@contentrain/mcp 3.0.2 → 3.1.0

package/dist/{doctor-DNPuGgcg.mjs.map → doctor-B7G0oFxO.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"doctor-DNPuGgcg.mjs","names":[],"sources":["../src/core/doctor.ts"],"sourcesContent":["import { join } from 'node:path'\nimport { createGit } from '../git/identity.js'\nimport { readdir, stat } from 'node:fs/promises'\nimport type { Dirent } from 'node:fs'\nimport type { ContentrainConfig, ModelDefinition } from '@contentrain/types'\nimport { readConfig } from './config.js'\nimport { listModels, readModel, validateModelDefinition } from './model-manager.js'\nimport { resolveContentDir, resolveJsonFilePath, resolveLocaleStrategy } from './content-manager.js'\nimport { autoDetectSourceDirs, discoverFiles } from './scan-config.js'\nimport { checkBranchHealth, listRemoteCrBranches } from '../git/branch-lifecycle.js'\nimport { contentrainDir, pathExists, readDir, readJson, readText } from '../util/fs.js'\n\n/**\n * Doctor — project health report.\n *\n * The public entry point is `runDoctor(projectRoot, { usage? })`. It is\n * inherently local-filesystem work (Node version, git install, file\n * mtimes, orphan directory detection), so the MCP tool surface gates\n * it behind the `localWorktree` capability — same pattern as\n * `contentrain_setup` and normalize.\n *\n * The report is structured JSON so three consumers can share it:\n *\n * - The `contentrain doctor` CLI command pretty-prints the checks.\n * - The Serve UI `/api/doctor` route returns the report to the\n *   Dashboard's Doctor panel.\n * - Automation (CI, Studio) gets a deterministic JSON shape it can\n *   assert against.\n *\n * Usage analysis (`--usage`) is a heavier, opt-in branch — it scans\n * every source file in the repo for content-key references. Kept\n * behind the flag so the default doctor run stays fast.\n */\n\nexport type CheckSeverity = 'error' | 'warning' | 'info'\n\nexport interface DoctorCheck {\n  name: string\n  pass: boolean\n  detail: string\n  /**\n   * `error` — default for failing checks. Blocks a clean bill of health.\n   * `warning` — failing-but-not-blocking (e.g. pending branches above\n   *   threshold, stale SDK client).\n   * `info` — passed check; pure informational.\n   */\n  severity?: CheckSeverity\n}\n\nexport interface UnusedKeyEntry {\n  model: string\n  kind: string\n  key: string\n  locale: string\n}\n\nexport interface DuplicateValueEntry {\n  model: string\n  locale: string\n  value: string\n  keys: string[]\n}\n\nexport interface MissingLocaleEntry {\n  model: string\n  key: string\n  missingIn: string\n}\n\nexport interface DoctorUsageAnalysis {\n  unusedKeys: UnusedKeyEntry[]\n  duplicateValues: DuplicateValueEntry[]\n  missingLocaleKeys: MissingLocaleEntry[]\n}\n\nexport interface DoctorReport {\n  checks: DoctorCheck[]\n  summary: {\n    total: number\n    passed: number\n    failed: number\n    warnings: number\n  }\n  /** Present only when `options.usage === true`. */\n  usage?: DoctorUsageAnalysis\n}\n\nexport interface RunDoctorOptions {\n  /** Run heavier `--usage` analysis (unused keys, duplicates, locale gaps). */\n  usage?: boolean\n}\n\nexport async function runDoctor(\n  projectRoot: string,\n  options: RunDoctorOptions = {},\n): Promise<DoctorReport> {\n  const checks: DoctorCheck[] = []\n\n  // ─── 1. Git installed ───\n  try {\n    const git = createGit(projectRoot)\n    const version = await git.version()\n    checks.push({\n      name: 'Git',\n      pass: true,\n      detail: `v${version.major}.${version.minor}.${version.patch}`,\n    })\n  } catch {\n    checks.push({ name: 'Git', pass: false, detail: 'Not installed or not in PATH', severity: 'error' })\n  }\n\n  // ─── 2. Git repo initialized ───\n  const hasGit = await pathExists(join(projectRoot, '.git'))\n  checks.push({\n    name: 'Git repository',\n    pass: hasGit,\n    detail: hasGit ? projectRoot : 'No .git directory found',\n    severity: hasGit ? undefined : 'error',\n  })\n\n  // ─── 3. Node version ───\n  const nodeVersion = process.versions.node\n  const [major] = nodeVersion.split('.').map(Number)\n  const nodePass = (major ?? 0) >= 22\n  checks.push({\n    name: 'Node.js',\n    pass: nodePass,\n    detail: `v${nodeVersion}${nodePass ? '' : ' (requires ≥22)'}`,\n    severity: nodePass ? undefined : 'error',\n  })\n\n  // ─── 4. .contentrain/ structure ───\n  const crDir = contentrainDir(projectRoot)\n  const hasCrDir = await pathExists(crDir)\n  const hasConfig = await pathExists(join(crDir, 'config.json'))\n  const hasModels = await pathExists(join(crDir, 'models'))\n  const hasContent = await pathExists(join(crDir, 'content'))\n  const structurePass = hasCrDir && hasConfig && hasModels && hasContent\n\n  checks.push({\n    name: '.contentrain/ structure',\n    pass: structurePass,\n    detail: !hasCrDir\n      ? 'Not initialized — run `contentrain init`'\n      : [\n          hasConfig ? null : 'missing config.json',\n          hasModels ? null : 'missing models/',\n          hasContent ? null : 'missing content/',\n        ].filter(Boolean).join(', ') || 'OK',\n    severity: structurePass ? undefined : 'error',\n  })\n\n  // ─── 5. Config parseable ───\n  let config: ContentrainConfig | null = null\n  if (hasConfig) {\n    config = await readConfig(projectRoot)\n    checks.push({\n      name: 'Config',\n      pass: config !== null,\n      detail: config\n        ? `stack: ${config.stack}, locales: ${config.locales.supported.join(', ')}`\n        : 'Failed to parse config.json',\n      severity: config ? undefined : 'error',\n    })\n  }\n\n  // ─── 6. Models parse AND satisfy the schema contract ───\n  //\n  // This check used to report \"all valid\" on the strength of JSON.parse alone,\n  // which was a claim it had not earned. Model reads are unvalidated casts, so a\n  // definition can be structurally wrong — a missing title_field, a field\n  // constraint that cannot hold — and still load without a word. Doctor reports;\n  // `contentrain validate --fix` is what repairs.\n  if (hasCrDir) {\n    try {\n      // Enumerate the files, not `listModels`. `listModels` drops anything that\n      // fails to parse, so routing this check through it made the \"failed to\n      // parse\" branch unreachable — a corrupt model file was invisible to the\n      // check whose job is to find it.\n      const modelsDir = join(crDir, 'models')\n      const files = (await readDir(modelsDir)).filter(f => f.endsWith('.json'))\n      const parsed = await Promise.all(\n        files.map(f => readJson<ModelDefinition>(join(modelsDir, f))),\n      )\n      const unparseable = files.filter((_, i) => parsed[i] === null)\n      const invalid = parsed\n        .filter((m): m is ModelDefinition => m !== null)\n        .filter(m => validateModelDefinition(m).errors.length > 0)\n        .map(m => m.id)\n      const models = parsed.filter((m): m is ModelDefinition => m !== null)\n\n      const problems = [\n        ...(unparseable.length > 0 ? [`${unparseable.length} failed to parse (${unparseable.join(', ')})`] : []),\n        ...(invalid.length > 0 ? [`${invalid.length} invalid (${invalid.join(', ')}) — run: contentrain validate --fix`] : []),\n      ]\n      checks.push({\n        name: 'Models',\n        pass: problems.length === 0,\n        detail: `${models.length} model(s)${problems.length === 0 ? ', all valid' : `, ${problems.join('; ')}`}`,\n        severity: problems.length === 0 ? undefined : 'error',\n      })\n    } catch {\n      checks.push({ name: 'Models', pass: false, detail: 'Failed to read models', severity: 'error' })\n    }\n  }\n\n  // ─── 7. Orphan content ───\n  if (hasCrDir) {\n    const orphans = await findOrphanContent(projectRoot)\n    checks.push({\n      name: 'Orphan content',\n      pass: orphans.length === 0,\n      detail: orphans.length === 0 ? 'None' : `Found: ${orphans.join(', ')}`,\n      severity: orphans.length === 0 ? undefined : 'warning',\n    })\n  }\n\n  // ─── 8. Stale contentrain branches ───\n  if (hasGit) {\n    try {\n      const health = await checkBranchHealth(projectRoot)\n      checks.push({\n        name: 'Pending branches',\n        pass: !health.blocked && !health.warning,\n        detail: health.message\n          ?? (health.unmerged === 0 ? 'None' : `${health.unmerged} active cr/* branch(es)`),\n        severity: health.blocked ? 'error' : health.warning ? 'warning' : undefined,\n      })\n    } catch {\n      checks.push({ name: 'Pending branches', pass: true, detail: 'Could not check' })\n    }\n\n    // ─── 8b. Remote cr/* branches ───\n    // Authoritative ls-remote count (local branch pressure cannot see the\n    // remote pile). Best-effort: skipped entirely without a remote, and an\n    // unreachable remote is informational — doctor never fails offline.