@columnus/shared 0.1.47

package/dist/bffRedact.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Redaction and secret-compare helpers for BFF / Management / deploy boundaries (D39).
+ * Prepared bodies and deploy keys must never appear in logs or error telemetry.
+ */
+export declare const REDACTED: "[REDACTED]";
+/**
+ * Deep-clone a value for logs, replacing classified fields (including nested
+ * `payload` / `convexDeployKey`) with {@link REDACTED}.
+ */
+export declare function redactForLogs(value: unknown): unknown;
+/** Redact known secret substrings from a free-form message. */
+export declare function redactString(message: string): string;
+/**
+ * Constant-time string equality for shared secrets.
+ * Works in Node and browsers (no `node:crypto` dependency).
+ */
+export declare function secretsEqual(provided: string | undefined, expected: string | undefined): boolean;
+/** True when a key name is classified and must not be logged. */
+export declare function isClassifiedKey(key: string): boolean;
+/**
+ * Safe summary of a prepared-body envelope for structured logs:
+ * operation, tenant slug, protocol version — never the inner payload.
+ */
+export declare function summarizePreparedEnvelope(envelope: unknown): {
+    protocolVersion?: unknown;
+    operation?: unknown;
+    tenantSlug?: unknown;
+    correlationId?: unknown;
+    payload: typeof REDACTED;
+};

package/dist/bffRedact.js

@@ -0,0 +1,55 @@
+// packages/@columnus/shared/src/bffRedact.ts
+var CLASSIFIED_KEY_RE = /^(convexDeployKey|deployKey|payload|authorization|token|password|secret)$/i;
+var CLASSIFIED_SUBSTRING_RE = /(deploy[_-]?key|authorization|bearer\s+[A-Za-z0-9._~+/=-]+|prod:[A-Za-z0-9|._~+/-]+)/gi;
+var REDACTED = "[REDACTED]";
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function redactForLogs(value) {
+  if (value == null) return value;
+  if (typeof value === "string") return redactString(value);
+  if (typeof value !== "object") return value;
+  if (Array.isArray(value)) return value.map(redactForLogs);
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    if (CLASSIFIED_KEY_RE.test(key)) {
+      out[key] = REDACTED;
+      continue;
+    }
+    out[key] = redactForLogs(child);
+  }
+  return out;
+}
+function redactString(message) {
+  return message.replace(CLASSIFIED_SUBSTRING_RE, REDACTED);
+}
+function secretsEqual(provided, expected) {
+  if (provided == null || expected == null) return false;
+  const a = encoder.encode(provided);
+  const b = encoder.encode(expected);
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i += 1) diff |= a[i] ^ b[i];
+  return diff === 0;
+}
+var encoder = new TextEncoder();
+function isClassifiedKey(key) {
+  return CLASSIFIED_KEY_RE.test(key);
+}
+function summarizePreparedEnvelope(envelope) {
+  if (!isRecord(envelope)) {
+    return { payload: REDACTED };
+  }
+  const tenant = isRecord(envelope.tenant) ? envelope.tenant : void 0;
+  return {
+    protocolVersion: envelope.protocolVersion,
+    operation: envelope.operation,
+    tenantSlug: tenant?.slug,
+    correlationId: envelope.correlationId,
+    payload: REDACTED
+  };
+}
+
+export { REDACTED, isClassifiedKey, redactForLogs, redactString, secretsEqual, summarizePreparedEnvelope };
+//# sourceMappingURL=bffRedact.js.map
+//# sourceMappingURL=bffRedact.js.map

package/dist/bffRedact.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bffRedact.ts"],"names":[],"mappings":";AAKA,IAAM,iBAAA,GACJ,4EAAA;AAEF,IAAM,uBAAA,GACJ,wFAAA;AAEK,IAAM,QAAA,GAAW;AAExB,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAMO,SAAS,cAAc,KAAA,EAAyB;AACrD,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,aAAa,KAAK,CAAA;AACxD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,aAAa,CAAA;AACxD,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAgC,CAAA,EAAG;AAC3E,IAAA,IAAI,iBAAA,CAAkB,IAAA,CAAK,GAAG,CAAA,EAAG;AAC/B,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,QAAA;AACX,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,aAAA,CAAc,KAAK,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,aAAa,OAAA,EAAyB;AACpD,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,uBAAA,EAAyB,QAAQ,CAAA;AAC1D;AAMO,SAAS,YAAA,CAAa,UAA8B,QAAA,EAAuC;AAChG,EAAA,IAAI,QAAA,IAAY,IAAA,IAAQ,QAAA,IAAY,IAAA,EAAM,OAAO,KAAA;AACjD,EAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,MAAA,CAAO,QAAQ,CAAA;AACjC,EAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,MAAA,CAAO,QAAQ,CAAA;AACjC,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,IAAK,CAAA,EAAG,IAAA,IAAQ,CAAA,CAAE,CAAC,CAAA,GAAK,CAAA,CAAE,CAAC,CAAA;AACzD,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAEA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAGzB,SAAS,gBAAgB,GAAA,EAAsB;AACpD,EAAA,OAAO,iBAAA,CAAkB,KAAK,GAAG,CAAA;AACnC;AAMO,SAAS,0BAA0B,QAAA,EAMxC;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,QAAQ,CAAA,EAAG;AACvB,IAAA,OAAO,EAAE,SAAS,QAAA,EAAS;AAAA,EAC7B;AACA,EAAA,MAAM,SAAS,QAAA,CAAS,QAAA,CAAS,MAAM,CAAA,GAAI,SAAS,MAAA,GAAS,MAAA;AAC7D,EAAA,OAAO;AAAA,IACL,iBAAiB,QAAA,CAAS,eAAA;AAAA,IAC1B,WAAW,QAAA,CAAS,SAAA;AAAA,IACpB,YAAY,MAAA,EAAQ,IAAA;AAAA,IACpB,eAAe,QAAA,CAAS,aAAA;AAAA,IACxB,OAAA,EAAS;AAAA,GACX;AACF","file":"bffRedact.js","sourcesContent":["/**\n * Redaction and secret-compare helpers for BFF / Management / deploy boundaries (D39).