertPublicUrl(url: string, options?: {
+    readonly lookupImpl?: typeof lookup;
+}): Promise<void>;
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../src/ssrf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAqD1C,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAQpD;AAWD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,MAAM,CAAA;CAAO,GACpD,OAAO,CAAC,IAAI,CAAC,CAmCf"}

package/dist/ssrf.js

@@ -0,0 +1,106 @@
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+import { CogentaError } from '@cogenta/core';
+/**
+ * Guards against a remote-media download becoming a request an attacker
+ * chose the destination of (fiche 25, pièges connus: "les médias distants
+ * sont des requêtes sortantes vers des URL fournies par un fichier").
+ *
+ * A WXR, an RSS feed or a CSV cell is untrusted input (rule R8) that this
+ * import turns into an outbound `fetch`. Without this check, an attacker who
+ * can get their export imported can make the server fetch
+ * `http://169.254.169.254/latest/meta-data/` (cloud instance metadata) or
+ * `http://localhost:5432` (a database port) and, through the image that gets
+ * stored, read the response back.
+ */
+const PRIVATE_IPV4_RANGES = [
+    [ipToInt('0.0.0.0'), ipToInt('0.255.255.255')],
+    [ipToInt('10.0.0.0'), ipToInt('10.255.255.255')],
+    [ipToInt('100.64.0.0'), ipToInt('100.127.255.255')], // CGNAT
+    [ipToInt('127.0.0.0'), ipToInt('127.255.255.255')], // loopback
+    [ipToInt('169.254.0.0'), ipToInt('169.254.255.255')], // link-local, cloud metadata
+    [ipToInt('172.16.0.0'), ipToInt('172.31.255.255')],
+    [ipToInt('192.0.0.0'), ipToInt('192.0.0.255')],
+    [ipToInt('192.168.0.0'), ipToInt('192.168.255.255')],
+    [ipToInt('198.18.0.0'), ipToInt('198.19.255.255')], // benchmarking
+    [ipToInt('224.0.0.0'), ipToInt('255.255.255.255')], // multicast/reserved
+];
+function ipToInt(ip) {
+    const parts = ip.split('.').map(Number);
+    return (((parts[0] ?? 0) << 24) + ((parts[1] ?? 0) << 16) + ((parts[2] ?? 0) << 8) + (parts[3] ?? 0));
+}
+function isPrivateIpv4(ip) {
+    const value = ipToInt(ip) >>> 0;
+    return PRIVATE_IPV4_RANGES.some(([start, end]) => value >= start >>> 0 && value <= end >>> 0);
+}
+function isPrivateIpv6(ip) {
+    const lower = ip.toLowerCase();
+    return (lower === '::1' || // loopback
+        lower.startsWith('fe80:') || // link-local
+        lower.startsWith('fc') || // unique local fc00::/7
+        lower.startsWith('fd') ||
+        lower.startsWith('::ffff:') // IPv4-mapped — check the embedded address too
+    );
+}
+export function isPrivateAddress(ip) {
+    if (isIP(ip) === 4)
+        return isPrivateIpv4(ip);
+    if (isIP(ip) === 6) {
+        if (isPrivateIpv6(ip))
+            return true;
+        const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(ip);
+        return mapped?.[1] !== undefined && isPrivateIpv4(mapped[1]);
+    }
+    return true; // not a recognisable literal — refuse rather than guess
+}
+function unsafeUrl(url, reason) {
+    return new CogentaError({
+        code: 'IMPORT_MEDIA_URL_UNSAFE',
+        message: `"${url}" cannot be fetched: ${reason}.`,
+        hint: 'Only public http(s) URLs are downloaded during import. Host the file publicly, or upload it directly.',
+        details: { url },
+    });
+}
+/**
+ * Resolves the URL's host and throws if it (or any of its resolved
+ * addresses) is a loopback, link-local or otherwise private address —
+ * checked on the resolved IP, not the hostname, so `http://a.b.c` that
+ * resolves to `127.0.0.1` (DNS rebinding) is refused just the same.
+ */
+export async function assertPublicUrl(url, options = {}) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw unsafeUrl(url, 'not a valid URL');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw unsafeUrl(url, `protocol "${parsed.protocol}" is not allowed`);
+    }
+    const hostname = parsed.hostname;
+    if (hostname === 'localhost' || hostname.endsWith('.localhost')) {
+        throw unsafeUrl(url, 'localhost is not a public address');
+    }
+    if (isIP(hostname) !== 0) {
+        if (isPrivateAddress(hostname))
+            throw unsafeUrl(url, 'resolves to a private address');
+        return;
+    }
+    const doLookup = options.lookupImpl ?? lookup;
+    let addresses;
+    try {
+        const result = await doLookup(hostname, { all: true });
+        addresses = Array.isArray(result) ? result : [result];
+    }
+    catch {
+        throw unsafeUrl(url, 'the host name could not be resolved');
+    }
+    if (addresses.length === 0)
+        throw unsafeUrl(url, 'the host name resolved to nothing');
+    for (const { address } of addresses) {
+        if (isPrivateAddress(address))
+            throw unsafeUrl(url, 'resolves to a private address');
+    }
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../src/ssrf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C;;;;;;;;;;;GAWG;AAEH,MAAM,mBAAmB,GAAgC;IACvD,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ;IAC7D,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,WAAW;IAC/D,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,6BAA6B;IACnF,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpD,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,EAAE,eAAe;IACnE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,qBAAqB;CAC1E,CAAA;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvC,OAAO,CACL,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC7F,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;IAC/B,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,KAAK,CAAC,CAAC,CAAA;AAC/F,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;IAC9B,OAAO,CACL,KAAK,KAAK,KAAK,IAAI,WAAW;QAC9B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,aAAa;QAC1C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,wBAAwB;QAClD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,+CAA+C;KAC5E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,EAAE,CAAC,CAAA;IAC5C,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,aAAa,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,IAAI,CAAA,CAAC,wDAAwD;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,MAAc;IAC5C,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,IAAI,GAAG,wBAAwB,MAAM,GAAG;QACjD,IAAI,EAAE,uGAAuG;QAC7G,OAAO,EAAE,EAAE,GAAG,EAAE;KACjB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,OAAO,GAA4C,EAAE;IAErD,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;IACzC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,SAAS,CAAC,GAAG,EAAE,aAAa,MAAM,CAAC,QAAQ,kBAAkB,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,MAAM,SAAS,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,gBAAgB,CAAC,QAAQ,CAAC;YAAE,MAAM,SAAS,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;QACrF,OAAM;IACR,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAA;IAC7C,IAAI,SAAyC,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAA;IAC7D,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAA;IACrF,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;QACpC,IAAI,gBAAgB,CAAC,OAAO,CAAC;YAAE,MAAM,SAAS,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IACtF,CAAC;AACH,CAAC"}