\n    const remoteList = await listRemoteCrBranches(projectRoot, { timeoutMs: 5000 })\n    if (remoteList) {\n      if (remoteList.error) {\n        checks.push({\n          name: 'Remote branches',\n          pass: true,\n          detail: `Could not check ${remoteList.remote} (offline?)`,\n          severity: 'info',\n        })\n      } else {\n        const count = remoteList.branches.length\n        const warnLimit = config?.branchWarnLimit ?? 50\n        const warn = count >= warnLimit\n        checks.push({\n          name: 'Remote branches',\n          pass: !warn,\n          detail: count === 0\n            ? `None on ${remoteList.remote}`\n            : `${count} cr/* branch(es) on ${remoteList.remote}${warn ? ' — run `contentrain prune` to remove merged leftovers' : ''}`,\n          severity: warn ? 'warning' : undefined,\n        })\n      }\n    }\n  }\n\n  // ─── 9. SDK client freshness ───\n  const clientDir = join(crDir, 'client')\n  const modelsDir = join(crDir, 'models')\n  if (await pathExists(clientDir) && await pathExists(modelsDir)) {\n    try {\n      const [clientMtime, modelsMtime] = await Promise.all([\n        newestFileMtime(clientDir),\n        newestFileMtime(modelsDir),\n      ])\n      if (clientMtime === null || modelsMtime === null) {\n        checks.push({ name: 'SDK client', pass: true, detail: 'Could not check' })\n      } else {\n        const fresh = clientMtime >= modelsMtime\n        checks.push({\n          name: 'SDK client',\n          pass: fresh,\n          detail: fresh ? 'Up to date' : 'Stale — run `contentrain generate`',\n          severity: fresh ? undefined : 'warning',\n        })\n      }\n    } catch {\n      checks.push({ name: 'SDK client', pass: true, detail: 'Could not check' })\n    }\n  }\n\n  // ─── 10–12. Usage analysis (optional) ───\n  let usage: DoctorUsageAnalysis | undefined\n  if (options.usage && hasCrDir && config) {\n    const [unusedKeys, duplicateValues, missingLocaleKeys] = await Promise.all([\n      analyzeUnusedKeys(projectRoot, config),\n      analyzeDuplicateValues(projectRoot, config),\n      analyzeMissingLocaleKeys(projectRoot, config),\n    ])\n    usage = { unusedKeys, duplicateValues, missingLocaleKeys }\n\n    checks.push({\n      name: 'Unused dictionary keys',\n      pass: unusedKeys.length === 0,\n      detail: unusedKeys.length === 0\n        ? 'All dictionary keys referenced in source'\n        : `${unusedKeys.length} dictionary key(s) not referenced in source code`,\n      severity: unusedKeys.length === 0 ? undefined : 'warning',\n    })\n\n    checks.push({\n      name: 'Duplicate dictionary values',\n      pass: duplicateValues.length === 0,\n      detail: duplicateValues.length === 0\n        ? 'No duplicate values'\n        : `${duplicateValues.length} value(s) mapped to multiple keys`,\n      severity: duplicateValues.length === 0 ? undefined : 'warning',\n    })\n\n    checks.push({\n      name: 'Locale key coverage',\n      pass: missingLocaleKeys.length === 0,\n      detail: missingLocaleKeys.length === 0\n        ? 'All locales have matching keys'\n        : `${missingLocaleKeys.length} key(s) missing in some locales`,\n      severity: missingLocaleKeys.length === 0 ? undefined : 'warning',\n    })\n  }\n\n  const passed = checks.filter(c => c.pass).length\n  const failed = checks.length - passed\n  const warnings = checks.filter(c => !c.pass && c.severity === 'warning').length\n\n  const report: DoctorReport = {\n    checks,\n    summary: { total: checks.length, passed, failed, warnings },\n  }\n  if (usage) report.usage = usage\n  return report\n}\n\n/**\n * Newest mtime among the files under `dir`, recursively — null if it holds none.\n *\n * Stat the files, never the directory. A directory's mtime only moves when an\n * entry is added, removed, or renamed inside it: `generate` rewrites the client\n * files in place, so `.contentrain/client` never moves after the first run,\n * while a selective sync recreates model files via `git checkout`, which does\n * move `.contentrain/models`. Comparing the two directories therefore reported\n * \"stale\" permanently after any model save.\n */\nasync function newestFileMtime(dir: string): Promise<number | null> {\n  const entries: Dirent[] = await readdir(dir, { withFileTypes: true }).catch(() => [])\n  const mtimes = await Promise.all(entries.map(async (entry) => {\n    const full = join(dir, entry.name)\n    if (entry.isDirectory()) return newestFileMtime(full)\n    return stat(full).then(s => s.mtimeMs, () => null)\n  }))\n  const known = mtimes.filter((m): m is number => m !== null)\n  return known.length > 0 ? Math.max(...known) : null\n}\n\nasync function findOrphanContent(projectRoot: string): Promise<string[]> {\n  const crDir = contentrainDir(projectRoot)\n  const models = await listModels(projectRoot)\n  const orphans: string[] = []\n\n  const knownContentDirs = new Set<string>()\n  for (const m of models) {\n    const full = await readModel(projectRoot, m.id)\n    const modelForPath = full\n      ? {\n          ...full,\n          content_path: full.content_path ?? (m as { content_path?: string }).content_path,\n        }\n      : {\n          id: m.id,\n          name: m.id,\n          kind: m.kind,\n          domain: m.domain,\n          i18n: m.i18n,\n          fields: {},\n          content_path: (m as { content_path?: string }).content_path,\n        }\n    knownContentDirs.add(resolveContentDir(projectRoot, modelForPath))\n  }\n\n  const contentDir = join(crDir, 'content')\n  if (await pathExists(contentDir)) {\n    const domains = await readDir(contentDir)\n    for (const domain of domains) {\n      const domainDir = join(contentDir, domain)\n      const entries = await readDir(domainDir)\n      for (const entry of entries) {\n        if (entry === '.gitkeep') continue\n        const entryDir = join(domainDir, entry)\n        if (!knownContentDirs.has(entryDir)) {\n          orphans.push(`${domain}/${entry}`)\n        }\n      }\n    }\n  }\n\n  for (const dir of knownContentDirs) {\n    if (dir.startsWith(contentDir)) continue\n    if (!await pathExists(dir)) {\n      orphans.push(`(missing custom path) ${dir}`)\n      continue\n    }\n    await readDir(dir)\n  }\n\n  return orphans\n}\n\nasync function analyzeUnusedKeys(\n  projectRoot: string,\n  config: ContentrainConfig,\n): Promise<UnusedKeyEntry[]> {\n  const sourceDirs = await autoDetectSourceDirs(projectRoot)\n  const files = await discoverFiles(projectRoot, { paths: sourceDirs })\n  if (files.length === 0) return []\n\n  const chunks = await Promise.all(\n    files.map(async (relPath) => {\n      const content = await readText(join(projectRoot, relPath))\n      return content ?? ''\n    }),\n  )\n  const allSource = chunks.join('\\n')\n\n  // Dictionaries only.\n  //\n  // A dictionary key IS the reference — source code writes `t('nav.home')`, so\n  // a key absent from source is genuinely dead. Collection entry IDs and\n  // document slugs are not: entries are fetched by query, and a hex id like\n  // `0a1b2c3d4e5f` will never appear in a source file. Checking them produced\n  // a report that was mostly noise — of 134 warnings on a real project, ~120\n  // were collection and document rows, and the real findings were lost among\n  // them.\n  const models = (await listModels(projectRoot)).filter(m => m.kind === 'dictionary')\n  const defaultLocale = config.locales.default\n  const unused: UnusedKeyEntry[] = []\n\n  for (const m of models) {\n    const fullModel = await readModel(projectRoot, m.id)\n    if (!fullModel) continue\n\n    const keys = await extractContentKeys(projectRoot, fullModel, defaultLocale)\n    for (const key of keys) {\n      if (!allSource.includes(key)) {\n        unused.push({ model: m.id, kind: m.kind, key, locale: defaultLocale })\n      }\n    }\n  }\n\n  return unused\n}\n\n/**\n * Keys of a model that source code could plausibly reference by name.\n *\n * Only dictionaries have any: their keys are semantic addresses that appear\n * verbatim in source. Every other kind is queried, so its ids and slugs are\n * data, not identifiers, and looking for them in source finds nothing and\n * means nothing.