\n * Prepared bodies and deploy keys must never appear in logs or error telemetry.\n */\n\nconst CLASSIFIED_KEY_RE =\n  /^(convexDeployKey|deployKey|payload|authorization|token|password|secret)$/i;\n\nconst CLASSIFIED_SUBSTRING_RE =\n  /(deploy[_-]?key|authorization|bearer\\s+[A-Za-z0-9._~+/=-]+|prod:[A-Za-z0-9|._~+/-]+)/gi;\n\nexport const REDACTED = \"[REDACTED]\" as const;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/**\n * Deep-clone a value for logs, replacing classified fields (including nested\n * `payload` / `convexDeployKey`) with {@link REDACTED}.\n */\nexport function redactForLogs(value: unknown): unknown {\n  if (value == null) return value;\n  if (typeof value === \"string\") return redactString(value);\n  if (typeof value !== \"object\") return value;\n  if (Array.isArray(value)) return value.map(redactForLogs);\n  const out: Record<string, unknown> = {};\n  for (const [key, child] of Object.entries(value as Record<string, unknown>)) {\n    if (CLASSIFIED_KEY_RE.test(key)) {\n      out[key] = REDACTED;\n      continue;\n    }\n    out[key] = redactForLogs(child);\n  }\n  return out;\n}\n\n/** Redact known secret substrings from a free-form message. */\nexport function redactString(message: string): string {\n  return message.replace(CLASSIFIED_SUBSTRING_RE, REDACTED);\n}\n\n/**\n * Constant-time string equality for shared secrets.\n * Works in Node and browsers (no `node:crypto` dependency).\n */\nexport function secretsEqual(provided: string | undefined, expected: string | undefined): boolean {\n  if (provided == null || expected == null) return false;\n  const a = encoder.encode(provided);\n  const b = encoder.encode(expected);\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i += 1) diff |= a[i]! ^ b[i]!;\n  return diff === 0;\n}\n\nconst encoder = new TextEncoder();\n\n/** True when a key name is classified and must not be logged. */\nexport function isClassifiedKey(key: string): boolean {\n  return CLASSIFIED_KEY_RE.test(key);\n}\n\n/**\n * Safe summary of a prepared-body envelope for structured logs:\n * operation, tenant slug, protocol version — never the inner payload.\n */\nexport function summarizePreparedEnvelope(envelope: unknown): {\n  protocolVersion?: unknown;\n  operation?: unknown;\n  tenantSlug?: unknown;\n  correlationId?: unknown;\n  payload: typeof REDACTED;\n} {\n  if (!isRecord(envelope)) {\n    return { payload: REDACTED };\n  }\n  const tenant = isRecord(envelope.tenant) ? envelope.tenant : undefined;\n  return {\n    protocolVersion: envelope.protocolVersion,\n    operation: envelope.operation,\n    tenantSlug: tenant?.slug,\n    correlationId: envelope.correlationId,\n    payload: REDACTED,\n  };\n}\n"]}

package/dist/ciPreviewEnv.d.ts

@@ -0,0 +1,49 @@
+/** Parse and validate a git commit SHA (7–40 hex chars). */
+export declare function parseGitSha(raw: string | undefined, label?: string): string;
+export declare function defaultProdDeployUrl(domain?: string): string;
+/** True for local defaults that should not beat Coolify preview deploy URLs. */
+export declare function isLoopbackDeployServiceUrl(url: string): boolean;
+/** Production shared deploy host (`deploy.columnus.app`), any path. */
+export declare function isProdDeployServiceUrl(url: string, domain?: string): boolean;
+/**
+ * When on a PR preview host, return the per-PR deploy-service URL unless env already
+ * points at a non-production executor (deploy-preview or Coolify internal).
+ *
+ * Coolify often copies production `STUDIO_DEPLOY_URL=https://deploy.columnus.app/deploy`
+ * onto preview apps — that must not win over `deploy-preview-<pr>`.
+ */
+export declare function derivePreviewStudioDeployUrl(env?: NodeJS.ProcessEnv, domain?: string): string | null;
+/**
+ * Runtime deploy-service URL for Web BFF / container entrypoint.
+ *
+ * Prefer preview-derived `deploy-preview-<pr>`, else non-loopback `COLUMNUS_DEPLOY_SERVICE_URL`,
+ * else `STUDIO_DEPLOY_URL`, else loopback COLUMNUS, else local default.
