@cogenta/render 0.1.0

package/dist/theme/verify/scanner.js

@@ -0,0 +1,304 @@
+import { matchForbidden } from './forbidden.js';
+const IDENT_START = /[A-Za-z_$#@]/u;
+const IDENT_PART = /[A-Za-z0-9_$]/u;
+/** Keywords after which a `/` opens a regular expression rather than dividing. */
+const OPERATOR_KEYWORDS = new Set([
+    'return',
+    'typeof',
+    'instanceof',
+    'in',
+    'of',
+    'new',
+    'delete',
+    'void',
+    'throw',
+    'case',
+    'do',
+    'else',
+    'yield',
+    'await',
+]);
+/**
+ * Turns source into the few token kinds the rules below need.
+ *
+ * Comments are dropped, so a commented-out import is not a refusal. Strings
+ * stop at the end of the line unless they are template literals, exactly as
+ * JavaScript does — which bounds the damage of any mis-lex to one line.
+ */
+function tokenize(code, startLine, startColumn) {
+    const tokens = [];
+    const cursor = { index: 0, line: startLine, column: startColumn };
+    const advance = (count) => {
+        for (let i = 0; i < count && cursor.index < code.length; i += 1) {
+            if (code[cursor.index] === '\n') {
+                cursor.line += 1;
+                cursor.column = 1;
+            }
+            else {
+                cursor.column += 1;
+            }
+            cursor.index += 1;
+        }
+    };
+    const previous = () => tokens[tokens.length - 1];
+    /** Reads a quoted string, or a template literal including its `${…}` parts. */
+    const readString = (quote) => {
+        const line = cursor.line;
+        const column = cursor.column;
+        const template = quote === '`';
+        let value = '';
+        let interpolated = false;
+        advance(1);
+        while (cursor.index < code.length) {
+            const char = code[cursor.index];
+            if (char === undefined)
+                break;
+            if (char === '\\') {
+                value += code[cursor.index + 1] ?? '';
+                advance(2);
+                continue;
+            }
+            if (char === quote) {
+                advance(1);
+                break;
+            }
+            if (!template && char === '\n')
+                break; // unterminated: JavaScript ends it here too
+            if (template && char === '$' && code[cursor.index + 1] === '{') {
+                // The expression inside is code, so it is tokenised in place; the
+                // template itself stops being a readable specifier.
+                interpolated = true;
+                advance(2);
+                let depth = 1;
+                while (cursor.index < code.length && depth > 0) {
+                    const inner = code[cursor.index];
+                    if (inner === '{')
+                        depth += 1;
+                    else if (inner === '}')
+                        depth -= 1;
+                    if (depth === 0)
+                        break;
+                    const before = tokens.length;
+                    readToken();
+                    if (tokens.length === before && cursor.index < code.length)
+                        advance(1);
+                }
+                advance(1);
+                continue;
+            }
+            value += char;
+            advance(1);
+        }
+        tokens.push({
+            kind: interpolated ? 'other' : 'string',
+            value,
+            line,
+            column,
+        });
+    };
+    const readIdent = () => {
+        const line = cursor.line;
+        const column = cursor.column;
+        let value = '';
+        while (cursor.index < code.length) {
+            const char = code[cursor.index];
+            if (char === undefined || !(value === '' ? IDENT_START : IDENT_PART).test(char))
+                break;
+            value += char;
+            advance(1);
+        }
+        tokens.push({ kind: 'ident', value, line, column });
+    };
+    /** True when a `/` here starts a regular expression rather than a division. */
+    const regexExpected = () => {
+        const prev = previous();
+        if (prev === undefined)
+            return true;
+        if (prev.kind === 'ident')
+            return OPERATOR_KEYWORDS.has(prev.value);
+        if (prev.kind === 'other')
+            return false;
+        return !(prev.value === ')' || prev.value === ']' || prev.value === '}');
+    };