\n */\nasync function extractContentKeys(\n  projectRoot: string,\n  model: ModelDefinition,\n  locale: string,\n): Promise<string[]> {\n  const cDir = resolveContentDir(projectRoot, model)\n  if (!await pathExists(cDir)) return []\n\n  switch (model.kind) {\n    case 'dictionary': {\n      const filePath = resolveJsonFilePath(cDir, model, locale)\n      const data = await readJson<Record<string, string>>(filePath)\n      return data ? Object.keys(data) : []\n    }\n    case 'collection': {\n      const filePath = resolveJsonFilePath(cDir, model, locale)\n      const data = await readJson<Record<string, Record<string, unknown>>>(filePath)\n      return data ? Object.keys(data) : []\n    }\n    case 'document': {\n      const strategy = resolveLocaleStrategy(model)\n      const slugs: string[] = []\n      if (!model.i18n) {\n        const files = await readDir(cDir)\n        for (const f of files) if (f.endsWith('.md')) slugs.push(f.replace('.md', ''))\n      } else if (strategy === 'file') {\n        const dirs = await readDir(cDir)\n        for (const d of dirs) if (!d.startsWith('.')) slugs.push(d)\n      } else if (strategy === 'suffix') {\n        const files = await readDir(cDir)\n        const suffix = `.${locale}.md`\n        for (const f of files) if (f.endsWith(suffix)) slugs.push(f.slice(0, -suffix.length))\n      } else if (strategy === 'directory') {\n        const localeDir = join(cDir, locale)\n        if (await pathExists(localeDir)) {\n          const files = await readDir(localeDir)\n          for (const f of files) if (f.endsWith('.md')) slugs.push(f.replace('.md', ''))\n        }\n      } else {\n        const files = await readDir(cDir)\n        for (const f of files) if (f.endsWith('.md')) slugs.push(f.replace('.md', ''))\n      }\n      return slugs\n    }\n    case 'singleton':\n      return []\n    default:\n      return []\n  }\n}\n\nasync function analyzeDuplicateValues(\n  projectRoot: string,\n  config: ContentrainConfig,\n): Promise<DuplicateValueEntry[]> {\n  const models = await listModels(projectRoot)\n  const result: DuplicateValueEntry[] = []\n\n  for (const m of models) {\n    if (m.kind !== 'dictionary') continue\n    const fullModel = await readModel(projectRoot, m.id)\n    if (!fullModel) continue\n\n    const cDir = resolveContentDir(projectRoot, fullModel)\n    for (const locale of config.locales.supported) {\n      const filePath = resolveJsonFilePath(cDir, fullModel, locale)\n      const data = await readJson<Record<string, string>>(filePath)\n      if (!data) continue\n\n      const valueToKeys = new Map<string, string[]>()\n      for (const [key, value] of Object.entries(data)) {\n        const arr = valueToKeys.get(value)\n        if (arr) arr.push(key)\n        else valueToKeys.set(value, [key])\n      }\n\n      for (const [value, keys] of valueToKeys) {\n        if (keys.length > 1) {\n          result.push({ model: m.id, locale, value, keys })\n        }\n      }\n    }\n  }\n\n  return result\n}\n\nasync function analyzeMissingLocaleKeys(\n  projectRoot: string,\n  config: ContentrainConfig,\n): Promise<MissingLocaleEntry[]> {\n  if (config.locales.supported.length < 2) return []\n\n  const models = await listModels(projectRoot)\n  const result: MissingLocaleEntry[] = []\n  const defaultLocale = config.locales.default\n  const otherLocales = config.locales.supported.filter(l => l !== defaultLocale)\n\n  for (const m of models) {\n    if (m.kind !== 'dictionary' && m.kind !== 'collection') continue\n    if (!m.i18n) continue\n\n    const fullModel = await readModel(projectRoot, m.id)\n    if (!fullModel) continue\n\n    const cDir = resolveContentDir(projectRoot, fullModel)\n    const defaultPath = resolveJsonFilePath(cDir, fullModel, defaultLocale)\n    const defaultData = await readJson<Record<string, unknown>>(defaultPath)\n    if (!defaultData) continue\n    const defaultKeys = new Set(Object.keys(defaultData))\n\n    for (const locale of otherLocales) {\n      const localePath = resolveJsonFilePath(cDir, fullModel, locale)\n      const localeData = await readJson<Record<string, unknown>>(localePath)\n      const localeKeys = localeData ? new Set(Object.keys(localeData)) : new Set<string>()\n\n      for (const key of defaultKeys) {\n        if (!localeKeys.has(key)) {\n          result.push({ model: m.id, key, missingIn: locale })\n        }\n      }\n    }\n  }\n\n  return result\n}\n"],"mappings":";;;;;;;;;AA4FA,eAAsB,UACpB,aACA,UAA4B,EAAE,EACP;CACvB,MAAM,SAAwB,EAAE;AAGhC,KAAI;EAEF,MAAM,UAAU,MADJ,UAAU,YAAY,CACR,SAAS;AACnC,SAAO,KAAK;GACV,MAAM;GACN,MAAM;GACN,QAAQ,IAAI,QAAQ,MAAM,GAAG,QAAQ,MAAM,GAAG,QAAQ;GACvD,CAAC;SACI;AACN,SAAO,KAAK;GAAE,MAAM;GAAO,MAAM;GAAO,QAAQ;GAAgC,UAAU;GAAS,CAAC;;CAItG,MAAM,SAAS,MAAM,WAAW,KAAK,aAAa,OAAO,CAAC;AAC1D,QAAO,KAAK;EACV,MAAM;EACN,MAAM;EACN,QAAQ,SAAS,cAAc;EAC/B,UAAU,SAAS,KAAA,IAAY;EAChC,CAAC;CAGF,MAAM,cAAc,QAAQ,SAAS;CACrC,MAAM,CAAC,SAAS,YAAY,MAAM,IAAI,CAAC,IAAI,OAAO;CAClD,MAAM,YAAY,SAAS,MAAM;AACjC,QAAO,KAAK;EACV,MAAM;EACN,MAAM;EACN,QAAQ,IAAI,cAAc,WAAW,KAAK;EAC1C,UAAU,WAAW,KAAA,IAAY;EAClC,CAAC;CAGF,MAAM,QAAQ,eAAe,YAAY;CACzC,MAAM,WAAW,MAAM,WAAW,MAAM;CACxC,MAAM,YAAY,MAAM,WAAW,KAAK,OAAO,cAAc,CAAC;CAC9D,MAAM,YAAY,MAAM,WAAW,KAAK,OAAO,SAAS,CAAC;CACzD,MAAM,aAAa,MAAM,WAAW,KAAK,OAAO,UAAU,CAAC;CAC3D,MAAM,gBAAgB,YAAY,aAAa,aAAa;AAE5D,QAAO,KAAK;EACV,MAAM;EACN,MAAM;EACN,QAAQ,CAAC,WACL,6CACA;GACE,YAAY,OAAO;GACnB,YAAY,OAAO;GACnB,aAAa,OAAO;GACrB,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,IAAI;EACpC,UAAU,gBAAgB,KAAA,IAAY;EACvC,CAAC;CAGF,IAAI,SAAmC;AACvC,KAAI,WAAW;AACb,WAAS,MAAM,WAAW,YAAY;AACtC,SAAO,KAAK;GACV,MAAM;GACN,MAAM,WAAW;GACjB,QAAQ,SACJ,UAAU,OAAO,MAAM,aAAa,OAAO,QAAQ,UAAU,KAAK,KAAK,KACvE;GACJ,UAAU,SAAS,KAAA,IAAY;GAChC,CAAC;;AAUJ,KAAI,SACF,KAAI;EAKF,MAAM,YAAY,KAAK,OAAO,SAAS;EACvC,MAAM,SAAS,MAAM,QAAQ,UAAU,EAAE,QAAO,MAAK,EAAE,SAAS,QAAQ,CAAC;EACzE,MAAM,SAAS,MAAM,QAAQ,IAC3B,MAAM,KAAI,MAAK,SAA0B,KAAK,WAAW,EAAE,CAAC,CAAC,CAC9D;EACD,MAAM,cAAc,MAAM,QAAQ,GAAG,MAAM,OAAO,OAAO,KAAK;EAC9D,MAAM,UAAU,OACb,QAAQ,MAA4B,MAAM,KAAK,CAC/C,QAAO,MAAK,wBAAwB,EAAE,CAAC,OAAO,SAAS,EAAE,CACzD,KAAI,MAAK,EAAE,GAAG;EACjB,MAAM,SAAS,OAAO,QAAQ,MAA4B,MAAM,KAAK;EAErE,MAAM,WAAW,CACf,GAAI,YAAY,SAAS,IAAI,CAAC,GAAG,YAAY,OAAO,oBAAoB,YAAY,KAAK,KAAK,CAAC,GAAG,GAAG,EAAE,EACvG,GAAI,QAAQ,SAAS,IAAI,CAAC,GAAG,QAAQ,OAAO,YAAY,QAAQ,KAAK,KAAK,CAAC,qCAAqC,GAAG,EAAE,CACtH;AACD,SAAO,KAAK;GACV,MAAM;GACN,MAAM,SAAS,WAAW;GAC1B,QAAQ,GAAG,OAAO,OAAO,WAAW,SAAS,WAAW,IAAI,gBAAgB,KAAK,SAAS,KAAK,KAAK;GACpG,UAAU,SAAS,WAAW,IAAI,KAAA,IAAY;GAC/C,CAAC;SACI;AACN,SAAO,KAAK;GAAE,MAAM;GAAU,MAAM;GAAO,QAAQ;GAAyB,UAAU;GAAS,CAAC;;AAKpG,KAAI,UAAU;EACZ,MAAM,UAAU,MAAM,kBAAkB,YAAY;AACpD,SAAO,KAAK;GACV,MAAM;GACN,MAAM,QAAQ,WAAW;GACzB,QAAQ,QAAQ,WAAW,IAAI,SAAS,UAAU,QAAQ,KAAK,KAAK;GACpE,UAAU,QAAQ,WAAW,IAAI,KAAA,IAAY;GAC9C,CAAC;;AAIJ,KAAI,QAAQ;AACV,MAAI;GACF,MAAM,SAAS,MAAM,kBAAkB,YAAY;AACnD,UAAO,KAAK;IACV,MAAM;IACN,MAAM,CAAC,OAAO,WAAW,CAAC,OAAO;IACjC,QAAQ,OAAO,YACT,OAAO,aAAa,IAAI,SAAS,GAAG,OAAO,SAAS;IAC1D,UAAU,OAAO,UAAU,UAAU,OAAO,UAAU,YAAY,KAAA;IACnE,CAAC;UACI;AACN,UAAO,KAAK;IAAE,MAAM;IAAoB,MAAM;IAAM,QAAQ;IAAmB,CAAC;;EAOlF,MAAM,aAAa,MAAM,qBAAqB,aAAa,EAAE,WAAW,KAAM,CAAC;AAC/E,MAAI,WACF,KAAI,WAAW,MACb,QAAO,KAAK;GACV,MAAM;GACN,MAAM;GACN,QAAQ,mBAAmB,WAAW,OAAO;GAC7C,UAAU;GACX,CAAC;OACG;GACL,MAAM,QAAQ,WAAW,SAAS;GAElC,MAAM,OAAO,UADK,QAAQ,mBAAmB;AAE7C,UAAO,KAAK;IACV,MAAM;IACN,MAAM,CAAC;IACP,QAAQ,UAAU,IACd,WAAW,WAAW,WACtB,GAAG,MAAM,sBAAsB,WAAW,SAAS,OAAO,0DAA0D;IACxH,UAAU,OAAO,YAAY,KAAA;IAC9B,CAAC;;;CAMR,MAAM,YAAY,KAAK,OAAO,SAAS;CACvC,MAAM,YAAY,KAAK,OAAO,SAAS;AACvC,KAAI,MAAM,WAAW,UAAU,IAAI,MAAM,WAAW,UAAU,CAC5D,KAAI;EACF,MAAM,CAAC,aAAa,eAAe,MAAM,QAAQ,IAAI,CACnD,gBAAgB,UAAU,EAC1B,gBAAgB,UAAU,CAC3B,CAAC;AACF,MAAI,gBAAgB,QAAQ,gBAAgB,KAC1C,QAAO,KAAK;GAAE,MAAM;GAAc,MAAM;GAAM,QAAQ;GAAmB,CAAC;OACrE;GACL,MAAM,QAAQ,eAAe;AAC7B,UAAO,KAAK;IACV,MAAM;IACN,MAAM;IACN,QAAQ,QAAQ,eAAe;IAC/B,UAAU,QAAQ,KAAA,IAAY;IAC/B,CAAC;;SAEE;AACN,SAAO,KAAK;GAAE,MAAM;GAAc,MAAM;GAAM,QAAQ;GAAmB,CAAC;;CAK9E,IAAI;AACJ,KAAI,QAAQ,SAAS,YAAY,QAAQ;EACvC,MAAM,CAAC,YAAY,iBAAiB,qBAAqB,MAAM,QAAQ,IAAI;GACzE,kBAAkB,aAAa,OAAO;GACtC,uBAAuB,aAAa,OAAO;GAC3C,yBAAyB,aAAa,OAAO;GAC9C,CAAC;AACF,UAAQ;GAAE;GAAY;GAAiB;GAAmB;AAE1D,SAAO,KAAK;GACV,MAAM;GACN,MAAM,WAAW,WAAW;GAC5B,QAAQ,WAAW,WAAW,IAC1B,6CACA,GAAG,WAAW,OAAO;GACzB,UAAU,WAAW,WAAW,IAAI,KAAA,IAAY;GACjD,CAAC;AAEF,SAAO,KAAK;GACV,MAAM;GACN,MAAM,gBAAgB,WAAW;GACjC,QAAQ,gBAAgB,WAAW,IAC/B,wBACA,GAAG,gBAAgB,OAAO;GAC9B,UAAU,gBAAgB,WAAW,IAAI,KAAA,IAAY;GACtD,CAAC;AAEF,SAAO,KAAK;GACV,MAAM;GACN,MAAM,kBAAkB,WAAW;GACnC,QAAQ,kBAAkB,WAAW,IACjC,mCACA,GAAG,kBAAkB,OAAO;GAChC,UAAU,kBAAkB,WAAW,IAAI,KAAA,IAAY;GACxD,CAAC;;CAGJ,MAAM,SAAS,OAAO,QAAO,MAAK,EAAE,KAAK,CAAC;CAC1C,MAAM,SAAS,OAAO,SAAS;CAC/B,MAAM,WAAW,OAAO,QAAO,MAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,UAAU,CAAC;CAEzE,MAAM,SAAuB;EAC3B;EACA,SAAS;GAAE,OAAO,OAAO;GAAQ;GAAQ;GAAQ;GAAU;EAC5D;AACD,KAAI,MAAO,QAAO,QAAQ;AAC1B,QAAO;;;;;;;;;;;;AAaT,eAAe,gBAAgB,KAAqC;CAClE,MAAM,UAAoB,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;CAMrF,MAAM,SALS,MAAM,QAAQ,IAAI,QAAQ,IAAI,OAAO,UAAU;EAC5D,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAClC,MAAI,MAAM,aAAa,CAAE,QAAO,gBAAgB,KAAK;AACrD,SAAO,KAAK,KAAK,CAAC,MAAK,MAAK,EAAE,eAAe,KAAK;GAClD,CAAC,EACkB,QAAQ,MAAmB,MAAM,KAAK;AAC3D,QAAO,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,GAAG;;AAGjD,eAAe,kBAAkB,aAAwC;CACvE,MAAM,QAAQ,eAAe,YAAY;CACzC,MAAM,SAAS,MAAM,WAAW,YAAY;CAC5C,MAAM,UAAoB,EAAE;CAE5B,MAAM,mCAAmB,IAAI,KAAa;AAC1C,MAAK,MAAM,KAAK,QAAQ;EACtB,MAAM,OAAO,MAAM,UAAU,aAAa,EAAE,GAAG;EAC/C,MAAM,eAAe,OACjB;GACE,GAAG;GACH,cAAc,KAAK,gBAAiB,EAAgC;GACrE,GACD;GACE,IAAI,EAAE;GACN,MAAM,EAAE;GACR,MAAM,EAAE;GACR,QAAQ,EAAE;GACV,MAAM,EAAE;GACR,QAAQ,EAAE;GACV,cAAe,EAAgC;GAChD;AACL,mBAAiB,IAAI,kBAAkB,aAAa,aAAa,CAAC;;CAGpE,MAAM,aAAa,KAAK,OAAO,UAAU;AACzC,KAAI,MAAM,WAAW,WAAW,EAAE;EAChC,MAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,OAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,YAAY,KAAK,YAAY,OAAO;GAC1C,MAAM,UAAU,MAAM,QAAQ,UAAU;AACxC,QAAK,MAAM,SAAS,SAAS;AAC3B,QAAI,UAAU,WAAY;IAC1B,MAAM,WAAW,KAAK,WAAW,MAAM;AACvC,QAAI,CAAC,iBAAiB,IAAI,SAAS,CACjC,SAAQ,KAAK,GAAG,OAAO,GAAG,QAAQ;;;;AAM1C,MAAK,MAAM,OAAO,kBAAkB;AAClC,MAAI,IAAI,WAAW,WAAW,CAAE;AAChC,MAAI,CAAC,MAAM,WAAW,IAAI,EAAE;AAC1B,WAAQ,KAAK,yBAAyB,MAAM;AAC5C;;AAEF,QAAM,QAAQ,IAAI;;AAGpB,QAAO;;AAGT,eAAe,kBACb,aACA,QAC2B;CAE3B,MAAM,QAAQ,MAAM,cAAc,aAAa,EAAE,OAD9B,MAAM,qBAAqB,YAAY,EACU,CAAC;AACrE,KAAI,MAAM,WAAW,EAAG,QAAO,EAAE;CAQjC,MAAM,aANS,MAAM,QAAQ,IAC3B,MAAM,IAAI,OAAO,YAAY;AAE3B,SADgB,MAAM,SAAS,KAAK,aAAa,QAAQ,CAAC,IACxC;GAClB,CACH,EACwB,KAAK,KAAK;CAWnC,MAAM,UAAU,MAAM,WAAW,YAAY,EAAE,QAAO,MAAK,EAAE,SAAS,aAAa;CACnF,MAAM,gBAAgB,OAAO,QAAQ;CACrC,MAAM,SAA2B,EAAE;AAEnC,MAAK,MAAM,KAAK,QAAQ;EACtB,MAAM,YAAY,MAAM,UAAU,aAAa,EAAE,GAAG;AACpD,MAAI,CAAC,UAAW;EAEhB,MAAM,OAAO,MAAM,mBAAmB,aAAa,WAAW,cAAc;AAC5E,OAAK,MAAM,OAAO,KAChB,KAAI,CAAC,UAAU,SAAS,IAAI,CAC1B,QAAO,KAAK;GAAE,OAAO,EAAE;GAAI,MAAM,EAAE;GAAM;GAAK,QAAQ;GAAe,CAAC;;AAK5E,QAAO;;;;;;;;;;AAWT,eAAe,mBACb,aACA,OACA,QACmB;CACnB,MAAM,OAAO,kBAAkB,aAAa,MAAM;AAClD,KAAI,CAAC,MAAM,WAAW,KAAK,CAAE,QAAO,EAAE;AAEtC,SAAQ,MAAM,MAAd;EACE,KAAK,cAAc;GAEjB,MAAM,OAAO,MAAM,SADF,oBAAoB,MAAM,OAAO,OAAO,CACI;AAC7D,UAAO,OAAO,OAAO,KAAK,KAAK,GAAG,EAAE;;EAEtC,KAAK,cAAc;GAEjB,MAAM,OAAO,MAAM,SADF,oBAAoB,MAAM,OAAO,OAAO,CACqB;AAC9E,UAAO,OAAO,OAAO,KAAK,KAAK,GAAG,EAAE;;EAEtC,KAAK,YAAY;GACf,MAAM,WAAW,sBAAsB,MAAM;GAC7C,MAAM,QAAkB,EAAE;AAC1B,OAAI,CAAC,MAAM,MAAM;IACf,MAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,SAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,MAAM,CAAE,OAAM,KAAK,EAAE,QAAQ,OAAO,GAAG,CAAC;cACrE,aAAa,QAAQ;IAC9B,MAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,SAAK,MAAM,KAAK,KAAM,KAAI,CAAC,EAAE,WAAW,IAAI,CAAE,OAAM,KAAK,EAAE;cAClD,aAAa,UAAU;IAChC,MAAM,QAAQ,MAAM,QAAQ,KAAK;IACjC,MAAM,SAAS,IAAI,OAAO;AAC1B,SAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,OAAO,CAAE,OAAM,KAAK,EAAE,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC;cAC5E,aAAa,aAAa;IACnC,MAAM,YAAY,KAAK,MAAM,OAAO;AACpC,QAAI,MAAM,WAAW,UAAU,EAAE;KAC/B,MAAM,QAAQ,MAAM,QAAQ,UAAU;AACtC,UAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,MAAM,CAAE,OAAM,KAAK,EAAE,QAAQ,OAAO,GAAG,CAAC;;UAE3E;IACL,MAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,SAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,MAAM,CAAE,OAAM,KAAK,EAAE,QAAQ,OAAO,GAAG,CAAC;;AAEhF,UAAO;;EAET,KAAK,YACH,QAAO,EAAE;EACX,QACE,QAAO,EAAE;;;AAIf,eAAe,uBACb,aACA,QACgC;CAChC,MAAM,SAAS,MAAM,WAAW,YAAY;CAC5C,MAAM,SAAgC,EAAE;AAExC,MAAK,MAAM,KAAK,QAAQ;AACtB,MAAI,EAAE,SAAS,aAAc;EAC7B,MAAM,YAAY,MAAM,UAAU,aAAa,EAAE,GAAG;AACpD,MAAI,CAAC,UAAW;EAEhB,MAAM,OAAO,kBAAkB,aAAa,UAAU;AACtD,OAAK,MAAM,UAAU,OAAO,QAAQ,WAAW;GAE7C,MAAM,OAAO,MAAM,SADF,oBAAoB,MAAM,WAAW,OAAO,CACA;AAC7D,OAAI,CAAC,KAAM;GAEX,MAAM,8BAAc,IAAI,KAAuB;AAC/C,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;IAC/C,MAAM,MAAM,YAAY,IAAI,MAAM;AAClC,QAAI,IAAK,KAAI,KAAK,IAAI;QACjB,aAAY,IAAI,OAAO,CAAC,IAAI,CAAC;;AAGpC,QAAK,MAAM,CAAC,OAAO,SAAS,YAC1B,KAAI,KAAK,SAAS,EAChB,QAAO,KAAK;IAAE,OAAO,EAAE;IAAI;IAAQ;IAAO;IAAM,CAAC;;;AAMzD,QAAO;;AAGT,eAAe,yBACb,aACA,QAC+B;AAC/B,KAAI,OAAO,QAAQ,UAAU,SAAS,EAAG,QAAO,EAAE;CAElD,MAAM,SAAS,MAAM,WAAW,YAAY;CAC5C,MAAM,SAA+B,EAAE;CACvC,MAAM,gBAAgB,OAAO,QAAQ;CACrC,MAAM,eAAe,OAAO,QAAQ,UAAU,QAAO,MAAK,MAAM,cAAc;AAE9E,MAAK,MAAM,KAAK,QAAQ;AACtB,MAAI,EAAE,SAAS,gBAAgB,EAAE,SAAS,aAAc;AACxD,MAAI,CAAC,EAAE,KAAM;EAEb,MAAM,YAAY,MAAM,UAAU,aAAa,EAAE,GAAG;AACpD,MAAI,CAAC,UAAW;EAEhB,MAAM,OAAO,kBAAkB,aAAa,UAAU;EAEtD,MAAM,cAAc,MAAM,SADN,oBAAoB,MAAM,WAAW,cAAc,CACC;AACxE,MAAI,CAAC,YAAa;EAClB,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,YAAY,CAAC;AAErD,OAAK,MAAM,UAAU,cAAc;GAEjC,MAAM,aAAa,MAAM,SADN,oBAAoB,MAAM,WAAW,OAAO,CACO;GACtE,MAAM,aAAa,aAAa,IAAI,IAAI,OAAO,KAAK,WAAW,CAAC,mBAAG,IAAI,KAAa;AAEpF,QAAK,MAAM,OAAO,YAChB,KAAI,CAAC,WAAW,IAAI,IAAI,CACtB,QAAO,KAAK;IAAE,OAAO,EAAE;IAAI;IAAK,WAAW;IAAQ,CAAC;;;AAM5D,QAAO"}
+{"version":3,"file":"doctor-B7G0oFxO.mjs","names":[],"sources":["../src/core/doctor.ts"],"sourcesContent":["import { join } from 'node:path'\nimport { createGit } from '../git/identity.js'\nimport { readdir, stat } from 'node:fs/promises'\nimport type { Dirent } from 'node:fs'\nimport type { ContentrainConfig, ModelDefinition } from '@contentrain/types'\nimport { readConfig } from './config.js'\nimport { listModels, readModel, validateModelDefinition } from './model-manager.js'\nimport { resolveContentDir, resolveJsonFilePath, resolveLocaleStrategy } from './content-manager.js'\nimport { autoDetectSourceDirs, discoverFiles } from './scan-config.js'\nimport { checkBranchHealth, listRemoteCrBranches } from '../git/branch-lifecycle.js'\nimport { contentrainDir, pathExists, readDir, readJson, readText } from '../util/fs.js'\n\n/**\n * Doctor — project health report.\n *\n * The public entry point is `runDoctor(projectRoot, { usage? })`. It is\n * inherently local-filesystem work (Node version, git install, file\n * mtimes, orphan directory detection), so the MCP tool surface gates\n * it behind the `localWorktree` capability — same pattern as\n * `contentrain_setup` and normalize.\n *\n * The report is structured JSON so three consumers can share it:\n *\n * - The `contentrain doctor` CLI command pretty-prints the checks.\n * - The Serve UI `/api/doctor` route returns the report to the\n *   Dashboard's Doctor panel.\n * - Automation (CI, Studio) gets a deterministic JSON shape it can\n *   assert against.\n *\n * Usage analysis (`--usage`) is a heavier, opt-in branch — it scans\n * every source file in the repo for content-key references. Kept\n * behind the flag so the default doctor run stays fast.\n */\n\nexport type CheckSeverity = 'error' | 'warning' | 'info'\n\nexport interface DoctorCheck {\n  name: string\n  pass: boolean\n  detail: string\n  /**\n   * `error` — default for failing checks. Blocks a clean bill of health.\n   * `warning` — failing-but-not-blocking (e.g. pending branches above\n   *   threshold, stale SDK client).\n   * `info` — passed check; pure informational.\n   */\n  severity?: CheckSeverity\n}\n\nexport interface UnusedKeyEntry {\n  model: string\n  kind: string\n  key: string\n  locale: string\n}\n\nexport interface DuplicateValueEntry {\n  model: string\n  locale: string\n  value: string\n  keys: string[]\n}\n\nexport interface MissingLocaleEntry {\n  model: string\n  key: string\n  missingIn: string\n}\n\nexport interface DoctorUsageAnalysis {\n  unusedKeys: UnusedKeyEntry[]\n  duplicateValues: DuplicateValueEntry[]\n  missingLocaleKeys: MissingLocaleEntry[]\n}\n\nexport interface DoctorReport {\n  checks: DoctorCheck[]\n  summary: {\n    total: number\n    passed: number\n    failed: number\n    warnings: number\n  }\n  /** Present only when `options.usage === true`. */\n  usage?: DoctorUsageAnalysis\n}\n\nexport interface RunDoctorOptions {\n  /** Run heavier `--usage` analysis (unused keys, duplicates, locale gaps). */\n  usage?: boolean\n}\n\nexport async function runDoctor(\n  projectRoot: string,\n  options: RunDoctorOptions = {},\n): Promise<DoctorReport> {\n  const checks: DoctorCheck[] = []\n\n  // ─── 1. Git installed ───\n  try {\n    const git = createGit(projectRoot)\n    const version = await git.version()\n    checks.push({\n      name: 'Git',\n      pass: true,\n      detail: `v${version.major}.${version.minor}.${version.patch}`,\n    })\n  } catch {\n    checks.push({ name: 'Git', pass: false, detail: 'Not installed or not in PATH', severity: 'error' })\n  }\n\n  // ─── 2. Git repo initialized ───\n  const hasGit = await pathExists(join(projectRoot, '.git'))\n  checks.push({\n    name: 'Git repository',\n    pass: hasGit,\n    detail: hasGit ? projectRoot : 'No .git directory found',\n    severity: hasGit ? undefined : 'error',\n  })\n\n  // ─── 3. Node version ───\n  const nodeVersion = process.versions.node\n  const [major] = nodeVersion.split('.').map(Number)\n  const nodePass = (major ?? 0) >= 22\n  checks.push({\n    name: 'Node.js',\n    pass: nodePass,\n    detail: `v${nodeVersion}${nodePass ? '' : ' (requires ≥22)'}`,\n    severity: nodePass ? undefined : 'error',\n  })\n\n  // ─── 4. .contentrain/ structure ───\n  const crDir = contentrainDir(projectRoot)\n  const hasCrDir = await pathExists(crDir)\n  const hasConfig = await pathExists(join(crDir, 'config.json'))\n  const hasModels = await pathExists(join(crDir, 'models'))\n  const hasContent = await pathExists(join(crDir, 'content'))\n  const structurePass = hasCrDir && hasConfig && hasModels && hasContent\n\n  checks.push({\n    name: '.contentrain/ structure',\n    pass: structurePass,\n    detail: !hasCrDir\n      ? 