+ *
+ * Callers that need an origin (no path) should normalize with deploy-service helpers.
+ */
+export declare function resolveRuntimeDeployServiceUrl(env?: NodeJS.ProcessEnv, domain?: string): string;
+/** Coolify internal URL for columnus-deploy preview container (build-time manifest sync). */
+export declare function derivePreviewDeployBuildUrl(env?: NodeJS.ProcessEnv): string | null;
+export type ResolveSyncDeployUrlResult = {
+    ok: true;
+    url: string;
+    derivedMessage?: string;
+} | {
+    ok: false;
+    message: string;
+};
+/** URL for `sync-manifest-deploy` during Docker/CI builds. */
+export declare function resolveSyncDeployUrl(env: NodeJS.ProcessEnv, studioDeployUrl: string, isPreviewBuild: boolean): ResolveSyncDeployUrlResult;
+export type PreviewSourceCommitResult = {
+    ok: true;
+    commit: string;
+    required: boolean;
+} | {
+    ok: false;
+    message: string;
+};
+/** Validates SOURCE_COMMIT for Coolify preview builds (skipped when CI_PREVIEW=true). */
+export declare function validatePreviewSourceCommit(env?: NodeJS.ProcessEnv): PreviewSourceCommitResult;
+export declare function normalizeConvexUrl(url: string): string;
+/** DOCS_SEED_SYNC_EMAIL with PLAYWRIGHT_TEST_EMAIL fallback (Coolify / entrypoint). */
+export declare function docsSeedSyncEmailFromEnv(env?: NodeJS.ProcessEnv): string | undefined;

package/dist/ciPreviewEnv.js

@@ -0,0 +1,143 @@
+// packages/@columnus/shared/src/previewDeployName.ts
+function coolifyHostnameFromEnv(env = process.env) {
+  const raw = env.COOLIFY_FQDN ?? env.COOLIFY_URL;
+  if (!raw) return null;
+  const host = raw.replace(/^https?:\/\//, "").split("/")[0] ?? "";
+  return host || null;
+}
+var PULL_HEAD_BRANCH_RE = /^pull\/(\d+)\/head$/i;
+var PREVIEW_HOST_PR_RE = /^(?:manage-|deploy-)?preview-(\d+)\./;
+function resolvePreviewPrId(env = process.env) {
+  const host = coolifyHostnameFromEnv(env);
+  if (host) {
+    const fromHost = PREVIEW_HOST_PR_RE.exec(host)?.[1];
+    if (fromHost) return fromHost;
+  }
+  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;
+  if (branch) {
+    const fromBranch = PULL_HEAD_BRANCH_RE.exec(stripQualifiedBranch(branch))?.[1];
+    if (fromBranch) return fromBranch;
+  }
+  return null;
+}
+function stripQualifiedBranch(branch) {
+  const colon = branch.indexOf(":");
+  return colon > 0 ? branch.slice(0, colon) : branch;
+}
+
+// packages/@columnus/shared/src/ciPreviewEnv.ts
+var GIT_SHA_RE = /^[0-9a-fA-F]{7,40}$/;
+function parseGitSha(raw, label = "commit") {
+  const commit = (raw ?? "").trim();
+  if (!commit || commit === "unknown" || !GIT_SHA_RE.test(commit)) {
+    throw new Error(`${label} must be a git SHA (7\u201340 hex chars); got '${raw ?? ""}'`);
+  }
+  return commit;
+}
+function defaultProdDeployUrl(domain = "columnus.app") {
+  return `https://deploy.${domain}/ops/v1/deploy-initial`;
+}
+function hostnameOf(url) {
+  try {
+    const withScheme = /:\/\//.test(url) ? url : `http://${url}`;
+    return new URL(withScheme).hostname;
+  } catch {
+    return null;
+  }
+}
+function isLoopbackDeployServiceUrl(url) {
+  const host = hostnameOf(url);
+  return host === "127.0.0.1" || host === "localhost" || host === "::1";
+}
+function isProdDeployServiceUrl(url, domain = "columnus.app") {
+  return hostnameOf(url) === `deploy.${domain}`;
+}
+function derivePreviewStudioDeployUrl(env = process.env, domain = "columnus.app") {
+  const prId = resolvePreviewPrId(env);
+  if (!prId) return null;
+  for (const key of ["COLUMNUS_DEPLOY_SERVICE_URL", "STUDIO_DEPLOY_URL"]) {
+    const current = env[key]?.trim();
+    if (!current) continue;
+    if (isLoopbackDeployServiceUrl(current) || isProdDeployServiceUrl(current, domain)) {
+      continue;
+    }
+    return null;
+  }
+  return `https://deploy-preview-${prId}.${domain}/ops/v1/deploy-initial`;
+}
+var LOCAL_DEPLOY_SERVICE_DEFAULT = "http://127.0.0.1:8787";
+function resolveRuntimeDeployServiceUrl(env = process.env, domain = "columnus.app") {
+  const derived = derivePreviewStudioDeployUrl(env, domain);
+  if (derived) return derived;
+  const columnus = env.COLUMNUS_DEPLOY_SERVICE_URL?.trim();
