@contentrain/mcp 1.9.0 → 1.10.1

package/README.md

@@ -71,9 +71,9 @@ All write operations are designed around git-backed safety:
 
 ## Tool Surface
 
-19 MCP tools with [annotations](https://spec.modelcontextprotocol.io/specification/2025-03-26/server/tools/#annotations) (`readOnlyHint`, `destructiveHint`, `idempotentHint`, and `openWorldHint: false` — every tool operates on the configured repository only) for client safety hints.
+24 MCP tools — 19 core + 5 media — with [annotations](https://spec.modelcontextprotocol.io/specification/2025-03-26/server/tools/#annotations) (`readOnlyHint`, `destructiveHint`, `idempotentHint`, and `openWorldHint: false` everywhere except `contentrain_media_ingest`, which fetches a caller-supplied URL server-side) for client safety hints.
 
-**Tool listing is capability-aware.** `tools/list` only advertises tools the resolved provider + `projectRoot` pair can actually satisfy. A local stdio server lists all 19; a session driven by a remote provider (GitHub/GitLab, no local checkout) lists only the remote-safe subset — `status`, `describe`, `describe_format`, `model_save`, `model_delete`, `content_save`, `content_delete`, `content_list`, `validate`. The requirement map lives in `TOOL_REQUIREMENTS` (`@contentrain/mcp/tools/availability`).
+**Tool listing is capability-aware.** `tools/list` only advertises tools the resolved provider + `projectRoot` pair can actually satisfy. A local stdio server lists the 19 core tools; a session driven by a remote provider (GitHub/GitLab, no local checkout) lists only the remote-safe subset — `status`, `describe`, `describe_format`, `model_save`, `model_delete`, `content_save`, `content_delete`, `content_list`, `validate`. The requirement map lives in `TOOL_REQUIREMENTS` (`@contentrain/mcp/tools/availability`).
 
 | Tool | Purpose | Read-only | Destructive |
 | --- | --- | --- | --- |
@@ -96,6 +96,13 @@ All write operations are designed around git-backed safety:
 | `contentrain_scan` | Graph- and candidate-based hardcoded string scan | Yes | — |
 | `contentrain_apply` | Normalize extract/reuse execution with dry-run support | — | — |
 | `contentrain_bulk` | Bulk locale copy, status updates, and deletes | — | — |
+| `contentrain_media_list` | List media assets (search, tag filter, cursor pagination) | Yes | — |
+| `contentrain_media_get` | Get one media asset by id | Yes | — |
+| `contentrain_media_ingest` | Ingest an asset from a source URL (provider fetches server-side) | — | — |
+| `contentrain_media_update` | Update asset metadata (alt, tags, filename) | — | — |
+| `contentrain_media_delete` | Delete an asset from the media stack | — | **Yes** |
+
+The five `contentrain_media_*` tools are a deterministic passthrough to the provider's optional media facet (`RepoProvider.media`) and are registered **only when the provider exposes one** (e.g. Studio MCP Cloud). Local stdio servers and plain GitHub/GitLab providers never list them. Ingest is URL-based (MCP has no binary channel); the provider implementation owns SSRF/MIME/size policy for the fetch.
 
 ## Quick Start
 
@@ -257,7 +264,7 @@ These are intended for Contentrain tooling and advanced integrations, not for di
 Key design decisions in this package:
 
 - local-first **by default** — stdio transport + LocalProvider works without any network dependency
-- provider-agnostic engine — the same 19 tools run over LocalProvider, GitHubProvider, or GitLabProvider behind a single `RepoProvider` contract
+- provider-agnostic engine — the same core tools run over LocalProvider, GitHubProvider, or GitLabProvider behind a single `RepoProvider` contract; media tools ride the provider's optional media facet
 - remote provider SDKs (`@octokit/rest`, `@gitbeaker/rest`) are optional peer dependencies — pulled in only when their provider is used
 - JSON-only content storage
 - git-backed write workflow (worktree transaction locally, single atomic commit over the Git Data / REST APIs remotely)

package/dist/{annotations-DSzewhL4.mjs → annotations-D3tlsF38.mjs}

@@ -2,9 +2,9 @@
 /**
 * Centralized tool annotations registry.
 * MCP clients use these hints to distinguish read-only vs. write vs. destructive tools.
-* `openWorldHint` is `false` across the board: every tool operates on the
-* configured content repository only — none reaches out to arbitrary
-* external systems.
+* `openWorldHint` is `false` everywhere except `contentrain_media_ingest`,
+* which fetches a caller-supplied external URL server-side; every other
+* tool operates on the configured content repository only.
 *
 * Also serves as the **single source of truth for the tool name list**. Consumers
 * that need to enumerate every registered tool (e.g. parity tests in
@@ -144,6 +144,41 @@ const TOOL_ANNOTATIONS = {
 		destructiveHint: false,
 		idempotentHint: false,
 		openWorldHint: false
+	},
+	contentrain_media_list: {
+		title: "List Media Assets",
+		readOnlyHint: true,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: false
+	},
+	contentrain_media_get: {
+		title: "Get Media Asset",
+		readOnlyHint: true,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: false
+	},
+	contentrain_media_ingest: {
+		title: "Ingest Media From URL",
+		readOnlyHint: false,
+		destructiveHint: false,
+		idempotentHint: false,
+		openWorldHint: true
+	},
+	contentrain_media_update: {
+		title: "Update Media Metadata",
+		readOnlyHint: false,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: false
+	},
+	contentrain_media_delete: {
+		title: "Delete Media Asset",
+		readOnlyHint: false,
+		destructiveHint: true,
+		idempotentHint: false,
+		openWorldHint: false
 	}
 };
 /**
@@ -157,4 +192,4 @@ const TOOL_NAMES = Object.freeze(Object.keys(TOOL_ANNOTATIONS));
 //#endregion
 export { TOOL_NAMES as n, TOOL_ANNOTATIONS as t };
 
-//# sourceMappingURL=annotations-DSzewhL4.mjs.map
+//# sourceMappingURL=annotations-D3tlsF38.mjs.map

package/dist/annotations-D3tlsF38.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotations-D3tlsF38.mjs","names":[],"sources":["../src/tools/annotations.ts"],"sourcesContent":["import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js'\n\n/**\n * Centralized tool annotations registry.\n * MCP clients use these hints to distinguish read-only vs. write vs. destructive tools.\n * `openWorldHint` is `false` everywhere except `contentrain_media_ingest`,\n * which fetches a caller-supplied external URL server-side; every other\n * tool operates on the configured content repository only.\n *\n * Also serves as the **single source of truth for the tool name list**. Consumers\n * that need to enumerate every registered tool (e.g. parity tests in\n * `@contentrain/rules` / `@contentrain/skills`) should import `TOOL_NAMES` below\n * rather than hardcoding the list.\n */\nexport const TOOL_ANNOTATIONS: Record<string, ToolAnnotations> = {\n  // ─── Context (read-only) ───\n  contentrain_status: {\n    title: 'Project Status',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_describe: {\n    title: 'Describe Model',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_describe_format: {\n    title: 'Describe Format',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_doctor: {\n    title: 'Project Health Report',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n\n  // ─── Setup (write + git) ───\n  contentrain_init: {\n    title: 'Initialize Project',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n  contentrain_scaffold: {\n    title: 'Scaffold Template',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Model (write + git) ───\n  contentrain_model_save: {\n    title: 'Save Model',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_model_delete: {\n    title: 'Delete Model',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Content (mixed) ───\n  contentrain_content_save: {\n    title: 'Save Content',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_content_delete: {\n    title: 'Delete Content',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n  contentrain_content_list: {\n    title: 'List Content',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n\n  // ─── Workflow (mixed) ───\n  contentrain_validate: {\n    title: 'Validate Project',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_submit: {\n    title: 'Submit Branches',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_merge: {\n    title: 'Merge Branch',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n  contentrain_branch_list: {\n    title: 'List Branches',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_branch_delete: {\n    title: 'Delete Branch',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Normalize (mixed) ───\n  contentrain_scan: {\n    title: 'Scan Source Code',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_apply: {\n    title: 'Apply Normalize',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Bulk (write + git) ───\n  contentrain_bulk: {\n    title: 'Bulk Operations',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Media (provider media facet — registered only when RepoProvider.media is present) ───\n  contentrain_media_list: {\n    title: 'List Media Assets',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_media_get: {\n    title: 'Get Media Asset',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_media_ingest: {\n    title: 'Ingest Media From URL',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n  },\n  contentrain_media_update: {\n    title: 'Update Media Metadata',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_media_delete: {\n    title: 'Delete Media Asset',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n}\n\n/**\n * Canonical list of every registered MCP tool name, derived from the\n * single source of truth above. Re-exported here with a stable name so\n * parity tests in sibling packages (`@contentrain/rules`,\n * `@contentrain/skills`) can assert against it without depending on\n * `TOOL_ANNOTATIONS` internals.\n */\nexport const TOOL_NAMES: readonly string[] = Object.freeze(Object.keys(TOOL_ANNOTATIONS))\n"],"mappings":";;;;;;;;;;;;;AAcA,MAAa,mBAAoD;CAE/D,oBAAoB;EAClB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,sBAAsB;EACpB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,6BAA6B;EAC3B,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,oBAAoB;EAClB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,kBAAkB;EAChB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,sBAAsB;EACpB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,wBAAwB;EACtB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,4BAA4B;EAC1B,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,sBAAsB;EACpB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,oBAAoB;EAClB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,mBAAmB;EACjB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,yBAAyB;EACvB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,2BAA2B;EACzB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,kBAAkB;EAChB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,mBAAmB;EACjB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,kBAAkB;EAChB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,wBAAwB;EACtB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,uBAAuB;EACrB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACF;;;;;;;;AASD,MAAa,aAAgC,OAAO,OAAO,OAAO,KAAK,iBAAiB,CAAC"}

package/dist/{apply-manager-BnPbPXFG.mjs → apply-manager-UXUTYFZn.mjs}

@@ -2,8 +2,8 @@ import { c as writeText, o as readText, r as pathExists } from "./fs-DLbVB-Ek.mj
 import { t as readConfig } from "./config-DlFcTxFG.mjs";
 import { S as writeContent, _ as resolveMdFilePath, c as validateModelDefinition, h as resolveJsonFilePath, l as writeModel, m as resolveContentDir, o as listModels, s as readModel } from "./model-manager-BhLsUgaB.mjs";
 import { r as writeContext } from "./context-CYN__o3Q.mjs";
-import { n as checkBranchHealth } from "./branch-lifecycle-D7tXOE4f.mjs";
-import { n as createTransaction, t as buildBranchName } from "./transaction-qliKvBRL.mjs";
+import { n as checkBranchHealth } from "./branch-lifecycle-Dd84lx37.mjs";
+import { n as createTransaction, t as buildBranchName } from "./transaction-DhVoGigz.mjs";
 import { extname, join } from "node:path";
 //#region src/core/apply-manager.ts
 const MAX_PATCHES = 100;
@@ -753,4 +753,4 @@ function addImportsToLines(lines, imports) {
 //#endregion
 export { detectFileFramework as a, validatePatchPath as c, checkSyntax as i, applyExtract as n, replaceInLine as o, applyReuse as r, validateFrameworkExpression as s, PATCHABLE_EXTENSIONS as t };
 
-//# sourceMappingURL=apply-manager-BnPbPXFG.mjs.map
+//# sourceMappingURL=apply-manager-UXUTYFZn.mjs.map