+    const skipRegex = () => {
+        advance(1);
+        let inClass = false;
+        while (cursor.index < code.length) {
+            const char = code[cursor.index];
+            if (char === undefined || char === '\n')
+                break;
+            if (char === '\\') {
+                advance(2);
+                continue;
+            }
+            if (char === '[')
+                inClass = true;
+            else if (char === ']')
+                inClass = false;
+            else if (char === '/' && !inClass) {
+                advance(1);
+                break;
+            }
+            advance(1);
+        }
+        tokens.push({ kind: 'other', value: '/regex/', line: cursor.line, column: cursor.column });
+    };
+    function readToken() {
+        const char = code[cursor.index];
+        if (char === undefined)
+            return;
+        if (char === ' ' || char === '\t' || char === '\r' || char === '\n') {
+            advance(1);
+            return;
+        }
+        if (char === '/' && code[cursor.index + 1] === '/') {
+            while (cursor.index < code.length && code[cursor.index] !== '\n')
+                advance(1);
+            return;
+        }
+        if (char === '/' && code[cursor.index + 1] === '*') {
+            advance(2);
+            while (cursor.index < code.length) {
+                if (code[cursor.index] === '*' && code[cursor.index + 1] === '/') {
+                    advance(2);
+                    return;
+                }
+                advance(1);
+            }
+            return;
+        }
+        if (char === '/') {
+            if (regexExpected())
+                skipRegex();
+            else {
+                tokens.push({ kind: 'punct', value: '/', line: cursor.line, column: cursor.column });
+                advance(1);
+            }
+            return;
+        }
+        if (char === '"' || char === "'" || char === '`') {
+            readString(char);
+            return;
+        }
+        if (IDENT_START.test(char)) {
+            readIdent();
+            return;
+        }
+        if (char >= '0' && char <= '9') {
+            const line = cursor.line;
+            const column = cursor.column;
+            let value = '';
+            while (cursor.index < code.length) {
+                const digit = code[cursor.index];
+                if (digit === undefined || !/[0-9A-Za-z._]/u.test(digit))
+                    break;
+                value += digit;
+                advance(1);
+            }
+            tokens.push({ kind: 'other', value, line, column });
+            return;
+        }
+        tokens.push({ kind: 'punct', value: char, line: cursor.line, column: cursor.column });
+        advance(1);
+    }
+    while (cursor.index < code.length) {
+        const before = cursor.index;
+        readToken();
+        if (cursor.index === before)
+            advance(1);
+    }
+    return tokens;
+}
+function specifierFinding(token) {
+    const match = matchForbidden(token.value);
+    if (match === null)
+        return null;
+    return {
+        kind: 'forbidden-import',
+        line: token.line,
+        column: token.column,
+        specifier: token.value,
+        resolved: match.specifier,
+        forbiddenKind: match.kind,
+    };
+}
+/** `createRequire`, `require`, `__require`: every door back to CommonJS. */
+function isRequireLike(value) {
+    return value.toLowerCase().includes('require');
+}
+/**
+ * Applies the rules to a token stream.
+ *
+ * Only strings in module-specifier position are matched against the forbidden
+ * list. Checking *every* string literal was the first design and it was wrong:
+ * `process`, `net`, `http` and `redis` are ordinary words, and a theme refused
+ * because a CSS class is called `process` teaches theme authors that the check
+ * is noise.
+ */
+function findingsFrom(tokens) {
+    const findings = [];
+    const push = (finding) => {
+        if (finding !== null)
+            findings.push(finding);
+    };
+    for (let i = 0; i < tokens.length; i += 1) {
+        const token = tokens[i];
+        if (token === undefined || token.kind !== 'ident')
+            continue;
+        const next = tokens[i + 1];
+        if (next === undefined)
+            continue;
+        // `import 'x'` and `… from 'x'` — static import, re-export, `import type`.