package/dist/tracking.d.ts

@@ -0,0 +1,82 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * The import bookkeeping tables (fiche 25, tasks 1, 3 and 4).
+ *
+ * Two tables, both owned by `@cogenta/import` alone — never a field on
+ * contract A. `provenance`/`provenanceDetail` were the plan's first idea
+ * (task 4's "décision à prendre"), but `provenanceDetail` is a fixed,
+ * `strictObject` shape (`{ agent, model, at, prompt? }`, contract A) with no
+ * room for an import identifier, and stuffing one into `agent` would misuse a
+ * field that means "which AI agent wrote this" for content that is not
+ * AI-generated at all. A side table costs nothing on the figé contract and is
+ * exactly the shape `createRedirectStore` already uses for the same reason —
+ * bookkeeping that is about *how* content arrived, not what it is.
+ *
+ * `cogenta_import_runs` is one row per analyze/apply cycle: its `status`
+ * tracks the two-phase flow the lot asks for ('analyzed' → nothing written
+ * yet; 'running'/'done'/'failed' → apply is or was in progress; 'cancelled'
+ * → undone). `cogenta_import_items` is one row per entry actually created,
+ * which is what makes both resume (task 3: skip a `sourceId` already
+ * recorded) and undo (task 4: trash everything recorded for a run) possible
+ * without touching the entries themselves.
+ */
+export declare const IMPORT_RUNS_TABLE = "cogenta_import_runs";
+export declare const IMPORT_ITEMS_TABLE = "cogenta_import_items";
+export declare const IMPORT_SOURCES: readonly ['wordpress', 'csv', 'json', 'rss'];
+export type ImportSource = (typeof IMPORT_SOURCES)[number];
+export declare const IMPORT_RUN_STATUSES: readonly ['analyzed', 'queued', 'running', 'done', 'failed', 'cancelled'];
+export type ImportRunStatus = (typeof IMPORT_RUN_STATUSES)[number];
+export interface ImportRun {
+    readonly id: string;
+    readonly source: ImportSource;
+    readonly status: ImportRunStatus;
+    readonly createdBy: string | null;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    /** The analyzed preview report — what `analyze*` produced, unchanged by apply. */
+    readonly analysis: unknown;
+    /** Caller-supplied field/collection mapping (task 2), stored so a resumed apply reuses the same one. */
+    readonly mapping: unknown;
+    /** Progress counters, updated as apply runs — `{ processed, total }`. */
+    readonly progress: {
+        readonly processed: number;
+        readonly total: number;
+    };
+    /** The final report, present once `status` is `'done'` or `'failed'`. */
+    readonly report: unknown;
+    readonly error: string | null;
+}
+export interface CreateImportRunInput {
+    readonly source: ImportSource;
+    readonly createdBy: string | null;
+    readonly analysis: unknown;
+    readonly mapping?: unknown;
+    readonly total?: number;
+}
+export interface ImportItem {
+    readonly runId: string;
+    readonly sourceId: string;
+    readonly collection: string;
+    readonly entryId: string;
+    readonly createdAt: string;
+}
+export interface ImportTrackingStore {
+    ensureTables(): Promise<void>;
+    createRun(input: CreateImportRunInput): Promise<ImportRun>;
+    getRun(id: string): Promise<ImportRun | null>;
+    listRuns(options?: {
+        readonly limit?: number;
+    }): Promise<ImportRun[]>;
+    updateRun(id: string, patch: Partial<Pick<ImportRun, 'status' | 'progress' | 'report' | 'error' | 'mapping'>>): Promise<ImportRun>;
+    /** Records one written entry. Idempotent: re-recording the same `(runId, sourceId)` is a no-op. */
+    recordItem(item: Omit<ImportItem, 'createdAt'>): Promise<void>;
+    /** The `sourceId`s already recorded for a run — what a resumed apply must skip. */
+    doneSourceIds(runId: string): Promise<Set<string>>;
+    listItems(runId: string): Promise<ImportItem[]>;
+}
+export interface CreateImportTrackingStoreOptions {
+    readonly db: DatabaseHandle;
+    readonly now?: () => number;
+}
+export declare function createImportTrackingStore(options: CreateImportTrackingStoreOptions): ImportTrackingStore;
+//# sourceMappingURL=tracking.d.ts.map

package/dist/tracking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking.d.ts","sourceRoot":"","sources":["../src/tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAAiC,MAAM,eAAe,CAAA;AAEhG;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,iBAAiB,wBAAwB,CAAA;AACtD,eAAO,MAAM,kBAAkB,yBAAyB,CAAA;AAExD,eAAO,MAAM,cAAc,YAAI,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAU,CAAA;AAC1E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,eAAO,MAAM,mBAAmB,YAC9B,UAAU,EACV,QAAQ,EACR,SAAS,EACT,MAAM,EACN,QAAQ,EACR,WAAW,CACH,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,wGAAwG;IACxG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,SAAS,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IACrE,SAAS,CACP,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,GACtF,OAAO,CAAC,SAAS,CAAC,CAAA;IACrB,mGAAmG;IACnG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,mFAAmF;IACnF,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAClD,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;CAChD;AAmDD,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,mBAAmB,CA6JrB"}