package/dist/{apply-manager-BnPbPXFG.mjs.map → apply-manager-UXUTYFZn.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"apply-manager-BnPbPXFG.mjs","names":[],"sources":["../src/core/apply-manager.ts"],"sourcesContent":["import type { ModelDefinition, FieldDef, FileFramework } from '@contentrain/types'\nimport { join, extname } from 'node:path'\nimport { readText, writeText, pathExists } from '../util/fs.js'\nimport { readModel, writeModel, listModels, validateModelDefinition } from './model-manager.js'\nimport { writeContent, resolveContentDir, resolveJsonFilePath, resolveMdFilePath, type ContentEntry } from './content-manager.js'\nimport { readConfig } from './config.js'\nimport { writeContext } from './context.js'\nimport { createTransaction, buildBranchName } from '../git/transaction.js'\nimport { checkBranchHealth } from '../git/branch-lifecycle.js'\n\n// ─── Types ───\n\nexport interface ExtractionEntry {\n  model: string\n  kind: 'singleton' | 'collection' | 'dictionary' | 'document'\n  domain: string\n  i18n?: boolean\n  fields?: Record<string, FieldDef>\n  entries: Array<{\n    locale?: string\n    slug?: string\n    data: Record<string, unknown>\n    source?: { file: string; line: number; value: string }\n    sources?: Array<{ file: string; line: number; key: string; value: string }>\n  }>\n}\n\nexport interface ExtractionInput {\n  extractions: ExtractionEntry[]\n  dry_run?: boolean\n}\n\nexport interface ExtractionPreview {\n  models_to_create: string[]\n  models_to_update: string[]\n  total_entries: number\n  content_files: string[]\n}\n\nexport interface ExtractionResult {\n  dry_run: boolean\n  preview?: ExtractionPreview\n  error?: string\n  validation_errors?: string[]\n  results?: {\n    models_created: string[]\n    models_updated: string[]\n    entries_written: number\n    source_map: Array<{ model: string; locale: string; value: string; file: string; line: number }>\n  }\n  git?: { branch: string; action: string; commit: string }\n  context_updated?: boolean\n  next_steps: string[]\n}\n\nexport interface PatchEntry {\n  file: string\n  line: number\n  old_value: string\n  new_expression: string\n  import_statement?: string\n}\n\nexport interface ReuseInput {\n  scope: { model?: string; domain?: string }\n  patches: PatchEntry[]\n  dry_run?: boolean\n}\n\nexport interface SyntaxError {\n  file: string\n  error: string\n}\n\nexport interface ReuseResult {\n  dry_run: boolean\n  error?: string\n  scope_warnings?: string[]\n  preview?: {\n    files_to_modify: string[]\n    patches_count: number\n    imports_to_add: number\n  }\n  results?: {\n    files_modified: string[]\n    patches_applied: number\n    patches_skipped: Array<{ file: string; line: number; reason: string }>\n    imports_added: number\n    framework_warnings?: Array<{ file: string; warning: string }>\n    syntax_errors?: SyntaxError[]\n  }\n  git?: { branch: string; action: string; commit: string }\n  next_steps: string[]\n}\n\n// ─── Constants ───\n\nconst MAX_PATCHES = 100\n\n/** File extensions allowed for patching — scannable source files only */\nexport const PATCHABLE_EXTENSIONS = new Set([\n  '.vue', '.tsx', '.jsx', '.ts', '.js', '.mjs', '.astro', '.svelte',\n])\n\n/** Directories that must never be patched */\nconst FORBIDDEN_PATH_SEGMENTS = new Set([\n  '.contentrain', 'node_modules', '.git', 'dist', 'build', '.next', '.nuxt',\n])\n\n// ─── Framework Detection (Guardrail #2) ───\n\nexport type { FileFramework } from '@contentrain/types'\n\nexport function detectFileFramework(filePath: string): FileFramework {\n  const ext = extname(filePath).toLowerCase()\n  switch (ext) {\n    case '.vue': return 'vue'\n    case '.svelte': return 'svelte'\n    case '.tsx':\n    case '.jsx': return 'jsx'\n    case '.astro': return 'astro'\n    case '.ts':\n    case '.js':\n    case '.mjs': return 'script'\n    default: return 'script'\n  }\n}\n\n/**\n * Validate that a replacement expression uses the correct template syntax\n * for the target file's framework. Returns a warning string or null.\n */\nexport function validateFrameworkExpression(\n  filePath: string,\n  newExpression: string,\n  context: 'tag_text' | 'other',\n): string | null {\n  if (context !== 'tag_text') return null\n\n  const framework = detectFileFramework(filePath)\n\n  switch (framework) {\n    case 'vue':\n      if (!newExpression.includes('{{')) {\n        return `Vue file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{{\" — expected Vue template syntax like {{ $t('key') }}`\n      }\n      break\n    case 'jsx':\n      if (!newExpression.includes('{')) {\n        return `JSX file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{\" — expected JSX syntax like {t('key')}`\n      }\n      break\n    case 'svelte':\n      if (!newExpression.includes('{')) {\n        return `Svelte file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{\" — expected Svelte syntax like {$t('key')}`\n      }\n      break\n    case 'astro':\n      if (!newExpression.includes('{')) {\n        return `Astro file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{\" — expected Astro syntax like {t('key')}`\n      }\n      break\n    case 'script':\n      // Script files don't have template interpolation — warn if attempting tag text replacement\n      return `Script file \"${filePath}\": tag text replacement not applicable for .ts/.js files`\n  }\n\n  return null\n}\n\n// ─── Scope Validation (Guardrail #1) ───\n\n/**\n * Validate that a patch file path is safe and within allowed scope.\n * Returns an error message or null if valid.\n */\nexport function validatePatchPath(filePath: string): string | null {\n  const normalizedPath = filePath.replace(/\\\\/g, '/')\n\n  // Reject path traversal\n  if (normalizedPath.includes('..')) {\n    return `Path traversal detected: \"${filePath}\"`\n  }\n\n  // Reject absolute paths\n  if (normalizedPath.startsWith('/')) {\n    return `Absolute path not allowed: \"${filePath}\"`\n  }\n\n  // Reject forbidden directories\n  const segments = normalizedPath.split('/')\n  for (const seg of segments) {\n    if (FORBIDDEN_PATH_SEGMENTS.has(seg)) {\n      return `Patching files inside \"${seg}/\" is not allowed: \"${filePath}\"`\n    }\n  }\n\n  // Reject non-scannable extensions\n  const ext = extname(filePath).toLowerCase()\n  if (!PATCHABLE_EXTENSIONS.has(ext)) {\n    return `File extension \"${ext}\" is not patchable. Allowed: ${[...PATCHABLE_EXTENSIONS].join(', ')}. Path: \"${filePath}\"`\n  }\n\n  return null\n}\n\n// ─── Syntax Check (Guardrail #5) ───\n\n/**\n * Perform a basic syntax check on a patched file.\n * Returns an error message or null if syntax appears valid.\n */\nexport function checkSyntax(filePath: string, content: string): string | null {\n  const ext = extname(filePath).toLowerCase()\n\n  switch (ext) {\n    case '.ts':\n    case '.tsx':\n    case '.js':\n    case '.jsx':\n    case '.mjs':\n      return checkJsSyntax(content)\n    case '.vue':\n      return checkVueSyntax(content)\n    case '.svelte':\n    case '.astro':\n      return checkTagBalance(content)\n    default:\n      return null\n  }\n}\n\n/**\n * Basic JS/TS syntax check: bracket/paren/brace balance + string literal closure.\n * This is intentionally conservative — it catches obvious breakage without\n * requiring a full parser.\n */\nfunction checkJsSyntax(content: string): string | null {\n  const stack: string[] = []\n  const pairs: Record<string, string> = { ')': '(', ']': '[', '}': '{' }\n  let inString: string | null = null\n  let escaped = false\n  let inLineComment = false\n  let inBlockComment = false\n\n  for (let i = 0; i < content.length; i++) {\n    const ch = content[i]!\n    const next = content[i + 1]\n\n    // Handle escape sequences inside strings\n    if (escaped) {\n      escaped = false\n      continue\n    }\n\n    if (ch === '\\\\' && inString !== null) {\n      escaped = true\n      continue\n    }\n\n    // Line comment\n    if (!inString && !inBlockComment && ch === '/' && next === '/') {\n      inLineComment = true\n      continue\n    }\n    if (inLineComment) {\n      if (ch === '\\n') inLineComment = false\n      continue\n    }\n\n    // Block comment\n    if (!inString && !inBlockComment && ch === '/' && next === '*') {\n      inBlockComment = true\n      i++ // skip *\n      continue\n    }\n    if (inBlockComment) {\n      if (ch === '*' && next === '/') {\n        inBlockComment = false\n        i++ // skip /\n      }\n      continue\n    }\n\n    // String handling\n    if (inString !== null) {\n      if (ch === inString) {\n        // Template literal allows multi-line, others don't\n        inString = null\n      } else if (inString !== '`' && ch === '\\n') {\n        return `Unterminated string literal near offset ${i}`\n      }\n      continue\n    }\n\n    if (ch === '\"' || ch === \"'\" || ch === '`') {\n      inString = ch\n      continue\n    }\n\n    // Bracket matching\n    if (ch === '(' || ch === '[' || ch === '{') {\n      stack.push(ch)\n    } else if (ch === ')' || ch === ']' || ch === '}') {\n      const expected = pairs[ch]!\n      if (stack.length === 0) {\n        return `Unmatched closing \"${ch}\" near offset ${i}`\n      }\n      const top = stack.pop()!\n      if (top !== expected) {\n        return `Mismatched bracket: expected closing for \"${top}\" but found \"${ch}\" near offset ${i}`\n      }\n    }\n  }\n\n  if (inString !== null) {\n    return `Unterminated string literal (opened with ${inString})`\n  }\n\n  if (stack.length > 0) {\n    return `Unclosed bracket \"${stack[stack.length - 1]}\" — ${stack.length} unclosed bracket(s)`\n  }\n\n  return null\n}\n\n/**\n * Vue SFC syntax check: ensure <template>, <script>, <style> tags are balanced.\n */\nfunction checkVueSyntax(content: string): string | null {\n  const tagBalance = checkTagBalance(content)\n  if (tagBalance) return tagBalance\n\n  // Vue-specific: check that SFC root tags are present and balanced\n  for (const tag of ['template', 'script']) {\n    const openRe = new RegExp(`<${tag}[\\\\s>]`, 'g')\n    const closeRe = new RegExp(`</${tag}>`, 'g')\n    const opens = content.match(openRe)?.length ?? 0\n    const closes = content.match(closeRe)?.length ?? 0\n    if (opens !== closes) {\n      return `Unbalanced <${tag}> tag: ${opens} opening vs ${closes} closing`\n    }\n  }\n\n  return null\n}\n\n/**\n * Basic tag balance check for HTML-like files.\n * Checks that self-closing tags are handled and major structural tags are balanced.\n */\nfunction checkTagBalance(content: string): string | null {\n  // Check for common structural tags balance\n  const structuralTags = ['div', 'section', 'main', 'header', 'footer', 'nav', 'article', 'aside', 'ul', 'ol', 'table']\n\n  for (const tag of structuralTags) {\n    const openRe = new RegExp(`<${tag}[\\\\s>]`, 'g')\n    const closeRe = new RegExp(`</${tag}>`, 'g')\n    const opens = content.match(openRe)?.length ?? 0\n    const closes = content.match(closeRe)?.length ?? 0\n    if (opens !== closes) {\n      return `Unbalanced <${tag}> tag: ${opens} opening vs ${closes} closing`\n    }\n  }\n\n  return null\n}\n\n// ─── Extract Mode ───\n\nexport async function applyExtract(\n  projectRoot: string,\n  input: ExtractionInput,\n): Promise<ExtractionResult> {\n  const config = await readConfig(projectRoot)\n  if (!config) throw new Error('Project not initialized. Run contentrain_init first.')\n\n  const { extractions, dry_run } = input\n\n  // Analyze what will happen\n  const existingModels = await listModels(projectRoot)\n  const existingIds = new Set(existingModels.map(m => m.id))\n\n  const modelsToCreate: string[] = []\n  const modelsToUpdate: string[] = []\n  const contentFiles: string[] = []\n  let totalEntries = 0\n\n  const validationErrors: string[] = []\n\n  for (const ext of extractions) {\n    // Validate model definition with same rules as model_save\n    const modelErrors = validateModelDefinition({\n      id: ext.model,\n      kind: ext.kind,\n      fields: ext.fields as Record<string, unknown> | undefined,\n    })\n    if (modelErrors.length > 0) {\n      validationErrors.push(...modelErrors.map(e => `[${ext.model}] ${e}`))\n    }\n\n    for (const entry of ext.entries) {\n      if (ext.kind === 'dictionary') {\n        if (entry.data['id'] !== undefined || entry.data['slug'] !== undefined) {\n          validationErrors.push(`[${ext.model}] Dictionary entries should not have id or slug`)\n        }\n        for (const [key, val] of Object.entries(entry.data)) {\n          if (typeof val !== 'string') {\n            validationErrors.push(`[${ext.model}] Dictionary entry value for key \"${key}\" must be a string, got ${typeof val}`)\n          }\n        }\n      } else if (ext.kind === 'document') {\n        if (!entry.slug && !entry.data['slug']) {\n          validationErrors.push(`[${ext.model}] Document entries must have a slug`)\n        }\n      } else if (ext.kind === 'collection') {\n        if (entry.slug !== undefined || entry.data['slug'] !== undefined) {\n          validationErrors.push(`[${ext.model}] Collection entries should not have slug`)\n        }\n      } else if (ext.kind === 'singleton') {\n        if (entry.data['id'] !== undefined || entry.slug !== undefined || entry.data['slug'] !== undefined) {\n          validationErrors.push(`[${ext.model}] Singleton entries should not have id or slug`)\n        }\n      }\n    }\n\n    if (existingIds.has(ext.model)) {\n      modelsToUpdate.push(ext.model)\n    } else {\n      modelsToCreate.push(ext.model)\n    }\n    totalEntries += ext.entries.length\n\n    // Guardrail #3: Preview-Execute Parity — use real model metadata if it exists\n    let previewModel: ModelDefinition\n    if (existingIds.has(ext.model)) {\n      const real = await readModel(projectRoot, ext.model)\n      if (real) {\n        previewModel = real\n      } else {\n        previewModel = { id: ext.model, kind: ext.kind, domain: ext.domain, i18n: ext.i18n ?? true } as ModelDefinition\n      }\n    } else {\n      previewModel = { id: ext.model, kind: ext.kind, domain: ext.domain, i18n: ext.i18n ?? true } as ModelDefinition\n    }\n\n    const cDir = resolveContentDir(projectRoot, previewModel)\n    for (const entry of ext.entries) {\n      const locale = entry.locale ?? config.locales.default\n      if (ext.kind === 'document' && entry.slug) {\n        contentFiles.push(resolveMdFilePath(cDir, previewModel, locale, entry.slug))\n      } else {\n        contentFiles.push(resolveJsonFilePath(cDir, previewModel, locale))\n      }\n    }\n  }\n\n  const preview: ExtractionPreview = {\n    models_to_create: modelsToCreate,\n    models_to_update: modelsToUpdate,\n    total_entries: totalEntries,\n    content_files: [...new Set(contentFiles)],\n  }\n\n  // Dry run — return preview only (include validation errors if any)\n  if (dry_run !== false) {\n    return {\n      dry_run: true,\n      preview,\n      ...(validationErrors.length > 0 ? { validation_errors: validationErrors } : {}),\n      next_steps: [\n        ...(validationErrors.length > 0\n          ? [`WARNING: ${validationErrors.length} validation error(s) found — fix before executing`]\n          : []),\n        'Review the preview above',\n        'Call contentrain_apply with mode:extract and dry_run:false to execute',\n      ],\n    }\n  }\n\n  // Block execute if validation errors exist\n  if (validationErrors.length > 0) {\n    return {\n      dry_run: false,\n      error: 'Model validation failed — cannot execute extract with invalid model definitions',\n      validation_errors: validationErrors,\n      next_steps: ['Fix the validation errors and retry'],\n    }\n  }\n\n  // Branch health gate\n  const health = await checkBranchHealth(projectRoot)\n  if (health.blocked) {\n    return {\n      error: health.message,\n      action: 'blocked' as const,\n      hint: 'Merge or delete old contentrain/* branches before executing normalize.',\n    } as unknown as ExtractionResult\n  }\n\n  // Execute — git transaction (always review mode for normalize)\n  const branchName = buildBranchName('normalize', 'extract')\n  const tx = await createTransaction(projectRoot, branchName, { workflowOverride: 'review' })\n  const sourceMap: Array<{ model: string; locale: string; value: string; file: string; line: number }> = []\n  const modelsCreated: string[] = []\n  const modelsUpdated: string[] = []\n  let entriesWritten = 0\n\n  try {\n    await tx.write(async (wt) => {\n      for (const ext of extractions) {\n        // Create or merge model\n        const existing = await readModel(wt, ext.model)\n        if (existing) {\n          // Merge fields: add new, keep existing\n          if (ext.fields) {\n            const merged = { ...existing.fields, ...ext.fields }\n            // Only overwrite if new fields were actually added\n            const newFieldNames = Object.keys(ext.fields).filter(k => !(k in (existing.fields ?? {})))\n            if (newFieldNames.length > 0) {\n              existing.fields = merged\n              await writeModel(wt, existing)\n              modelsUpdated.push(ext.model)\n            }\n          }\n        } else {\n          // Create new model\n          const newModel: ModelDefinition = {\n            id: ext.model,\n            name: ext.model.split('-').map(w => w.charAt(0).toUpperCase() + w.slice(1)).join(' '),\n            kind: ext.kind,\n            domain: ext.domain,\n            i18n: ext.i18n ?? true,\n            fields: ext.fields,\n          }\n          await writeModel(wt, newModel)\n          modelsCreated.push(ext.model)\n        }\n\n        // Write content entries\n        const model = (await readModel(wt, ext.model))!\n        const entries: ContentEntry[] = ext.entries.map(e => ({\n          locale: e.locale,\n          slug: e.slug,\n          data: e.data,\n        }))\n\n        const wtConfig = await readConfig(wt) ?? config\n        await writeContent(wt, model, entries, wtConfig)\n        entriesWritten += entries.length\n\n        // Track source map\n        for (const entry of ext.entries) {\n          // For dictionary entries with per-key source tracking\n          if (ext.kind === 'dictionary' && entry.sources) {\n            for (const s of entry.sources) {\n              sourceMap.push({\n                model: ext.model,\n                locale: entry.locale ?? config.locales.default,\n                value: s.value,\n                file: s.file,\n                line: s.line,\n              })\n            }\n          } else if (entry.source) {\n            sourceMap.push({\n              model: ext.model,\n              locale: entry.locale ?? config.locales.default,\n              value: entry.source.value,\n              file: entry.source.file,\n              line: entry.source.line,\n            })\n          }\n        }\n      }\n\n      // Write source map for reuse scope enforcement\n      if (sourceMap.length > 0) {\n        const sourcesByModel: Record<string, { source_files: string[]; entry_count: number }> = {}\n        for (const s of sourceMap) {\n          if (!sourcesByModel[s.model]) {\n            sourcesByModel[s.model] = { source_files: [], entry_count: 0 }\n          }\n          const modelEntry = sourcesByModel[s.model]!