'Not initialized — run `contentrain init`'\n      : [\n          hasConfig ? null : 'missing config.json',\n          hasModels ? null : 'missing models/',\n          hasContent ? null : 'missing content/',\n        ].filter(Boolean).join(', ') || 'OK',\n    severity: structurePass ? undefined : 'error',\n  })\n\n  // ─── 5. Config parseable ───\n  let config: ContentrainConfig | null = null\n  if (hasConfig) {\n    config = await readConfig(projectRoot)\n    checks.push({\n      name: 'Config',\n      pass: config !== null,\n      detail: config\n        ? `stack: ${config.stack}, locales: ${config.locales.supported.join(', ')}`\n        : 'Failed to parse config.json',\n      severity: config ? undefined : 'error',\n    })\n  }\n\n  // ─── 6. Models parse AND satisfy the schema contract ───\n  //\n  // This check used to report \"all valid\" on the strength of JSON.parse alone,\n  // which was a claim it had not earned. Model reads are unvalidated casts, so a\n  // definition can be structurally wrong — a missing title_field, a field\n  // constraint that cannot hold — and still load without a word. Doctor reports;\n  // `contentrain validate --fix` is what repairs.\n  if (hasCrDir) {\n    try {\n      // Enumerate the files, not `listModels`. `listModels` drops anything that\n      // fails to parse, so routing this check through it made the \"failed to\n      // parse\" branch unreachable — a corrupt model file was invisible to the\n      // check whose job is to find it.\n      const modelsDir = join(crDir, 'models')\n      const files = (await readDir(modelsDir)).filter(f => f.endsWith('.json'))\n      const parsed = await Promise.all(\n        files.map(f => readJson<ModelDefinition>(join(modelsDir, f))),\n      )\n      const unparseable = files.filter((_, i) => parsed[i] === null)\n      const invalid = parsed\n        .filter((m): m is ModelDefinition => m !== null)\n        .filter(m => validateModelDefinition(m).errors.length > 0)\n        .map(m => m.id)\n      const models = parsed.filter((m): m is ModelDefinition => m !== null)\n\n      const problems = [\n        ...(unparseable.length > 0 ? [`${unparseable.length} failed to parse (${unparseable.join(', ')})`] : []),\n        ...(invalid.length > 0 ? [`${invalid.length} invalid (${invalid.join(', ')}) — run: contentrain validate --fix`] : []),\n      ]\n      checks.push({\n        name: 'Models',\n        pass: problems.length === 0,\n        detail: `${models.length} model(s)${problems.length === 0 ? ', all valid' : `, ${problems.join('; ')}`}`,\n        severity: problems.length === 0 ? undefined : 'error',\n      })\n    } catch {\n      checks.push({ name: 'Models', pass: false, detail: 'Failed to read models', severity: 'error' })\n    }\n  }\n\n  // ─── 7. Orphan content ───\n  if (hasCrDir) {\n    const orphans = await findOrphanContent(projectRoot)\n    checks.push({\n      name: 'Orphan content',\n      pass: orphans.length === 0,\n      detail: orphans.length === 0 ? 'None' : `Found: ${orphans.join(', ')}`,\n      severity: orphans.length === 0 ? undefined : 'warning',\n    })\n  }\n\n  // ─── 8. Stale contentrain branches ───\n  if (hasGit) {\n    try {\n      const health = await checkBranchHealth(projectRoot)\n      checks.push({\n        name: 'Pending branches',\n        pass: !health.blocked && !health.warning,\n        detail: health.message\n          ?? (health.unmerged === 0 ? 'None' : `${health.unmerged} active cr/* branch(es)`),\n        severity: health.blocked ? 'error' : health.warning ? 'warning' : undefined,\n      })\n    } catch {\n      checks.push({ name: 'Pending branches', pass: true, detail: 'Could not check' })\n    }\n\n    // ─── 8b. Remote cr/* branches ───\n    // Authoritative ls-remote count (local branch pressure cannot see the\n    // remote pile). Best-effort: skipped entirely without a remote, and an\n    // unreachable remote is informational — doctor never fails offline.\n    const remoteList = await listRemoteCrBranches(projectRoot, { timeoutMs: 5000 })\n    if (remoteList) {\n      if (remoteList.error) {\n        checks.push({\n          name: 'Remote branches',\n          pass: true,\n          detail: `Could not check ${remoteList.remote} (offline?)`,\n          severity: 'info',\n        })\n      } else {\n        const count = remoteList.branches.length\n        const warnLimit = config?.branchWarnLimit ?? 50\n        const warn = count >= warnLimit\n        checks.push({\n          name: 'Remote branches',\n          pass: !warn,\n          detail: count === 0\n            ? `None on ${remoteList.remote}`\n            : `${count} cr/* branch(es) on ${remoteList.remote}${warn ? ' — run `contentrain prune` to remove merged leftovers' : ''}`,\n          severity: warn ? 'warning' : undefined,\n        })\n      }\n    }\n  }\n\n  // ─── 9. SDK client freshness ───\n  const clientDir = join(crDir, 'client')\n  const modelsDir = join(crDir, 'models')\n  if (await pathExists(clientDir) && await pathExists(modelsDir)) {\n    try {\n      const [clientMtime, modelsMtime] = await Promise.all([\n        newestFileMtime(clientDir),\n        newestFileMtime(modelsDir),\n      ])\n      if (clientMtime === null || modelsMtime === null) {\n        checks.push({ name: 'SDK client', pass: true, detail: 'Could not check' })\n      } else {\n        const fresh = clientMtime >= modelsMtime\n        checks.push({\n          name: 'SDK client',\n          pass: fresh,\n          detail: fresh ? 'Up to date' : 'Stale — run `contentrain generate`',\n          severity: fresh ? undefined : 'warning',\n        })\n      }\n    } catch {\n      checks.push({ name: 'SDK client', pass: true, detail: 'Could not check' })\n    }\n  }\n\n  // ─── 10–12. Usage analysis (optional) ───\n  let usage: DoctorUsageAnalysis | undefined\n  if (options.usage && hasCrDir && config) {\n    const [unusedKeys, duplicateValues, missingLocaleKeys] = await Promise.all([\n      analyzeUnusedKeys(projectRoot, config),\n      analyzeDuplicateValues(projectRoot, config),\n      analyzeMissingLocaleKeys(projectRoot, config),\n    ])\n    usage = { unusedKeys, duplicateValues, missingLocaleKeys }\n\n    checks.push({\n      name: 'Unused dictionary keys',\n      pass: unusedKeys.length === 0,\n      detail: unusedKeys.length === 0\n        ? 'All dictionary keys referenced in source'\n        : `${unusedKeys.length} dictionary key(s) not referenced in source code`,\n      severity: unusedKeys.length === 0 ? undefined : 'warning',\n    })\n\n    checks.push({\n      name: 'Duplicate dictionary values',\n      pass: duplicateValues.length === 0,\n      detail: duplicateValues.length === 0\n        ? 'No duplicate values'\n        : `${duplicateValues.length} value(s) mapped to multiple keys`,\n      severity: duplicateValues.length === 0 ? undefined : 'warning',\n    })\n\n    checks.push({\n      name: 'Locale key coverage',\n      pass: missingLocaleKeys.length === 0,\n      detail: missingLocaleKeys.length === 0\n        ? 'All locales have matching keys'\n        : `${missingLocaleKeys.length} key(s) missing in some locales`,\n      severity: missingLocaleKeys.length === 0 ? undefined : 'warning',\n    })\n  }\n\n  const passed = checks.filter(c => c.pass).length\n  const failed = checks.length - passed\n  const warnings = checks.filter(c => !c.pass && c.severity === 'warning').length\n\n  const report: DoctorReport = {\n    checks,\n    summary: { total: checks.length, passed, failed, warnings },\n  }\n  if (usage) report.usage = usage\n  return report\n}\n\n/**\n * Newest mtime among the files under `dir`, recursively — null if it holds none.\n *\n * Stat the files, never the directory. A directory's mtime only moves when an\n * entry is added, removed, or renamed inside it: `generate` rewrites the client\n * files in place, so `.contentrain/client` never moves after the first run,\n * while a selective sync recreates model files via `git checkout`, which does\n * move `.contentrain/models`. Comparing the two directories therefore reported\n * \"stale\" permanently after any model save.\n */\nasync function newestFileMtime(dir: string): Promise<number | null> {\n  const entries: Dirent[] = await readdir(dir, { withFileTypes: true }).catch(() => [])\n  const mtimes = await Promise.all(entries.map(async (entry) => {\n    const full = join(dir, entry.name)\n    if (entry.isDirectory()) return newestFileMtime(full)\n    return stat(full).then(s => s.mtimeMs, () => null)\n  }))\n  const known = mtimes.filter((m): m is number => m !