package/dist/tracking.js

@@ -0,0 +1,200 @@
+import { CogentaError, identifier, limit, newId, sql } from '@cogenta/core';
+/**
+ * The import bookkeeping tables (fiche 25, tasks 1, 3 and 4).
+ *
+ * Two tables, both owned by `@cogenta/import` alone — never a field on
+ * contract A. `provenance`/`provenanceDetail` were the plan's first idea
+ * (task 4's "décision à prendre"), but `provenanceDetail` is a fixed,
+ * `strictObject` shape (`{ agent, model, at, prompt? }`, contract A) with no
+ * room for an import identifier, and stuffing one into `agent` would misuse a
+ * field that means "which AI agent wrote this" for content that is not
+ * AI-generated at all. A side table costs nothing on the figé contract and is
+ * exactly the shape `createRedirectStore` already uses for the same reason —
+ * bookkeeping that is about *how* content arrived, not what it is.
+ *
+ * `cogenta_import_runs` is one row per analyze/apply cycle: its `status`
+ * tracks the two-phase flow the lot asks for ('analyzed' → nothing written
+ * yet; 'running'/'done'/'failed' → apply is or was in progress; 'cancelled'
+ * → undone). `cogenta_import_items` is one row per entry actually created,
+ * which is what makes both resume (task 3: skip a `sourceId` already
+ * recorded) and undo (task 4: trash everything recorded for a run) possible
+ * without touching the entries themselves.
+ */
+export const IMPORT_RUNS_TABLE = 'cogenta_import_runs';
+export const IMPORT_ITEMS_TABLE = 'cogenta_import_items';
+export const IMPORT_SOURCES = ['wordpress', 'csv', 'json', 'rss'];
+export const IMPORT_RUN_STATUSES = [
+    'analyzed',
+    'queued',
+    'running',
+    'done',
+    'failed',
+    'cancelled',
+];
+function parseJson(raw) {
+    if (raw === null)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function toRun(row) {
+    return {
+        id: row.id,
+        source: row.source,
+        status: row.status,
+        createdBy: row.created_by,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        analysis: parseJson(row.analysis),
+        mapping: parseJson(row.mapping),
+        progress: { processed: Number(row.processed), total: Number(row.total) },
+        report: parseJson(row.report),
+        error: row.error,
+    };
+}
+function notFound(id) {
+    return new CogentaError({
+        code: 'IMPORT_RUN_NOT_FOUND',
+        message: `No import run "${id}" exists.`,
+        hint: 'Analyze a source first — apply, status and cancel all operate on the run id that returns.',
+        details: { id },
+    });
+}
+export function createImportTrackingStore(options) {
+    const { db } = options;
+    const now = options.now ?? Date.now;
+    const runsTable = identifier(IMPORT_RUNS_TABLE, db.dialect);
+    const itemsTable = identifier(IMPORT_ITEMS_TABLE, db.dialect);
+    let ready = false;
+    async function ensureTables() {
+        if (ready)
+            return;
+        await db.query(sql `
+      create table if not exists ${runsTable} (
+        id varchar(64) not null primary key,
+        source varchar(32) not null,
+        status varchar(16) not null,
+        created_by varchar(64),
+        created_at varchar(40) not null,
+        updated_at varchar(40) not null,
+        analysis text,
+        mapping text,
+        processed integer not null default 0,
+        total integer not null default 0,
+        report text,
+        error text
+      )`);
+        await db.query(sql `
+      create table if not exists ${itemsTable} (
+        run_id varchar(64) not null,
+        source_id varchar(255) not null,
+        collection varchar(255) not null,
+        entry_id varchar(64) not null,
+        created_at varchar(40) not null
+      )`);
+        await db
+            .query(sql `create unique index ${identifier(`${IMPORT_ITEMS_TABLE}_run_source`, db.dialect)}
+            on ${itemsTable} (run_id, source_id)`)
+            .catch(() => undefined); // already there — no dialect spells "if not exists" the same way