\n          if (!modelEntry.source_files.includes(s.file)) {\n            modelEntry.source_files.push(s.file)\n          }\n          modelEntry.entry_count++\n        }\n        const sourcesJson = JSON.stringify({\n          version: 1,\n          created_at: new Date().toISOString(),\n          models: sourcesByModel,\n        }, null, 2) + '\\n'\n        // Write to worktree only — merge brings it to main\n        // Phase 2 (reuse) must wait for extract branch to be merged first\n        await writeText(join(wt, '.contentrain', 'normalize-sources.json'), sourcesJson)\n      }\n\n      // Update context\n      await writeContext(wt, {\n        tool: 'contentrain_apply',\n        model: extractions.map(e => e.model).join(','),\n        locale: config.locales.default,\n        entries: extractions.flatMap(e => e.entries.map(en => en.slug ?? 'entry')),\n      })\n    })\n\n    const commitMsg = `[contentrain] normalize: extract ${entriesWritten} entries to ${extractions.length} models`\n    await tx.commit(commitMsg)\n\n    const gitResult = { branch: branchName, action: 'pending-review', commit: '' }\n    try {\n      const completed = await tx.complete()\n      gitResult.action = completed.action\n      gitResult.commit = completed.commit\n    } catch {\n      gitResult.action = 'pending-review'\n    } finally {\n      await tx.cleanup()\n    }\n\n    return {\n      dry_run: false,\n      results: {\n        models_created: modelsCreated,\n        models_updated: modelsUpdated,\n        entries_written: entriesWritten,\n        source_map: sourceMap,\n      },\n      git: gitResult,\n      context_updated: true,\n      next_steps: [\n        'Run contentrain_validate to check the extracted content',\n        'Run contentrain_submit to push the branch for review',\n        'For browser-based review: ensure `contentrain serve` is running, direct user to http://localhost:3333/normalize',\n        'For terminal workflow: use contentrain_merge to merge the branch locally',\n        'After merge, run `npx contentrain generate` to update SDK client',\n        'After review, proceed with mode:reuse to patch source files',\n      ],\n    }\n  } catch (error) {\n    await tx.cleanup()\n    throw error\n  }\n}\n\n// ─── Reuse Mode ───\n\nexport async function applyReuse(\n  projectRoot: string,\n  input: ReuseInput,\n): Promise<ReuseResult> {\n  const config = await readConfig(projectRoot)\n  if (!config) throw new Error('Project not initialized. Run contentrain_init first.')\n\n  const { scope, patches, dry_run } = input\n\n  // Validate scope\n  if (!scope.model && !scope.domain) {\n    throw new Error('Scope required: provide model or domain. Whole-project patching is not allowed.')\n  }\n\n  // Validate patch count\n  if (patches.length > MAX_PATCHES) {\n    throw new Error(`Too many patches (${patches.length}). Maximum ${MAX_PATCHES} per operation. Split into multiple calls.`)\n  }\n\n  // Check content exists for scope (soft warning)\n  if (scope.model) {\n    const model = await readModel(projectRoot, scope.model)\n    if (!model) {\n      throw new Error(`Model \"${scope.model}\" not found. Run extract phase first.`)\n    }\n  }\n\n  const scopeWarnings: string[] = []\n\n  // Guardrail #1: Scope Real Enforcement\n  // Step 1: Path safety — every patch must target a valid, patchable source file\n  for (const patch of patches) {\n    const pathError = validatePatchPath(patch.file)\n    if (pathError) {\n      throw new Error(`Invalid patch path: ${pathError}`)\n    }\n  }\n\n  // Step 2: Semantic scope — verify scope model/domain exists and cross-check patch files\n  if (scope.model || scope.domain) {\n    const models = await listModels(projectRoot)\n    const scopeModels = scope.model\n      ? models.filter(m => m.id === scope.model)\n      : scope.domain\n        ? models.filter(m => m.domain === scope.domain)\n        : models\n\n    if (scopeModels.length === 0) {\n      throw new Error(`No models found for scope ${scope.model ? `model=\"${scope.model}\"` : `domain=\"${scope.domain}\"`}`)\n    }\n\n    // Step 3: Verify patch files are source files (not content/config/meta files)\n    // and belong to detectable source directories (not random locations)\n    const { autoDetectSourceDirs } = await import('./scan-config.js')\n    const sourceDirs = await autoDetectSourceDirs(projectRoot)\n\n    // Build allowed file prefixes from source dirs\n    const allowedPrefixes = sourceDirs.map(d => d === '.' ? '' : d + '/')\n\n    for (const patch of patches) {\n      const normalizedPath = patch.file.replace(/\\\\/g, '/')\n\n      // Reject patches targeting .contentrain/ directory (content files should never be patched by reuse)\n      if (normalizedPath.startsWith('.contentrain/') || normalizedPath.includes('/.contentrain/')) {\n        throw new Error(`Cannot patch content/config files directly: \"${patch.file}\". Reuse patches source files only.`)\n      }\n\n      // If source dirs were detected (not just \".\"), verify patch files are within them\n      if (sourceDirs.length > 0 && sourceDirs[0] !== '.') {\n        const inSourceDir = allowedPrefixes.some(prefix =>\n          prefix === '' || normalizedPath.startsWith(prefix),\n        )\n        if (!inSourceDir) {\n          throw new Error(\n            `Patch file \"${patch.file}\" is outside detected source directories (${sourceDirs.join(', ')}). ` +\n            `Reuse patches must target source files within the project's source tree.`,\n          )\n        }\n      }\n    }\n\n    // Step 4: Semantic source→model cross-check via normalize-sources.json\n    // Source map is written by extract into the review branch worktree.\n    // It only exists on base after extract branch is merged.\n    // If missing: dry_run proceeds with warning, execute is blocked.\n    if (scope.model || scope.domain) {\n      const sourcesPath = join(projectRoot, '.contentrain', 'normalize-sources.json')\n      const sourcesRaw = await readText(sourcesPath)\n\n      if (!sourcesRaw) {\n        // Source map not found — check if scoped model is a dictionary\n        // Dictionaries store all keys in one entry, so per-file source tracking\n        // is not available. Allow reuse with a warning instead of blocking.\n        const scopedModel = scopeModels.find(m => m.id === scope.model)\n        const isDictionary = scopedModel?.kind === 'dictionary'\n\n        if (isDictionary) {\n          scopeWarnings.push(\n            'normalize-sources.json not found. Dictionary models do not generate per-file source maps. ' +\n            'Scope enforcement is based on source-tree locality only.',\n          )\n        } else if (dry_run !== false) {\n          scopeWarnings.push(\n            'normalize-sources.json not found. Semantic scope enforcement is unavailable. ' +\n            'Merge the extract branch first, then reuse will have full scope protection.',\n          )\n        } else {\n          throw new Error(\n            'Cannot execute reuse: normalize-sources.json not found on base branch. ' +\n            'The extract branch must be merged before reuse can execute. ' +\n            'This ensures semantic scope enforcement protects against out-of-scope patching.',\n          )\n        }\n      } else {\n        const sourcesData = JSON.parse(sourcesRaw) as {\n          models?: Record<string, { source_files?: string[] }>\n        }\n\n        // Collect all allowed source files for the scope\n        let allowedSourceFiles: string[] = []\n        let scopeLabel = ''\n\n        if (scope.model) {\n          const modelSources = sourcesData.models?.[scope.model]?.source_files\n          if (modelSources) allowedSourceFiles = modelSources\n          scopeLabel = `model \"${scope.model}\"`\n        } else if (scope.domain) {\n          const domainModelIds = scopeModels.map(m => m.id)\n          for (const modelId of domainModelIds) {\n            const modelSources = sourcesData.models?.[modelId]?.source_files\n            if (modelSources) allowedSourceFiles.push(...modelSources)\n          }\n          allowedSourceFiles = [...new Set(allowedSourceFiles)]\n          scopeLabel = `domain \"${scope.domain}\"`\n        }\n\n        if (allowedSourceFiles.length > 0) {\n          const outOfScopePatches: string[] = []\n          for (const patch of patches) {\n            const normalizedPath = patch.file.replace(/\\\\/g, '/')\n            if (!allowedSourceFiles.includes(normalizedPath)) {\n              outOfScopePatches.push(patch.file)\n            }\n          }\n          if (outOfScopePatches.length > 0) {\n            throw new Error(\n              `Scope enforcement: ${outOfScopePatches.length} patch file(s) are not associated with ${scopeLabel}. ` +\n              `Out-of-scope files: ${outOfScopePatches.join(', ')}. ` +\n              `Known source files: ${allowedSourceFiles.join(', ')}.`,\n            )\n          }\n        }\n      }\n    }\n  }\n\n  // Group patches by file\n  const patchesByFile = new Map<string, PatchEntry[]>()\n  for (const patch of patches) {\n    if (!patchesByFile.has(patch.file)) {\n      patchesByFile.set(patch.file, [])\n    }\n    patchesByFile.get(patch.file)!.push(patch)\n  }\n\n  const filesToModify = [...patchesByFile.keys()]\n  const importsToAdd = patches.filter(p => p.import_statement).length\n\n  // Dry run — return preview only\n  if (dry_run !== false) {\n    return {\n      dry_run: true,\n      preview: {\n        files_to_modify: filesToModify,\n        patches_count: patches.length,\n        imports_to_add: importsToAdd,\n      },\n      ...(scopeWarnings.length > 0 ? { scope_warnings: scopeWarnings } : {}),\n      next_steps: [\n        ...(scopeWarnings.length > 0 ? [`WARNING: ${scopeWarnings.length} patch file(s) not in extract source map — verify intent`] : []),\n        'Review the files and patches above',\n        'Call contentrain_apply with mode:reuse and dry_run:false to execute',\n      ],\n    }\n  }\n\n  // Branch health gate\n  const reuseHealth = await checkBranchHealth(projectRoot)\n  if (reuseHealth.blocked) {\n    return {\n      dry_run: false,\n      error: `Branch blocked: ${reuseHealth.message}`,\n      next_steps: ['Merge or delete old contentrain/* branches before executing reuse.'],\n    }\n  }\n\n  // Execute — git transaction\n  const scopeTarget = scope.model ?? scope.domain!\n  const branchName = buildBranchName('normalize/reuse', scopeTarget)\n  const tx = await createTransaction(projectRoot, branchName, { workflowOverride: 'review' })\n\n  const filesModified: string[] = []\n  let patchesApplied = 0\n  let importsAdded = 0\n  const patchesSkipped: Array<{ file: string; line: number; reason: string }> = []\n  const frameworkWarnings: Array<{ file: string; warning: string }> = []\n  const syntaxErrors: SyntaxError[] = []\n\n  try {\n    await tx.write(async (wt) => {\n      for (const [relFile, filePatches] of patchesByFile) {\n        const absPath = join(wt, relFile)\n\n        if (!(await pathExists(absPath))) {\n          for (const p of filePatches) {\n            patchesSkipped.push({ file: relFile, line: p.line, reason: 'file not found' })\n          }\n          continue\n        }\n\n        const content = await readText(absPath)\n        if (content === null) {\n          for (const p of filePatches) {\n            patchesSkipped.push({ file: relFile, line: p.line, reason: 'file unreadable' })\n          }\n          continue\n        }\n\n        // Sort patches by line DESC (bottom-up to avoid line shifts)\n        const sorted = [...filePatches].toSorted((a, b) => b.line - a.line)\n\n        const lines = content.split('\\n')\n        let fileModified = false\n\n        for (const patch of sorted) {\n          // Determine replacement context before applying\n          const targetLine = lines[patch.line - 1] ?? ''\n          const isTagTextContext = targetLine.includes(`>${patch.old_value}<`)\n          const replacementContext = isTagTextContext ? 'tag_text' as const : 'other' as const\n\n          // Guardrail #2: Framework-aware validation — only warn for tag text replacements\n          if (isTagTextContext) {\n            const fwWarning = validateFrameworkExpression(relFile, patch.new_expression, replacementContext)\n            if (fwWarning) {\n              frameworkWarnings.push({ file: relFile, warning: fwWarning })\n            }\n          }\n\n          const applied = applyPatchToLines(lines, patch)\n          if (applied) {\n            patchesApplied++\n            fileModified = true\n          } else {\n            patchesSkipped.push({ file: relFile, line: patch.line, reason: 'old_value not found at or near specified line' })\n          }\n        }\n\n        // Add imports (deduplicate)\n        const importStatements = new Set(\n          filePatches\n            .filter(p => p.import_statement)\n            .map(p => p.import_statement!),\n        )\n\n        if (importStatements.size > 0) {\n          const added = addImportsToLines(lines, importStatements)\n          importsAdded += added\n          if (added > 0) fileModified = true\n        }\n\n        if (fileModified) {\n          const newContent = lines.join('\\n')\n          await writeText(absPath, newContent)\n          filesModified.push(relFile)\n\n          // Guardrail #5: Syntax check after patching\n          const syntaxError = checkSyntax(relFile, newContent)\n          if (syntaxError) {\n            syntaxErrors.push({ file: relFile, error: syntaxError })\n          }\n        }\n      }\n\n      // Update context\n      await writeContext(wt, {\n        tool: 'contentrain_apply',\n        model: scopeTarget,\n        locale: config.locales.default,\n      })\n    })\n\n    if (filesModified.length === 0) {\n      await tx.cleanup()\n      return {\n        dry_run: false,\n        results: {\n          files_modified: [],\n          patches_applied: 0,\n          patches_skipped: patchesSkipped,\n          imports_added: 0,\n          framework_warnings: frameworkWarnings.length > 0 ? frameworkWarnings : undefined,\n        },\n        next_steps: ['No files were modified. Check patch definitions and try again.'],\n      }\n    }\n\n    const commitMsg = `[contentrain] normalize: reuse ${scopeTarget} — patch ${filesModified.length} files (${patchesApplied} replacements)`\n    await tx.commit(commitMsg)\n\n    const gitResult = { branch: branchName, action: 'pending-review', commit: '' }\n    try {\n      const completed = await tx.complete()\n      gitResult.action = completed.action\n      gitResult.commit = completed.commit\n    } catch {\n      gitResult.action = 'pending-review'\n    } finally {\n      await tx.cleanup()\n    }\n\n    return {\n      dry_run: false,\n      results: {\n        files_modified: filesModified,\n        patches_applied: patchesApplied,\n        patches_skipped: patchesSkipped,\n        imports_added: importsAdded,\n        framework_warnings: frameworkWarnings.length > 0 ? frameworkWarnings : undefined,\n        syntax_errors: syntaxErrors.length > 0 ? syntaxErrors : undefined,\n      },\n      ...(scopeWarnings.length > 0 ? { scope_warnings: scopeWarnings } : {}),\n      git: gitResult,\n      next_steps: [\n        'Run contentrain_validate to verify the patched files',\n        patchesSkipped.length > 0 ? `${patchesSkipped.length} patches were skipped — review and retry if needed` : '',\n        syntaxErrors.length > 0 ? `WARNING: ${syntaxErrors.length} file(s) may have syntax errors after patching — review manually` : '',\n        scopeWarnings.length > 0 ? `NOTE: ${scopeWarnings.length} patch file(s) not in extract source map` : '',\n        'Run contentrain_submit to push the branch for review',\n        'For review: direct user to http://localhost:3333/branches or use contentrain_merge',\n        'After all reuse phases complete, run `npx contentrain generate` to update SDK types',\n      ].filter(Boolean),\n    }\n  } catch (error) {\n    await tx.cleanup()\n    throw error\n  }\n}\n\n// ─── Patch Helpers ───\n\n/**\n * Apply a single patch to a lines array. Mutates lines in place.\n * Uses line hint for proximity matching — searches ±10 lines from hint.\n */\nfunction applyPatchToLines(lines: string[], patch: PatchEntry): boolean {\n  const { line, old_value, new_expression } = patch\n  const lineIdx = line - 1 // 0-based\n\n  // Search range: ±10 lines from hint\n  const searchStart = Math.max(0, lineIdx - 10)\n  const searchEnd = Math.min(lines.length, lineIdx + 11)\n\n  // First pass: exact line match\n  if (lineIdx >= 0 && lineIdx < lines.length) {\n    const replaced = replaceInLine(lines[lineIdx]!, old_value, new_expression)\n    if (replaced !== null) {\n      lines[lineIdx] = replaced\n      return true\n    }\n  }\n\n  // Second pass: proximity search\n  for (let i = searchStart; i < searchEnd; i++) {\n    if (i === lineIdx) continue // already tried\n    const replaced = replaceInLine(lines[i]!, old_value, new_expression)\n    if (replaced !== null) {\n      lines[i] = replaced\n      return true\n    }\n  }\n\n  return false\n}\n\n/**\n * Replace old_value with new_expression in a single line.\n * Matches the string literal (quoted or unquoted tag text).\n * Returns the modified line, or null if not found.\n *\n * Guardrail #4: Safer patch matching — word boundary awareness and\n * ambiguity rejection for plain text fallback.\n */\nexport function replaceInLine(line: string, oldValue: string, newExpression: string): string | null {\n  // Try exact match of the value in quoted strings\n  // Match: \"old_value\", 'old_value', `old_value`\n  for (const quote of ['\"', \"'\", '`']) {\n    const quoted = `${quote}${oldValue}${quote}`\n    if (line.includes(quoted)) {\n      return line.replace(quoted, newExpression)\n    }\n  }\n\n  // Try unquoted tag text match: >old_value<\n  // The agent provides the complete new_expression with correct framework syntax:\n  //   JSX:    {t('key')}\n  //   Vue:    {{ $t('key') }}\n  //   Svelte: {$t('key')}\n  // So we insert the expression as-is between > and <, without wrapping in braces.\n  if (line.includes(`>${oldValue}<`)) {\n    return line.replace(`>${oldValue}<`, `>${newExpression}<`)\n  }\n\n  // Guardrail #4: Safer plain text fallback\n  // Only match if old_value appears at a word boundary and is unambiguous\n  if (line.includes(oldValue)) {\n    // Count occurrences — if multiple, it's ambiguous\n    const occurrences = countOccurrences(line, oldValue)\n    if (occurrences > 1) {\n      return null // ambiguous — let proximity search handle it\n    }\n\n    // Word boundary check: don't replace \"Submit\" inside \"SubmitButton\"\n    // Reject if the old_value is a substring of a larger word — check if\n    // adjacent characters are word characters that extend the token.\n    const idx = line.indexOf(oldValue)\n    const charBefore = idx > 0 ? line[idx - 1]! : ''\n    const charAfter = idx + oldValue.length < line.length ? line[idx + oldValue.length]! : ''\n\n    const oldStartsWithWord = oldValue.length > 0 && isWordChar(oldValue[0]!)\n    const oldEndsWithWord = oldValue.length > 0 && isWordChar(oldValue[oldValue.length - 1]!)