+        if ((token.value === 'import' || token.value === 'from') && next.kind === 'string') {
+            push(specifierFinding(next));
+            continue;
+        }
+        if (token.value === 'import' && next.kind === 'punct' && next.value === '(') {
+            const argument = tokens[i + 2];
+            const closing = tokens[i + 3];
+            const readable = argument?.kind === 'string' && closing?.kind === 'punct' && closing.value === ')';
+            if (readable && argument !== undefined)
+                push(specifierFinding(argument));
+            else {
+                // Refused for being unreadable. This is what closes aliasing: a
+                // specifier built from a variable, a concatenation or a template
+                // cannot be proven safe, so it is not given the benefit of the doubt.
+                findings.push({
+                    kind: 'unanalysable-import',
+                    line: token.line,
+                    column: token.column,
+                    specifier: null,
+                    resolved: null,
+                    forbiddenKind: null,
+                });
+            }
+            continue;
+        }
+        if (next.kind !== 'punct' || next.value !== '(')
+            continue;
+        const argument = tokens[i + 2];
+        if (isRequireLike(token.value)) {
+            findings.push({
+                kind: 'commonjs-require',
+                line: token.line,
+                column: token.column,
+                specifier: argument?.kind === 'string' ? argument.value : null,
+                resolved: null,
+                forbiddenKind: null,
+            });
+        }
+        // A `node:` prefix makes a string a module specifier wherever it appears,
+        // with nothing else it could plausibly be. So a call that receives one is
+        // loading a module whatever its callee is named, which is what catches the
+        // handle a `createRequire` was stored in.
+        if (argument?.kind === 'string' && argument.value.startsWith('node:')) {
+            push(specifierFinding(argument));
+        }
+    }
+    return findings;
+}
+/** Scans a fragment of TypeScript or JavaScript. */
+export function scanCode(code, options = {}) {
+    return findingsFrom(tokenize(code, options.line ?? 1, options.column ?? 1));
+}
+//# sourceMappingURL=scanner.js.map

package/dist/theme/verify/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../../src/theme/verify/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAsDnE,MAAM,WAAW,GAAG,eAAe,CAAA;AACnC,MAAM,UAAU,GAAG,gBAAgB,CAAA;AAEnC,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,OAAO;CACR,CAAC,CAAA;AAQF;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB,EAAE,WAAmB;IACpE,MAAM,MAAM,GAAY,EAAE,CAAA;IAC1B,MAAM,MAAM,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAEzE,MAAM,OAAO,GAAG,CAAC,KAAa,EAAQ,EAAE;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAA;gBAChB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YACpB,CAAC;YACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACnB,CAAC;IACH,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,GAAsB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAEnE,+EAA+E;IAC/E,MAAM,UAAU,GAAG,CAAC,KAAa,EAAQ,EAAE;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,MAAM,QAAQ,GAAG,KAAK,KAAK,GAAG,CAAA;QAC9B,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,IAAI,YAAY,GAAG,KAAK,CAAA;QACxB,OAAO,CAAC,CAAC,CAAC,CAAA;QAEV,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAK;YAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBACrC,OAAO,CAAC,CAAC,CAAC,CAAA;gBACV,SAAQ;YACV,CAAC;YACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,CAAC,CAAC,CAAA;gBACV,MAAK;YACP,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAK,CAAC,4CAA4C;YAClF,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/D,kEAAkE;gBAClE,oDAAoD;gBACpD,YAAY,GAAG,IAAI,CAAA;gBACnB,OAAO,CAAC,CAAC,CAAC,CAAA;gBACV,IAAI,KAAK,GAAG,CAAC,CAAA;gBACb,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBAChC,IAAI,KAAK,KAAK,GAAG;wBAAE,KAAK,IAAI,CAAC,CAAA;yBACxB,IAAI,KAAK,KAAK,GAAG;wBAAE,KAAK,IAAI,CAAC,CAAA;oBAClC,IAAI,KAAK,KAAK,CAAC;wBAAE,MAAK;oBACtB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;oBAC5B,SAAS,EAAE,CAAA;oBACX,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM;wBAAE,OAAO,CAAC,CAAC,CAAC,CAAA;gBACxE,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC,CAAA;gBACV,SAAQ;YACV,CAAC;YACD,KAAK,IAAI,IAAI,CAAA;YACb,OAAO,CAAC,CAAC,CAAC,CAAA;QACZ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;YACvC,KAAK;YACL,IAAI;YACJ,MAAM;SACP,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAK;YACtF,KAAK,IAAI,IAAI,CAAA;YACb,OAAO,CAAC,CAAC,CAAC,CAAA;QACZ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACrD,CAAC,CAAA;IAED,+EAA+E;IAC/E,MAAM,aAAa,GAAG,GAAY,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,CAAA;IAC1E,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,OAAO,CAAC,CAAC,CAAC,CAAA;QACV,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAK;YAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,CAAC,CAAC,CAAA;gBACV,SAAQ;YACV,CAAC;YACD,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,GAAG,IAAI,CAAA;iBAC3B,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAA;iBACjC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC,CAAC,CAAA;gBACV,MAAK;YACP,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,CAAA;QACZ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAA;IAED,SAAS,SAAS;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAM;QAE9B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACpE,OAAO,CAAC,CAAC,CAAC,CAAA;YACV,OAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,CAAC,CAAA;YACV,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACjE,OAAO,CAAC,CAAC,CAAC,CAAA;oBACV,OAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC,CAAA;YACZ,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,aAAa,EAAE;gBAAE,SAAS,EAAE,CAAA;iBAC3B,CAAC;gBACJ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;gBACpF,OAAO,CAAC,CAAC,CAAC,CAAA;YACZ,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,CAAA;YAChB,OAAM;QACR,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,SAAS,EAAE,CAAA;YACX,OAAM;QACR,CAAC;QACD,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,KAAK,GAAG,EAAE,CAAA;YACd,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAChC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAK;gBAC/D,KAAK,IAAI,KAAK,CAAA;gBACd,OAAO,CAAC,CAAC,CAAC,CAAA;YACZ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,OAAO,CAAC,CAAC,CAAC,CAAA;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAA;QAC3B,SAAS,EAAE,CAAA;QACX,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAY;IACpC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,KAAK;QACtB,QAAQ,EAAE,KAAK,CAAC,SAAS;QACzB,aAAa,EAAE,KAAK,CAAC,IAAI;KAC1B,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,MAAwB;IAC5C,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,CAAC,OAA6B,EAAQ,EAAE;QACnD,IAAI,OAAO,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC,CAAA;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAQ;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAQ;QAEhC,2EAA2E;QAC3E,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7B,MAAM,QAAQ,GACZ,QAAQ,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAA;YACnF,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAA;iBACnE,CAAC;gBACJ,gEAAgE;gBAChE,iEAAiE;gBACjE,sEAAsE;gBACtE,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,qBAAqB;oBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,IAAI;oBACd,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAA;YACJ,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG;YAAE,SAAQ;QACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAE9B,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBAC9D,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,IAAI;aACpB,CAAC,CAAA;QACJ,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,0CAA0C;QAC1C,IAAI,QAAQ,EAAE,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AASD,oDAAoD;AACpD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAO,GAAgB,EAAE;IAC9D,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;AAC7E,CAAC"}

package/dist/theme/verify/verify-theme.d.ts

@@ -0,0 +1,44 @@
+import type { ThemeManifest } from '../manifest.js';
+import type { SourceFinding } from './scanner.js';
+/**
+ * The installation check of contract D.
+ *
+ * Two refusals, and the word the contract uses for both is *refused*, not
+ * *warned*: a theme that declares fewer than the twelve blocks would silently
+ * drop content on a theme switch, and a theme that reaches for `node:fs` or
+ * the database has left the sandbox the two-plane architecture gives it for
+ * free (ADR-0004, ADR-0016).
+ *
+ * This module reads the filesystem, so it belongs to the control plane — the
+ * install path — and never to the process that renders pages.