+        ready = true;
+    }
+    async function createRun(input) {
+        await ensureTables();
+        const id = newId();
+        const timestamp = new Date(now()).toISOString();
+        await db.query(sql `
+      insert into ${runsTable}
+        (id, source, status, created_by, created_at, updated_at, analysis, mapping, processed, total, report, error)
+      values (
+        ${id}, ${input.source}, ${'analyzed'}, ${input.createdBy}, ${timestamp}, ${timestamp},
+        ${JSON.stringify(input.analysis)},
+        ${input.mapping === undefined ? null : JSON.stringify(input.mapping)},
+        ${0}, ${input.total ?? 0}, ${null}, ${null}
+      )`);
+        const created = await getRun(id);
+        if (created === null)
+            throw notFound(id);
+        return created;
+    }
+    async function getRun(id) {
+        await ensureTables();
+        const found = await db.query(sql `
+      select * from ${runsTable} where id = ${id} limit ${limit(1)}`);
+        const row = found.rows[0];
+        return row === undefined ? null : toRun(row);
+    }
+    async function listRuns(listOptions = {}) {
+        await ensureTables();
+        const found = await db.query(sql `
+      select * from ${runsTable} order by created_at desc limit ${limit(listOptions.limit ?? 50)}`);
+        return found.rows.map(toRun);
+    }
+    async function updateRun(id, patch) {
+        await ensureTables();
+        const current = await getRun(id);
+        if (current === null)
+            throw notFound(id);
+        const next = {
+            status: patch.status ?? current.status,
+            processed: patch.progress?.processed ?? current.progress.processed,
+            total: patch.progress?.total ?? current.progress.total,
+            report: patch.report === undefined ? current.report : patch.report,
+            error: patch.error === undefined ? current.error : patch.error,
+            mapping: patch.mapping === undefined ? current.mapping : patch.mapping,
+        };
+        await db.query(sql `
+      update ${runsTable} set
+        status = ${next.status},
+        updated_at = ${new Date(now()).toISOString()},
+        processed = ${next.processed},
+        total = ${next.total},
+        report = ${next.report === null ? null : JSON.stringify(next.report)},
+        error = ${next.error},
+        mapping = ${next.mapping === null ? null : JSON.stringify(next.mapping)}
+      where id = ${id}`);
+        const updated = await getRun(id);
+        if (updated === null)
+            throw notFound(id);
+        return updated;
+    }
+    async function recordItem(item) {
+        await ensureTables();
+        await db
+            .query(sql `
+        insert into ${itemsTable} (run_id, source_id, collection, entry_id, created_at)
+        values (${item.runId}, ${item.sourceId}, ${item.collection}, ${item.entryId}, ${new Date(now()).toISOString()})`)
+            .catch(() => undefined); // unique (run_id, source_id): a retried item after a crash is a no-op, not an error
+    }
+    async function doneSourceIds(runId) {
+        await ensureTables();
+        const found = await db.query(sql `
+      select source_id from ${itemsTable} where run_id = ${runId}`);
+        return new Set(found.rows.map((row) => row.source_id));
+    }
+    async function listItems(runId) {
+        await ensureTables();
+        const found = await db.query(sql `select * from ${itemsTable} where run_id = ${runId} order by created_at asc`);
+        return found.rows.map((row) => ({
+            runId: row.run_id,
+            sourceId: row.source_id,
+            collection: row.collection,
+            entryId: row.entry_id,
+            createdAt: row.created_at,
+        }));
+    }
+    return {
+        ensureTables,
+        createRun,
+        getRun,
+        listRuns,
+        updateRun,
+        recordItem,
+        doneSourceIds,
+        listItems,
+    };
+}
+//# sourceMappingURL=tracking.js.map