\n\n    // If old_value starts with a word char and char before is also word char, it's a partial match\n    if (oldStartsWithWord && isWordChar(charBefore)) {\n      return null\n    }\n    // If old_value ends with a word char and char after is also word char, it's a partial match\n    if (oldEndsWithWord && isWordChar(charAfter)) {\n      return null\n    }\n\n    return line.replace(oldValue, newExpression)\n  }\n\n  return null\n}\n\n/** Count non-overlapping occurrences of a substring */\nfunction countOccurrences(str: string, sub: string): number {\n  let count = 0\n  let pos = 0\n  while (pos <= str.length - sub.length) {\n    const idx = str.indexOf(sub, pos)\n    if (idx === -1) break\n    count++\n    pos = idx + sub.length\n  }\n  return count\n}\n\n/** Check if a character is a word character (letter, digit, underscore) */\nfunction isWordChar(ch: string): boolean {\n  return /\\w/.test(ch)\n}\n\n/**\n * Add import statements to the top of a file (after existing imports).\n * Deduplicates — won't add if the import already exists.\n * Returns number of imports actually added.\n */\nfunction addImportsToLines(lines: string[], imports: Set<string>): number {\n  let added = 0\n  const existingContent = lines.join('\\n')\n\n  // Find the last import line position (handles multi-line imports)\n  let lastImportIdx = -1\n  let inMultiLineImport = false\n  for (let i = 0; i < lines.length; i++) {\n    const trimmed = lines[i]!.trim()\n    if (inMultiLineImport) {\n      lastImportIdx = i\n      if (trimmed.includes('}')) inMultiLineImport = false\n      continue\n    }\n    if (trimmed.startsWith('import ') || trimmed.startsWith('import{')) {\n      lastImportIdx = i\n      // Check if this is a multi-line import (has { but no closing })\n      if (trimmed.includes('{') && !trimmed.includes('}')) {\n        inMultiLineImport = true\n      }\n      continue\n    }\n    // Stop searching after a non-import, non-empty, non-comment line following imports\n    if (lastImportIdx >= 0 && trimmed.length > 0 && !trimmed.startsWith('//') && !trimmed.startsWith('/*') && !trimmed.startsWith('*')) {\n      break\n    }\n  }\n\n  let insertAt: number\n  if (lastImportIdx >= 0) {\n    insertAt = lastImportIdx + 1\n  } else {\n    // No existing imports found — insert after shebang and directive lines\n    insertAt = 0\n    for (let i = 0; i < lines.length; i++) {\n      const trimmed = lines[i]!.trim()\n      if (i === 0 && trimmed.startsWith('#!')) {\n        insertAt = i + 1\n        continue\n      }\n      if (trimmed === \"'use client'\" || trimmed === '\"use client\"'\n        || trimmed === \"'use server'\" || trimmed === '\"use server\"'\n        || trimmed === \"'use client';\" || trimmed === '\"use client\";'\n        || trimmed === \"'use server';\" || trimmed === '\"use server\";') {\n        insertAt = i + 1\n        continue\n      }\n      if (insertAt > 0 && trimmed.length > 0) break\n      if (insertAt === 0 && trimmed.length > 0) break\n    }\n  }\n  const toInsert: string[] = []\n\n  for (const imp of imports) {\n    // Check if this import already exists (by checking the from clause)\n    if (!existingContent.includes(imp)) {\n      toInsert.push(imp)\n      added++\n    }\n  }\n\n  if (toInsert.length > 0) {\n    lines.splice(insertAt, 0, ...toInsert)\n  }\n\n  return added\n}\n"],"mappings":";;;;;;;;AAiGA,MAAM,cAAc;;AAGpB,MAAa,uBAAuB,IAAI,IAAI;CAC1C;CAAQ;CAAQ;CAAQ;CAAO;CAAO;CAAQ;CAAU;CACzD,CAAC;;AAGF,MAAM,0BAA0B,IAAI,IAAI;CACtC;CAAgB;CAAgB;CAAQ;CAAQ;CAAS;CAAS;CACnE,CAAC;AAMF,SAAgB,oBAAoB,UAAiC;AAEnE,SADY,QAAQ,SAAS,CAAC,aAAa,EAC3C;EACE,KAAK,OAAQ,QAAO;EACpB,KAAK,UAAW,QAAO;EACvB,KAAK;EACL,KAAK,OAAQ,QAAO;EACpB,KAAK,SAAU,QAAO;EACtB,KAAK;EACL,KAAK;EACL,KAAK,OAAQ,QAAO;EACpB,QAAS,QAAO;;;;;;;AAQpB,SAAgB,4BACd,UACA,eACA,SACe;AACf,KAAI,YAAY,WAAY,QAAO;AAInC,SAFkB,oBAAoB,SAAS,EAE/C;EACE,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,KAAK,CAC/B,QAAO,aAAa,SAAS,0BAA0B,cAAc;AAEvE;EACF,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,IAAI,CAC9B,QAAO,aAAa,SAAS,0BAA0B,cAAc;AAEvE;EACF,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,IAAI,CAC9B,QAAO,gBAAgB,SAAS,0BAA0B,cAAc;AAE1E;EACF,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,IAAI,CAC9B,QAAO,eAAe,SAAS,0BAA0B,cAAc;AAEzE;EACF,KAAK,SAEH,QAAO,gBAAgB,SAAS;;AAGpC,QAAO;;;;;;AAST,SAAgB,kBAAkB,UAAiC;CACjE,MAAM,iBAAiB,SAAS,QAAQ,OAAO,IAAI;AAGnD,KAAI,eAAe,SAAS,KAAK,CAC/B,QAAO,6BAA6B,SAAS;AAI/C,KAAI,eAAe,WAAW,IAAI,CAChC,QAAO,+BAA+B,SAAS;CAIjD,MAAM,WAAW,eAAe,MAAM,IAAI;AAC1C,MAAK,MAAM,OAAO,SAChB,KAAI,wBAAwB,IAAI,IAAI,CAClC,QAAO,0BAA0B,IAAI,sBAAsB,SAAS;CAKxE,MAAM,MAAM,QAAQ,SAAS,CAAC,aAAa;AAC3C,KAAI,CAAC,qBAAqB,IAAI,IAAI,CAChC,QAAO,mBAAmB,IAAI,+BAA+B,CAAC,GAAG,qBAAqB,CAAC,KAAK,KAAK,CAAC,WAAW,SAAS;AAGxH,QAAO;;;;;;AAST,SAAgB,YAAY,UAAkB,SAAgC;AAG5E,SAFY,QAAQ,SAAS,CAAC,aAAa,EAE3C;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,OACH,QAAO,cAAc,QAAQ;EAC/B,KAAK,OACH,QAAO,eAAe,QAAQ;EAChC,KAAK;EACL,KAAK,SACH,QAAO,gBAAgB,QAAQ;EACjC,QACE,QAAO;;;;;;;;AASb,SAAS,cAAc,SAAgC;CACrD,MAAM,QAAkB,EAAE;CAC1B,MAAM,QAAgC;EAAE,KAAK;EAAK,KAAK;EAAK,KAAK;EAAK;CACtE,IAAI,WAA0B;CAC9B,IAAI,UAAU;CACd,IAAI,gBAAgB;CACpB,IAAI,iBAAiB;AAErB,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,KAAK,QAAQ;EACnB,MAAM,OAAO,QAAQ,IAAI;AAGzB,MAAI,SAAS;AACX,aAAU;AACV;;AAGF,MAAI,OAAO,QAAQ,aAAa,MAAM;AACpC,aAAU;AACV;;AAIF,MAAI,CAAC,YAAY,CAAC,kBAAkB,OAAO,OAAO,SAAS,KAAK;AAC9D,mBAAgB;AAChB;;AAEF,MAAI,eAAe;AACjB,OAAI,OAAO,KAAM,iBAAgB;AACjC;;AAIF,MAAI,CAAC,YAAY,CAAC,kBAAkB,OAAO,OAAO,SAAS,KAAK;AAC9D,oBAAiB;AACjB;AACA;;AAEF,MAAI,gBAAgB;AAClB,OAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,qBAAiB;AACjB;;AAEF;;AAIF,MAAI,aAAa,MAAM;AACrB,OAAI,OAAO,SAET,YAAW;YACF,aAAa,OAAO,OAAO,KACpC,QAAO,2CAA2C;AAEpD;;AAGF,MAAI,OAAO,QAAO,OAAO,OAAO,OAAO,KAAK;AAC1C,cAAW;AACX;;AAIF,MAAI,OAAO,OAAO,OAAO,OAAO,OAAO,IACrC,OAAM,KAAK,GAAG;WACL,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK;GACjD,MAAM,WAAW,MAAM;AACvB,OAAI,MAAM,WAAW,EACnB,QAAO,sBAAsB,GAAG,gBAAgB;GAElD,MAAM,MAAM,MAAM,KAAK;AACvB,OAAI,QAAQ,SACV,QAAO,6CAA6C,IAAI,eAAe,GAAG,gBAAgB;;;AAKhG,KAAI,aAAa,KACf,QAAO,4CAA4C,SAAS;AAG9D,KAAI,MAAM,SAAS,EACjB,QAAO,qBAAqB,MAAM,MAAM,SAAS,GAAG,MAAM,MAAM,OAAO;AAGzE,QAAO;;;;;AAMT,SAAS,eAAe,SAAgC;CACtD,MAAM,aAAa,gBAAgB,QAAQ;AAC3C,KAAI,WAAY,QAAO;AAGvB,MAAK,MAAM,OAAO,CAAC,YAAY,SAAS,EAAE;EACxC,MAAM,SAAS,IAAI,OAAO,IAAI,IAAI,SAAS,IAAI;EAC/C,MAAM,UAAU,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI;EAC5C,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE,UAAU;EAC/C,MAAM,SAAS,QAAQ,MAAM,QAAQ,EAAE,UAAU;AACjD,MAAI,UAAU,OACZ,QAAO,eAAe,IAAI,SAAS,MAAM,cAAc,OAAO;;AAIlE,QAAO;;;;;;AAOT,SAAS,gBAAgB,SAAgC;AAIvD,MAAK,MAAM,OAFY;EAAC;EAAO;EAAW;EAAQ;EAAU;EAAU;EAAO;EAAW;EAAS;EAAM;EAAM;EAAQ,EAEnF;EAChC,MAAM,SAAS,IAAI,OAAO,IAAI,IAAI,SAAS,IAAI;EAC/C,MAAM,UAAU,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI;EAC5C,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE,UAAU;EAC/C,MAAM,SAAS,QAAQ,MAAM,QAAQ,EAAE,UAAU;AACjD,MAAI,UAAU,OACZ,QAAO,eAAe,IAAI,SAAS,MAAM,cAAc,OAAO;;AAIlE,QAAO;;AAKT,eAAsB,aACpB,aACA,OAC2B;CAC3B,MAAM,SAAS,MAAM,WAAW,YAAY;AAC5C,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,uDAAuD;CAEpF,MAAM,EAAE,aAAa,YAAY;CAGjC,MAAM,iBAAiB,MAAM,WAAW,YAAY;CACpD,MAAM,cAAc,IAAI,IAAI,eAAe,KAAI,MAAK,EAAE,GAAG,CAAC;CAE1D,MAAM,iBAA2B,EAAE;CACnC,MAAM,iBAA2B,EAAE;CACnC,MAAM,eAAyB,EAAE;CACjC,IAAI,eAAe;CAEnB,MAAM,mBAA6B,EAAE;AAErC,MAAK,MAAM,OAAO,aAAa;EAE7B,MAAM,cAAc,wBAAwB;GAC1C,IAAI,IAAI;GACR,MAAM,IAAI;GACV,QAAQ,IAAI;GACb,CAAC;AACF,MAAI,YAAY,SAAS,EACvB,kBAAiB,KAAK,GAAG,YAAY,KAAI,MAAK,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC;AAGvE,OAAK,MAAM,SAAS,IAAI,QACtB,KAAI,IAAI,SAAS,cAAc;AAC7B,OAAI,MAAM,KAAK,UAAU,KAAA,KAAa,MAAM,KAAK,YAAY,KAAA,EAC3D,kBAAiB,KAAK,IAAI,IAAI,MAAM,iDAAiD;AAEvF,QAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,MAAM,KAAK,CACjD,KAAI,OAAO,QAAQ,SACjB,kBAAiB,KAAK,IAAI,IAAI,MAAM,oCAAoC,IAAI,0BAA0B,OAAO,MAAM;aAG9G,IAAI,SAAS;OAClB,CAAC,MAAM,QAAQ,CAAC,MAAM,KAAK,QAC7B,kBAAiB,KAAK,IAAI,IAAI,MAAM,qCAAqC;aAElE,IAAI,SAAS;OAClB,MAAM,SAAS,KAAA,KAAa,MAAM,KAAK,YAAY,KAAA,EACrD,kBAAiB,KAAK,IAAI,IAAI,MAAM,2CAA2C;aAExE,IAAI,SAAS;OAClB,MAAM,KAAK,UAAU,KAAA,KAAa,MAAM,SAAS,KAAA,KAAa,MAAM,KAAK,YAAY,KAAA,EACvF,kBAAiB,KAAK,IAAI,IAAI,MAAM,gDAAgD;;AAK1F,MAAI,YAAY,IAAI,IAAI,MAAM,CAC5B,gBAAe,KAAK,IAAI,MAAM;MAE9B,gBAAe,KAAK,IAAI,MAAM;AAEhC,kBAAgB,IAAI,QAAQ;EAG5B,IAAI;AACJ,MAAI,YAAY,IAAI,IAAI,MAAM,EAAE;GAC9B,MAAM,OAAO,MAAM,UAAU,aAAa,IAAI,MAAM;AACpD,OAAI,KACF,gBAAe;OAEf,gBAAe;IAAE,IAAI,IAAI;IAAO,MAAM,IAAI;IAAM,QAAQ,IAAI;IAAQ,MAAM,IAAI,QAAQ;IAAM;QAG9F,gBAAe;GAAE,IAAI,IAAI;GAAO,MAAM,IAAI;GAAM,QAAQ,IAAI;GAAQ,MAAM,IAAI,QAAQ;GAAM;EAG9F,MAAM,OAAO,kBAAkB,aAAa,aAAa;AACzD,OAAK,MAAM,SAAS,IAAI,SAAS;GAC/B,MAAM,SAAS,MAAM,UAAU,OAAO,QAAQ;AAC9C,OAAI,IAAI,SAAS,cAAc,MAAM,KACnC,cAAa,KAAK,kBAAkB,MAAM,cAAc,QAAQ,MAAM,KAAK,CAAC;OAE5E,cAAa,KAAK,oBAAoB,MAAM,cAAc,OAAO,CAAC;;;CAKxE,MAAM,UAA6B;EACjC,kBAAkB;EAClB,kBAAkB;EAClB,eAAe;EACf,eAAe,CAAC,GAAG,IAAI,IAAI,aAAa,CAAC;EAC1C;AAGD,KAAI,YAAY,MACd,QAAO;EACL,SAAS;EACT;EACA,GAAI,iBAAiB,SAAS,IAAI,EAAE,mBAAmB,kBAAkB,GAAG,EAAE;EAC9E,YAAY;GACV,GAAI,iBAAiB,SAAS,IAC1B,CAAC,YAAY,iBAAiB,OAAO,mDAAmD,GACxF,EAAE;GACN;GACA;GACD;EACF;AAIH,KAAI,iBAAiB,SAAS,EAC5B,QAAO;EACL,SAAS;EACT,OAAO;EACP,mBAAmB;EACnB,YAAY,CAAC,sCAAsC;EACpD;CAIH,MAAM,SAAS,MAAM,kBAAkB,YAAY;AACnD,KAAI,OAAO,QACT,QAAO;EACL,OAAO,OAAO;EACd,QAAQ;EACR,MAAM;EACP;CAIH,MAAM,aAAa,gBAAgB,aAAa,UAAU;CAC1D,MAAM,KAAK,MAAM,kBAAkB,aAAa,YAAY,EAAE,kBAAkB,UAAU,CAAC;CAC3F,MAAM,YAAiG,EAAE;CACzG,MAAM,gBAA0B,EAAE;CAClC,MAAM,gBAA0B,EAAE;CAClC,IAAI,iBAAiB;AAErB,KAAI;AACF,QAAM,GAAG,MAAM,OAAO,OAAO;AAC3B,QAAK,MAAM,OAAO,aAAa;IAE7B,MAAM,WAAW,MAAM,UAAU,IAAI,IAAI,MAAM;AAC/C,QAAI;SAEE,IAAI,QAAQ;MACd,MAAM,SAAS;OAAE,GAAG,SAAS;OAAQ,GAAG,IAAI;OAAQ;AAGpD,UADsB,OAAO,KAAK,IAAI,OAAO,CAAC,QAAO,MAAK,EAAE,MAAM,SAAS,UAAU,EAAE,GAAG,CACxE,SAAS,GAAG;AAC5B,gBAAS,SAAS;AAClB,aAAM,WAAW,IAAI,SAAS;AAC9B,qBAAc,KAAK,IAAI,MAAM;;;WAG5B;AAUL,WAAM,WAAW,IARiB;MAChC,IAAI,IAAI;MACR,MAAM,IAAI,MAAM,MAAM,IAAI,CAAC,KAAI,MAAK,EAAE,OAAO,EAAE,CAAC,aAAa,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI;MACrF,MAAM,IAAI;MACV,QAAQ,IAAI;MACZ,MAAM,IAAI,QAAQ;MAClB,QAAQ,IAAI;MACb,CAC6B;AAC9B,mBAAc,KAAK,IAAI,MAAM;;IAI/B,MAAM,QAAS,MAAM,UAAU,IAAI,IAAI,MAAM;IAC7C,MAAM,UAA0B,IAAI,QAAQ,KAAI,OAAM;KACpD,QAAQ,EAAE;KACV,MAAM,EAAE;KACR,MAAM,EAAE;KACT,EAAE;AAGH,UAAM,aAAa,IAAI,OAAO,SADb,MAAM,WAAW,GAAG,IAAI,OACO;AAChD,sBAAkB,QAAQ;AAG1B,SAAK,MAAM,SAAS,IAAI,QAEtB,KAAI,IAAI,SAAS,gBAAgB,MAAM,QACrC,MAAK,MAAM,KAAK,MAAM,QACpB,WAAU,KAAK;KACb,OAAO,IAAI;KACX,QAAQ,MAAM,UAAU,OAAO,QAAQ;KACvC,OAAO,EAAE;KACT,MAAM,EAAE;KACR,MAAM,EAAE;KACT,CAAC;aAEK,MAAM,OACf,WAAU,KAAK;KACb,OAAO,IAAI;KACX,QAAQ,MAAM,UAAU,OAAO,QAAQ;KACvC,OAAO,MAAM,OAAO;KACpB,MAAM,MAAM,OAAO;KACnB,MAAM,MAAM,OAAO;KACpB,CAAC;;AAMR,OAAI,UAAU,SAAS,GAAG;IACxB,MAAM,iBAAkF,EAAE;AAC1F,SAAK,MAAM,KAAK,WAAW;AACzB,SAAI,CAAC,eAAe,EAAE,OACpB,gBAAe,EAAE,SAAS;MAAE,cAAc,EAAE;MAAE,aAAa;MAAG;KAEhE,MAAM,aAAa,eAAe,EAAE;AACpC,SAAI,CAAC,WAAW,aAAa,SAAS,EAAE,KAAK,CAC3C,YAAW,aAAa,KAAK,EAAE,KAAK;AAEtC,gBAAW;;IAEb,MAAM,cAAc,KAAK,UAAU;KACjC,SAAS;KACT,6BAAY,IAAI,MAAM,EAAC,aAAa;KACpC,QAAQ;KACT,EAAE,MAAM,EAAE,GAAG;AAGd,UAAM,UAAU,KAAK,IAAI,gBAAgB,yBAAyB,EAAE,YAAY;;AAIlF,SAAM,aAAa,IAAI;IACrB,MAAM;IACN,OAAO,YAAY,KAAI,MAAK,EAAE,MAAM,CAAC,KAAK,IAAI;IAC9C,QAAQ,OAAO,QAAQ;IACvB,SAAS,YAAY,SAAQ,MAAK,EAAE,QAAQ,KAAI,OAAM,GAAG,QAAQ,QAAQ,CAAC;IAC3E,CAAC;IACF;EAEF,MAAM,YAAY,oCAAoC,eAAe,cAAc,YAAY,OAAO;AACtG,QAAM,GAAG,OAAO,UAAU;EAE1B,MAAM,YAAY;GAAE,QAAQ;GAAY,QAAQ;GAAkB,QAAQ;GAAI;AAC9E,MAAI;GACF,MAAM,YAAY,MAAM,GAAG,UAAU;AACrC,aAAU,SAAS,UAAU;AAC7B,aAAU,SAAS,UAAU;UACvB;AACN,aAAU,SAAS;YACX;AACR,SAAM,GAAG,SAAS;;AAGpB,SAAO;GACL,SAAS;GACT,SAAS;IACP,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IACb;GACD,KAAK;GACL,iBAAiB;GACjB,YAAY;IACV;IACA;IACA;IACA;IACA;IACA;IACD;GACF;UACM,OAAO;AACd,QAAM,GAAG,SAAS;AAClB,QAAM;;;AAMV,eAAsB,WACpB,aACA,OACsB;CACtB,MAAM,SAAS,MAAM,WAAW,YAAY;AAC5C,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,uDAAuD;CAEpF,MAAM,EAAE,OAAO,SAAS,YAAY;AAGpC,KAAI,CAAC,MAAM,SAAS,CAAC,MAAM,OACzB,OAAM,IAAI,MAAM,kFAAkF;AAIpG,KAAI,QAAQ,SAAS,YACnB,OAAM,IAAI,MAAM,qBAAqB,QAAQ,OAAO,aAAa,YAAY,4CAA4C;AAI3H,KAAI,MAAM;MAEJ,CADU,MAAM,UAAU,aAAa,MAAM,MAAM,CAErD,OAAM,IAAI,MAAM,UAAU,MAAM,MAAM,uCAAuC;;CAIjF,MAAM,gBAA0B,EAAE;AAIlC,MAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C,MAAI,UACF,OAAM,IAAI,MAAM,uBAAuB,YAAY;;AAKvD,KAAI,MAAM,SAAS,MAAM,QAAQ;EAC/B,MAAM,SAAS,MAAM,WAAW,YAAY;EAC5C,MAAM,cAAc,MAAM,QACtB,OAAO,QAAO,MAAK,EAAE,OAAO,MAAM,MAAM,GACxC,MAAM,SACJ,OAAO,QAAO,MAAK,EAAE,WAAW,MAAM,OAAO,GAC7C;AAEN,MAAI,YAAY,WAAW,EACzB,OAAM,IAAI,MAAM,6BAA6B,MAAM,QAAQ,UAAU,MAAM,MAAM,KAAK,WAAW,MAAM,OAAO,KAAK;EAKrH,MAAM,EAAE,yBAAyB,MAAM,OAAO;EAC9C,MAAM,aAAa,MAAM,qBAAqB,YAAY;EAG1D,MAAM,kBAAkB,WAAW,KAAI,MAAK,MAAM,MAAM,KAAK,IAAI,IAAI;AAErE,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,iBAAiB,MAAM,KAAK,QAAQ,OAAO,IAAI;AAGrD,OAAI,eAAe,WAAW,gBAAgB,IAAI,eAAe,SAAS,iBAAiB,CACzF,OAAM,IAAI,MAAM,gDAAgD,MAAM,KAAK,qCAAqC;AAIlH,OAAI,WAAW,SAAS,KAAK,WAAW,OAAO;QAIzC,CAHgB,gBAAgB,MAAK,WACvC,WAAW,MAAM,eAAe,WAAW,OAAO,CACnD,CAEC,OAAM,IAAI,MACR,eAAe,MAAM,KAAK,4CAA4C,WAAW,KAAK,KAAK,CAAC,6EAE7F;;;AASP,MAAI,MAAM,SAAS,MAAM,QAAQ;GAE/B,MAAM,aAAa,MAAM,SADL,KAAK,aAAa,gBAAgB,yBAAyB,CACjC;AAE9C,OAAI,CAAC,WAOH,KAHoB,YAAY,MAAK,MAAK,EAAE,OAAO,MAAM,MAAM,EAC7B,SAAS,aAGzC,eAAc,KACZ,qJAED;YACQ,YAAY,MACrB,eAAc,KACZ,2JAED;OAED,OAAM,IAAI,MACR,qNAGD;QAEE;IACL,MAAM,cAAc,KAAK,MAAM,WAAW;IAK1C,IAAI,qBAA+B,EAAE;IACrC,IAAI,aAAa;AAEjB,QAAI,MAAM,OAAO;KACf,MAAM,eAAe,YAAY,SAAS,MAAM,QAAQ;AACxD,SAAI,aAAc,sBAAqB;AACvC,kBAAa,UAAU,MAAM,MAAM;eAC1B,MAAM,QAAQ;KACvB,MAAM,iBAAiB,YAAY,KAAI,MAAK,EAAE,GAAG;AACjD,UAAK,MAAM,WAAW,gBAAgB;MACpC,MAAM,eAAe,YAAY,SAAS,UAAU;AACpD,UAAI,aAAc,oBAAmB,KAAK,GAAG,aAAa;;AAE5D,0BAAqB,CAAC,GAAG,IAAI,IAAI,mBAAmB,CAAC;AACrD,kBAAa,WAAW,MAAM,OAAO;;AAGvC,QAAI,mBAAmB,SAAS,GAAG;KACjC,MAAM,oBAA8B,EAAE;AACtC,UAAK,MAAM,SAAS,SAAS;MAC3B,MAAM,iBAAiB,MAAM,KAAK,QAAQ,OAAO,IAAI;AACrD,UAAI,CAAC,mBAAmB,SAAS,eAAe,CAC9C,mBAAkB,KAAK,MAAM,KAAK;;AAGtC,SAAI,kBAAkB,SAAS,EAC7B,OAAM,IAAI,MACR,sBAAsB,kBAAkB,OAAO,yCAAyC,WAAW,wBAC5E,kBAAkB,KAAK,KAAK,CAAC,wBAC7B,mBAAmB,KAAK,KAAK,CAAC,GACtD;;;;;CAQX,MAAM,gCAAgB,IAAI,KAA2B;AACrD,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,CAAC,cAAc,IAAI,MAAM,KAAK,CAChC,eAAc,IAAI,MAAM,MAAM,EAAE,CAAC;AAEnC,gBAAc,IAAI,MAAM,KAAK,CAAE,KAAK,MAAM;;CAG5C,MAAM,gBAAgB,CAAC,GAAG,cAAc,MAAM,CAAC;CAC/C,MAAM,eAAe,QAAQ,QAAO,MAAK,EAAE,iBAAiB,CAAC;AAG7D,KAAI,YAAY,MACd,QAAO;EACL,SAAS;EACT,SAAS;GACP,iBAAiB;GACjB,eAAe,QAAQ;GACvB,gBAAgB;GACjB;EACD,GAAI,cAAc,SAAS,IAAI,EAAE,gBAAgB,eAAe,GAAG,EAAE;EACrE,YAAY;GACV,GAAI,cAAc,SAAS,IAAI,CAAC,YAAY,cAAc,OAAO,0DAA0D,GAAG,EAAE;GAChI;GACA;GACD;EACF;CAIH,MAAM,cAAc,MAAM,kBAAkB,YAAY;AACxD,KAAI,YAAY,QACd,QAAO;EACL,SAAS;EACT,OAAO,mBAAmB,YAAY;EACtC,YAAY,CAAC,qEAAqE;EACnF;CAIH,MAAM,cAAc,MAAM,SAAS,MAAM;CACzC,MAAM,aAAa,gBAAgB,mBAAmB,YAAY;CAClE,MAAM,KAAK,MAAM,kBAAkB,aAAa,YAAY,EAAE,kBAAkB,UAAU,CAAC;CAE3F,MAAM,gBAA0B,EAAE;CAClC,IAAI,iBAAiB;CACrB,IAAI,eAAe;CACnB,MAAM,iBAAwE,EAAE;CAChF,MAAM,oBAA8D,EAAE;CACtE,MAAM,eAA8B,EAAE;AAEtC,KAAI;AACF,QAAM,GAAG,MAAM,OAAO,OAAO;AAC3B,QAAK,MAAM,CAAC,SAAS,gBAAgB,eAAe;IAClD,MAAM,UAAU,KAAK,IAAI,QAAQ;AAEjC,QAAI,CAAE,MAAM,WAAW,QAAQ,EAAG;AAChC,UAAK,MAAM,KAAK,YACd,gBAAe,KAAK;MAAE,MAAM;MAAS,MAAM,EAAE;MAAM,QAAQ;MAAkB,CAAC;AAEhF;;IAGF,MAAM,UAAU,MAAM,SAAS,QAAQ;AACvC,QAAI,YAAY,MAAM;AACpB,UAAK,MAAM,KAAK,YACd,gBAAe,KAAK;MAAE,MAAM;MAAS,MAAM,EAAE;MAAM,QAAQ;MAAmB,CAAC;AAEjF;;IAIF,MAAM,SAAS,CAAC,GAAG,YAAY,CAAC,UAAU,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK;IAEnE,MAAM,QAAQ,QAAQ,MAAM,KAAK;IACjC,IAAI,eAAe;AAEnB,SAAK,MAAM,SAAS,QAAQ;KAG1B,MAAM,oBADa,MAAM,MAAM,OAAO,MAAM,IACR,SAAS,IAAI,MAAM,UAAU,GAAG;KACpE,MAAM,qBAAqB,mBAAmB,aAAsB;AAGpE,SAAI,kBAAkB;MACpB,MAAM,YAAY,4BAA4B,SAAS,MAAM,gBAAgB,mBAAmB;AAChG,UAAI,UACF,mBAAkB,KAAK;OAAE,MAAM;OAAS,SAAS;OAAW,CAAC;;AAKjE,SADgB,kBAAkB,OAAO,MAAM,EAClC;AACX;AACA,qBAAe;WAEf,gBAAe,KAAK;MAAE,MAAM;MAAS,MAAM,MAAM;MAAM,QAAQ;MAAiD,CAAC;;IAKrH,MAAM,mBAAmB,IAAI,IAC3B,YACG,QAAO,MAAK,EAAE,iBAAiB,CAC/B,KAAI,MAAK,EAAE,iBAAkB,CACjC;AAED,QAAI,iBAAiB,OAAO,GAAG;KAC7B,MAAM,QAAQ,kBAAkB,OAAO,iBAAiB;AACxD,qBAAgB;AAChB,SAAI,QAAQ,EAAG,gBAAe;;AAGhC,QAAI,cAAc;KAChB,MAAM,aAAa,MAAM,KAAK,KAAK;AACnC,WAAM,UAAU,SAAS,WAAW;AACpC,mBAAc,KAAK,QAAQ;KAG3B,MAAM,cAAc,YAAY,SAAS,WAAW;AACpD,SAAI,YACF,cAAa,KAAK;MAAE,MAAM;MAAS,OAAO;MAAa,CAAC;;;AAM9D,SAAM,aAAa,IAAI;IACrB,MAAM;IACN,OAAO;IACP,QAAQ,OAAO,QAAQ;IACxB,CAAC;IACF;AAEF,MAAI,cAAc,WAAW,GAAG;AAC9B,SAAM,GAAG,SAAS;AAClB,UAAO;IACL,SAAS;IACT,SAAS;KACP,gBAAgB,EAAE;KAClB,iBAAiB;KACjB,iBAAiB;KACjB,eAAe;KACf,oBAAoB,kBAAkB,SAAS,IAAI,oBAAoB,KAAA;KACxE;IACD,YAAY,CAAC,iEAAiE;IAC/E;;EAGH,MAAM,YAAY,kCAAkC,YAAY,WAAW,cAAc,OAAO,UAAU,eAAe;AACzH,QAAM,GAAG,OAAO,UAAU;EAE1B,MAAM,YAAY;GAAE,QAAQ;GAAY,QAAQ;GAAkB,QAAQ;GAAI;AAC9E,MAAI;GACF,MAAM,YAAY,MAAM,GAAG,UAAU;AACrC,aAAU,SAAS,UAAU;AAC7B,aAAU,SAAS,UAAU;UACvB;AACN,aAAU,SAAS;YACX;AACR,SAAM,GAAG,SAAS;;AAGpB,SAAO;GACL,SAAS;GACT,SAAS;IACP,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,oBAAoB,kBAAkB,SAAS,IAAI,oBAAoB,KAAA;IACvE,eAAe,aAAa,SAAS,IAAI,eAAe,KAAA;IACzD;GACD,GAAI,cAAc,SAAS,IAAI,EAAE,gBAAgB,eAAe,GAAG,EAAE;GACrE,KAAK;GACL,YAAY;IACV;IACA,eAAe,SAAS,IAAI,GAAG,eAAe,OAAO,sDAAsD;IAC3G,aAAa,SAAS,IAAI,YAAY,aAAa,OAAO,oEAAoE;IAC9H,cAAc,SAAS,IAAI,SAAS,cAAc,OAAO,4CAA4C;IACrG;IACA;IACA;IACD,CAAC,OAAO,QAAQ;GAClB;UACM,OAAO;AACd,QAAM,GAAG,SAAS;AAClB,QAAM;;;;;;;AAUV,SAAS,kBAAkB,OAAiB,OAA4B;CACtE,MAAM,EAAE,MAAM,WAAW,mBAAmB;CAC5C,MAAM,UAAU,OAAO;CAGvB,MAAM,cAAc,KAAK,IAAI,GAAG,UAAU,GAAG;CAC7C,MAAM,YAAY,KAAK,IAAI,MAAM,QAAQ,UAAU,GAAG;AAGtD,KAAI,WAAW,KAAK,UAAU,MAAM,QAAQ;EAC1C,MAAM,WAAW,cAAc,MAAM,UAAW,WAAW,eAAe;AAC1E,MAAI,aAAa,MAAM;AACrB,SAAM,WAAW;AACjB,UAAO;;;AAKX,MAAK,IAAI,IAAI,aAAa,IAAI,WAAW,KAAK;AAC5C,MAAI,MAAM,QAAS;EACnB,MAAM,WAAW,cAAc,MAAM,IAAK,WAAW,eAAe;AACpE,MAAI,aAAa,MAAM;AACrB,SAAM,KAAK;AACX,UAAO;;;AAIX,QAAO;;;;;;;;;;AAWT,SAAgB,cAAc,MAAc,UAAkB,eAAsC;AAGlG,MAAK,MAAM,SAAS;EAAC;EAAK;EAAK;EAAI,EAAE;EACnC,MAAM,SAAS,GAAG,QAAQ,WAAW;AACrC,MAAI,KAAK,SAAS,OAAO,CACvB,QAAO,KAAK,QAAQ,QAAQ,cAAc;;AAU9C,KAAI,KAAK,SAAS,IAAI,SAAS,GAAG,CAChC,QAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,cAAc,GAAG;AAK5D,KAAI,KAAK,SAAS,SAAS,EAAE;AAG3B,MADoB,iBAAiB,MAAM,SAAS,GAClC,EAChB,QAAO;EAMT,MAAM,MAAM,KAAK,QAAQ,SAAS;EAClC,MAAM,aAAa,MAAM,IAAI,KAAK,MAAM,KAAM;EAC9C,MAAM,YAAY,MAAM,SAAS,SAAS,KAAK,SAAS,KAAK,MAAM,SAAS,UAAW;EAEvF,MAAM,oBAAoB,SAAS,SAAS,KAAK,WAAW,SAAS,GAAI;EACzE,MAAM,kBAAkB,SAAS,SAAS,KAAK,WAAW,SAAS,SAAS,SAAS,GAAI;AAGzF,MAAI,qBAAqB,WAAW,WAAW,CAC7C,QAAO;AAGT,MAAI,mBAAmB,WAAW,UAAU,CAC1C,QAAO;AAGT,SAAO,KAAK,QAAQ,UAAU,cAAc;;AAG9C,QAAO;;;AAIT,SAAS,iBAAiB,KAAa,KAAqB;CAC1D,IAAI,QAAQ;CACZ,IAAI,MAAM;AACV,QAAO,OAAO,IAAI,SAAS,IAAI,QAAQ;EACrC,MAAM,MAAM,IAAI,QAAQ,KAAK,IAAI;AACjC,MAAI,QAAQ,GAAI;AAChB;AACA,QAAM,MAAM,IAAI;;AAElB,QAAO;;;AAIT,SAAS,WAAW,IAAqB;AACvC,QAAO,KAAK,KAAK,GAAG;;;;;;;AAQtB,SAAS,kBAAkB,OAAiB,SAA8B;CACxE,IAAI,QAAQ;CACZ,MAAM,kBAAkB,MAAM,KAAK,KAAK;CAGxC,IAAI,gBAAgB;CACpB,IAAI,oBAAoB;AACxB,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,UAAU,MAAM,GAAI,MAAM;AAChC,MAAI,mBAAmB;AACrB,mBAAgB;AAChB,OAAI,QAAQ,SAAS,IAAI,CAAE,qBAAoB;AAC/C;;AAEF,MAAI,QAAQ,WAAW,UAAU,IAAI,QAAQ,WAAW,UAAU,EAAE;AAClE,mBAAgB;AAEhB,OAAI,QAAQ,SAAS,IAAI,IAAI,CAAC,QAAQ,SAAS,IAAI,CACjD,qBAAoB;AAEtB;;AAGF,MAAI,iBAAiB,KAAK,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,KAAK,IAAI,CAAC,QAAQ,WAAW,KAAK,IAAI,CAAC,QAAQ,WAAW,IAAI,CAChI;;CAIJ,IAAI;AACJ,KAAI,iBAAiB,EACnB,YAAW,gBAAgB;MACtB;AAEL,aAAW;AACX,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,MAAM,UAAU,MAAM,GAAI,MAAM;AAChC,OAAI,MAAM,KAAK,QAAQ,WAAW,KAAK,EAAE;AACvC,eAAW,IAAI;AACf;;AAEF,OAAI,YAAY,kBAAkB,YAAY,oBACzC,YAAY,kBAAkB,YAAY,oBAC1C,YAAY,mBAAmB,YAAY,qBAC3C,YAAY,mBAAmB,YAAY,mBAAiB;AAC/D,eAAW,IAAI;AACf;;AAEF,OAAI,WAAW,KAAK,QAAQ,SAAS,EAAG;AACxC,OAAI,aAAa,KAAK,QAAQ,SAAS,EAAG;;;CAG9C,MAAM,WAAqB,EAAE;AAE7B,MAAK,MAAM,OAAO,QAEhB,KAAI,CAAC,gBAAgB,SAAS,IAAI,EAAE;AAClC,WAAS,KAAK,IAAI;AAClB;;AAIJ,KAAI,SAAS,SAAS,EACpB,OAAM,OAAO,UAAU,GAAG,GAAG,SAAS;AAGxC,QAAO"}