+  const studio = env.STUDIO_DEPLOY_URL?.trim();
+  if (columnus && !isLoopbackDeployServiceUrl(columnus)) return columnus;
+  if (studio) return studio;
+  if (columnus) return columnus;
+  return LOCAL_DEPLOY_SERVICE_DEFAULT;
+}
+function derivePreviewDeployBuildUrl(env = process.env) {
+  const prId = resolvePreviewPrId(env);
+  if (!prId) return null;
+  let uuid = env.COLUMNUS_DEPLOY_RESOURCE_UUID?.trim() ?? "";
+  uuid = uuid.replace(/^https?:\/\//, "");
+  uuid = uuid.split("/")[0] ?? "";
+  uuid = uuid.split("-pr-")[0] ?? uuid;
+  uuid = uuid.split(":")[0] ?? uuid;
+  if (!uuid) return null;
+  const port = env.COLUMNUS_DEPLOY_PREVIEW_PORT?.trim() || "3000";
+  return `http://${uuid}-pr-${prId}:${port}/ops/v1/deploy-initial`;
+}
+function resolveSyncDeployUrl(env, studioDeployUrl, isPreviewBuild) {
+  const explicit = env.STUDIO_DEPLOY_BUILD_URL?.trim();
+  if (explicit) {
+    return { ok: true, url: explicit };
+  }
+  if (env.CI_PREVIEW === "true") {
+    return { ok: true, url: "http://127.0.0.1:8787/ops/v1/deploy-initial" };
+  }
+  if (isPreviewBuild) {
+    const derived = derivePreviewDeployBuildUrl(env);
+    if (derived) {
+      return {
+        ok: true,
+        url: derived,
+        derivedMessage: `derived STUDIO_DEPLOY_BUILD_URL=${derived} (from COLUMNUS_DEPLOY_RESOURCE_UUID + PR id)`
+      };
+    }
+    return {
+      ok: false,
+      message: "Set COLUMNUS_DEPLOY_RESOURCE_UUID on columnus-web preview (columnus-deploy Coolify resource UUID) or STUDIO_DEPLOY_BUILD_URL explicitly. See plans/done/021-preview-deploy-service.md"
+    };
+  }
+  return { ok: true, url: studioDeployUrl };
+}
+function validatePreviewSourceCommit(env = process.env) {
+  if (env.CI_PREVIEW === "true") {
+    return { ok: true, commit: env.SOURCE_COMMIT?.trim() ?? "", required: false };
+  }
+  const raw = env.SOURCE_COMMIT ?? "";
+  try {
+    const commit = parseGitSha(raw, "SOURCE_COMMIT");
+    return { ok: true, commit, required: true };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (!raw.trim() || raw.trim() === "unknown") {
+      return {
+        ok: false,
+        message: `SOURCE_COMMIT is required for Coolify preview builds (got '${raw}'). Enable Advanced \u2192 Include Source Commit in Build on both columnus-web and columnus-deploy.`
+      };
+    }
+    return { ok: false, message };
+  }
+}
+function normalizeConvexUrl(url) {
+  return url.trim().replace(/\/+$/, "");
+}
+function docsSeedSyncEmailFromEnv(env = process.env) {
+  return env.DOCS_SEED_SYNC_EMAIL?.trim() || env.PLAYWRIGHT_TEST_EMAIL?.trim() || void 0;
+}
+
+export { defaultProdDeployUrl, derivePreviewDeployBuildUrl, derivePreviewStudioDeployUrl, docsSeedSyncEmailFromEnv, isLoopbackDeployServiceUrl, isProdDeployServiceUrl, normalizeConvexUrl, parseGitSha, resolveRuntimeDeployServiceUrl, resolveSyncDeployUrl, validatePreviewSourceCommit };
+//# sourceMappingURL=ciPreviewEnv.js.map
+//# sourceMappingURL=ciPreviewEnv.js.map

package/dist/ciPreviewEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/previewDeployName.ts","../src/ciPreviewEnv.ts"],"names":[],"mappings":";AAOO,SAAS,sBAAA,CAAuB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AAC1F,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,YAAA,IAAgB,GAAA,CAAI,WAAA;AACpC,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,cAAA,EAAgB,EAAE,EAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AAC9D,EAAA,OAAO,IAAA,IAAQ,IAAA;AACjB;AAYA,IAAM,mBAAA,GAAsB,sBAAA;AAC5B,IAAM,kBAAA,GAAqB,sCAAA;AAGpB,SAAS,kBAAA,CAAmB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACtF,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AACvC,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,IAAA,CAAK,IAAI,IAAI,CAAC,CAAA;AAClD,IAAA,IAAI,UAAU,OAAO,QAAA;AAAA,EACvB;AAEA,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,cAAA,IAAkB,GAAA,CAAI,UAAA;AACzC,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAM,aAAa,mBAAA,CAAoB,IAAA,CAAK,qBAAqB,MAAM,CAAC,IAAI,CAAC,CAAA;AAC7E,IAAA,IAAI,YAAY,OAAO,UAAA;AAAA,EACzB;AAEA,EAAA,OAAO,IAAA;AACT;AA2BA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,OAAO,QAAQ,