package/dist/tracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking.js","sourceRoot":"","sources":["../src/tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAEhG;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAA;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAA;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAU,CAAA;AAG1E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU;IACV,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,WAAW;CACH,CAAA;AAoEV,SAAS,SAAS,CAAC,GAAkB;IACnC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAsB;QAClC,MAAM,EAAE,GAAG,CAAC,MAAyB;QACrC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACxE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,kBAAkB,EAAE,WAAW;QACxC,IAAI,EAAE,2FAA2F;QACjG,OAAO,EAAE,EAAE,EAAE,EAAE;KAChB,CAAC,CAAA;AACJ,CAAC;AAOD,MAAM,UAAU,yBAAyB,CACvC,OAAyC;IAEzC,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,SAAS,GAAG,UAAU,CAAC,iBAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,kBAAkB,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC7D,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,KAAK,UAAU,YAAY;QACzB,IAAI,KAAK;YAAE,OAAM;QAEjB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mCACa,SAAS;;;;;;;;;;;;;QAapC,CAAC,CAAA;QAEL,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mCACa,UAAU;;;;;;QAMrC,CAAC,CAAA;QAEL,MAAM,EAAE;aACL,KAAK,CACJ,GAAG,CAAA,uBAAuB,UAAU,CAAC,GAAG,kBAAkB,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC;iBAC3E,UAAU,sBAAsB,CAC1C;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,iEAAiE;QAE3F,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,KAA2B;QAClD,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;QAClB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;QAE/C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;oBACF,SAAS;;;UAGnB,EAAE,KAAK,KAAK,CAAC,MAAM,KAAK,UAAU,KAAK,KAAK,CAAC,SAAS,KAAK,SAAS,KAAK,SAAS;UAClF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;UAC9B,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;UAClE,CAAC,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI;QAC1C,CAAC,CAAA;QAEL,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAA;QAChC,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAA;QACxC,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,EAAU;QAC9B,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAS,GAAG,CAAA;sBACtB,SAAS,eAAe,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,WAAW,GAAgC,EAAE;QACnE,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAS,GAAG,CAAA;sBACtB,SAAS,mCAAmC,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QAC/F,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,EAAU,EACV,KAAuF;QAEvF,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAA;QAChC,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAA;QAExC,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;YACtC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS;YAClE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK;YACtD,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YAClE,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAC9D,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;SACvE,CAAA;QAED,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;eACP,SAAS;mBACL,IAAI,CAAC,MAAM;uBACP,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;sBAC9B,IAAI,CAAC,SAAS;kBAClB,IAAI,CAAC,KAAK;mBACT,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;kBAC1D,IAAI,CAAC,KAAK;oBACR,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;mBAC5D,EAAE,EAAE,CAAC,CAAA;QAEpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAA;QAChC,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAA;QACxC,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,IAAmC;QAC3D,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,EAAE;aACL,KAAK,CAAC,GAAG,CAAA;sBACM,UAAU;kBACd,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;aAClH,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,oFAAoF;IAChH,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,KAAa;QACxC,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAwB,GAAG,CAAA;8BAC7B,UAAU,mBAAmB,KAAK,EAAE,CAAC,CAAA;QAC/D,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;IACxD,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,KAAa;QACpC,MAAM,YAAY,EAAE,CAAA;QACpB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAMzB,GAAG,CAAA,iBAAiB,UAAU,mBAAmB,KAAK,0BAA0B,CAAC,CAAA;QACpF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAA;IACL,CAAC;IAED,OAAO;QACL,YAAY;QACZ,SAAS;QACT,MAAM;QACN,QAAQ;QACR,SAAS;QACT,UAAU;QACV,aAAa;QACb,SAAS;KACV,CAAA;AACH,CAAC"}