+{"version":3,"file":"apply-manager-UXUTYFZn.mjs","names":[],"sources":["../src/core/apply-manager.ts"],"sourcesContent":["import type { ModelDefinition, FieldDef, FileFramework } from '@contentrain/types'\nimport { join, extname } from 'node:path'\nimport { readText, writeText, pathExists } from '../util/fs.js'\nimport { readModel, writeModel, listModels, validateModelDefinition } from './model-manager.js'\nimport { writeContent, resolveContentDir, resolveJsonFilePath, resolveMdFilePath, type ContentEntry } from './content-manager.js'\nimport { readConfig } from './config.js'\nimport { writeContext } from './context.js'\nimport { createTransaction, buildBranchName } from '../git/transaction.js'\nimport { checkBranchHealth } from '../git/branch-lifecycle.js'\n\n// ─── Types ───\n\nexport interface ExtractionEntry {\n  model: string\n  kind: 'singleton' | 'collection' | 'dictionary' | 'document'\n  domain: string\n  i18n?: boolean\n  fields?: Record<string, FieldDef>\n  entries: Array<{\n    locale?: string\n    slug?: string\n    data: Record<string, unknown>\n    source?: { file: string; line: number; value: string }\n    sources?: Array<{ file: string; line: number; key: string; value: string }>\n  }>\n}\n\nexport interface ExtractionInput {\n  extractions: ExtractionEntry[]\n  dry_run?: boolean\n}\n\nexport interface ExtractionPreview {\n  models_to_create: string[]\n  models_to_update: string[]\n  total_entries: number\n  content_files: string[]\n}\n\nexport interface ExtractionResult {\n  dry_run: boolean\n  preview?: ExtractionPreview\n  error?: string\n  validation_errors?: string[]\n  results?: {\n    models_created: string[]\n    models_updated: string[]\n    entries_written: number\n    source_map: Array<{ model: string; locale: string; value: string; file: string; line: number }>\n  }\n  git?: { branch: string; action: string; commit: string }\n  context_updated?: boolean\n  next_steps: string[]\n}\n\nexport interface PatchEntry {\n  file: string\n  line: number\n  old_value: string\n  new_expression: string\n  import_statement?: string\n}\n\nexport interface ReuseInput {\n  scope: { model?: string; domain?: string }\n  patches: PatchEntry[]\n  dry_run?: boolean\n}\n\nexport interface SyntaxError {\n  file: string\n  error: string\n}\n\nexport interface ReuseResult {\n  dry_run: boolean\n  error?: string\n  scope_warnings?: string[]\n  preview?: {\n    files_to_modify: string[]\n    patches_count: number\n    imports_to_add: number\n  }\n  results?: {\n    files_modified: string[]\n    patches_applied: number\n    patches_skipped: Array<{ file: string; line: number; reason: string }>\n    imports_added: number\n    framework_warnings?: Array<{ file: string; warning: string }>\n    syntax_errors?: SyntaxError[]\n  }\n  git?: { branch: string; action: string; commit: string }\n  next_steps: string[]\n}\n\n// ─── Constants ───\n\nconst MAX_PATCHES = 100\n\n/** File extensions allowed for patching — scannable source files only */\nexport const PATCHABLE_EXTENSIONS = new Set([\n  '.vue', '.tsx', '.jsx', '.ts', '.js', '.mjs', '.astro', '.svelte',\n])\n\n/** Directories that must never be patched */\nconst FORBIDDEN_PATH_SEGMENTS = new Set([\n  '.contentrain', 'node_modules', '.git', 'dist', 'build', '.next', '.nuxt',\n])\n\n// ─── Framework Detection (Guardrail #2) ───\n\nexport type { FileFramework } from '@contentrain/types'\n\nexport function detectFileFramework(filePath: string): FileFramework {\n  const ext = extname(filePath).toLowerCase()\n  switch (ext) {\n    case '.vue': return 'vue'\n    case '.svelte': return 'svelte'\n    case '.tsx':\n    case '.jsx': return 'jsx'\n    case '.astro': return 'astro'\n    case '.ts':\n    case '.js':\n    case '.mjs': return 'script'\n    default: return 'script'\n  }\n}\n\n/**\n * Validate that a replacement expression uses the correct template syntax\n * for the target file's framework. Returns a warning string or null.\n */\nexport function validateFrameworkExpression(\n  filePath: string,\n  newExpression: string,\n  context: 'tag_text' | 'other',\n): string | null {\n  if (context !== 'tag_text') return null\n\n  const framework = detectFileFramework(filePath)\n\n  switch (framework) {\n    case 'vue':\n      if (!newExpression.includes('{{')) {\n        return `Vue file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{{\" — expected Vue template syntax like {{ $t('key') }}`\n      }\n      break\n    case 'jsx':\n      if (!newExpression.includes('{')) {\n        return `JSX file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{\" — expected JSX syntax like {t('key')}`\n      }\n      break\n    case 'svelte':\n      if (!newExpression.includes('{')) {\n        return `Svelte file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{\" — expected Svelte syntax like {$t('key')}`\n      }\n      break\n    case 'astro':\n      if (!newExpression.includes('{')) {\n        return `Astro file \"${filePath}\": tag text expression \"${newExpression}\" does not contain \"{\" — expected Astro syntax like {t('key')}`\n      }\n      break\n    case 'script':\n      // Script files don't have template interpolation — warn if attempting tag text replacement\n      return `Script file \"${filePath}\": tag text replacement not applicable for .ts/.js files`\n  }\n\n  return null\n}\n\n// ─── Scope Validation (Guardrail #1) ───\n\n/**\n * Validate that a patch file path is safe and within allowed scope.\n * Returns an error message or null if valid.\n */\nexport function validatePatchPath(filePath: string): string | null {\n  const normalizedPath = filePath.replace(/\\\\/g, '/')\n\n  // Reject path traversal\n  if (normalizedPath.includes('..')) {\n    return `Path traversal detected: \"${filePath}\"`\n  }\n\n  // Reject absolute paths\n  if (normalizedPath.startsWith('/')) {\n    return `Absolute path not allowed: \"${filePath}\"`\n  }\n\n  // Reject forbidden directories\n  const segments = normalizedPath.split('/')\n  for (const seg of segments) {\n    if (FORBIDDEN_PATH_SEGMENTS.has(seg)) {\n      return `Patching files inside \"${seg}/\" is not allowed: \"${filePath}\"`\n    }\n  }\n\n  // Reject non-scannable extensions\n  const ext = extname(filePath).toLowerCase()\n  if (!PATCHABLE_EXTENSIONS.has(ext)) {\n    return `File extension \"${ext}\" is not patchable. Allowed: ${[...PATCHABLE_EXTENSIONS].join(', ')}. Path: \"${filePath}\"`\n  }\n\n  return null\n}\n\n// ─── Syntax Check (Guardrail #5) ───\n\n/**\n * Perform a basic syntax check on a patched file.\n * Returns an error message or null if syntax appears valid.\n */\nexport function checkSyntax(filePath: string, content: string): string | null {\n  const ext = extname(filePath).toLowerCase()\n\n  switch (ext) {\n    case '.ts':\n    case '.tsx':\n    case '.js':\n    case '.jsx':\n    case '.mjs':\n      return checkJsSyntax(content)\n    case '.vue':\n      return checkVueSyntax(content)\n    case '.svelte':\n    case '.astro':\n      return checkTagBalance(content)\n    default:\n      return null\n  }\n}\n\n/**\n * Basic JS/TS syntax check: bracket/paren/brace balance + string literal closure.\n * This is intentionally conservative — it catches obvious breakage without\n * requiring a full parser.\n */\nfunction checkJsSyntax(content: string): string | null {\n  const stack: string[] = []\n  const pairs: Record<string, string> = { ')': '(', ']': '[', '}': '{' }\n  let inString: string | null = null\n  let escaped = false\n  let inLineComment = false\n  let inBlockComment = false\n\n  for (let i = 0; i < content.length; i++) {\n    const ch = content[i]!\n    const next = content[i + 1]\n\n    // Handle escape sequences inside strings\n    if (escaped) {\n      escaped = false\n      continue\n    }\n\n    if (ch === '\\\\' && inString !== null) {\n      escaped = true\n      continue\n    }\n\n    // Line comment\n    if (!inString && !inBlockComment && ch === '/' && next === '/') {\n      inLineComment = true\n      continue\n    }\n    if (inLineComment) {\n      if (ch === '\\n') inLineComment = false\n      continue\n    }\n\n    // Block comment\n    if (!inString && !inBlockComment && ch === '/' && next === '*') {\n      inBlockComment = true\n      i++ // skip *\n      continue\n    }\n    if (inBlockComment) {\n      if (ch === '*' && next === '/') {\n        inBlockComment = false\n        i++ // skip /\n      }\n      continue\n    }\n\n    // String handling\n    if (inString !== null) {\n      if (ch === inString) {\n        // Template literal allows multi-line, others don't\n        inString = null\n      } else if (inString !== '`' && ch === '\\n') {\n        return `Unterminated string literal near offset ${i}`\n      }\n      continue\n    }\n\n    if (ch === '\"' || ch === \"'\" || ch === '`') {\n      inString = ch\n      continue\n    }\n\n    // Bracket matching\n    if (ch === '(' || ch === '[' || ch === '{') {\n      stack.push(ch)\n    } else if (ch === ')' || ch === ']' || ch === '}') {\n      const expected = pairs[ch]!\n      if (stack.length === 0) {\n        return `Unmatched closing \"${ch}\" near offset ${i}`\n      }\n      const top = stack.pop()!\n      if (top !== expected) {\n        return `Mismatched bracket: expected closing for \"${top}\" but found \"${ch}\" near offset ${i}`\n      }\n    }\n  }\n\n  if (inString !== null) {\n    return `Unterminated string literal (opened with ${inString})`\n  }\n\n  if (stack.length > 0) {\n    return `Unclosed bracket \"${stack[stack.length - 1]}\" — ${stack.length} unclosed bracket(s)`\n  }\n\n  return null\n}\n\n/**\n * Vue SFC syntax check: ensure <template>, <script>, <style> tags are balanced.\n */\nfunction checkVueSyntax(content: string): string | null {\n  const tagBalance = checkTagBalance(content)\n  if (tagBalance) return tagBalance\n\n  // Vue-specific: check that SFC root tags are present and balanced\n  for (const tag of ['template', 'script']) {\n    const openRe = new RegExp(`<${tag}[\\\\s>]`, 'g')\n    const closeRe = new RegExp(`</${tag}>`, 'g')\n    const opens = content.match(openRe)?.length ?? 0\n    const closes = content.match(closeRe)?.length ?? 0\n    if (opens !== closes) {\n      return `Unbalanced <${tag}> tag: ${opens} opening vs ${closes} closing`\n    }\n  }\n\n  return null\n}\n\n/**\n * Basic tag balance check for HTML-like files.\n * Checks that self-closing tags are handled and major structural tags are balanced.\n */\nfunction checkTagBalance(content: string): string | null {\n  // Check for common structural tags balance\n  const structuralTags = ['div', 'section', 'main', 'header', 'footer', 'nav', 'article', 'aside', 'ul', 'ol', 'table']\n\n  for (const tag of structuralTags) {\n    const openRe = new RegExp(`<${tag}[\\\\s>]`, 'g')\n    const closeRe = new RegExp(`</${tag}>`, 'g')\n    const opens = content.match(openRe)?.length ?? 0\n    const closes = content.match(closeRe)?.length ?? 0\n    if (opens !== closes) {\n      return `Unbalanced <${tag}> tag: ${opens} opening vs ${closes} closing`\n    }\n  }\n\n  return null\n}\n\n// ─── Extract Mode ───\n\nexport async function applyExtract(\n  projectRoot: string,\n  input: ExtractionInput,\n): Promise<ExtractionResult> {\n  const config = await readConfig(projectRoot)\n  if (!config) throw new Error('Project not initialized. Run contentrain_init first.')\n\n  const { extractions, dry_run } = input\n\n  // Analyze what will happen\n  const existingModels = await listModels(projectRoot)\n  const existingIds = new Set(existingModels.map(m => m.id))\n\n  const modelsToCreate: string[] = []\n  const modelsToUpdate: string[] = []\n  const contentFiles: string[] = []\n  let totalEntries = 0\n\n  const validationErrors: string[] = []\n\n  for (const ext of extractions) {\n    // Validate model definition with same rules as model_save\n    const modelErrors = validateModelDefinition({\n      id: ext.model,\n      kind: ext.kind,\n      fields: ext.fields as Record<string, unknown> | undefined,\n    })\n    if (modelErrors.length > 0) {\n      validationErrors.push(...modelErrors.map(e => `[${ext.model}] ${e}`))\n    }\n\n    for (const entry of ext.entries) {\n      if (ext.kind === 'dictionary') {\n        if (entry.data['id'] !== undefined || entry.data['slug'] !== undefined) {\n          validationErrors.push(`[${ext.model}] Dictionary entries should not have id or slug`)\n        }\n        for (const [key, val] of Object.entries(entry.data)) {\n          if (typeof val !== 'string') {\n            validationErrors.push(`[${ext.model}] Dictionary entry value for key \"${key}\" must be a string, got ${typeof val}`)\n          }\n        }\n      } else if (ext.kind === 'document') {\n        if (!entry.slug && !entry.data['slug']) {\n          validationErrors.push(`[${ext.model}] Document entries must have a slug`)\n        }\n      } else if (ext.kind === 'collection') {\n        if (entry.slug !== undefined || entry.data['slug'] !== undefined) {\n          validationErrors.push(`[${ext.model}] Collection entries should not have slug`)\n        }\n      } else if (ext.kind === 'singleton') {\n        if (entry.data['id'] !== undefined || entry.slug !== undefined || entry.data['slug'] !== undefined) {\n          validationErrors.push(`[${ext.model}] Singleton entries should not have id or slug`)\n        }\n      }\n    }\n\n    if (existingIds.has(ext.model)) {\n      modelsToUpdate.push(ext.model)\n    } else {\n      modelsToCreate.push(ext.model)\n    }\n    totalEntries += ext.entries.length\n\n    // Guardrail #3: Preview-Execute Parity — use real model metadata if it exists\n    let previewModel: ModelDefinition\n    if (existingIds.has(ext.model)) {\n      const real = await readModel(projectRoot, ext.model)\n      if (real) {\n        previewModel = real\n      } else {\n        previewModel = { id: ext.model, kind: ext.kind, domain: ext.domain, i18n: ext.i18n ?? true } as ModelDefinition\n      }\n    } else {\n      previewModel = { id: ext.model, kind: ext.kind, domain: ext.domain, i18n: ext.i18n ?? true } as ModelDefinition\n    }\n\n    const cDir = resolveContentDir(projectRoot, previewModel)\n    for (const entry of ext.entries) {\n      const locale = entry.locale ?? config.locales.default\n      if (ext.kind === 'document' && entry.slug) {\n        contentFiles.push(resolveMdFilePath(cDir, previewModel, locale, entry.slug))\n      } else {\n        contentFiles.push(resolveJsonFilePath(cDir, previewModel, locale))\n      }\n    }\n  }\n\n  const preview: ExtractionPreview = {\n    models_to_create: modelsToCreate,\n    models_to_update: modelsToUpdate,\n    total_entries: totalEntries,\n    content_files: [...new Set(contentFiles)],\n  }\n\n  // Dry run — return preview only (include validation errors if any)\n  if (dry_run !== false) {\n    return {\n      dry_run: true,\n      preview,\n      ...(validationErrors.length > 0 ? { validation_errors: validationErrors } : {}),\n      next_steps: [\n        ...(validationErrors.length > 0\n          ? [`WARNING: ${validationErrors.length} validation error(s) found — fix before executing`]\n          : []),\n        'Review the preview above',\n        'Call contentrain_apply with mode:extract and dry_run:false to execute',\n      ],\n    }\n  }\n\n  // Block execute if validation errors exist\n  if (validationErrors.length > 0) {\n    return {\n      dry_run: false,\n      error: 'Model validation failed — cannot execute extract with invalid model definitions',\n      validation_errors: validationErrors,\n      next_steps: ['Fix the validation errors and retry'],\n    }\n  }\n\n  // Branch health gate\n  const health = await checkBranchHealth(projectRoot)\n  if (health.blocked) {\n    return {\n      error: health.message,\n      action: 'blocked' as const,\n      hint: 'Merge or delete old contentrain/* branches before executing normalize.',\n    } as unknown as ExtractionResult\n  }\n\n  // Execute — git transaction (always review mode for normalize)\n  const branchName = buildBranchName('normalize', 'extract')\n  const tx = await createTransaction(projectRoot, branchName, { workflowOverride: 'review' })\n  const sourceMap: Array<{ model: string; locale: string; value: string; file: string; line: number }> = []\n  const modelsCreated: string[] = []\n  const modelsUpdated: string[] = []\n  let entriesWritten = 0\n\n  try {\n    await tx.write(async (wt) => {\n      for (const ext of extractions) {\n        // Create or merge model\n        const existing = await readModel(wt, ext.model)\n        if (existing) {\n          // Merge fields: add new, keep existing\n          if (ext.fields) {\n            const merged = { ...existing.fields, ...ext.fields }\n            // Only overwrite if new fields were actually added\n            const newFieldNames = Object.keys(ext.fields).filter(k => !(k in (existing.fields ?? {})))\n            if (newFieldNames.length > 0) {\n              existing.fields = merged\n              await writeModel(wt, existing)\n              modelsUpdated.push(ext.model)\n            }\n          }\n        } else {\n          // Create new model\n          const newModel: ModelDefinition = {\n            id: ext.model,\n            name: ext.model.split('-').map(w => w.charAt(0).toUpperCase() + w.slice(1)).join(' '),\n            kind: ext.kind,\n            domain: ext.domain,\n            i18n: ext.i18n ?? true,\n            fields: ext.fields,\n          }\n          await writeModel(wt, newModel)\n          modelsCreated.push(ext.model)\n        }\n\n        // Write content entries\n        const model = (await readModel(wt, ext.model))!\n        const entries: ContentEntry[] = ext.entries.map(e => ({\n          locale: e.locale,\n          slug: e.slug,\n          data: e.data,\n        }))\n\n        const wtConfig = await readConfig(wt) ?? config\n        await writeContent(wt, model, entries, wtConfig)\n        entriesWritten += entries.length\n\n        // Track source map\n        for (const entry of ext.entries) {\n          // For dictionary entries with per-key source tracking\n          if (ext.kind === 'dictionary' && entry.sources) {\n            for (const s of entry.sources) {\n              sourceMap.push({\n                model: ext.model,\n                locale: entry.locale ?? config.locales.default,\n                value: s.value,\n                file: s.file,\n                line: s.line,\n              })\n            }\n          } else if (entry.source) {\n            sourceMap.push({\n              model: ext.model,\n              locale: entry.locale ?? config.locales.default,\n              value: entry.source.value,\n              file: entry.source.file,\n              line: entry.source.line,\n            })\n          }\n        }\n      }\n\n      // Write source map for reuse scope enforcement\n      if (sourceMap.length > 0) {\n        const sourcesByModel: Record<string, { source_files: string[]; entry_count: number }> = {}\n        for (const s of sourceMap) {\n          if (!sourcesByModel[s.model]) {\n            sourcesByModel[s.model] = { source_files: [], entry_count: 0 }\n          }\n          const modelEntry = sourcesByModel[s.model]!