== null)\n  return known.length > 0 ? Math.max(...known) : null\n}\n\nasync function findOrphanContent(projectRoot: string): Promise<string[]> {\n  const crDir = contentrainDir(projectRoot)\n  const models = await listModels(projectRoot)\n  const orphans: string[] = []\n\n  const knownContentDirs = new Set<string>()\n  for (const m of models) {\n    const full = await readModel(projectRoot, m.id)\n    const modelForPath = full\n      ? {\n          ...full,\n          content_path: full.content_path ?? (m as { content_path?: string }).content_path,\n        }\n      : {\n          id: m.id,\n          name: m.id,\n          kind: m.kind,\n          domain: m.domain,\n          i18n: m.i18n,\n          fields: {},\n          content_path: (m as { content_path?: string }).content_path,\n        }\n    knownContentDirs.add(resolveContentDir(projectRoot, modelForPath))\n  }\n\n  const contentDir = join(crDir, 'content')\n  if (await pathExists(contentDir)) {\n    const domains = await readDir(contentDir)\n    for (const domain of domains) {\n      const domainDir = join(contentDir, domain)\n      const entries = await readDir(domainDir)\n      for (const entry of entries) {\n        if (entry === '.gitkeep') continue\n        const entryDir = join(domainDir, entry)\n        if (!knownContentDirs.has(entryDir)) {\n          orphans.push(`${domain}/${entry}`)\n        }\n      }\n    }\n  }\n\n  for (const dir of knownContentDirs) {\n    if (dir.startsWith(contentDir)) continue\n    if (!await pathExists(dir)) {\n      orphans.push(`(missing custom path) ${dir}`)\n      continue\n    }\n    await readDir(dir)\n  }\n\n  return orphans\n}\n\nasync function analyzeUnusedKeys(\n  projectRoot: string,\n  config: ContentrainConfig,\n): Promise<UnusedKeyEntry[]> {\n  const sourceDirs = await autoDetectSourceDirs(projectRoot)\n  const files = await discoverFiles(projectRoot, { paths: sourceDirs })\n  if (files.length === 0) return []\n\n  const chunks = await Promise.all(\n    files.map(async (relPath) => {\n      const content = await readText(join(projectRoot, relPath))\n      return content ?? ''\n    }),\n  )\n  const allSource = chunks.join('\\n')\n\n  // Dictionaries only.\n  //\n  // A dictionary key IS the reference — source code writes `t('nav.home')`, so\n  // a key absent from source is genuinely dead. Collection entry IDs and\n  // document slugs are not: entries are fetched by query, and a hex id like\n  // `0a1b2c3d4e5f` will never appear in a source file. Checking them produced\n  // a report that was mostly noise — of 134 warnings on a real project, ~120\n  // were collection and document rows, and the real findings were lost among\n  // them.\n  const models = (await listModels(projectRoot)).filter(m => m.kind === 'dictionary')\n  const defaultLocale = config.locales.default\n  const unused: UnusedKeyEntry[] = []\n\n  for (const m of models) {\n    const fullModel = await readModel(projectRoot, m.id)\n    if (!fullModel) continue\n\n    const keys = await extractContentKeys(projectRoot, fullModel, defaultLocale)\n    for (const key of keys) {\n      if (!allSource.includes(key)) {\n        unused.push({ model: m.id, kind: m.kind, key, locale: defaultLocale })\n      }\n    }\n  }\n\n  return unused\n}\n\n/**\n * Keys of a model that source code could plausibly reference by name.\n *\n * Only dictionaries have any: their keys are semantic addresses that appear\n * verbatim in source. Every other kind is queried, so its ids and slugs are\n * data, not identifiers, and looking for them in source finds nothing and\n * means nothing.\n */\nasync function extractContentKeys(\n  projectRoot: string,\n  model: ModelDefinition,\n  locale: string,\n): Promise<string[]> {\n  const cDir = resolveContentDir(projectRoot, model)\n  if (!await pathExists(cDir)) return []\n\n  switch (model.kind) {\n    case 'dictionary': {\n      const filePath = resolveJsonFilePath(cDir, model, locale)\n      const data = await readJson<Record<string, string>>(filePath)\n      return data ? Object.keys(data) : []\n    }\n    case 'collection': {\n      const filePath = resolveJsonFilePath(cDir, model, locale)\n      const data = await readJson<Record<string, Record<string, unknown>>>(filePath)\n      return data ? Object.keys(data) : []\n    }\n    case 'document': {\n      const strategy = resolveLocaleStrategy(model)\n      const slugs: string[] = []\n      if (!model.i18n) {\n        const files = await readDir(cDir)\n        for (const f of files) if (f.endsWith('.md')) slugs.push(f.replace('.md', ''))\n      } else if (strategy === 'file') {\n        const dirs = await readDir(cDir)\n        for (const d of dirs) if (!d.startsWith('.')) slugs.push(d)\n      } else if (strategy === 'suffix') {\n        const files = await readDir(cDir)\n        const suffix = `.${locale}.md`\n        for (const f of files) if (f.endsWith(suffix)) slugs.push(f.slice(0, -suffix.length))\n      } else if (strategy === 'directory') {\n        const localeDir = join(cDir, locale)\n        if (await pathExists(localeDir)) {\n          const files = await readDir(localeDir)\n          for (const f of files) if (f.endsWith('.md')) slugs.push(f.replace('.md', ''))\n        }\n      } else {\n        const files = await readDir(cDir)\n        for (const f of files) if (f.endsWith('.md')) slugs.push(f.replace('.md', ''))\n      }\n      return slugs\n    }\n    case 'singleton':\n      return []\n    default:\n      return []\n  }\n}\n\nasync function analyzeDuplicateValues(\n  projectRoot: string,\n  config: ContentrainConfig,\n): Promise<DuplicateValueEntry[]> {\n  const models = await listModels(projectRoot)\n  const result: DuplicateValueEntry[] = []\n\n  for (const m of models) {\n    if (m.kind !== 'dictionary') continue\n    const fullModel = await readModel(projectRoot, m.id)\n    if (!fullModel) continue\n\n    const cDir = resolveContentDir(projectRoot, fullModel)\n    for (const locale of config.locales.supported) {\n      const filePath = resolveJsonFilePath(cDir, fullModel, locale)\n      const data = await readJson<Record<string, string>>(filePath)\n      if (!data) continue\n\n      const valueToKeys = new Map<string, string[]>()\n      for (const [key, value] of Object.entries(data)) {\n        const arr = valueToKeys.get(value)\n        if (arr) arr.push(key)\n        else valueToKeys.set(value, [key])\n      }\n\n      for (const [value, keys] of valueToKeys) {\n        if (keys.length > 1) {\n          result.push({ model: m.id, locale, value, keys })\n        }\n      }\n    }\n  }\n\n  return result\n}\n\nasync function analyzeMissingLocaleKeys(\n  projectRoot: string,\n  config: ContentrainConfig,\n): Promise<MissingLocaleEntry[]> {\n  if (config.locales.supported.length < 2) return []\n\n  const models = await listModels(projectRoot)\n  const result: MissingLocaleEntry[] = []\n  const defaultLocale = config.locales.default\n  const otherLocales = config.locales.supported.filter(l => l !== defaultLocale)\n\n  for (const m of models) {\n    if (m.kind !== 'dictionary' && m.kind !== 'collection') continue\n    if (!m.i18n) continue\n\n    const fullModel = await readModel(projectRoot, m.id)\n    if (!fullModel) continue\n\n    const cDir = resolveContentDir(projectRoot, fullModel)\n    const defaultPath = resolveJsonFilePath(cDir, fullModel, defaultLocale)\n    const defaultData = await readJson<Record<string, unknown>>(defaultPath)\n    if (!defaultData) continue\n    const defaultKeys = new Set(Object.keys(defaultData))\n\n    for (const locale of otherLocales) {\n      const localePath = resolveJsonFilePath(cDir, fullModel, locale)\n      const localeData = await readJson<Record<string, unknown>>(localePath)\n      const localeKeys = localeData ? new Set(Object.keys(localeData)) : new Set<string>()\n\n      for (const key of defaultKeys) {\n        if (!localeKeys.has(key)) {\n          result.push({ model: m.id, key, missingIn: locale })\n        }\n      }\n    }\n  }\n\n  return