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,GAAI,MAAA;AAC9C;;;ACtEA,IAAM,UAAA,GAAa,qBAAA;AAGZ,SAAS,WAAA,CAAY,GAAA,EAAyB,KAAA,GAAQ,QAAA,EAAkB;AAC7E,EAAA,MAAM,MAAA,GAAA,CAAU,GAAA,IAAO,EAAA,EAAI,IAAA,EAAK;AAChC,EAAA,IAAI,CAAC,UAAU,MAAA,KAAW,SAAA,IAAa,CAAC,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,+CAAA,EAA6C,GAAA,IAAO,EAAE,CAAA,CAAA,CAAG,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,oBAAA,CAAqB,SAAS,cAAA,EAAwB;AACpE,EAAA,OAAO,kBAAkB,MAAM,CAAA,sBAAA,CAAA;AACjC;AAEA,SAAS,WAAW,GAAA,EAA4B;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,aAAa,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA,GAAM,UAAU,GAAG,CAAA,CAAA;AAC1D,IAAA,OAAO,IAAI,GAAA,CAAI,UAAU,CAAA,CAAE,QAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGO,SAAS,2BAA2B,GAAA,EAAsB;AAC/D,EAAA,MAAM,IAAA,GAAO,WAAW,GAAG,CAAA;AAC3B,EAAA,OAAO,IAAA,KAAS,WAAA,IAAe,IAAA,KAAS,WAAA,IAAe,IAAA,KAAS,KAAA;AAClE;AAGO,SAAS,sBAAA,CAAuB,GAAA,EAAa,MAAA,GAAS,cAAA,EAAyB;AACpF,EAAA,OAAO,UAAA,CAAW,GAAG,CAAA,KAAM,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA;AAC7C;AASO,SAAS,4BAAA,CACd,GAAA,GAAyB,OAAA,CAAQ,GAAA,EACjC,SAAS,cAAA,EACM;AACf,EAAA,MAAM,IAAA,GAAO,mBAAmB,GAAG,CAAA;AACnC,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,EAAA,KAAA,MAAW,GAAA,IAAO,CAAC,6BAAA,EAA+B,mBAAmB,CAAA,EAAY;AAC/E,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,GAAG,CAAA,EAAG,IAAA,EAAK;AAC/B,IAAA,IAAI,CAAC,OAAA,EAAS;AACd,IAAA,IAAI,2BAA2B,OAAO,CAAA,IAAK,sBAAA,CAAuB,OAAA,EAAS,MAAM,CAAA,EAAG;AAClF,MAAA;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,sBAAA,CAAA;AACjD;AAEA,IAAM,4BAAA,GAA+B,uBAAA;AAU9B,SAAS,8BAAA,CACd,GAAA,GAAyB,OAAA,CAAQ,GAAA,EACjC,SAAS,cAAA,EACD;AACR,EAAA,MAAM,OAAA,GAAU,4BAAA,CAA6B,GAAA,EAAK,MAAM,CAAA;AACxD,EAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,2BAAA,EAA6B,IAAA,EAAK;AACvD,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,iBAAA,EAAmB,IAAA,EAAK;AAC3C,EAAA,IAAI,QAAA,IAAY,CAAC,0BAAA,CAA2B,QAAQ,GAAG,OAAO,QAAA;AAC9D,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,OAAO,4BAAA;AACT;AAGO,SAAS,2BAAA,CAA4B,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AAC/F,EAAA,MAAM,IAAA,GAAO,mBAAmB,GAAG,CAAA;AACnC,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,EAAA,IAAI,IAAA,GAAO,GAAA,CAAI,6BAAA,EAA+B,IAAA,EAAK,IAAK,EAAA;AACxD,EAAA,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,cAAA,EAAgB,EAAE,CAAA;AACtC,EAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AAC7B,EAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,CAAE,CAAC,CAAA,IAAK,IAAA;AAChC,EAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,IAAA;AAC7B,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,4BAAA,EAA8B,IAAA,EAAK,IAAK,MAAA;AACzD,EAAA,OAAO,CAAA,OAAA,EAAU,IAAI,CAAA,IAAA,EAAO,IAAI,IAAI,IAAI,CAAA,sBAAA,CAAA;AAC1C;AAOO,SAAS,oBAAA,CACd,GAAA,EACA,eAAA,EACA,cAAA,EAC4B;AAC5B,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,uBAAA,EAAyB,IAAA,EAAK;AACnD,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,GAAA,EAAK,QAAA,EAAS;AAAA,EACnC;AAEA,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAQ;AAC7B,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,GAAA,EAAK,6CAAA,EAA8C;AAAA,EACxE;AAEA,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,MAAM,OAAA,GAAU,4BAA4B,GAAG,CAAA;AAC/C,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,GAAA,EAAK,OAAA;AAAA,QACL,cAAA,EAAgB,mCAAmC,OAAO,CAAA,6CAAA;AAAA,OAC5D;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,OAAA,EACE;AAAA,KACJ;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,GAAA,EAAK,eAAA,EAAgB;AAC1C;AAOO,SAAS,2BAAA,CACd,GAAA,GAAyB,OAAA,CAAQ,GAAA,EACN;AAC3B,EAAA,IAAI,GAAA,CAAI,eAAe,MAAA,EAAQ;AAC7B,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,GAAA,CAAI,eAAe,IAAA,EAAK,IAAK,EAAA,EAAI,QAAA,EAAU,KAAA,EAAM;AAAA,EAC9E;AAEA,EAAA,MAAM,GAAA,GAAM,IAAI,aAAA,IAAiB,EAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,EAAK,eAAe,CAAA;AAC/C,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,UAAU,IAAA,EAAK;AAAA,EAC5C,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,UAAU,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACrE,IAAA,IAAI,CAAC,GAAA,CAAI,IAAA,MAAU,GAAA,CAAI,IAAA,OAAW,SAAA,EAAW;AAC3C,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,KAAA;AAAA,QACJ,OAAA,EAAS,8DAA8D,GAAG,CAAA,mGAAA;AAAA,OAC5E;AAAA,IACF;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAA,EAAQ;AAAA,EAC9B;AACF;AAEO,SAAS,mBAAmB,GAAA,EAAqB;AACtD,EAAA,OAAO,GAAA,CAAI,IAAA,EAAK,CAAE,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACtC;AAGO,SAAS,wBAAA,CAAyB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAyB;AACjG,EAAA,OAAO,IAAI,oBAAA,EAAsB,IAAA,MAAU,GAAA,CAAI,qBAAA,EAAuB,MAAK,IAAK,MAAA;AAClF","file":"ciPreviewEnv.js","sourcesContent":["/**\n * Sanitized Convex preview deployment name for CI / Coolify preview builds.