\n          if (!modelEntry.source_files.includes(s.file)) {\n            modelEntry.source_files.push(s.file)\n          }\n          modelEntry.entry_count++\n        }\n        const sourcesJson = JSON.stringify({\n          version: 1,\n          created_at: new Date().toISOString(),\n          models: sourcesByModel,\n        }, null, 2) + '\\n'\n        // Write to worktree only — merge brings it to main\n        // Phase 2 (reuse) must wait for extract branch to be merged first\n        await writeText(join(wt, '.contentrain', 'normalize-sources.json'), sourcesJson)\n      }\n\n      // Update context\n      await writeContext(wt, {\n        tool: 'contentrain_apply',\n        model: extractions.map(e => e.model).join(','),\n        locale: config.locales.default,\n        entries: extractions.flatMap(e => e.entries.map(en => en.slug ?? 'entry')),\n      })\n    })\n\n    const commitMsg = `[contentrain] normalize: extract ${entriesWritten} entries to ${extractions.length} models`\n    await tx.commit(commitMsg)\n\n    const gitResult = { branch: branchName, action: 'pending-review', commit: '' }\n    try {\n      const completed = await tx.complete()\n      gitResult.action = completed.action\n      gitResult.commit = completed.commit\n    } catch {\n      gitResult.action = 'pending-review'\n    } finally {\n      await tx.cleanup()\n    }\n\n    return {\n      dry_run: false,\n      results: {\n        models_created: modelsCreated,\n        models_updated: modelsUpdated,\n        entries_written: entriesWritten,\n        source_map: sourceMap,\n      },\n      git: gitResult,\n      context_updated: true,\n      next_steps: [\n        'Run contentrain_validate to check the extracted content',\n        'Run contentrain_submit to push the branch for review',\n        'For browser-based review: ensure `contentrain serve` is running, direct user to http://localhost:3333/normalize',\n        'For terminal workflow: use contentrain_merge to merge the branch locally',\n        'After merge, run `npx contentrain generate` to update SDK client',\n        'After review, proceed with mode:reuse to patch source files',\n      ],\n    }\n  } catch (error) {\n    await tx.cleanup()\n    throw error\n  }\n}\n\n// ─── Reuse Mode ───\n\nexport async function applyReuse(\n  projectRoot: string,\n  input: ReuseInput,\n): Promise<ReuseResult> {\n  const config = await readConfig(projectRoot)\n  if (!config) throw new Error('Project not initialized. Run contentrain_init first.')\n\n  const { scope, patches, dry_run } = input\n\n  // Validate scope\n  if (!scope.model && !scope.domain) {\n    throw new Error('Scope required: provide model or domain. Whole-project patching is not allowed.')\n  }\n\n  // Validate patch count\n  if (patches.length > MAX_PATCHES) {\n    throw new Error(`Too many patches (${patches.length}). Maximum ${MAX_PATCHES} per operation. Split into multiple calls.`)\n  }\n\n  // Check content exists for scope (soft warning)\n  if (scope.model) {\n    const model = await readModel(projectRoot, scope.model)\n    if (!model) {\n      throw new Error(`Model \"${scope.model}\" not found. Run extract phase first.`)\n    }\n  }\n\n  const scopeWarnings: string[] = []\n\n  // Guardrail #1: Scope Real Enforcement\n  // Step 1: Path safety — every patch must target a valid, patchable source file\n  for (const patch of patches) {\n    const pathError = validatePatchPath(patch.file)\n    if (pathError) {\n      throw new Error(`Invalid patch path: ${pathError}`)\n    }\n  }\n\n  // Step 2: Semantic scope — verify scope model/domain exists and cross-check patch files\n  if (scope.model || scope.domain) {\n    const models = await listModels(projectRoot)\n    const scopeModels = scope.model\n      ? models.filter(m => m.id === scope.model)\n      : scope.domain\n        ? models.filter(m => m.domain === scope.domain)\n        : models\n\n    if (scopeModels.length === 0) {\n      throw new Error(`No models found for scope ${scope.model ? `model=\"${scope.model}\"` : `domain=\"${scope.domain}\"`}`)\n    }\n\n    // Step 3: Verify patch files are source files (not content/config/meta files)\n    // and belong to detectable source directories (not random locations)\n    const { autoDetectSourceDirs } = await import('./scan-config.js')\n    const sourceDirs = await autoDetectSourceDirs(projectRoot)\n\n    // Build allowed file prefixes from source dirs\n    const allowedPrefixes = sourceDirs.map(d => d === '.' ? '' : d + '/')\n\n    for (const patch of patches) {\n      const normalizedPath = patch.file.replace(/\\\\/g, '/')\n\n      // Reject patches targeting .contentrain/ directory (content files should never be patched by reuse)\n      if (normalizedPath.startsWith('.contentrain/') || normalizedPath.includes('/.contentrain/')) {\n        throw new Error(`Cannot patch content/config files directly: \"${patch.file}\". Reuse patches source files only.`)\n      }\n\n      // If source dirs were detected (not just \".\"), verify patch files are within them\n      if (sourceDirs.length > 0 && sourceDirs[0] !== '.') {\n        const inSourceDir = allowedPrefixes.some(prefix =>\n          prefix === '' || normalizedPath.startsWith(prefix),\n        )\n        if (!inSourceDir) {\n          throw new Error(\n            `Patch file \"${patch.file}\" is outside detected source directories (${sourceDirs.join(', ')}). ` +\n            `Reuse patches must target source files within the project's source tree.`,\n          )\n        }\n      }\n    }\n\n    // Step 4: Semantic source→model cross-check via normalize-sources.json\n    // Source map is written by extract into the review branch worktree.\n    // It only exists on base after extract branch is merged.\n    // If missing: dry_run proceeds with warning, execute is blocked.\n    if (scope.model || scope.domain) {\n      const sourcesPath = join(projectRoot, '.contentrain', 'normalize-sources.json')\n      const sourcesRaw = await readText(sourcesPath)\n\n      if (!sourcesRaw) {\n        // Source map not found — check if scoped model is a dictionary\n        // Dictionaries store all keys in one entry, so per-file source tracking\n        // is not available. Allow reuse with a warning instead of blocking.\n        const scopedModel = scopeModels.find(m => m.id === scope.model)\n        const isDictionary = scopedModel?.kind === 'dictionary'\n\n        if (isDictionary) {\n          scopeWarnings.push(\n            'normalize-sources.json not found. Dictionary models do not generate per-file source maps. ' +\n            'Scope enforcement is based on source-tree locality only.',\n          )\n        } else if (dry_run !== false) {\n          scopeWarnings.push(\n            'normalize-sources.json not found. Semantic scope enforcement is unavailable. ' +\n            'Merge the extract branch first, then reuse will have full scope protection.',\n          )\n        } else {\n          throw new Error(\n            'Cannot execute reuse: normalize-sources.json not found on base branch. ' +\n            'The extract branch must be merged before reuse can execute. ' +\n            'This ensures semantic scope enforcement protects against out-of-scope patching.',\n          )\n        }\n      } else {\n        const sourcesData = JSON.parse(sourcesRaw) as {\n          models?: Record<string, { source_files?: string[] }>\n        }\n\n        // Collect all allowed source files for the scope\n        let allowedSourceFiles: string[] = []\n        let scopeLabel = ''\n\n        if (scope.model) {\n          const modelSources = sourcesData.models?.[scope.model]?.source_files\n          if (modelSources) allowedSourceFiles = modelSources\n          scopeLabel = `model \"${scope.model}\"`\n        } else if (scope.domain) {\n          const domainModelIds = scopeModels.map(m => m.id)\n          for (const modelId of domainModelIds) {\n            const modelSources = sourcesData.models?.[modelId]?.source_files\n            if (modelSources) allowedSourceFiles.push(...modelSources)\n          }\n          allowedSourceFiles = [...new Set(allowedSourceFiles)]\n          scopeLabel = `domain \"${scope.domain}\"`\n        }\n\n        if (allowedSourceFiles.length > 0) {\n          const outOfScopePatches: string[] = []\n          for (const patch of patches) {\n            const normalizedPath = patch.file.replace(/\\\\/g, '/')\n            if (!allowedSourceFiles.includes(normalizedPath)) {\n              outOfScopePatches.push(patch.file)\n            }\n          }\n          if (outOfScopePatches.length > 0) {\n            throw new Error(\n              `Scope enforcement: ${outOfScopePatches.length} patch file(s) are not associated with ${scopeLabel}. ` +\n              `Out-of-scope files: ${outOfScopePatches.join(', ')}. ` +\n              `Known source files: ${allowedSourceFiles.join(', ')}.`,\n            )\n          }\n        }\n      }\n    }\n  }\n\n  // Group patches by file\n  const patchesByFile = new Map<string, PatchEntry[]>()\n  for (const patch of patches) {\n    if (!patchesByFile.has(patch.file)) {\n      patchesByFile.set(patch.file, [])\n    }\n    patchesByFile.get(patch.file)!.push(patch)\n  }\n\n  const filesToModify = [...patchesByFile.keys()]\n  const importsToAdd = patches.filter(p => p.import_statement).length\n\n  // Dry run — return preview only\n  if (dry_run !== false) {\n    return {\n      dry_run: true,\n      preview: {\n        files_to_modify: filesToModify,\n        patches_count: patches.length,\n        imports_to_add: importsToAdd,\n      },\n      ...(scopeWarnings.length > 0 ? { scope_warnings: scopeWarnings } : {}),\n      next_steps: [\n        ...(scopeWarnings.length > 0 ? [`WARNING: ${scopeWarnings.length} patch file(s) not in extract source map — verify intent`] : []),\n        'Review the files and patches above',\n        'Call contentrain_apply with mode:reuse and dry_run:false to execute',\n      ],\n    }\n  }\n\n  // Branch health gate\n  const reuseHealth = await checkBranchHealth(projectRoot)\n  if (reuseHealth.blocked) {\n    return {\n      dry_run: false,\n      error: `Branch blocked: ${reuseHealth.message}`,\n      next_steps: ['Merge or delete old contentrain/* branches before executing reuse.'],\n    }\n  }\n\n  // Execute — git transaction\n  const scopeTarget = scope.model ?? scope.domain!\n  const branchName = buildBranchName('normalize/reuse', scopeTarget)\n  const tx = await createTransaction(projectRoot, branchName, { workflowOverride: 'review' })\n\n  const filesModified: string[] = []\n  let patchesApplied = 0\n  let importsAdded = 0\n  const patchesSkipped: Array<{ file: string; line: number; reason: string }> = []\n  const frameworkWarnings: Array<{ file: string; warning: string }> = []\n  const syntaxErrors: SyntaxError[] = []\n\n  try {\n    await tx.write(async (wt) => {\n      for (const [relFile, filePatches] of patchesByFile) {\n        const absPath = join(wt, relFile)\n\n        if (!(await pathExists(absPath))) {\n          for (const p of filePatches) {\n            patchesSkipped.push({ file: relFile, line: p.line, reason: 'file not found' })\n          }\n          continue\n        }\n\n        const content = await readText(absPath)\n        if (content === null) {\n          for (const p of filePatches) {\n            patchesSkipped.push({ file: relFile, line: p.line, reason: 'file unreadable' })\n          }\n          continue\n        }\n\n        // Sort patches by line DESC (bottom-up to avoid line shifts)\n        const sorted = [...filePatches].toSorted((a, b) => b.line - a.line)\n\n        const lines = content.split('\\n')\n        let fileModified = false\n\n        for (const patch of sorted) {\n          // Determine replacement context before applying\n          const targetLine = lines[patch.line - 1] ?? ''\n          const isTagTextContext = targetLine.includes(`>${patch.old_value}<`)\n          const replacementContext = isTagTextContext ? 'tag_text' as const : 'other' as const\n\n          // Guardrail #2: Framework-aware validation — only warn for tag text replacements\n          if (isTagTextContext) {\n            const fwWarning = validateFrameworkExpression(relFile, patch.new_expression, replacementContext)\n            if (fwWarning) {\n              frameworkWarnings.push({ file: relFile, warning: fwWarning })\n            }\n          }\n\n          const applied = applyPatchToLines(lines, patch)\n          if (applied) {\n            patchesApplied++\n            fileModified = true\n          } else {\n            patchesSkipped.push({ file: relFile, line: patch.line, reason: 'old_value not found at or near specified line' })\n          }\n        }\n\n        // Add imports (deduplicate)\n        const importStatements = new Set(\n          filePatches\n            .filter(p => p.import_statement)\n            .map(p => p.import_statement!),\n        )\n\n        if (importStatements.size > 0) {\n          const added = addImportsToLines(lines, importStatements)\n          importsAdded += added\n          if (added > 0) fileModified = true\n        }\n\n        if (fileModified) {\n          const newContent = lines.join('\\n')\n          await writeText(absPath, newContent)\n          filesModified.push(relFile)\n\n          // Guardrail #5: Syntax check after patching\n          const syntaxError = checkSyntax(relFile, newContent)\n          if (syntaxError) {\n            syntaxErrors.push({ file: relFile, error: syntaxError })\n          }\n        }\n      }\n\n      // Update context\n      await writeContext(wt, {\n        tool: 'contentrain_apply',\n        model: scopeTarget,\n        locale: config.locales.default,\n      })\n    })\n\n    if (filesModified.length === 0) {\n      await tx.cleanup()\n      return {\n        dry_run: false,\n        results: {\n          files_modified: [],\n          patches_applied: 0,\n          patches_skipped: patchesSkipped,\n          imports_added: 0,\n          framework_warnings: frameworkWarnings.length > 0 ? frameworkWarnings : undefined,\n        },\n        next_steps: ['No files were modified. Check patch definitions and try again.'],\n      }\n    }\n\n    const commitMsg = `[contentrain] normalize: reuse ${scopeTarget} — patch ${filesModified.length} files (${patchesApplied} replacements)`\n    await tx.commit(commitMsg)\n\n    const gitResult = { branch: branchName, action: 'pending-review', commit: '' }\n    try {\n      const completed = await tx.complete()\n      gitResult.action = completed.action\n      gitResult.commit = completed.commit\n    } catch {\n      gitResult.action = 'pending-review'\n    } finally {\n      await tx.cleanup()\n    }\n\n    return {\n      dry_run: false,\n      results: {\n        files_modified: filesModified,\n        patches_applied: patchesApplied,\n        patches_skipped: patchesSkipped,\n        imports_added: importsAdded,\n        framework_warnings: frameworkWarnings.length > 0 ? frameworkWarnings : undefined,\n        syntax_errors: syntaxErrors.length > 0 ? syntaxErrors : undefined,\n      },\n      ...(scopeWarnings.length > 0 ? { scope_warnings: scopeWarnings } : {}),\n      git: gitResult,\n      next_steps: [\n        'Run contentrain_validate to verify the patched files',\n        patchesSkipped.length > 0 ? `${patchesSkipped.length} patches were skipped — review and retry if needed` : '',\n        syntaxErrors.length > 0 ? `WARNING: ${syntaxErrors.length} file(s) may have syntax errors after patching — review manually` : '',\n        scopeWarnings.length > 0 ? `NOTE: ${scopeWarnings.length} patch file(s) not in extract source map` : '',\n        'Run contentrain_submit to push the branch for review',\n        'For review: direct user to http://localhost:3333/branches or use contentrain_merge',\n        'After all reuse phases complete, run `npx contentrain generate` to update SDK types',\n      ].filter(Boolean),\n    }\n  } catch (error) {\n    await tx.cleanup()\n    throw error\n  }\n}\n\n// ─── Patch Helpers ───\n\n/**\n * Apply a single patch to a lines array. Mutates lines in place.\n * Uses line hint for proximity matching — searches ±10 lines from hint.\n */\nfunction applyPatchToLines(lines: string[], patch: PatchEntry): boolean {\n  const { line, old_value, new_expression } = patch\n  const lineIdx = line - 1 // 0-based\n\n  // Search range: ±10 lines from hint\n  const searchStart = Math.max(0, lineIdx - 10)\n  const searchEnd = Math.min(lines.length, lineIdx + 11)\n\n  // First pass: exact line match\n  if (lineIdx >= 0 && lineIdx < lines.length) {\n    const replaced = replaceInLine(lines[lineIdx]!, old_value, new_expression)\n    if (replaced !== null) {\n      lines[lineIdx] = replaced\n      return true\n    }\n  }\n\n  // Second pass: proximity search\n  for (let i = searchStart; i < searchEnd; i++) {\n    if (i === lineIdx) continue // already tried\n    const replaced = replaceInLine(lines[i]!, old_value, new_expression)\n    if (replaced !== null) {\n      lines[i] = replaced\n      return true\n    }\n  }\n\n  return false\n}\n\n/**\n * Replace old_value with new_expression in a single line.\n * Matches the string literal (quoted or unquoted tag text).\n * Returns the modified line, or null if not found.\n *\n * Guardrail #4: Safer patch matching — word boundary awareness and\n * ambiguity rejection for plain text fallback.\n */\nexport function replaceInLine(line: string, oldValue: string, newExpression: string): string | null {\n  // Try exact match of the value in quoted strings\n  // Match: \"old_value\", 'old_value', `old_value`\n  for (const quote of ['\"', \"'\", '`']) {\n    const quoted = `${quote}${oldValue}${quote}`\n    if (line.includes(quoted)) {\n      return line.replace(quoted, newExpression)\n    }\n  }\n\n  // Try unquoted tag text match: >old_value<\n  // The agent provides the complete new_expression with correct framework syntax:\n  //   JSX:    {t('key')}\n  //   Vue:    {{ $t('key') }}\n  //   Svelte: {$t('key')}\n  // So we insert the expression as-is between > and <, without wrapping in braces.\n  if (line.includes(`>${oldValue}<`)) {\n    return line.replace(`>${oldValue}<`, `>${newExpression}<`)\n  }\n\n  // Guardrail #4: Safer plain text fallback\n  // Only match if old_value appears at a word boundary and is unambiguous\n  if (line.includes(oldValue)) {\n    // Count occurrences — if multiple, it's ambiguous\n    const occurrences = countOccurrences(line, oldValue)\n    if (occurrences > 1) {\n      return null // ambiguous — let proximity search handle it\n    }\n\n    // Word boundary check: don't replace \"Submit\" inside \"SubmitButton\"\n    // Reject if the old_value is a substring of a larger word — check if\n    // adjacent characters are word characters that extend the token.\n    const idx = line.indexOf(oldValue)\n    const charBefore = idx > 0 ? line[idx - 1]! : ''\n    const charAfter = idx + oldValue.length < line.length ? line[idx + oldValue.length]! : ''\n\n    const oldStartsWithWord = oldValue.length > 0 && isWordChar(oldValue[0]!)\n    const oldEndsWithWord = oldValue.length > 0 && isWordChar(oldValue[oldValue.length - 1]!)