+ */
+export interface FileFinding extends SourceFinding {
+    /** Path relative to the theme root, with forward slashes. */
+    readonly file: string;
+}
+export interface ThemeInspection {
+    readonly ok: boolean;
+    /** Vocabulary blocks the manifest does not declare. */
+    readonly missingBlocks: readonly string[];
+    readonly findings: readonly FileFinding[];
+    readonly filesScanned: number;
+}
+export interface VerifyThemeOptions {
+    readonly root: string;
+    readonly manifest: ThemeManifest;
+    /**
+     * Blocks the theme must declare. The twelve of the vocabulary by default;
+     * a caller passes its own only to check a theme against a future vocabulary.
+     */
+    readonly requiredBlocks?: readonly string[];
+}
+/** Collects everything wrong with a theme without deciding what to do about it. */
+export declare function inspectTheme(options: VerifyThemeOptions): Promise<ThemeInspection>;
+/**
+ * Runs the installation check and refuses.
+ *
+ * Returns the inspection when the theme passes, so a caller that wants the
+ * file count for a log does not have to run the scan twice.
+ */
+export declare function verifyTheme(options: VerifyThemeOptions): Promise<ThemeInspection>;
+//# sourceMappingURL=verify-theme.d.ts.map

package/dist/theme/verify/verify-theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-theme.d.ts","sourceRoot":"","sources":["../../../src/theme/verify/verify-theme.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAGnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEjD;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,uDAAuD;IACvD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAA;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5C;AAED,mFAAmF;AACnF,wBAAsB,YAAY,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyBxF;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0BvF"}

package/dist/theme/verify/verify-theme.js

@@ -0,0 +1,179 @@
+import { readdir, readFile } from 'node:fs/promises';
+import { join, relative, sep } from 'node:path';
+import { VOCABULARY_NAMES } from '@cogenta/blocks';
+import { CogentaError } from '@cogenta/core';
+import { describeKind, matchForbidden } from './forbidden.js';
+import { IGNORED_DIRECTORIES, SCANNED_EXTENSIONS, scanSource } from './scan-file.js';
+/** Collects everything wrong with a theme without deciding what to do about it. */
+export async function inspectTheme(options) {
+    const required = options.requiredBlocks ?? VOCABULARY_NAMES;
+    const declared = new Set(options.manifest.implements);
+    const missingBlocks = required.filter((name) => !declared.has(name));
+    const findings = [];
+    let filesScanned = 0;
+    for await (const file of sourceFiles(options.root)) {
+        filesScanned += 1;
+        const source = await readFile(file, 'utf8');
+        const relativePath = relative(options.root, file).split(sep).join('/');
+        for (const finding of scanSource(relativePath, source)) {
+            findings.push({ ...finding, file: relativePath });
+        }
+    }
+    findings.push(...(await manifestAliasFindings(options.root)));
+    return {
+        ok: missingBlocks.length === 0 && findings.length === 0,
+        missingBlocks,
+        findings,
+        filesScanned,
+    };
+}
+/**
+ * Runs the installation check and refuses.
+ *
+ * Returns the inspection when the theme passes, so a caller that wants the
+ * file count for a log does not have to run the scan twice.