package/dist/undo.d.ts

@@ -0,0 +1,27 @@
+import type { CollectionDefinition, ContentStore } from '@cogenta/schema';
+import type { ImportTrackingStore } from './tracking.js';
+/**
+ * Undoing an import (fiche 25 task 4): trash every entry recorded for a run.
+ *
+ * Trash, never `purge` — ADR-0022's whole point is that `delete()` leaves
+ * every row in place, so `untrash()` can bring an over-eager undo back. A
+ * run that has already been cancelled, or that was never applied, has no
+ * items and undoes cleanly to nothing.
+ */
+export interface UndoImportOptions {
+    readonly tracking: ImportTrackingStore;
+    readonly runId: string;
+    readonly storeFor: (collectionName: string) => ContentStore | undefined;
+    readonly collections?: readonly CollectionDefinition[];
+}
+export interface UndoImportReport {
+    readonly trashed: number;
+    readonly alreadyGone: number;
+    readonly failed: readonly {
+        readonly collection: string;
+        readonly entryId: string;
+        readonly reason: string;
+    }[];
+}
+export declare function undoImport(options: UndoImportOptions): Promise<UndoImportReport>;
+//# sourceMappingURL=undo.d.ts.map

package/dist/undo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo.d.ts","sourceRoot":"","sources":["../src/undo.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAExD;;;;;;;GAOG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,YAAY,GAAG,SAAS,CAAA;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAA;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,EAAE,CAAA;CACJ;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6CtF"}