\n\n    // If old_value starts with a word char and char before is also word char, it's a partial match\n    if (oldStartsWithWord && isWordChar(charBefore)) {\n      return null\n    }\n    // If old_value ends with a word char and char after is also word char, it's a partial match\n    if (oldEndsWithWord && isWordChar(charAfter)) {\n      return null\n    }\n\n    return line.replace(oldValue, newExpression)\n  }\n\n  return null\n}\n\n/** Count non-overlapping occurrences of a substring */\nfunction countOccurrences(str: string, sub: string): number {\n  let count = 0\n  let pos = 0\n  while (pos <= str.length - sub.length) {\n    const idx = str.indexOf(sub, pos)\n    if (idx === -1) break\n    count++\n    pos = idx + sub.length\n  }\n  return count\n}\n\n/** Check if a character is a word character (letter, digit, underscore) */\nfunction isWordChar(ch: string): boolean {\n  return /\\w/.test(ch)\n}\n\n/**\n * Add import statements to the top of a file (after existing imports).\n * Deduplicates — won't add if the import already exists.\n * Returns number of imports actually added.\n */\nfunction addImportsToLines(lines: string[], imports: Set<string>): number {\n  let added = 0\n  const existingContent = lines.join('\\n')\n\n  // Find the last import line position (handles multi-line imports)\n  let lastImportIdx = -1\n  let inMultiLineImport = false\n  for (let i = 0; i < lines.length; i++) {\n    const trimmed = lines[i]!.trim()\n    if (inMultiLineImport) {\n      lastImportIdx = i\n      if (trimmed.includes('}')) inMultiLineImport = false\n      continue\n    }\n    if (trimmed.startsWith('import ') || trimmed.startsWith('import{')) {\n      lastImportIdx = i\n      // Check if this is a multi-line import (has { but no closing })\n      if (trimmed.includes('{') && !trimmed.includes('}')) {\n        inMultiLineImport = true\n      }\n      continue\n    }\n    // Stop searching after a non-import, non-empty, non-comment line following imports\n    if (lastImportIdx >= 0 && trimmed.length > 0 && !trimmed.startsWith('//') && !trimmed.startsWith('/*') && !trimmed.startsWith('*')) {\n      break\n    }\n  }\n\n  let insertAt: number\n  if (lastImportIdx >= 0) {\n    insertAt = lastImportIdx + 1\n  } else {\n    // No existing imports found — insert after shebang and directive lines\n    insertAt = 0\n    for (let i = 0; i < lines.length; i++) {\n      const trimmed = lines[i]!.trim()\n      if (i === 0 && trimmed.startsWith('#!')) {\n        insertAt = i + 1\n        continue\n      }\n      if (trimmed === \"'use client'\" || trimmed === '\"use client\"'\n        || trimmed === \"'use server'\" || trimmed === '\"use server\"'\n        || trimmed === \"'use client';\" || trimmed === '\"use client\";'\n        || trimmed === \"'use server';\" || trimmed === '\"use server\";') {\n        insertAt = i + 1\n        continue\n      }\n      if (insertAt > 0 && trimmed.length > 0) break\n      if (insertAt === 0 && trimmed.length > 0) break\n    }\n  }\n  const toInsert: string[] = []\n\n  for (const imp of imports) {\n    // Check if this import already exists (by checking the from clause)\n    if (!existingContent.includes(imp)) {\n      toInsert.push(imp)\n      added++\n    }\n  }\n\n  if (toInsert.length > 0) {\n    lines.splice(insertAt, 0, ...toInsert)\n  }\n\n  return added\n}\n"],"mappings":";;;;;;;;AAiGA,MAAM,cAAc;;AAGpB,MAAa,uBAAuB,IAAI,IAAI;CAC1C;CAAQ;CAAQ;CAAQ;CAAO;CAAO;CAAQ;CAAU;CACzD,CAAC;;AAGF,MAAM,0BAA0B,IAAI,IAAI;CACtC;CAAgB;CAAgB;CAAQ;CAAQ;CAAS;CAAS;CACnE,CAAC;AAMF,SAAgB,oBAAoB,UAAiC;AAEnE,SADY,QAAQ,SAAS,CAAC,aAAa,EAC3C;EACE,KAAK,OAAQ,QAAO;EACpB,KAAK,UAAW,QAAO;EACvB,KAAK;EACL,KAAK,OAAQ,QAAO;EACpB,KAAK,SAAU,QAAO;EACtB,KAAK;EACL,KAAK;EACL,KAAK,OAAQ,QAAO;EACpB,QAAS,QAAO;;;;;;;AAQpB,SAAgB,4BACd,UACA,eACA,SACe;AACf,KAAI,YAAY,WAAY,QAAO;AAInC,SAFkB,oBAAoB,SAAS,EAE/C;EACE,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,KAAK,CAC/B,QAAO,aAAa,SAAS,0BAA0B,cAAc;AAEvE;EACF,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,IAAI,CAC9B,QAAO,aAAa,SAAS,0BAA0B,cAAc;AAEvE;EACF,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,IAAI,CAC9B,QAAO,gBAAgB,SAAS,0BAA0B,cAAc;AAE1E;EACF,KAAK;AACH,OAAI,CAAC,cAAc,SAAS,IAAI,CAC9B,QAAO,eAAe,SAAS,0BAA0B,cAAc;AAEzE;EACF,KAAK,SAEH,QAAO,gBAAgB,SAAS;;AAGpC,QAAO;;;;;;AAST,SAAgB,kBAAkB,UAAiC;CACjE,MAAM,iBAAiB,SAAS,QAAQ,OAAO,IAAI;AAGnD,KAAI,eAAe,SAAS,KAAK,CAC/B,QAAO,6BAA6B,SAAS;AAI/C,KAAI,eAAe,WAAW,IAAI,CAChC,QAAO,+BAA+B,SAAS;CAIjD,MAAM,WAAW,eAAe,MAAM,IAAI;AAC1C,MAAK,MAAM,OAAO,SAChB,KAAI,wBAAwB,IAAI,IAAI,CAClC,QAAO,0BAA0B,IAAI,sBAAsB,SAAS;CAKxE,MAAM,MAAM,QAAQ,SAAS,CAAC,aAAa;AAC3C,KAAI,CAAC,qBAAqB,IAAI,IAAI,CAChC,QAAO,mBAAmB,IAAI,+BAA+B,CAAC,GAAG,qBAAqB,CAAC,KAAK,KAAK,CAAC,WAAW,SAAS;AAGxH,QAAO;;;;;;AAST,SAAgB,YAAY,UAAkB,SAAgC;AAG5E,SAFY,QAAQ,SAAS,CAAC,aAAa,EAE3C;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,OACH,QAAO,cAAc,QAAQ;EAC/B,KAAK,OACH,QAAO,eAAe,QAAQ;EAChC,KAAK;EACL,KAAK,SACH,QAAO,gBAAgB,QAAQ;EACjC,QACE,QAAO;;;;;;;;AASb,SAAS,cAAc,SAAgC;CACrD,MAAM,QAAkB,EAAE;CAC1B,MAAM,QAAgC;EAAE,KAAK;EAAK,KAAK;EAAK,KAAK;EAAK;CACtE,IAAI,WAA0B;CAC9B,IAAI,UAAU;CACd,IAAI,gBAAgB;CACpB,IAAI,iBAAiB;AAErB,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,KAAK,QAAQ;EACnB,MAAM,OAAO,QAAQ,IAAI;AAGzB,MAAI,SAAS;AACX,aAAU;AACV;;AAGF,MAAI,OAAO,QAAQ,aAAa,MAAM;AACpC,aAAU;AACV;;AAIF,MAAI,CAAC,YAAY,CAAC,kBAAkB,OAAO,OAAO,SAAS,KAAK;AAC9D,mBAAgB;AAChB;;AAEF,MAAI,eAAe;AACjB,OAAI,OAAO,KAAM,iBAAgB;AACjC;;AAIF,MAAI,CAAC,YAAY,CAAC,kBAAkB,OAAO,OAAO,SAAS,KAAK;AAC9D,oBAAiB;AACjB;AACA;;AAEF,MAAI,gBAAgB;AAClB,OAAI,OAAO,OAAO,SAAS,KAAK;AAC9B,qBAAiB;AACjB;;AAEF;;AAIF,MAAI,aAAa,MAAM;AACrB,OAAI,OAAO,SAET,YAAW;YACF,aAAa,OAAO,OAAO,KACpC,QAAO,2CAA2C;AAEpD;;AAGF,MAAI,OAAO,QAAO,OAAO,OAAO,OAAO,KAAK;AAC1C,cAAW;AACX;;AAIF,MAAI,OAAO,OAAO,OAAO,OAAO,OAAO,IACrC,OAAM,KAAK,GAAG;WACL,OAAO,OAAO,OAAO,OAAO,OAAO,KAAK;GACjD,MAAM,WAAW,MAAM;AACvB,OAAI,MAAM,WAAW,EACnB,QAAO,sBAAsB,GAAG,gBAAgB;GAElD,MAAM,MAAM,MAAM,KAAK;AACvB,OAAI,QAAQ,SACV,QAAO,6CAA6C,IAAI,eAAe,GAAG,gBAAgB;;;AAKhG,KAAI,aAAa,KACf,QAAO,4CAA4C,SAAS;AAG9D,KAAI,MAAM,SAAS,EACjB,QAAO,qBAAqB,MAAM,MAAM,SAAS,GAAG,MAAM,MAAM,OAAO;AAGzE,QAAO;;;;;AAMT,SAAS,eAAe,SAAgC;CACtD,MAAM,aAAa,gBAAgB,QAAQ;AAC3C,KAAI,WAAY,QAAO;AAGvB,MAAK,MAAM,OAAO,CAAC,YAAY,SAAS,EAAE;EACxC,MAAM,SAAS,IAAI,OAAO,IAAI,IAAI,SAAS,IAAI;EAC/C,MAAM,UAAU,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI;EAC5C,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE,UAAU;EAC/C,MAAM,SAAS,QAAQ,MAAM,QAAQ,EAAE,UAAU;AACjD,MAAI,UAAU,OACZ,QAAO,eAAe,IAAI,SAAS,MAAM,cAAc,OAAO;;AAIlE,QAAO;;;;;;AAOT,SAAS,gBAAgB,SAAgC;AAIvD,MAAK,MAAM,OAFY;EAAC;EAAO;EAAW;EAAQ;EAAU;EAAU;EAAO;EAAW;EAAS;EAAM;EAAM;EAAQ,EAEnF;EAChC,MAAM,SAAS,IAAI,OAAO,IAAI,IAAI,SAAS,IAAI;EAC/C,MAAM,UAAU,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI;EAC5C,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE,UAAU;EAC/C,MAAM,SAAS,QAAQ,MAAM,QAAQ,EAAE,UAAU;AACjD,MAAI,UAAU,OACZ,QAAO,eAAe,IAAI,SAAS,MAAM,cAAc,OAAO;;AAIlE,QAAO;;AAKT,eAAsB,aACpB,aACA,OAC2B;CAC3B,MAAM,SAAS,MAAM,WAAW,YAAY;AAC5C,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,uDAAuD;CAEpF,MAAM,EAAE,aAAa,YAAY;CAGjC,MAAM,iBAAiB,MAAM,WAAW,YAAY;CACpD,MAAM,cAAc,IAAI,IAAI,eAAe,KAAI,MAAK,EAAE,GAAG,CAAC;CAE1D,MAAM,iBAA2B,EAAE;CACnC,MAAM,iBAA2B,EAAE;CACnC,MAAM,eAAyB,EAAE;CACjC,IAAI,eAAe;CAEnB,MAAM,mBAA6B,EAAE;AAErC,MAAK,MAAM,OAAO,aAAa;EAE7B,MAAM,cAAc,wBAAwB;GAC1C,IAAI,IAAI;GACR,MAAM,IAAI;GACV,QAAQ,IAAI;GACb,CAAC;AACF,MAAI,YAAY,SAAS,EACvB,kBAAiB,KAAK,GAAG,YAAY,KAAI,MAAK,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC;AAGvE,OAAK,MAAM,SAAS,IAAI,QACtB,KAAI,IAAI,SAAS,cAAc;AAC7B,OAAI,MAAM,KAAK,UAAU,KAAA,KAAa,MAAM,KAAK,YAAY,KAAA,EAC3D,kBAAiB,KAAK,IAAI,IAAI,MAAM,iDAAiD;AAEvF,QAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,MAAM,KAAK,CACjD,KAAI,OAAO,QAAQ,SACjB,kBAAiB,KAAK,IAAI,IAAI,MAAM,oCAAoC,IAAI,0BAA0B,OAAO,MAAM;aAG9G,IAAI,SAAS;OAClB,CAAC,MAAM,QAAQ,CAAC,MAAM,KAAK,QAC7B,kBAAiB,KAAK,IAAI,IAAI,MAAM,qCAAqC;aAElE,IAAI,SAAS;OAClB,MAAM,SAAS,KAAA,KAAa,MAAM,KAAK,YAAY,KAAA,EACrD,kBAAiB,KAAK,IAAI,IAAI,MAAM,2CAA2C;aAExE,IAAI,SAAS;OAClB,MAAM,KAAK,UAAU,KAAA,KAAa,MAAM,SAAS,KAAA,KAAa,MAAM,KAAK,YAAY,KAAA,EACvF,kBAAiB,KAAK,IAAI,IAAI,MAAM,gDAAgD;;AAK1F,MAAI,YAAY,IAAI,IAAI,MAAM,CAC5B,gBAAe,KAAK,IAAI,MAAM;MAE9B,gBAAe,KAAK,IAAI,MAAM;AAEhC,kBAAgB,IAAI,QAAQ;EAG5B,IAAI;AACJ,MAAI,YAAY,IAAI,IAAI,MAAM,EAAE;GAC9B,MAAM,OAAO,MAAM,UAAU,aAAa,IAAI,MAAM;AACpD,OAAI,KACF,gBAAe;OAEf,gBAAe;IAAE,IAAI,IAAI;IAAO,MAAM,IAAI;IAAM,QAAQ,IAAI;IAAQ,MAAM,IAAI,QAAQ;IAAM;QAG9F,gBAAe;GAAE,IAAI,IAAI;GAAO,MAAM,IAAI;GAAM,QAAQ,IAAI;GAAQ,MAAM,IAAI,QAAQ;GAAM;EAG9F,MAAM,OAAO,kBAAkB,aAAa,aAAa;AACzD,OAAK,MAAM,SAAS,IAAI,SAAS;GAC/B,MAAM,SAAS,MAAM,UAAU,OAAO,QAAQ;AAC9C,OAAI,IAAI,SAAS,cAAc,MAAM,KACnC,cAAa,KAAK,kBAAkB,MAAM,cAAc,QAAQ,MAAM,KAAK,CAAC;OAE5E,cAAa,KAAK,oBAAoB,MAAM,cAAc,OAAO,CAAC;;;CAKxE,MAAM,UAA6B;EACjC,kBAAkB;EAClB,kBAAkB;EAClB,eAAe;EACf,eAAe,CAAC,GAAG,IAAI,IAAI,aAAa,CAAC;EAC1C;AAGD,KAAI,YAAY,MACd,QAAO;EACL,SAAS;EACT;EACA,GAAI,iBAAiB,SAAS,IAAI,EAAE,mBAAmB,kBAAkB,GAAG,EAAE;EAC9E,YAAY;GACV,GAAI,iBAAiB,SAAS,IAC1B,CAAC,YAAY,iBAAiB,OAAO,mDAAmD,GACxF,EAAE;GACN;GACA;GACD;EACF;AAIH,KAAI,iBAAiB,SAAS,EAC5B,QAAO;EACL,SAAS;EACT,OAAO;EACP,mBAAmB;EACnB,YAAY,CAAC,sCAAsC;EACpD;CAIH,MAAM,SAAS,MAAM,kBAAkB,YAAY;AACnD,KAAI,OAAO,QACT,QAAO;EACL,OAAO,OAAO;EACd,QAAQ;EACR,MAAM;EACP;CAIH,MAAM,aAAa,gBAAgB,aAAa,UAAU;CAC1D,MAAM,KAAK,MAAM,kBAAkB,aAAa,YAAY,EAAE,kBAAkB,UAAU,CAAC;CAC3F,MAAM,YAAiG,EAAE;CACzG,MAAM,gBAA0B,EAAE;CAClC,MAAM,gBAA0B,EAAE;CAClC,IAAI,iBAAiB;AAErB,KAAI;AACF,QAAM,GAAG,MAAM,OAAO,OAAO;AAC3B,QAAK,MAAM,OAAO,aAAa;IAE7B,MAAM,WAAW,MAAM,UAAU,IAAI,IAAI,MAAM;AAC/C,QAAI;SAEE,IAAI,QAAQ;MACd,MAAM,SAAS;OAAE,GAAG,SAAS;OAAQ,GAAG,IAAI;OAAQ;AAGpD,UADsB,OAAO,KAAK,IAAI,OAAO,CAAC,QAAO,MAAK,EAAE,MAAM,SAAS,UAAU,EAAE,GAAG,CACxE,SAAS,GAAG;AAC5B,gBAAS,SAAS;AAClB,aAAM,WAAW,IAAI,SAAS;AAC9B,qBAAc,KAAK,IAAI,MAAM;;;WAG5B;AAUL,WAAM,WAAW,IARiB;MAChC,IAAI,IAAI;MACR,MAAM,IAAI,MAAM,MAAM,IAAI,CAAC,KAAI,MAAK,EAAE,OAAO,EAAE,CAAC,aAAa,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI;MACrF,MAAM,IAAI;MACV,QAAQ,IAAI;MACZ,MAAM,IAAI,QAAQ;MAClB,QAAQ,IAAI;MACb,CAC6B;AAC9B,mBAAc,KAAK,IAAI,MAAM;;IAI/B,MAAM,QAAS,MAAM,UAAU,IAAI,IAAI,MAAM;IAC7C,MAAM,UAA0B,IAAI,QAAQ,KAAI,OAAM;KACpD,QAAQ,EAAE;KACV,MAAM,EAAE;KACR,MAAM,EAAE;KACT,EAAE;AAGH,UAAM,aAAa,IAAI,OAAO,SADb,MAAM,WAAW,GAAG,IAAI,OACO;AAChD,sBAAkB,QAAQ;AAG1B,SAAK,MAAM,SAAS,IAAI,QAEtB,KAAI,IAAI,SAAS,gBAAgB,MAAM,QACrC,MAAK,MAAM,KAAK,MAAM,QACpB,WAAU,KAAK;KACb,OAAO,IAAI;KACX,QAAQ,MAAM,UAAU,OAAO,QAAQ;KACvC,OAAO,EAAE;KACT,MAAM,EAAE;KACR,MAAM,EAAE;KACT,CAAC;aAEK,MAAM,OACf,WAAU,KAAK;KACb,OAAO,IAAI;KACX,QAAQ,MAAM,UAAU,OAAO,QAAQ;KACvC,OAAO,MAAM,OAAO;KACpB,MAAM,MAAM,OAAO;KACnB,MAAM,MAAM,OAAO;KACpB,CAAC;;AAMR,OAAI,UAAU,SAAS,GAAG;IACxB,MAAM,iBAAkF,EAAE;AAC1F,SAAK,MAAM,KAAK,WAAW;AACzB,SAAI,CAAC,eAAe,EAAE,OACpB,gBAAe,EAAE,SAAS;MAAE,cAAc,EAAE;MAAE,aAAa;MAAG;KAEhE,MAAM,aAAa,eAAe,EAAE;AACpC,SAAI,CAAC,WAAW,aAAa,SAAS,EAAE,KAAK,CAC3C,YAAW,aAAa,KAAK,EAAE,KAAK;AAEtC,gBAAW;;IAEb,MAAM,cAAc,KAAK,UAAU;KACjC,SAAS;KACT,6BAAY,IAAI,MAAM,EAAC,aAAa;KACpC,QAAQ;KACT,EAAE,MAAM,EAAE,GAAG;AAGd,UAAM,UAAU,KAAK,IAAI,gBAAgB,yBAAyB,EAAE,YAAY;;AAIlF,SAAM,aAAa,IAAI;IACrB,MAAM;IACN,OAAO,YAAY,KAAI,MAAK,EAAE,MAAM,CAAC,KAAK,IAAI;IAC9C,QAAQ,OAAO,QAAQ;IACvB,SAAS,YAAY,SAAQ,MAAK,EAAE,QAAQ,KAAI,OAAM,GAAG,QAAQ,QAAQ,CAAC;IAC3E,CAAC;IACF;EAEF,MAAM,YAAY,oCAAoC,eAAe,cAAc,YAAY,OAAO;AACtG,QAAM,GAAG,OAAO,UAAU;EAE1B,MAAM,YAAY;GAAE,QAAQ;GAAY,QAAQ;GAAkB,QAAQ;GAAI;AAC9E,MAAI;GACF,MAAM,YAAY,MAAM,GAAG,UAAU;AACrC,aAAU,SAAS,UAAU;AAC7B,aAAU,SAAS,UAAU;UACvB;AACN,aAAU,SAAS;YACX;AACR,SAAM,GAAG,SAAS;;AAGpB,SAAO;GACL,SAAS;GACT,SAAS;IACP,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IACb;GACD,KAAK;GACL,iBAAiB;GACjB,YAAY;IACV;IACA;IACA;IACA;IACA;IACA;IACD;GACF;UACM,OAAO;AACd,QAAM,GAAG,SAAS;AAClB,QAAM;;;AAMV,eAAsB,WACpB,aACA,OACsB;CACtB,MAAM,SAAS,MAAM,WAAW,YAAY;AAC5C,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,uDAAuD;CAEpF,MAAM,EAAE,OAAO,SAAS,YAAY;AAGpC,KAAI,CAAC,MAAM,SAAS,CAAC,MAAM,OACzB,OAAM,IAAI,MAAM,kFAAkF;AAIpG,KAAI,QAAQ,SAAS,YACnB,OAAM,IAAI,MAAM,qBAAqB,QAAQ,OAAO,aAAa,YAAY,4CAA4C;AAI3H,KAAI,MAAM;MAEJ,CADU,MAAM,UAAU,aAAa,MAAM,MAAM,CAErD,OAAM,IAAI,MAAM,UAAU,MAAM,MAAM,uCAAuC;;CAIjF,MAAM,gBAA0B,EAAE;AAIlC,MAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C,MAAI,UACF,OAAM,IAAI,MAAM,uBAAuB,YAAY;;AAKvD,KAAI,MAAM,SAAS,MAAM,QAAQ;EAC/B,MAAM,SAAS,MAAM,WAAW,YAAY;EAC5C,MAAM,cAAc,MAAM,QACtB,OAAO,QAAO,MAAK,EAAE,OAAO,MAAM,MAAM,GACxC,MAAM,SACJ,OAAO,QAAO,MAAK,EAAE,WAAW,MAAM,OAAO,GAC7C;AAEN,MAAI,YAAY,WAAW,EACzB,OAAM,IAAI,MAAM,6BAA6B,MAAM,QAAQ,UAAU,MAAM,MAAM,KAAK,WAAW,MAAM,OAAO,KAAK;EAKrH,MAAM,EAAE,yBAAyB,MAAM,OAAO;EAC9C,MAAM,aAAa,MAAM,qBAAqB,YAAY;EAG1D,MAAM,kBAAkB,WAAW,KAAI,MAAK,MAAM,MAAM,KAAK,IAAI,IAAI;AAErE,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,iBAAiB,MAAM,KAAK,QAAQ,OAAO,IAAI;AAGrD,OAAI,eAAe,WAAW,gBAAgB,IAAI,eAAe,SAAS,iBAAiB,CACzF,OAAM,IAAI,MAAM,gDAAgD,MAAM,KAAK,qCAAqC;AAIlH,OAAI,WAAW,SAAS,KAAK,WAAW,OAAO;QAIzC,CAHgB,gBAAgB,MAAK,WACvC,WAAW,MAAM,eAAe,WAAW,OAAO,CACnD,CAEC,OAAM,IAAI,MACR,eAAe,MAAM,KAAK,4CAA4C,WAAW,KAAK,KAAK,CAAC,6EAE7F;;;AASP,MAAI,MAAM,SAAS,MAAM,QAAQ;GAE/B,MAAM,aAAa,MAAM,SADL,KAAK,aAAa,gBAAgB,yBAAyB,CACjC;AAE9C,OAAI,CAAC,WAOH,KAHoB,YAAY,MAAK,MAAK,EAAE,OAAO,MAAM,MAAM,EAC7B,SAAS,aAGzC,eAAc,KACZ,qJAED;YACQ,YAAY,MACrB,eAAc,KACZ,2JAED;OAED,OAAM,IAAI,MACR,qNAGD;QAEE;IACL,MAAM,cAAc,KAAK,MAAM,WAAW;IAK1C,IAAI,qBAA+B,EAAE;IACrC,IAAI,aAAa;AAEjB,QAAI,MAAM,OAAO;KACf,MAAM,eAAe,YAAY,SAAS,MAAM,QAAQ;AACxD,SAAI,aAAc,sBAAqB;AACvC,kBAAa,UAAU,MAAM,MAAM;eAC1B,MAAM,QAAQ;KACvB,MAAM,iBAAiB,YAAY,KAAI,MAAK,EAAE,GAAG;AACjD,UAAK,MAAM,WAAW,gBAAgB;MACpC,MAAM,eAAe,YAAY,SAAS,UAAU;AACpD,UAAI,aAAc,oBAAmB,KAAK,GAAG,aAAa;;AAE5D,0BAAqB,CAAC,GAAG,IAAI,IAAI,mBAAmB,CAAC;AACrD,kBAAa,WAAW,MAAM,OAAO;;AAGvC,QAAI,mBAAmB,SAAS,GAAG;KACjC,MAAM,oBAA8B,EAAE;AACtC,UAAK,MAAM,SAAS,SAAS;MAC3B,MAAM,iBAAiB,MAAM,KAAK,QAAQ,OAAO,IAAI;AACrD,UAAI,CAAC,mBAAmB,SAAS,eAAe,CAC9C,mBAAkB,KAAK,MAAM,KAAK;;AAGtC,SAAI,kBAAkB,SAAS,EAC7B,OAAM,IAAI,MACR,sBAAsB,kBAAkB,OAAO,yCAAyC,WAAW,wBAC5E,kBAAkB,KAAK,KAAK,CAAC,wBAC7B,mBAAmB,KAAK,KAAK,CAAC,GACtD;;;;;CAQX,MAAM,gCAAgB,IAAI,KAA2B;AACrD,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,CAAC,cAAc,IAAI,MAAM,KAAK,CAChC,eAAc,IAAI,MAAM,MAAM,EAAE,CAAC;AAEnC,gBAAc,IAAI,MAAM,KAAK,CAAE,KAAK,MAAM;;CAG5C,MAAM,gBAAgB,CAAC,GAAG,cAAc,MAAM,CAAC;CAC/C,MAAM,eAAe,QAAQ,QAAO,MAAK,EAAE,iBAAiB,CAAC;AAG7D,KAAI,YAAY,MACd,QAAO;EACL,SAAS;EACT,SAAS;GACP,iBAAiB;GACjB,eAAe,QAAQ;GACvB,gBAAgB;GACjB;EACD,GAAI,cAAc,SAAS,IAAI,EAAE,gBAAgB,eAAe,GAAG,EAAE;EACrE,YAAY;GACV,GAAI,cAAc,SAAS,IAAI,CAAC,YAAY,cAAc,OAAO,0DAA0D,GAAG,EAAE;GAChI;GACA;GACD;EACF;CAIH,MAAM,cAAc,MAAM,kBAAkB,YAAY;AACxD,KAAI,YAAY,QACd,QAAO;EACL,SAAS;EACT,OAAO,mBAAmB,YAAY;EACtC,YAAY,CAAC,qEAAqE;EACnF;CAIH,MAAM,cAAc,MAAM,SAAS,MAAM;CACzC,MAAM,aAAa,gBAAgB,mBAAmB,YAAY;CAClE,MAAM,KAAK,MAAM,kBAAkB,aAAa,YAAY,EAAE,kBAAkB,UAAU,CAAC;CAE3F,MAAM,gBAA0B,EAAE;CAClC,IAAI,iBAAiB;CACrB,IAAI,eAAe;CACnB,MAAM,iBAAwE,EAAE;CAChF,MAAM,oBAA8D,EAAE;CACtE,MAAM,eAA8B,EAAE;AAEtC,KAAI;AACF,QAAM,GAAG,MAAM,OAAO,OAAO;AAC3B,QAAK,MAAM,CAAC,SAAS,gBAAgB,eAAe;IAClD,MAAM,UAAU,KAAK,IAAI,QAAQ;AAEjC,QAAI,CAAE,MAAM,WAAW,QAAQ,EAAG;AAChC,UAAK,MAAM,KAAK,YACd,gBAAe,KAAK;MAAE,MAAM;MAAS,MAAM,EAAE;MAAM,QAAQ;MAAkB,CAAC;AAEhF;;IAGF,MAAM,UAAU,MAAM,SAAS,QAAQ;AACvC,QAAI,YAAY,MAAM;AACpB,UAAK,MAAM,KAAK,YACd,gBAAe,KAAK;MAAE,MAAM;MAAS,MAAM,EAAE;MAAM,QAAQ;MAAmB,CAAC;AAEjF;;IAIF,MAAM,SAAS,CAAC,GAAG,YAAY,CAAC,UAAU,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK;IAEnE,MAAM,QAAQ,QAAQ,MAAM,KAAK;IACjC,IAAI,eAAe;AAEnB,SAAK,MAAM,SAAS,QAAQ;KAG1B,MAAM,oBADa,MAAM,MAAM,OAAO,MAAM,IACR,SAAS,IAAI,MAAM,UAAU,GAAG;KACpE,MAAM,qBAAqB,mBAAmB,aAAsB;AAGpE,SAAI,kBAAkB;MACpB,MAAM,YAAY,4BAA4B,SAAS,MAAM,gBAAgB,mBAAmB;AAChG,UAAI,UACF,mBAAkB,KAAK;OAAE,MAAM;OAAS,SAAS;OAAW,CAAC;;AAKjE,SADgB,kBAAkB,OAAO,MAAM,EAClC;AACX;AACA,qBAAe;WAEf,gBAAe,KAAK;MAAE,MAAM;MAAS,MAAM,MAAM;MAAM,QAAQ;MAAiD,CAAC;;IAKrH,MAAM,mBAAmB,IAAI,IAC3B,YACG,QAAO,MAAK,EAAE,iBAAiB,CAC/B,KAAI,MAAK,EAAE,iBAAkB,CACjC;AAED,QAAI,iBAAiB,OAAO,GAAG;KAC7B,MAAM,QAAQ,kBAAkB,OAAO,iBAAiB;AACxD,qBAAgB;AAChB,SAAI,QAAQ,EAAG,gBAAe;;AAGhC,QAAI,cAAc;KAChB,MAAM,aAAa,MAAM,KAAK,KAAK;AACnC,WAAM,UAAU,SAAS,WAAW;AACpC,mBAAc,KAAK,QAAQ;KAG3B,MAAM,cAAc,YAAY,SAAS,WAAW;AACpD,SAAI,YACF,cAAa,KAAK;MAAE,MAAM;MAAS,OAAO;MAAa,CAAC;;;AAM9D,SAAM,aAAa,IAAI;IACrB,MAAM;IACN,OAAO;IACP,QAAQ,OAAO,QAAQ;IACxB,CAAC;IACF;AAEF,MAAI,cAAc,WAAW,GAAG;AAC9B,SAAM,GAAG,SAAS;AAClB,UAAO;IACL,SAAS;IACT,SAAS;KACP,gBAAgB,EAAE;KAClB,iBAAiB;KACjB,iBAAiB;KACjB,eAAe;KACf,oBAAoB,kBAAkB,SAAS,IAAI,oBAAoB,KAAA;KACxE;IACD,YAAY,CAAC,iEAAiE;IAC/E;;EAGH,MAAM,YAAY,kCAAkC,YAAY,WAAW,cAAc,OAAO,UAAU,eAAe;AACzH,QAAM,GAAG,OAAO,UAAU;EAE1B,MAAM,YAAY;GAAE,QAAQ;GAAY,QAAQ;GAAkB,QAAQ;GAAI;AAC9E,MAAI;GACF,MAAM,YAAY,MAAM,GAAG,UAAU;AACrC,aAAU,SAAS,UAAU;AAC7B,aAAU,SAAS,UAAU;UACvB;AACN,aAAU,SAAS;YACX;AACR,SAAM,GAAG,SAAS;;AAGpB,SAAO;GACL,SAAS;GACT,SAAS;IACP,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,oBAAoB,kBAAkB,SAAS,IAAI,oBAAoB,KAAA;IACvE,eAAe,aAAa,SAAS,IAAI,eAAe,KAAA;IACzD;GACD,GAAI,cAAc,SAAS,IAAI,EAAE,gBAAgB,eAAe,GAAG,EAAE;GACrE,KAAK;GACL,YAAY;IACV;IACA,eAAe,SAAS,IAAI,GAAG,eAAe,OAAO,sDAAsD;IAC3G,aAAa,SAAS,IAAI,YAAY,aAAa,OAAO,oEAAoE;IAC9H,cAAc,SAAS,IAAI,SAAS,cAAc,OAAO,4CAA4C;IACrG;IACA;IACA;IACD,CAAC,OAAO,QAAQ;GAClB;UACM,OAAO;AACd,QAAM,GAAG,SAAS;AAClB,QAAM;;;;;;;AAUV,SAAS,kBAAkB,OAAiB,OAA4B;CACtE,MAAM,EAAE,MAAM,WAAW,mBAAmB;CAC5C,MAAM,UAAU,OAAO;CAGvB,MAAM,cAAc,KAAK,IAAI,GAAG,UAAU,GAAG;CAC7C,MAAM,YAAY,KAAK,IAAI,MAAM,QAAQ,UAAU,GAAG;AAGtD,KAAI,WAAW,KAAK,UAAU,MAAM,QAAQ;EAC1C,MAAM,WAAW,cAAc,MAAM,UAAW,WAAW,eAAe;AAC1E,MAAI,aAAa,MAAM;AACrB,SAAM,WAAW;AACjB,UAAO;;;AAKX,MAAK,IAAI,IAAI,aAAa,IAAI,WAAW,KAAK;AAC5C,MAAI,MAAM,QAAS;EACnB,MAAM,WAAW,cAAc,MAAM,IAAK,WAAW,eAAe;AACpE,MAAI,aAAa,MAAM;AACrB,SAAM,KAAK;AACX,UAAO;;;AAIX,QAAO;;;;;;;;;;AAWT,SAAgB,cAAc,MAAc,UAAkB,eAAsC;AAGlG,MAAK,MAAM,SAAS;EAAC;EAAK;EAAK;EAAI,EAAE;EACnC,MAAM,SAAS,GAAG,QAAQ,WAAW;AACrC,MAAI,KAAK,SAAS,OAAO,CACvB,QAAO,KAAK,QAAQ,QAAQ,cAAc;;AAU9C,KAAI,KAAK,SAAS,IAAI,SAAS,GAAG,CAChC,QAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,cAAc,GAAG;AAK5D,KAAI,KAAK,SAAS,SAAS,EAAE;AAG3B,MADoB,iBAAiB,MAAM,SAAS,GAClC,EAChB,QAAO;EAMT,MAAM,MAAM,KAAK,QAAQ,SAAS;EAClC,MAAM,aAAa,MAAM,IAAI,KAAK,MAAM,KAAM;EAC9C,MAAM,YAAY,MAAM,SAAS,SAAS,KAAK,SAAS,KAAK,MAAM,SAAS,UAAW;EAEvF,MAAM,oBAAoB,SAAS,SAAS,KAAK,WAAW,SAAS,GAAI;EACzE,MAAM,kBAAkB,SAAS,SAAS,KAAK,WAAW,SAAS,SAAS,SAAS,GAAI;AAGzF,MAAI,qBAAqB,WAAW,WAAW,CAC7C,QAAO;AAGT,MAAI,mBAAmB,WAAW,UAAU,CAC1C,QAAO;AAGT,SAAO,KAAK,QAAQ,UAAU,cAAc;;AAG9C,QAAO;;;AAIT,SAAS,iBAAiB,KAAa,KAAqB;CAC1D,IAAI,QAAQ;CACZ,IAAI,MAAM;AACV,QAAO,OAAO,IAAI,SAAS,IAAI,QAAQ;EACrC,MAAM,MAAM,IAAI,QAAQ,KAAK,IAAI;AACjC,MAAI,QAAQ,GAAI;AAChB;AACA,QAAM,MAAM,IAAI;;AAElB,QAAO;;;AAIT,SAAS,WAAW,IAAqB;AACvC,QAAO,KAAK,KAAK,GAAG;;;;;;;AAQtB,SAAS,kBAAkB,OAAiB,SAA8B;CACxE,IAAI,QAAQ;CACZ,MAAM,kBAAkB,MAAM,KAAK,KAAK;CAGxC,IAAI,gBAAgB;CACpB,IAAI,oBAAoB;AACxB,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,UAAU,MAAM,GAAI,MAAM;AAChC,MAAI,mBAAmB;AACrB,mBAAgB;AAChB,OAAI,QAAQ,SAAS,IAAI,CAAE,qBAAoB;AAC/C;;AAEF,MAAI,QAAQ,WAAW,UAAU,IAAI,QAAQ,WAAW,UAAU,EAAE;AAClE,mBAAgB;AAEhB,OAAI,QAAQ,SAAS,IAAI,IAAI,CAAC,QAAQ,SAAS,IAAI,CACjD,qBAAoB;AAEtB;;AAGF,MAAI,iBAAiB,KAAK,QAAQ,SAAS,KAAK,CAAC,QAAQ,WAAW,KAAK,IAAI,CAAC,QAAQ,WAAW,KAAK,IAAI,CAAC,QAAQ,WAAW,IAAI,CAChI;;CAIJ,IAAI;AACJ,KAAI,iBAAiB,EACnB,YAAW,gBAAgB;MACtB;AAEL,aAAW;AACX,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,MAAM,UAAU,MAAM,GAAI,MAAM;AAChC,OAAI,MAAM,KAAK,QAAQ,WAAW,KAAK,EAAE;AACvC,eAAW,IAAI;AACf;;AAEF,OAAI,YAAY,kBAAkB,YAAY,oBACzC,YAAY,kBAAkB,YAAY,oBAC1C,YAAY,mBAAmB,YAAY,qBAC3C,YAAY,mBAAmB,YAAY,mBAAiB;AAC/D,eAAW,IAAI;AACf;;AAEF,OAAI,WAAW,KAAK,QAAQ,SAAS,EAAG;AACxC,OAAI,aAAa,KAAK,QAAQ,SAAS,EAAG;;;CAG9C,MAAM,WAAqB,EAAE;AAE7B,MAAK,MAAM,OAAO,QAEhB,KAAI,CAAC,gBAAgB,SAAS,IAAI,EAAE;AAClC,WAAS,KAAK,IAAI;AAClB;;AAIJ,KAAI,SAAS,SAAS,EACpB,OAAM,OAAO,UAAU,GAAG,GAAG,SAAS;AAGxC,QAAO"}