\n * \"/\" breaks preview/<name> lookups in Convex deployment references.\n *\n * Coolify preview env vars: COOLIFY_BRANCH, COOLIFY_IS_PREVIEW, COOLIFY_FQDN,\n * COOLIFY_URL (BuildKit build secrets).\n */\nexport function coolifyHostnameFromEnv(env: NodeJS.ProcessEnv = process.env): string | null {\n  const raw = env.COOLIFY_FQDN ?? env.COOLIFY_URL;\n  if (!raw) return null;\n  const host = raw.replace(/^https?:\\/\\//, \"\").split(\"/\")[0] ?? \"\";\n  return host || null;\n}\n\n/** True when Coolify (or CI_PREVIEW) indicates a PR preview Docker build. */\nexport function isCiPreviewBuild(env: NodeJS.ProcessEnv = process.env): boolean {\n  if (env.CI_PREVIEW === \"true\" || env.COOLIFY_IS_PREVIEW === \"true\") {\n    return true;\n  }\n  const host = coolifyHostnameFromEnv(env);\n  // preview-<pr>, manage-preview-<pr>, deploy-preview-<pr>\n  return Boolean(host && /^(?:manage-|deploy-)?preview-\\d+\\./.test(host));\n}\n\nconst PULL_HEAD_BRANCH_RE = /^pull\\/(\\d+)\\/head$/i;\nconst PREVIEW_HOST_PR_RE = /^(?:manage-|deploy-)?preview-(\\d+)\\./;\n\n/** PR id from `preview-<n>.<domain>` / `manage-preview-<n>` hostname or `pull/<n>/head` branch. */\nexport function resolvePreviewPrId(env: NodeJS.ProcessEnv = process.env): string | null {\n  const host = coolifyHostnameFromEnv(env);\n  if (host) {\n    const fromHost = PREVIEW_HOST_PR_RE.exec(host)?.[1];\n    if (fromHost) return fromHost;\n  }\n\n  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;\n  if (branch) {\n    const fromBranch = PULL_HEAD_BRANCH_RE.exec(stripQualifiedBranch(branch))?.[1];\n    if (fromBranch) return fromBranch;\n  }\n\n  return null;\n}\n\n/**\n * Resolve the git branch used for Convex `--preview-name`.\n * Coolify often sets COOLIFY_BRANCH to `pull/<n>/head` at runtime (see coollabsio/coolify#9572).\n */\nexport function resolvePreviewBranch(env: NodeJS.ProcessEnv = process.env): string | null {\n  if (env.GITHUB_HEAD_REF) return stripQualifiedBranch(env.GITHUB_HEAD_REF);\n\n  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;\n  const prId = resolvePreviewPrId(env);\n  if (!branch) {\n    return prId ? `preview-${prId}` : null;\n  }\n\n  const stripped = stripQualifiedBranch(branch);\n  if (PULL_HEAD_BRANCH_RE.test(stripped)) {\n    if (prId) return `preview-${prId}`;\n  }\n  // Coolify PR apps often leave COOLIFY_BRANCH=main while FQDN is *-preview-<n>.\n  if ((stripped === \"main\" || stripped === \"master\") && prId) {\n    return `preview-${prId}`;\n  }\n  return stripped;\n}\n\n/** Strip Coolify/Convex qualified suffixes (e.g. `pull-48-head:pr-48-coolify`). */\nfunction stripQualifiedBranch(branch: string): string {\n  const colon = branch.indexOf(\":\");\n  return colon > 0 ? branch.slice(0, colon) : branch;\n}\n\nexport function sanitizePreviewDeployName(branch: string): string {\n  return stripQualifiedBranch(branch).replace(/\\//g, \"-\");\n}\n\n/** Normalize a preview name from Convex env before `convex deploy --preview-name`. */\nexport function normalizePreviewDeployName(name: string): string {\n  return sanitizePreviewDeployName(name.trim());\n}\n\nexport function ciPreviewDeployName(env: NodeJS.ProcessEnv = process.env): string | null {\n  if (!isCiPreviewBuild(env)) return null;\n\n  const branch = resolvePreviewBranch(env);\n  if (!branch) return null;\n  return sanitizePreviewDeployName(branch);\n}\n\n/** Stale failures from broken preview deploy before the bridge was live. */\nexport const STALE_ENDPOINT_DEPLOY_ERROR =\n  /^deploy endpoint returned (?:200(?: OK)?|500(?: Internal Server Error)?)