result\n}\n"],"mappings":";;;;;;;;;AA4FA,eAAsB,UACpB,aACA,UAA4B,EAAE,EACP;CACvB,MAAM,SAAwB,EAAE;AAGhC,KAAI;EAEF,MAAM,UAAU,MADJ,UAAU,YAAY,CACR,SAAS;AACnC,SAAO,KAAK;GACV,MAAM;GACN,MAAM;GACN,QAAQ,IAAI,QAAQ,MAAM,GAAG,QAAQ,MAAM,GAAG,QAAQ;GACvD,CAAC;SACI;AACN,SAAO,KAAK;GAAE,MAAM;GAAO,MAAM;GAAO,QAAQ;GAAgC,UAAU;GAAS,CAAC;;CAItG,MAAM,SAAS,MAAM,WAAW,KAAK,aAAa,OAAO,CAAC;AAC1D,QAAO,KAAK;EACV,MAAM;EACN,MAAM;EACN,QAAQ,SAAS,cAAc;EAC/B,UAAU,SAAS,KAAA,IAAY;EAChC,CAAC;CAGF,MAAM,cAAc,QAAQ,SAAS;CACrC,MAAM,CAAC,SAAS,YAAY,MAAM,IAAI,CAAC,IAAI,OAAO;CAClD,MAAM,YAAY,SAAS,MAAM;AACjC,QAAO,KAAK;EACV,MAAM;EACN,MAAM;EACN,QAAQ,IAAI,cAAc,WAAW,KAAK;EAC1C,UAAU,WAAW,KAAA,IAAY;EAClC,CAAC;CAGF,MAAM,QAAQ,eAAe,YAAY;CACzC,MAAM,WAAW,MAAM,WAAW,MAAM;CACxC,MAAM,YAAY,MAAM,WAAW,KAAK,OAAO,cAAc,CAAC;CAC9D,MAAM,YAAY,MAAM,WAAW,KAAK,OAAO,SAAS,CAAC;CACzD,MAAM,aAAa,MAAM,WAAW,KAAK,OAAO,UAAU,CAAC;CAC3D,MAAM,gBAAgB,YAAY,aAAa,aAAa;AAE5D,QAAO,KAAK;EACV,MAAM;EACN,MAAM;EACN,QAAQ,CAAC,WACL,6CACA;GACE,YAAY,OAAO;GACnB,YAAY,OAAO;GACnB,aAAa,OAAO;GACrB,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,IAAI;EACpC,UAAU,gBAAgB,KAAA,IAAY;EACvC,CAAC;CAGF,IAAI,SAAmC;AACvC,KAAI,WAAW;AACb,WAAS,MAAM,WAAW,YAAY;AACtC,SAAO,KAAK;GACV,MAAM;GACN,MAAM,WAAW;GACjB,QAAQ,SACJ,UAAU,OAAO,MAAM,aAAa,OAAO,QAAQ,UAAU,KAAK,KAAK,KACvE;GACJ,UAAU,SAAS,KAAA,IAAY;GAChC,CAAC;;AAUJ,KAAI,SACF,KAAI;EAKF,MAAM,YAAY,KAAK,OAAO,SAAS;EACvC,MAAM,SAAS,MAAM,QAAQ,UAAU,EAAE,QAAO,MAAK,EAAE,SAAS,QAAQ,CAAC;EACzE,MAAM,SAAS,MAAM,QAAQ,IAC3B,MAAM,KAAI,MAAK,SAA0B,KAAK,WAAW,EAAE,CAAC,CAAC,CAC9D;EACD,MAAM,cAAc,MAAM,QAAQ,GAAG,MAAM,OAAO,OAAO,KAAK;EAC9D,MAAM,UAAU,OACb,QAAQ,MAA4B,MAAM,KAAK,CAC/C,QAAO,MAAK,wBAAwB,EAAE,CAAC,OAAO,SAAS,EAAE,CACzD,KAAI,MAAK,EAAE,GAAG;EACjB,MAAM,SAAS,OAAO,QAAQ,MAA4B,MAAM,KAAK;EAErE,MAAM,WAAW,CACf,GAAI,YAAY,SAAS,IAAI,CAAC,GAAG,YAAY,OAAO,oBAAoB,YAAY,KAAK,KAAK,CAAC,GAAG,GAAG,EAAE,EACvG,GAAI,QAAQ,SAAS,IAAI,CAAC,GAAG,QAAQ,OAAO,YAAY,QAAQ,KAAK,KAAK,CAAC,qCAAqC,GAAG,EAAE,CACtH;AACD,SAAO,KAAK;GACV,MAAM;GACN,MAAM,SAAS,WAAW;GAC1B,QAAQ,GAAG,OAAO,OAAO,WAAW,SAAS,WAAW,IAAI,gBAAgB,KAAK,SAAS,KAAK,KAAK;GACpG,UAAU,SAAS,WAAW,IAAI,KAAA,IAAY;GAC/C,CAAC;SACI;AACN,SAAO,KAAK;GAAE,MAAM;GAAU,MAAM;GAAO,QAAQ;GAAyB,UAAU;GAAS,CAAC;;AAKpG,KAAI,UAAU;EACZ,MAAM,UAAU,MAAM,kBAAkB,YAAY;AACpD,SAAO,KAAK;GACV,MAAM;GACN,MAAM,QAAQ,WAAW;GACzB,QAAQ,QAAQ,WAAW,IAAI,SAAS,UAAU,QAAQ,KAAK,KAAK;GACpE,UAAU,QAAQ,WAAW,IAAI,KAAA,IAAY;GAC9C,CAAC;;AAIJ,KAAI,QAAQ;AACV,MAAI;GACF,MAAM,SAAS,MAAM,kBAAkB,YAAY;AACnD,UAAO,KAAK;IACV,MAAM;IACN,MAAM,CAAC,OAAO,WAAW,CAAC,OAAO;IACjC,QAAQ,OAAO,YACT,OAAO,aAAa,IAAI,SAAS,GAAG,OAAO,SAAS;IAC1D,UAAU,OAAO,UAAU,UAAU,OAAO,UAAU,YAAY,KAAA;IACnE,CAAC;UACI;AACN,UAAO,KAAK;IAAE,MAAM;IAAoB,MAAM;IAAM,QAAQ;IAAmB,CAAC;;EAOlF,MAAM,aAAa,MAAM,qBAAqB,aAAa,EAAE,WAAW,KAAM,CAAC;AAC/E,MAAI,WACF,KAAI,WAAW,MACb,QAAO,KAAK;GACV,MAAM;GACN,MAAM;GACN,QAAQ,mBAAmB,WAAW,OAAO;GAC7C,UAAU;GACX,CAAC;OACG;GACL,MAAM,QAAQ,WAAW,SAAS;GAElC,MAAM,OAAO,UADK,QAAQ,mBAAmB;AAE7C,UAAO,KAAK;IACV,MAAM;IACN,MAAM,CAAC;IACP,QAAQ,UAAU,IACd,WAAW,WAAW,WACtB,GAAG,MAAM,sBAAsB,WAAW,SAAS,OAAO,0DAA0D;IACxH,UAAU,OAAO,YAAY,KAAA;IAC9B,CAAC;;;CAMR,MAAM,YAAY,KAAK,OAAO,SAAS;CACvC,MAAM,YAAY,KAAK,OAAO,SAAS;AACvC,KAAI,MAAM,WAAW,UAAU,IAAI,MAAM,WAAW,UAAU,CAC5D,KAAI;EACF,MAAM,CAAC,aAAa,eAAe,MAAM,QAAQ,IAAI,CACnD,gBAAgB,UAAU,EAC1B,gBAAgB,UAAU,CAC3B,CAAC;AACF,MAAI,gBAAgB,QAAQ,gBAAgB,KAC1C,QAAO,KAAK;GAAE,MAAM;GAAc,MAAM;GAAM,QAAQ;GAAmB,CAAC;OACrE;GACL,MAAM,QAAQ,eAAe;AAC7B,UAAO,KAAK;IACV,MAAM;IACN,MAAM;IACN,QAAQ,QAAQ,eAAe;IAC/B,UAAU,QAAQ,KAAA,IAAY;IAC/B,CAAC;;SAEE;AACN,SAAO,KAAK;GAAE,MAAM;GAAc,MAAM;GAAM,QAAQ;GAAmB,CAAC;;CAK9E,IAAI;AACJ,KAAI,QAAQ,SAAS,YAAY,QAAQ;EACvC,MAAM,CAAC,YAAY,iBAAiB,qBAAqB,MAAM,QAAQ,IAAI;GACzE,kBAAkB,aAAa,OAAO;GACtC,uBAAuB,aAAa,OAAO;GAC3C,yBAAyB,aAAa,OAAO;GAC9C,CAAC;AACF,UAAQ;GAAE;GAAY;GAAiB;GAAmB;AAE1D,SAAO,KAAK;GACV,MAAM;GACN,MAAM,WAAW,WAAW;GAC5B,QAAQ,WAAW,WAAW,IAC1B,6CACA,GAAG,WAAW,OAAO;GACzB,UAAU,WAAW,WAAW,IAAI,KAAA,IAAY;GACjD,CAAC;AAEF,SAAO,KAAK;GACV,MAAM;GACN,MAAM,gBAAgB,WAAW;GACjC,QAAQ,gBAAgB,WAAW,IAC/B,wBACA,GAAG,gBAAgB,OAAO;GAC9B,UAAU,gBAAgB,WAAW,IAAI,KAAA,IAAY;GACtD,CAAC;AAEF,SAAO,KAAK;GACV,MAAM;GACN,MAAM,kBAAkB,WAAW;GACnC,QAAQ,kBAAkB,WAAW,IACjC,mCACA,GAAG,kBAAkB,OAAO;GAChC,UAAU,kBAAkB,WAAW,IAAI,KAAA,IAAY;GACxD,CAAC;;CAGJ,MAAM,SAAS,OAAO,QAAO,MAAK,EAAE,KAAK,CAAC;CAC1C,MAAM,SAAS,OAAO,SAAS;CAC/B,MAAM,WAAW,OAAO,QAAO,MAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,UAAU,CAAC;CAEzE,MAAM,SAAuB;EAC3B;EACA,SAAS;GAAE,OAAO,OAAO;GAAQ;GAAQ;GAAQ;GAAU;EAC5D;AACD,KAAI,MAAO,QAAO,QAAQ;AAC1B,QAAO;;;;;;;;;;;;AAaT,eAAe,gBAAgB,KAAqC;CAClE,MAAM,UAAoB,MAAM,QAAQ,KAAK,EAAE,eAAe,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;CAMrF,MAAM,SALS,MAAM,QAAQ,IAAI,QAAQ,IAAI,OAAO,UAAU;EAC5D,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAClC,MAAI,MAAM,aAAa,CAAE,QAAO,gBAAgB,KAAK;AACrD,SAAO,KAAK,KAAK,CAAC,MAAK,MAAK,EAAE,eAAe,KAAK;GAClD,CAAC,EACkB,QAAQ,MAAmB,MAAM,KAAK;AAC3D,QAAO,MAAM,SAAS,IAAI,KAAK,IAAI,GAAG,MAAM,GAAG;;AAGjD,eAAe,kBAAkB,aAAwC;CACvE,MAAM,QAAQ,eAAe,YAAY;CACzC,MAAM,SAAS,MAAM,WAAW,YAAY;CAC5C,MAAM,UAAoB,EAAE;CAE5B,MAAM,mCAAmB,IAAI,KAAa;AAC1C,MAAK,MAAM,KAAK,QAAQ;EACtB,MAAM,OAAO,MAAM,UAAU,aAAa,EAAE,GAAG;EAC/C,MAAM,eAAe,OACjB;GACE,GAAG;GACH,cAAc,KAAK,gBAAiB,EAAgC;GACrE,GACD;GACE,IAAI,EAAE;GACN,MAAM,EAAE;GACR,MAAM,EAAE;GACR,QAAQ,EAAE;GACV,MAAM,EAAE;GACR,QAAQ,EAAE;GACV,cAAe,EAAgC;GAChD;AACL,mBAAiB,IAAI,kBAAkB,aAAa,aAAa,CAAC;;CAGpE,MAAM,aAAa,KAAK,OAAO,UAAU;AACzC,KAAI,MAAM,WAAW,WAAW,EAAE;EAChC,MAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,OAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,YAAY,KAAK,YAAY,OAAO;GAC1C,MAAM,UAAU,MAAM,QAAQ,UAAU;AACxC,QAAK,MAAM,SAAS,SAAS;AAC3B,QAAI,UAAU,WAAY;IAC1B,MAAM,WAAW,KAAK,WAAW,MAAM;AACvC,QAAI,CAAC,iBAAiB,IAAI,SAAS,CACjC,SAAQ,KAAK,GAAG,OAAO,GAAG,QAAQ;;;;AAM1C,MAAK,MAAM,OAAO,kBAAkB;AAClC,MAAI,IAAI,WAAW,WAAW,CAAE;AAChC,MAAI,CAAC,MAAM,WAAW,IAAI,EAAE;AAC1B,WAAQ,KAAK,yBAAyB,MAAM;AAC5C;;AAEF,QAAM,QAAQ,IAAI;;AAGpB,QAAO;;AAGT,eAAe,kBACb,aACA,QAC2B;CAE3B,MAAM,QAAQ,MAAM,cAAc,aAAa,EAAE,OAD9B,MAAM,qBAAqB,YAAY,EACU,CAAC;AACrE,KAAI,MAAM,WAAW,EAAG,QAAO,EAAE;CAQjC,MAAM,aANS,MAAM,QAAQ,IAC3B,MAAM,IAAI,OAAO,YAAY;AAE3B,SADgB,MAAM,SAAS,KAAK,aAAa,QAAQ,CAAC,IACxC;GAClB,CACH,EACwB,KAAK,KAAK;CAWnC,MAAM,UAAU,MAAM,WAAW,YAAY,EAAE,QAAO,MAAK,EAAE,SAAS,aAAa;CACnF,MAAM,gBAAgB,OAAO,QAAQ;CACrC,MAAM,SAA2B,EAAE;AAEnC,MAAK,MAAM,KAAK,QAAQ;EACtB,MAAM,YAAY,MAAM,UAAU,aAAa,EAAE,GAAG;AACpD,MAAI,CAAC,UAAW;EAEhB,MAAM,OAAO,MAAM,mBAAmB,aAAa,WAAW,cAAc;AAC5E,OAAK,MAAM,OAAO,KAChB,KAAI,CAAC,UAAU,SAAS,IAAI,CAC1B,QAAO,KAAK;GAAE,OAAO,EAAE;GAAI,MAAM,EAAE;GAAM;GAAK,QAAQ;GAAe,CAAC;;AAK5E,QAAO;;;;;;;;;;AAWT,eAAe,mBACb,aACA,OACA,QACmB;CACnB,MAAM,OAAO,kBAAkB,aAAa,MAAM;AAClD,KAAI,CAAC,MAAM,WAAW,KAAK,CAAE,QAAO,EAAE;AAEtC,SAAQ,MAAM,MAAd;EACE,KAAK,cAAc;GAEjB,MAAM,OAAO,MAAM,SADF,oBAAoB,MAAM,OAAO,OAAO,CACI;AAC7D,UAAO,OAAO,OAAO,KAAK,KAAK,GAAG,EAAE;;EAEtC,KAAK,cAAc;GAEjB,MAAM,OAAO,MAAM,SADF,oBAAoB,MAAM,OAAO,OAAO,CACqB;AAC9E,UAAO,OAAO,OAAO,KAAK,KAAK,GAAG,EAAE;;EAEtC,KAAK,YAAY;GACf,MAAM,WAAW,sBAAsB,MAAM;GAC7C,MAAM,QAAkB,EAAE;AAC1B,OAAI,CAAC,MAAM,MAAM;IACf,MAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,SAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,MAAM,CAAE,OAAM,KAAK,EAAE,QAAQ,OAAO,GAAG,CAAC;cACrE,aAAa,QAAQ;IAC9B,MAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,SAAK,MAAM,KAAK,KAAM,KAAI,CAAC,EAAE,WAAW,IAAI,CAAE,OAAM,KAAK,EAAE;cAClD,aAAa,UAAU;IAChC,MAAM,QAAQ,MAAM,QAAQ,KAAK;IACjC,MAAM,SAAS,IAAI,OAAO;AAC1B,SAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,OAAO,CAAE,OAAM,KAAK,EAAE,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC;cAC5E,aAAa,aAAa;IACnC,MAAM,YAAY,KAAK,MAAM,OAAO;AACpC,QAAI,MAAM,WAAW,UAAU,EAAE;KAC/B,MAAM,QAAQ,MAAM,QAAQ,UAAU;AACtC,UAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,MAAM,CAAE,OAAM,KAAK,EAAE,QAAQ,OAAO,GAAG,CAAC;;UAE3E;IACL,MAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,SAAK,MAAM,KAAK,MAAO,KAAI,EAAE,SAAS,MAAM,CAAE,OAAM,KAAK,EAAE,QAAQ,OAAO,GAAG,CAAC;;AAEhF,UAAO;;EAET,KAAK,YACH,QAAO,EAAE;EACX,QACE,QAAO,EAAE;;;AAIf,eAAe,uBACb,aACA,QACgC;CAChC,MAAM,SAAS,MAAM,WAAW,YAAY;CAC5C,MAAM,SAAgC,EAAE;AAExC,MAAK,MAAM,KAAK,QAAQ;AACtB,MAAI,EAAE,SAAS,aAAc;EAC7B,MAAM,YAAY,MAAM,UAAU,aAAa,EAAE,GAAG;AACpD,MAAI,CAAC,UAAW;EAEhB,MAAM,OAAO,kBAAkB,aAAa,UAAU;AACtD,OAAK,MAAM,UAAU,OAAO,QAAQ,WAAW;GAE7C,MAAM,OAAO,MAAM,SADF,oBAAoB,MAAM,WAAW,OAAO,CACA;AAC7D,OAAI,CAAC,KAAM;GAEX,MAAM,8BAAc,IAAI,KAAuB;AAC/C,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;IAC/C,MAAM,MAAM,YAAY,IAAI,MAAM;AAClC,QAAI,IAAK,KAAI,KAAK,IAAI;QACjB,aAAY,IAAI,OAAO,CAAC,IAAI,CAAC;;AAGpC,QAAK,MAAM,CAAC,OAAO,SAAS,YAC1B,KAAI,KAAK,SAAS,EAChB,QAAO,KAAK;IAAE,OAAO,EAAE;IAAI;IAAQ;IAAO;IAAM,CAAC;;;AAMzD,QAAO;;AAGT,eAAe,yBACb,aACA,QAC+B;AAC/B,KAAI,OAAO,QAAQ,UAAU,SAAS,EAAG,QAAO,EAAE;CAElD,MAAM,SAAS,MAAM,WAAW,YAAY;CAC5C,MAAM,SAA+B,EAAE;CACvC,MAAM,gBAAgB,OAAO,QAAQ;CACrC,MAAM,eAAe,OAAO,QAAQ,UAAU,QAAO,MAAK,MAAM,cAAc;AAE9E,MAAK,MAAM,KAAK,QAAQ;AACtB,MAAI,EAAE,SAAS,gBAAgB,EAAE,SAAS,aAAc;AACxD,MAAI,CAAC,EAAE,KAAM;EAEb,MAAM,YAAY,MAAM,UAAU,aAAa,EAAE,GAAG;AACpD,MAAI,CAAC,UAAW;EAEhB,MAAM,OAAO,kBAAkB,aAAa,UAAU;EAEtD,MAAM,cAAc,MAAM,SADN,oBAAoB,MAAM,WAAW,cAAc,CACC;AACxE,MAAI,CAAC,YAAa;EAClB,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,YAAY,CAAC;AAErD,OAAK,MAAM,UAAU,cAAc;GAEjC,MAAM,aAAa,MAAM,SADN,oBAAoB,MAAM,WAAW,OAAO,CACO;GACtE,MAAM,aAAa,aAAa,IAAI,IAAI,OAAO,KAAK,WAAW,CAAC,mBAAG,IAAI,KAAa;AAEpF,QAAK,MAAM,OAAO,YAChB,KAAI,CAAC,WAAW,IAAI,IAAI,CACtB,QAAO,KAAK;IAAE,OAAO,EAAE;IAAI;IAAK,WAAW;IAAQ,CAAC;;;AAM5D,QAAO"}

package/dist/errors-BmLE-JSC.mjs

@@ -0,0 +1,55 @@
+import { n as mapProviderError } from "./errors-DLkAWnzQ.mjs";
+//#region src/git/errors.ts
+/**
+* Error normalization for git-backed MCP operations.