package/dist/undo.js

@@ -0,0 +1,47 @@
+import { CogentaError } from '@cogenta/core';
+export async function undoImport(options) {
+    const run = await options.tracking.getRun(options.runId);
+    if (run === null) {
+        throw new CogentaError({
+            code: 'IMPORT_RUN_NOT_FOUND',
+            message: `No import run "${options.runId}" exists.`,
+            hint: 'Only a run that has been analyzed and applied can be cancelled.',
+            details: { id: options.runId },
+        });
+    }
+    const items = await options.tracking.listItems(options.runId);
+    let trashed = 0;
+    let alreadyGone = 0;
+    const failed = [];
+    for (const item of items) {
+        const store = options.storeFor(item.collection);
+        if (store === undefined) {
+            failed.push({
+                collection: item.collection,
+                entryId: item.entryId,
+                reason: `Collection "${item.collection}" is no longer part of this site.`,
+            });
+            continue;
+        }
+        try {
+            const removed = await store.delete(item.entryId);
+            if (removed)
+                trashed += 1;
+            else
+                alreadyGone += 1;
+        }
+        catch (error) {
+            failed.push({
+                collection: item.collection,
+                entryId: item.entryId,
+                reason: error instanceof CogentaError ? error.message : String(error),
+            });
+        }
+    }
+    await options.tracking.updateRun(options.runId, {
+        status: 'cancelled',
+        report: { trashed, alreadyGone, failed },
+    });
+    return { trashed, alreadyGone, failed };
+}
+//# sourceMappingURL=undo.js.map

package/dist/undo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo.js","sourceRoot":"","sources":["../src/undo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AA8B5C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,kBAAkB,OAAO,CAAC,KAAK,WAAW;YACnD,IAAI,EAAE,iEAAiE;YACvE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,MAAM,MAAM,GAA8D,EAAE,CAAA;IAE5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,eAAe,IAAI,CAAC,UAAU,mCAAmC;aAC1E,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,OAAO;gBAAE,OAAO,IAAI,CAAC,CAAA;;gBACpB,WAAW,IAAI,CAAC,CAAA;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACtE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE;QAC9C,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzC,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;AACzC,CAAC"}

package/dist/wordpress/analyze.d.ts

@@ -0,0 +1,40 @@
+export interface WordPressPreviewCounts {
+    readonly posts: number;
+    readonly pages: number;
+    readonly categories: number;
+    readonly tags: number;
+    readonly comments: number;
+    readonly attachments: number;
+}
+export interface WordPressSlugConflict {
+    readonly kind: 'post' | 'page';
+    readonly slug: string;
+    /** WordPress ids sharing this slug — Cogenta's `unique` slug field will refuse all but the first. */
+    readonly wpIds: readonly string[];
+}
+export interface WordPressPreviewIgnoredItem {
+    readonly type: 'post' | 'page' | 'comment';
+    readonly wpId: string;
+    readonly title: string;
+    readonly reason: string;
+}
+export interface WordPressPreviewReport {
+    readonly counts: WordPressPreviewCounts;
+    /** Fixed target collections this importer writes to — see `wordpress/collections.ts`'s header note on why they are not the site's own. */
+    readonly collectionMapping: {
+        readonly post: string;
+        readonly page: string;
+    };
+    readonly authors: readonly {
+        readonly login: string;
+        readonly email: string;
+    }[];
+    readonly mediaUrls: readonly string[];
+    /** `content-length` is unknown before the apply phase actually fetches each URL — this counts distinct URLs, not bytes. */
+    readonly mediaCount: number;
+    readonly slugConflicts: readonly WordPressSlugConflict[];
+    readonly ignored: readonly WordPressPreviewIgnoredItem[];
+    readonly warnings: readonly string[];
+}
+export declare function analyzeWordPress(xml: string): WordPressPreviewReport;
+//# sourceMappingURL=analyze.d.ts.map

package/dist/wordpress/analyze.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze.d.ts","sourceRoot":"","sources":["../../src/wordpress/analyze.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,qGAAqG;IACrG,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;IACvC,0IAA0I;IAC1I,QAAQ,CAAC,iBAAiB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5E,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC/E,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,2HAA2H;IAC3H,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACxD,QAAQ,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAA;IACxD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACrC;AAmBD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,CA2FpE"}