+ */
+export async function verifyTheme(options) {
+    const inspection = await inspectTheme(options);
+    if (inspection.ok)
+        return inspection;
+    const name = options.manifest.name;
+    if (inspection.findings.length > 0) {
+        throw new CogentaError({
+            code: 'THEME_IMPORT_FORBIDDEN',
+            message: `The theme "${name}" is refused: ${describeFindings(inspection.findings)}`,
+            hint: 'A theme runs without secrets and without a database connection (R5, ADR-0004). It reads content through `ctx.content`, which is an HTTP client carrying a read-only token. Remove the imports above; there is no flag to allow them.',
+            details: {
+                theme: name,
+                root: options.root,
+                findings: inspection.findings,
+                missingBlocks: inspection.missingBlocks,
+            },
+        });
+    }
+    throw new CogentaError({
+        code: 'THEME_BLOCK_MISSING',
+        message: `The theme "${name}" does not implement every block of the vocabulary. Missing: ${inspection.missingBlocks.join(', ')}.`,
+        hint: 'Every theme implements the twelve blocks, so that switching theme never drops content. Add a component for each missing block and list it in `implements`.',
+        details: { theme: name, root: options.root, missingBlocks: inspection.missingBlocks },
+    });
+}
+/** One line per finding, naming the file, the line and the import. */
+function describeFindings(findings) {
+    const lines = findings.map((finding) => describeFinding(finding));
+    return `\n  - ${lines.join('\n  - ')}`;
+}
+function describeFinding(finding) {
+    const at = `${finding.file}:${finding.line}:${finding.column}`;
+    if (finding.kind === 'unanalysable-import') {
+        return `${at} calls import() with a specifier that cannot be read statically`;
+    }
+    if (finding.kind === 'commonjs-require') {
+        const on = finding.specifier === null ? '' : ` on "${finding.specifier}"`;
+        return `${at} uses a CommonJS \`require\` call${on}, and a theme is ESM only`;
+    }
+    const also = finding.specifier === finding.resolved ? '' : `, which is ${finding.resolved ?? ''}`;
+    const why = describeKind(finding.forbiddenKind ?? 'node-builtin');
+    return `${at} imports "${finding.specifier ?? ''}" (${why}${also})`;
+}
+/**
+ * The alias route: `package.json` can rename a forbidden module.
+ *
+ * `"imports": { "#store": "node:fs" }` turns `import '#store'` into a specifier
+ * the source scan has no reason to suspect, and a forbidden package listed in
+ * `dependencies` is a declaration of intent whatever the sources say.
+ */
+async function manifestAliasFindings(root) {
+    let raw;
+    try {
+        raw = await readFile(join(root, 'package.json'), 'utf8');
+    }
+    catch {
+        return []; // a theme without a package.json declares no alias either
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return [];
+    const findings = [];
+    const record = parsed;
+    const flag = (specifier, note) => {
+        const match = matchForbidden(specifier);
+        if (match === null)
+            return;
+        findings.push({
+            kind: 'forbidden-import',
+            file: 'package.json',
+            line: lineOf(raw, specifier),
+            column: 1,
+            specifier: `${note} → ${specifier}`,
+            resolved: match.specifier,
+            forbiddenKind: match.kind,
+        });
+    };
+    for (const key of ['dependencies', 'peerDependencies', 'optionalDependencies']) {
+        const section = record[key];
+        if (typeof section !== 'object' || section === null)
+            continue;
+        for (const name of Object.keys(section))
+            flag(name, key);
+    }
+    const imports = record.imports;
+    if (typeof imports === 'object' && imports !== null) {
+        for (const [alias, target] of Object.entries(imports)) {
+            for (const value of collectStrings(target))
+                flag(value, `imports["${alias}"]`);
+        }
+    }
+    return findings;
+}
+/** Conditional exports nest, so the targets are gathered rather than assumed flat. */
+function collectStrings(value) {
+    if (typeof value === 'string')
+        return [value];
+    if (Array.isArray(value))
+        return value.flatMap((item) => collectStrings(item));
+    if (typeof value === 'object' && value !== null) {
+        return Object.values(value).flatMap((item) => collectStrings(item));
+    }
+    return [];
+}
+function lineOf(source, needle) {
+    const index = source.indexOf(needle);
+    if (index === -1)
+        return 1;
+    return source.slice(0, index).split('\n').length;
+}
+/** Every source file below `root`, skipping what a bundler would never read. */
+async function* sourceFiles(root) {
+    let entries;
+    try {
+        entries = await readdir(root, { withFileTypes: true, encoding: 'utf8' });
+    }
+    catch (error) {
+        throw new CogentaError({
+            code: 'THEME_NOT_FOUND',
+            message: `The theme directory "${root}" cannot be read.`,