$/;\n\nexport function isStaleEndpointDeployError(error: string | undefined): boolean {\n  return error != null && STALE_ENDPOINT_DEPLOY_ERROR.test(error);\n}\n\n/** Infra failures from a prior broken deploy that a fresh save can retry. */\nexport function isRecoverableDeployError(error: string | undefined): boolean {\n  if (error == null) return false;\n  if (isStaleEndpointDeployError(error)) return true;\n  if (error.includes(\"502 Bad Gateway\")) return true;\n  if (error.includes(\"deploy endpoint unreachable\")) return true;\n  if (error.includes(\"deploy endpoint timed out\")) return true;\n  return (\n    error.includes(\"convex/bin/main.js\") ||\n    error.includes(\"convex CLI (bin/main.js\") ||\n    error.includes(\"convex CLI not available\")\n  );\n}\n","import { resolvePreviewPrId } from \"./previewDeployName.ts\";\n\nconst GIT_SHA_RE = /^[0-9a-fA-F]{7,40}$/;\n\n/** Parse and validate a git commit SHA (7–40 hex chars). */\nexport function parseGitSha(raw: string | undefined, label = \"commit\"): string {\n  const commit = (raw ?? \"\").trim();\n  if (!commit || commit === \"unknown\" || !GIT_SHA_RE.test(commit)) {\n    throw new Error(`${label} must be a git SHA (7–40 hex chars); got '${raw ?? \"\"}'`);\n  }\n  return commit;\n}\n\nexport function defaultProdDeployUrl(domain = \"columnus.app\"): string {\n  return `https://deploy.${domain}/ops/v1/deploy-initial`;\n}\n\nfunction hostnameOf(url: string): string | null {\n  try {\n    const withScheme = /:\\/\\//.test(url) ? url : `http://${url}`;\n    return new URL(withScheme).hostname;\n  } catch {\n    return null;\n  }\n}\n\n/** True for local defaults that should not beat Coolify preview deploy URLs. */\nexport function isLoopbackDeployServiceUrl(url: string): boolean {\n  const host = hostnameOf(url);\n  return host === \"127.0.0.1\" || host === \"localhost\" || host === \"::1\";\n}\n\n/** Production shared deploy host (`deploy.columnus.app`), any path. */\nexport function isProdDeployServiceUrl(url: string, domain = \"columnus.app\"): boolean {\n  return hostnameOf(url) === `deploy.${domain}`;\n}\n\n/**\n * When on a PR preview host, return the per-PR deploy-service URL unless env already\n * points at a non-production executor (deploy-preview or Coolify internal).\n *\n * Coolify often copies production `STUDIO_DEPLOY_URL=https://deploy.columnus.app/deploy`\n * onto preview apps — that must not win over `deploy-preview-<pr>`.\n */\nexport function derivePreviewStudioDeployUrl(\n  env: NodeJS.ProcessEnv = process.env,\n  domain = \"columnus.app\",\n): string | null {\n  const prId = resolvePreviewPrId(env);\n  if (!prId) return null;\n\n  for (const key of [\"COLUMNUS_DEPLOY_SERVICE_URL\", \"STUDIO_DEPLOY_URL\"] as const) {\n    const current = env[key]?.trim();\n    if (!current) continue;\n    if (isLoopbackDeployServiceUrl(current) || isProdDeployServiceUrl(current, domain)) {\n      continue;\n    }\n    // Explicit non-prod URL (deploy-preview / Coolify internal) — leave alone.\n    return null;\n  }\n\n  return `https://deploy-preview-${prId}.${domain}/ops/v1/deploy-initial`;\n}\n\nconst LOCAL_DEPLOY_SERVICE_DEFAULT = \"http://127.0.0.1:8787\";\n\n/**\n * Runtime deploy-service URL for Web BFF / container entrypoint.\n *\n * Prefer preview-derived `deploy-preview-<pr>`, else non-loopback `COLUMNUS_DEPLOY_SERVICE_URL`,\n * else `STUDIO_DEPLOY_URL`, else loopback COLUMNUS, else local default.\n *\n * Callers that need an origin (no path) should normalize with deploy-service helpers.\n */\nexport function resolveRuntimeDeployServiceUrl(\n  env: NodeJS.ProcessEnv = process.env,\n  domain = \"columnus.app\",\n): string {\n  const derived = derivePreviewStudioDeployUrl(env, domain);\n  if (derived) return derived;\n\n  const columnus = env.COLUMNUS_DEPLOY_SERVICE_URL?.trim();\n  const studio = env.STUDIO_DEPLOY_URL?.trim();\n  if (columnus && !isLoopbackDeployServiceUrl(columnus)) return columnus;\n  if (studio) return studio;\n  if (columnus) return columnus;\n  return LOCAL_DEPLOY_SERVICE_DEFAULT;\n}\n\n/** Coolify internal URL for columnus-deploy preview container (build-time manifest sync). */\nexport function