package/dist/{availability-Bj9zOfEn.mjs → availability-sWWRz2W0.mjs}

@@ -27,7 +27,12 @@ const TOOL_REQUIREMENTS = {
 	contentrain_apply: {
 		projectRoot: true,
 		capabilities: ["sourceRead"]
-	}
+	},
+	contentrain_media_list: { media: true },
+	contentrain_media_get: { media: true },
+	contentrain_media_ingest: { media: true },
+	contentrain_media_update: { media: true },
+	contentrain_media_delete: { media: true }
 };
 /**
 * Whether a tool can ever succeed for this provider + projectRoot pair.
@@ -39,9 +44,10 @@ function isToolAvailable(name, provider, projectRoot) {
 	const req = TOOL_REQUIREMENTS[name];
 	if (!req) return true;
 	if (req.projectRoot && !projectRoot) return false;
+	if (req.media && !provider.media) return false;
 	return (req.capabilities ?? []).every((cap) => provider.capabilities[cap]);
 }
 //#endregion
 export { isToolAvailable as n, TOOL_REQUIREMENTS as t };
 
-//# sourceMappingURL=availability-Bj9zOfEn.mjs.map
+//# sourceMappingURL=availability-sWWRz2W0.mjs.map

package/dist/availability-sWWRz2W0.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"availability-sWWRz2W0.mjs","names":[],"sources":["../src/tools/availability.ts"],"sourcesContent":["import type { ProviderCapabilities } from '@contentrain/types'\n\n/**\n * Declarative availability requirements for capability-gated tools.\n *\n * This is the single source of truth `createServer` uses to decide which\n * tools to register for a given provider + projectRoot combination. Tools\n * absent from this map are always available. The requirements mirror the\n * call-time guards inside each tool handler (`capabilityError`) — those\n * guards remain as defense in depth, but a client talking to a remote\n * provider no longer sees tools that could never succeed in `tools/list`.\n *\n * `contentrain_validate` is intentionally NOT listed: read-only validate\n * works over any provider; only `fix: true` needs a local worktree and\n * keeps its call-time guard.\n */\nexport interface ToolRequirements {\n  /** Tool needs a local project root on disk (worktree git transactions, IDE config, AST scans). */\n  projectRoot?: boolean\n  /** Provider capability flags that must all be `true`. */\n  capabilities?: readonly (keyof ProviderCapabilities)[]\n  /** Tool needs the provider's optional media facet (`RepoProvider.media`). */\n  media?: boolean\n}\n\nexport const TOOL_REQUIREMENTS: Readonly<Record<string, ToolRequirements>> = {\n  contentrain_init: { projectRoot: true },\n  contentrain_scaffold: { projectRoot: true },\n  contentrain_doctor: { projectRoot: true },\n  contentrain_bulk: { projectRoot: true },\n  contentrain_submit: { projectRoot: true, capabilities: ['localWorktree', 'pushRemote'] },\n  contentrain_merge: { projectRoot: true, capabilities: ['localWorktree'] },\n  contentrain_branch_list: { projectRoot: true, capabilities: ['localWorktree'] },\n  contentrain_branch_delete: { projectRoot: true, capabilities: ['localWorktree'] },\n  contentrain_scan: { projectRoot: true, capabilities: ['astScan'] },\n  // Registration requires the extract path (sourceRead); reuse mode\n  // additionally needs sourceWrite, which stays a call-time check because\n  // it depends on the `mode` input.\n  contentrain_apply: { projectRoot: true, capabilities: ['sourceRead'] },\n  // Media tools exist only where the provider exposes a media stack\n  // (Studio MCP Cloud). Local and plain remote providers never list them.\n  contentrain_media_list: { media: true },\n  contentrain_media_get: { media: true },\n  contentrain_media_ingest: { media: true },\n  contentrain_media_update: { media: true },\n  contentrain_media_delete: { media: true },\n}\n\n/**\n * Whether a tool can ever succeed for this provider + projectRoot pair.\n * Used by `createServer` to filter registration; also exported for\n * embedders (e.g. Studio) that want to reason about the effective tool\n * surface without spinning up a server.\n */\nexport function isToolAvailable(\n  name: string,\n  provider: { capabilities: ProviderCapabilities, media?: unknown },\n  projectRoot: string | undefined,\n): boolean {\n  const req = TOOL_REQUIREMENTS[name]\n  if (!req) return true\n  if (req.projectRoot && !projectRoot) return false\n  if (req.media && !provider.media) return false\n  return (req.capabilities ?? []).every(cap => provider.capabilities[cap])\n}\n"],"mappings":";AAyBA,MAAa,oBAAgE;CAC3E,kBAAkB,EAAE,aAAa,MAAM;CACvC,sBAAsB,EAAE,aAAa,MAAM;CAC3C,oBAAoB,EAAE,aAAa,MAAM;CACzC,kBAAkB,EAAE,aAAa,MAAM;CACvC,oBAAoB;EAAE,aAAa;EAAM,cAAc,CAAC,iBAAiB,aAAa;EAAE;CACxF,mBAAmB;EAAE,aAAa;EAAM,cAAc,CAAC,gBAAgB;EAAE;CACzE,yBAAyB;EAAE,aAAa;EAAM,cAAc,CAAC,gBAAgB;EAAE;CAC/E,2BAA2B;EAAE,aAAa;EAAM,cAAc,CAAC,gBAAgB;EAAE;CACjF,kBAAkB;EAAE,aAAa;EAAM,cAAc,CAAC,UAAU;EAAE;CAIlE,mBAAmB;EAAE,aAAa;EAAM,cAAc,CAAC,aAAa;EAAE;CAGtE,wBAAwB,EAAE,OAAO,MAAM;CACvC,uBAAuB,EAAE,OAAO,MAAM;CACtC,0BAA0B,EAAE,OAAO,MAAM;CACzC,0BAA0B,EAAE,OAAO,MAAM;CACzC,0BAA0B,EAAE,OAAO,MAAM;CAC1C;;;;;;;AAQD,SAAgB,gBACd,MACA,UACA,aACS;CACT,MAAM,MAAM,kBAAkB;AAC9B,KAAI,CAAC,IAAK,QAAO;AACjB,KAAI,IAAI,eAAe,CAAC,YAAa,QAAO;AAC5C,KAAI,IAAI,SAAS,CAAC,SAAS,MAAO,QAAO;AACzC,SAAQ,IAAI,gBAAgB,EAAE,EAAE,OAAM,QAAO,SAAS,aAAa,KAAK"}

package/dist/branch-lifecycle-AwBJIheA.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-lifecycle-AwBJIheA.d.mts","names":[],"sources":["../src/git/branch-lifecycle.ts"],"mappings":";;;;UAIiB,aAAA;EACf,OAAA;EACA,SAAA;EACA,eAAA;AAAA;AAAA,UAGe,iBAAA;EACf,KAAA;EACA,MAAA;EACA,QAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;AAAA;;;;;iBAOoB,qBAAA,CAAsB,WAAA,WAAsB,OAAA,CAAQ,aAAA;;;;;;iBAoEpD,iBAAA,CAAkB,WAAA,WAAsB,OAAA,CAAQ,iBAAA;AAAA,UAkDrD,gBAAA;;EAEf,MAAA;EAxH0C;EA0H1C,IAAA;EA1HwE;EA4HxE,IAAA;EA5HqF;EA8HrF,KAAA;EA1DqC;EA4DrC,YAAA;AAAA;;;;;;AAVF;;;;;;;;iBA0BsB,UAAA,CACpB,WAAA,UACA,IAAA;EAAQ,MAAA;EAAgB,IAAA;AAAA,IACvB,OAAA,CAAQ,gBAAA;;;;;;iBA0FW,WAAA,CACpB,GAAA,EAAK,SAAA,EACL,GAAA,UACA,IAAA,UACA,IAAA;EAAS,gBAAA;AAAA,IACR,OAAA;;;;AALH;;;;;;;;;;;iBAiCsB,sBAAA,CACpB,WAAA,UACA,QAAA,YACA,IAAA,WACA,IAAA;EAAS,iBAAA;AAAA,IACR,OAAA,CAAQ,GAAA;AAAA,UA4EM,kBAAA;EACf,OAAA;EA7EQ;EA+ER,OAAA;EAlFA;EAoFA,OAAA;AAAA;;;;;;AALF;;;iBAgBsB,kBAAA,CACpB,WAAA,UACA,MAAA,UACA,IAAA;EAAS,MAAA,GAAS,iBAAA;EAA0B,SAAA;AAAA,IAC3C,OAAA,CAAQ,kBAAA;AAAA,UAuBM,gBAAA;EACf,MAAA;EACA,QAAA;IAAY,IAAA;IAAc,GAAA;EAAA;EAzBjB;EA2BT,KAAA;AAAA;;;;;;iBAQoB,oBAAA,CACpB,WAAA,UACA,IAAA;EAAS,SAAA;AAAA,IACR,OAAA,CAAQ,gBAAA;AAAA,UAoBM,iBAAA;EA1DY;EA4D3B,OAAA;EACA,IAAA;EACA,MAAA;EACA,OAAA;AAAA;;;;;;;;iBAYoB,yBAAA,CACpB,WAAA,UACA,IAAA;EAAS,MAAA,GAAS,iBAAA;EAA0B,GAAA;EAAc,MAAA;EAAkB,SAAA;AAAA,IAC3E,OAAA,CAAQ,iBAAA"}
+{"version":3,"file":"branch-lifecycle-AwBJIheA.d.mts","names":[],"sources":["../src/git/branch-lifecycle.ts"],"mappings":";;;;UAKiB,aAAA;EACf,OAAA;EACA,SAAA;EACA,eAAA;AAAA;AAAA,UAGe,iBAAA;EACf,KAAA;EACA,MAAA;EACA,QAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;AAAA;;;;;iBAOoB,qBAAA,CAAsB,WAAA,WAAsB,OAAA,CAAQ,aAAA;;;;;;iBAoEpD,iBAAA,CAAkB,WAAA,WAAsB,OAAA,CAAQ,iBAAA;AAAA,UAkDrD,gBAAA;;EAEf,MAAA;EAxH0C;EA0H1C,IAAA;EA1HwE;EA4HxE,IAAA;EA5HqF;EA8HrF,KAAA;EA1DqC;EA4DrC,YAAA;AAAA;;;;;;AAVF;;;;;;;;iBA0BsB,UAAA,CACpB,WAAA,UACA,IAAA;EAAQ,MAAA;EAAgB,IAAA;AAAA,IACvB,OAAA,CAAQ,gBAAA;;;;;;iBA0FW,WAAA,CACpB,GAAA,EAAK,SAAA,EACL,GAAA,UACA,IAAA,UACA,IAAA;EAAS,gBAAA;AAAA,IACR,OAAA;;;;AALH;;;;;;;;;;;iBAiCsB,sBAAA,CACpB,WAAA,UACA,QAAA,YACA,IAAA,WACA,IAAA;EAAS,iBAAA;AAAA,IACR,OAAA,CAAQ,GAAA;AAAA,UAkFM,kBAAA;EACf,OAAA;EAnFQ;EAqFR,OAAA;EAxFA;EA0FA,OAAA;AAAA;;;;;;AALF;;;iBAgBsB,kBAAA,CACpB,WAAA,UACA,MAAA,UACA,IAAA;EAAS,MAAA,GAAS,iBAAA;EAA0B,SAAA;AAAA,IAC3C,OAAA,CAAQ,kBAAA;AAAA,UAuBM,gBAAA;EACf,MAAA;EACA,QAAA;IAAY,IAAA;IAAc,GAAA;EAAA;EAzBjB;EA2BT,KAAA;AAAA;;;;;;iBAQoB,oBAAA,CACpB,WAAA,UACA,IAAA;EAAS,SAAA;AAAA,IACR,OAAA,CAAQ,gBAAA;AAAA,UAoBM,iBAAA;EA1DY;EA4D3B,OAAA;EACA,IAAA;EACA,MAAA;EACA,OAAA;AAAA;;;;;;;;iBAYoB,yBAAA,CACpB,WAAA,UACA,IAAA;EAAS,MAAA,GAAS,iBAAA;EAA0B,GAAA;EAAc,MAAA;EAAkB,SAAA;AAAA,IAC3E,OAAA,CAAQ,iBAAA"}

package/dist/{branch-lifecycle-D7tXOE4f.mjs → branch-lifecycle-Dd84lx37.mjs}

@@ -1,6 +1,57 @@
 import { t as readConfig } from "./config-DlFcTxFG.mjs";
 import { CONTENTRAIN_BRANCH } from "@contentrain/types";
 import { simpleGit } from "simple-git";
+//#region src/git/identity.ts
+/**
+* Git identity + guard-safe `simple-git` construction for MCP write operations.
+*
+* simple-git >= 3.34 bundles `@simple-git/argv-parser`, whose block-unsafe
+* guard rejects a `git` invocation when any of ~18 "unsafe" variables (EDITOR,
+* GIT_ASKPASS, PAGER, GIT_SSH_COMMAND, GIT_PROXY_COMMAND, …) is passed
+* EXPLICITLY through `.env()`. Crucially, the guard only scans the object
+* handed to `.env()` — it never inspects the inherited process environment.
+*
+* The rule this module enforces: NEVER spread `process.env` into `.env()`.
+*   - Commit identity is supplied as `-c user.*` config (guard-safe: `user.name`
+*     / `user.email` are not on any unsafe list, and git honours them for both
+*     the author and the committer). See {@link authorConfig}.
+*   - The rare instance that genuinely needs the inherited environment — network
+*     push/fetch, which relies on the host's askpass/SSH/proxy setup to
+*     authenticate — opts out of the affected guard categories via `unsafe`
+*     instead of hiding the environment. See {@link NETWORK_UNSAFE}.
+*/
+const DEFAULT_AUTHOR_NAME = "Contentrain";
+const DEFAULT_AUTHOR_EMAIL = "ai@contentrain.io";
+/**
+* Commit identity as `-c` config entries for `simpleGit(dir, { config })`.
+* Passed as arguments (not env) so the block-unsafe guard is never triggered,
+* regardless of what the host process exports. Sets author + committer alike.
+*/
+function authorConfig() {
+	const name = process.env["CONTENTRAIN_AUTHOR_NAME"] ?? DEFAULT_AUTHOR_NAME;
+	const email = process.env["CONTENTRAIN_AUTHOR_EMAIL"] ?? DEFAULT_AUTHOR_EMAIL;
+	return [`user.name=${name}`, `user.email=${email}`];
+}
+/**
+* Guard opt-outs for network `git` instances that MUST inherit the real
+* environment (credential askpass helpers, SSH agent, proxy) to authenticate a
+* push/fetch. Covers every guard category reachable from an inherited env var,
+* so the command never trips regardless of what the host (VS Code, CI) exports
+* — while still leaving arg-injection protections (custom binaries, `ext::`
+* protocol, `--upload-pack`) intact.
+*/
+const NETWORK_UNSAFE = {
+	allowUnsafeAskPass: true,
+	allowUnsafeConfigEnvCount: true,
+	allowUnsafeConfigPaths: true,
+	allowUnsafeDiffExternal: true,
+	allowUnsafeEditor: true,
+	allowUnsafeGitProxy: true,
+	allowUnsafePager: true,
+	allowUnsafeSshCommand: true,
+	allowUnsafeTemplateDir: true
+};
+//#endregion
 //#region src/git/branch-lifecycle.ts
 /**
 * Lists all local contentrain/* branches, deletes those already merged
@@ -255,11 +306,18 @@ function contentrainRemoteName() {
 * simple-git instance hardened for network operations: `timeout.block` kills
 * the child after N ms without output (hung SSH passphrase prompts), and
 * `GIT_TERMINAL_PROMPT=0` refuses interactive HTTPS credential prompts.
+*
+* This is the one place that legitimately inherits the real environment — push
+* needs the host's askpass/SSH/proxy setup to authenticate. Because `.env()` is
+* therefore unavoidable, `unsafe` opts out of the block-unsafe guard categories
+* that inherited variables (EDITOR, GIT_ASKPASS, …) would otherwise trip; see
+* NETWORK_UNSAFE. Arg-injection protections stay intact.
 */
 function networkGit(projectRoot, timeoutMs) {
 	return simpleGit({
 		baseDir: projectRoot,
-		timeout: { block: timeoutMs }
+		timeout: { block: timeoutMs },
+		unsafe: NETWORK_UNSAFE
 	}).env({
 		...process.env,
 		GIT_TERMINAL_PROMPT: "0"
@@ -439,6 +497,6 @@ async function pruneMergedRemoteBranches(projectRoot, opts) {
 	};
 }
 //#endregion
-export { deleteRemoteBranch as a, pruneMergedRemoteBranches as c, cleanupMergedBranches as i, checkBranchHealth as n, isRefMerged as o, classifyMergedBranches as r, listRemoteCrBranches as s, branchDiff as t };
+export { deleteRemoteBranch as a, pruneMergedRemoteBranches as c, cleanupMergedBranches as i, authorConfig as l, checkBranchHealth as n, isRefMerged as o, classifyMergedBranches as r, listRemoteCrBranches as s, branchDiff as t };
 
-//# sourceMappingURL=branch-lifecycle-D7tXOE4f.mjs.map
+//# sourceMappingURL=branch-lifecycle-Dd84lx37.mjs.map