+            hint: 'Check the theme root in the configuration, and that the theme package is installed.',
+            cause: error,
+            details: { root },
+        });
+    }
+    for (const entry of entries) {
+        const path = join(root, entry.name);
+        if (entry.isDirectory()) {
+            if (IGNORED_DIRECTORIES.includes(entry.name))
+                continue;
+            yield* sourceFiles(path);
+            continue;
+        }
+        if (SCANNED_EXTENSIONS.some((extension) => entry.name.endsWith(extension)))
+            yield path;
+    }
+}
+//# sourceMappingURL=verify-theme.js.map

package/dist/theme/verify/verify-theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-theme.js","sourceRoot":"","sources":["../../../src/theme/verify/verify-theme.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAuCpF,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA2B;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAA;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACrD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IAEpE,MAAM,QAAQ,GAAkB,EAAE,CAAA;IAClC,IAAI,YAAY,GAAG,CAAC,CAAA;IAEpB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,YAAY,IAAI,CAAC,CAAA;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACtE,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAE7D,OAAO;QACL,EAAE,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACvD,aAAa;QACb,QAAQ;QACR,YAAY;KACb,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2B;IAC3D,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;IAC9C,IAAI,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAA;IAEpC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAA;IAElC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,cAAc,IAAI,iBAAiB,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;YACnF,IAAI,EAAE,sOAAsO;YAC5O,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,aAAa,EAAE,UAAU,CAAC,aAAa;aACxC;SACF,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,IAAI,YAAY,CAAC;QACrB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,cAAc,IAAI,gEAAgE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACjI,IAAI,EAAE,4JAA4J;QAClK,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE;KACtF,CAAC,CAAA;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,QAAgC;IACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAA;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,OAAoB;IAC3C,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAA;IAE9D,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC3C,OAAO,GAAG,EAAE,iEAAiE,CAAA;IAC/E,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,SAAS,GAAG,CAAA;QACzE,OAAO,GAAG,EAAE,oCAAoC,EAAE,2BAA2B,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAA;IACjG,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,IAAI,cAAc,CAAC,CAAA;IACjE,OAAO,GAAG,EAAE,aAAa,OAAO,CAAC,SAAS,IAAI,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAA;AACrE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAAC,IAAY;IAC/C,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA,CAAC,0DAA0D;IACtE,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAE5D,MAAM,QAAQ,GAAkB,EAAE,CAAA;IAClC,MAAM,MAAM,GAAG,MAAiC,CAAA;IAEhD,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAQ,EAAE;QACrD,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAM;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,SAAS,EAAE,GAAG,IAAI,MAAM,SAAS,EAAE;YACnC,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,aAAa,EAAE,KAAK,CAAC,IAAI;SAC1B,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,SAAQ;QAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;YACjF,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,MAAc;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;AAClD,CAAC;AAED,gFAAgF;AAChF,KAAK,SAAS,CAAC,CAAC,WAAW,CAAC,IAAY;IACtC,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,wBAAwB,IAAI,mBAAmB;YACxD,IAAI,EAAE,qFAAqF;YAC3F,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,EAAE,IAAI,EAAE;SAClB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACtD,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACxB,SAAQ;QACV,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,CAAA;IACxF,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@cogenta/render",
+  "version": "0.1.0",
+  "description": "Astro integration, render context and theme installation checks.",
+  "license": "MPL-2.0",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22.11.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cogenta-cms/cogenta.git",
+    "directory": "packages/render"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.typecheck.json",
+    "test": "vitest run --passWithNoTests",
+    "test:integration": "vitest run --config vitest.integration.config.ts --passWithNoTests"
+  },
+  "dependencies": {
+    "@cogenta/blocks": "workspace:*",
+    "@cogenta/core": "workspace:*",
+    "wasm-vips": "catalog:",
+    "zod": "catalog:"
+  },
+  "peerDependencies": {
+    "astro": "catalog:",
+    "sharp": "catalog:"
+  },
+  "peerDependenciesMeta": {
+    "sharp": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "astro": "catalog:",
+    "sharp": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
+  }
+}