derivePreviewDeployBuildUrl(env: NodeJS.ProcessEnv = process.env): string | null {\n  const prId = resolvePreviewPrId(env);\n  if (!prId) return null;\n\n  let uuid = env.COLUMNUS_DEPLOY_RESOURCE_UUID?.trim() ?? \"\";\n  uuid = uuid.replace(/^https?:\\/\\//, \"\");\n  uuid = uuid.split(\"/\")[0] ?? \"\";\n  uuid = uuid.split(\"-pr-\")[0] ?? uuid;\n  uuid = uuid.split(\":\")[0] ?? uuid;\n  if (!uuid) return null;\n\n  const port = env.COLUMNUS_DEPLOY_PREVIEW_PORT?.trim() || \"3000\";\n  return `http://${uuid}-pr-${prId}:${port}/ops/v1/deploy-initial`;\n}\n\nexport type ResolveSyncDeployUrlResult =\n  | { ok: true; url: string; derivedMessage?: string }\n  | { ok: false; message: string };\n\n/** URL for `sync-manifest-deploy` during Docker/CI builds. */\nexport function resolveSyncDeployUrl(\n  env: NodeJS.ProcessEnv,\n  studioDeployUrl: string,\n  isPreviewBuild: boolean,\n): ResolveSyncDeployUrlResult {\n  const explicit = env.STUDIO_DEPLOY_BUILD_URL?.trim();\n  if (explicit) {\n    return { ok: true, url: explicit };\n  }\n\n  if (env.CI_PREVIEW === \"true\") {\n    return { ok: true, url: \"http://127.0.0.1:8787/ops/v1/deploy-initial\" };\n  }\n\n  if (isPreviewBuild) {\n    const derived = derivePreviewDeployBuildUrl(env);\n    if (derived) {\n      return {\n        ok: true,\n        url: derived,\n        derivedMessage: `derived STUDIO_DEPLOY_BUILD_URL=${derived} (from COLUMNUS_DEPLOY_RESOURCE_UUID + PR id)`,\n      };\n    }\n    return {\n      ok: false,\n      message:\n        \"Set COLUMNUS_DEPLOY_RESOURCE_UUID on columnus-web preview (columnus-deploy Coolify resource UUID) or STUDIO_DEPLOY_BUILD_URL explicitly. See plans/done/021-preview-deploy-service.md\",\n    };\n  }\n\n  return { ok: true, url: studioDeployUrl };\n}\n\nexport type PreviewSourceCommitResult =\n  | { ok: true; commit: string; required: boolean }\n  | { ok: false; message: string };\n\n/** Validates SOURCE_COMMIT for Coolify preview builds (skipped when CI_PREVIEW=true). */\nexport function validatePreviewSourceCommit(\n  env: NodeJS.ProcessEnv = process.env,\n): PreviewSourceCommitResult {\n  if (env.CI_PREVIEW === \"true\") {\n    return { ok: true, commit: env.SOURCE_COMMIT?.trim() ?? \"\", required: false };\n  }\n\n  const raw = env.SOURCE_COMMIT ?? \"\";\n  try {\n    const commit = parseGitSha(raw, \"SOURCE_COMMIT\");\n    return { ok: true, commit, required: true };\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    if (!raw.trim() || raw.trim() === \"unknown\") {\n      return {\n        ok: false,\n        message: `SOURCE_COMMIT is required for Coolify preview builds (got '${raw}'). Enable Advanced → Include Source Commit in Build on both columnus-web and columnus-deploy.`,\n      };\n    }\n    return { ok: false, message };\n  }\n}\n\nexport function normalizeConvexUrl(url: string): string {\n  return url.trim().replace(/\\/+$/, \"\");\n}\n\n/** DOCS_SEED_SYNC_EMAIL with PLAYWRIGHT_TEST_EMAIL fallback (Coolify / entrypoint). */\nexport function docsSeedSyncEmailFromEnv(env: NodeJS.ProcessEnv = process.env): string | undefined {\n  return env.DOCS_SEED_SYNC_EMAIL?.trim() || env.PLAYWRIGHT_TEST_EMAIL?.trim() || undefined;\n}\n"]}

package/dist/clipboardTransfer.d.ts

@@ -0,0 +1,25 @@
+import type { Table as TableT } from "./schemaTypes.ts";
+import { type CsvExport } from "./csv.ts";
+export declare const COLUMNUS_CLIPBOARD_MARKER = "#columnus-clipboard";
+export declare const COLUMNUS_CLIPBOARD_VERSION = 1;
+export type ColumnusClipboardMeta = {
+    version: number;
+    table: string;
+    columns: string[];
+};
+export type ParsedColumnusClipboard = {
+    meta: ColumnusClipboardMeta;
+    csvBody: string;
+};
+export type SerializeColumnusClipboardInput = {
+    table: string;
+    csv: CsvExport;
+};
+export declare function serializeColumnusClipboard(input: SerializeColumnusClipboardInput): string;
+export declare function parseColumnusClipboard(text: string): ParsedColumnusClipboard | null;
+export declare function validateClipboardColumns(columns: readonly string[], table: TableT): {
+    ok: true;
+} | {
+    ok: false;
+    unknownColumns: string[];
+};