+*
+* `simple-git` surfaces a failed `git commit`/`push`/`merge` as a `GitError`
+* whose `message` is the raw subprocess stderr — which, for hook tooling
+* (commitlint, husky, lefthook), is colorized multi-line text. Returning that
+* verbatim inside a JSON error produces an unreadable ANSI-escaped blob.
+*
+* This helper strips ANSI, preserves any structured fields the thrown error
+* already carries (`code`/`agent_hint`/`developer_action`), and detects git
+* hook rejections so the agent gets an actionable, structured envelope.
+*/
+const ANSI_RE = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
+function stripAnsi(input) {
+	return input.replace(ANSI_RE, "");
+}
+/**
+* Normalize any thrown error into a structured, ANSI-free envelope for MCP
+* tool responses. `stage` labels where it happened (e.g. 'content_save').
+*/
+function normalizeOperationError(err, stage) {
+	const e = err;
+	const message = stripAnsi(e?.message ?? String(err)).trim();
+	const out = { error: message };
+	if (stage) out.stage = stage;
+	if (e?.code) out.code = e.code;
+	if (e?.agent_hint) out.agent_hint = e.agent_hint;
+	if (e?.developer_action) out.developer_action = e.developer_action;
+	if (!out.code) {
+		const mapped = mapProviderError(err);
+		if (mapped) {
+			out.error = mapped.error;
+			out.code = mapped.code;
+			out.agent_hint = mapped.agent_hint;
+			if (mapped.developer_action) out.developer_action = mapped.developer_action;
+			return out;
+		}
+	}
+	if (!out.code) {
+		const hookName = /\b(commit-msg|pre-commit|prepare-commit-msg|pre-push)\b/i.exec(message)?.[1];
+		const hookTool = /\b(commitlint|husky|lefthook)\b/i.exec(message)?.[1];
+		if (hookName || hookTool) {
+			out.stage = out.stage ?? "git-commit";
+			out.hook = hookName ?? hookTool;
+			out.agent_hint = out.agent_hint ?? "A git hook rejected the Contentrain commit. Contentrain commits with --no-verify, but a wrapping CLI or server-side hook may still run. Ask the developer to allow machine-generated \"[contentrain]\" commits or to exclude cr/* branches from the hook.";
+		}
+	}
+	return out;
+}
+//#endregion
+export { stripAnsi as n, normalizeOperationError as t };
+
+//# sourceMappingURL=errors-BmLE-JSC.mjs.map

package/dist/errors-BmLE-JSC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-BmLE-JSC.mjs","names":[],"sources":["../src/git/errors.ts"],"sourcesContent":["/**\n * Error normalization for git-backed MCP operations.\n *\n * `simple-git` surfaces a failed `git commit`/`push`/`merge` as a `GitError`\n * whose `message` is the raw subprocess stderr — which, for hook tooling\n * (commitlint, husky, lefthook), is colorized multi-line text. Returning that\n * verbatim inside a JSON error produces an unreadable ANSI-escaped blob.\n *\n * This helper strips ANSI, preserves any structured fields the thrown error\n * already carries (`code`/`agent_hint`/`developer_action`), and detects git\n * hook rejections so the agent gets an actionable, structured envelope.\n */\n\nimport { mapProviderError } from '../providers/shared/errors.js'\n\n// Build the ANSI matcher without a literal control char so oxlint's\n// no-control-regex rule stays happy.\nconst ANSI_RE = new RegExp(`${String.fromCharCode(27)}\\\\[[0-9;]*m`, 'g')\n\nexport function stripAnsi(input: string): string {\n  return input.replace(ANSI_RE, '')\n}\n\nexport interface NormalizedError {\n  error: string\n  stage?: string\n  hook?: string\n  code?: string\n  agent_hint?: string\n  developer_action?: string\n}\n\n/**\n * Normalize any thrown error into a structured, ANSI-free envelope for MCP\n * tool responses. `stage` labels where it happened (e.g. 'content_save').\n */\nexport function normalizeOperationError(err: unknown, stage?: string): NormalizedError {\n  const e = err as { message?: string, code?: string, agent_hint?: string, developer_action?: string } | undefined\n  const rawMessage = e?.message ?? String(err)\n  const message = stripAnsi(rawMessage).trim()\n\n  const out: NormalizedError = { error: message }\n  if (stage) out.stage = stage\n  if (e?.code) out.code = e.code\n  if (e?.agent_hint) out.agent_hint = e.agent_hint\n  if (e?.developer_action) out.developer_action = e.developer_action\n\n  // Provider SDK rejections (Octokit, Gitbeaker) carry an HTTP status but no\n  // structured fields, so without this they reached the client as a bare\n  // vendor string — a documentation URL and no indication of whether the\n  // operation is retryable. Mapping here rather than at each `throw` inside\n  // the providers means every provider error is covered, including ones added\n  // later. An error that already carries a Contentrain code keeps it.\n  if (!out.code) {\n    const mapped = mapProviderError(err)\n    if (mapped) {\n      out.error = mapped.error\n      out.code = mapped.code\n      out.agent_hint = mapped.agent_hint\n      if (mapped.developer_action) out.developer_action = mapped.developer_action\n      return out\n    }\n  }\n\n  // Detect a git hook rejection (only when the error isn't already a\n  // structured Contentrain error with its own code).\n  if (!out.code) {\n    const hookName = /\\b(commit-msg|pre-commit|prepare-commit-msg|pre-push)\\b/i.exec(message)?.[1]\n    const hookTool = /\\b(commitlint|husky|lefthook)\\b/i.exec(message)?.[1]\n    if (hookName || hookTool) {\n      out.stage = out.stage ?? 'git-commit'\n      out.hook = hookName ?? hookTool\n      out.agent_hint = out.agent_hint\n        ?? 'A git hook rejected the Contentrain commit. Contentrain commits with --no-verify, but a wrapping CLI or server-side hook may still run. Ask the developer to allow machine-generated \"[contentrain]\" commits or to exclude cr/* branches from the hook.'\n    }\n  }\n\n  return out\n}\n"],"mappings":";;;;;;;;;;;;;;AAiBA,MAAM,UAAU,IAAI,OAAO,GAAG,OAAO,aAAa,GAAG,CAAC,cAAc,IAAI;AAExE,SAAgB,UAAU,OAAuB;AAC/C,QAAO,MAAM,QAAQ,SAAS,GAAG;;;;;;AAgBnC,SAAgB,wBAAwB,KAAc,OAAiC;CACrF,MAAM,IAAI;CAEV,MAAM,UAAU,UADG,GAAG,WAAW,OAAO,IAAI,CACP,CAAC,MAAM;CAE5C,MAAM,MAAuB,EAAE,OAAO,SAAS;AAC/C,KAAI,MAAO,KAAI,QAAQ;AACvB,KAAI,GAAG,KAAM,KAAI,OAAO,EAAE;AAC1B,KAAI,GAAG,WAAY,KAAI,aAAa,EAAE;AACtC,KAAI,GAAG,iBAAkB,KAAI,mBAAmB,EAAE;AAQlD,KAAI,CAAC,IAAI,MAAM;EACb,MAAM,SAAS,iBAAiB,IAAI;AACpC,MAAI,QAAQ;AACV,OAAI,QAAQ,OAAO;AACnB,OAAI,OAAO,OAAO;AAClB,OAAI,aAAa,OAAO;AACxB,OAAI,OAAO,iBAAkB,KAAI,mBAAmB,OAAO;AAC3D,UAAO;;;AAMX,KAAI,CAAC,IAAI,MAAM;EACb,MAAM,WAAW,2DAA2D,KAAK,QAAQ,GAAG;EAC5F,MAAM,WAAW,mCAAmC,KAAK,QAAQ,GAAG;AACpE,MAAI,YAAY,UAAU;AACxB,OAAI,QAAQ,IAAI,SAAS;AACzB,OAAI,OAAO,YAAY;AACvB,OAAI,aAAa,IAAI,cAChB;;;AAIT,QAAO"}

package/dist/{errors-CvBS12e7.mjs → errors-DLkAWnzQ.mjs}

@@ -123,4 +123,4 @@ function mapProviderError(error) {
 //#endregion
 export { mapProviderError as n, isNotFoundError as t };
 
-//# sourceMappingURL=errors-CvBS12e7.mjs.map
+//# sourceMappingURL=errors-DLkAWnzQ.mjs.map

package/dist/{errors-CvBS12e7.mjs.map → errors-DLkAWnzQ.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"errors-CvBS12e7.mjs","names":[],"sources":["../src/providers/shared/errors.ts"],"sourcesContent":["/**\n * Error shapes for API-backed providers, and the mapping from those shapes\n * into Contentrain's structured error envelope.\n *\n * Two common error shapes in the provider SDKs we use:\n *\n * - **Octokit** (`@octokit/rest`) — rejects with an `Error` that has a\n *   top-level `.status` number set to the HTTP status code.\n * - **Gitbeaker** (`@gitbeaker/rest`) — rejects with a plain `Error` whose\n *   `.cause` includes `{ response: { status } }`.\n */\n\n/**\n * HTTP status behind a provider SDK rejection, or `undefined` when the error\n * is not an HTTP failure (a local git error, a programming mistake, …).\n *\n * We deliberately do NOT fall back to substring matching on the error\n * message — that leniency can silently mask other failures (forbidden repo,\n * deleted project, rate limits) and produce the wrong answer. If either SDK\n * ever stops populating the status field, the regression surfaces in tests\n * rather than being papered over at the reader layer.\n */\nexport function extractHttpStatus(error: unknown): number | undefined {\n  if (typeof error !== 'object' || error === null) return undefined\n  const direct = (error as { status?: number }).status\n  if (typeof direct === 'number') return direct\n  const nested = (error as { cause?: { response?: { status?: number } } }).cause?.response?.status\n  return typeof nested === 'number' ? nested : undefined\n}\n\n/** Unified \"is this a 404?\" helper for API-backed providers. */\nexport function isNotFoundError(error: unknown): boolean {\n  return extractHttpStatus(error) === 404\n}\n\n/**\n * Provider SDK messages are written for a human reading a terminal, not for an\n * agent deciding what to do next. Octokit appends a documentation URL to most\n * messages and embeds the raw JSON response body on validation failures.\n *\n * The vendor text still carries the only specifics we have (\"Reference already\n * exists\", which field failed), so it is kept as a parenthetical detail rather\n * than discarded — but the doc links are noise for an agent, and an embedded\n * body can be arbitrarily long, so URLs are stripped and the result is capped.\n */\nfunction sanitiseDetail(error: unknown): string {\n  const raw = (error as { message?: string } | undefined)?.message ?? String(error)\n  const withoutUrls = raw.replace(/\\s*-?\\s*https?:\\/\\/\\S+/g, '')\n  const collapsed = withoutUrls.replace(/\\s+/g, ' ').trim()\n  return collapsed.length > 200 ? `${collapsed.slice(0, 197)}…` : collapsed\n}\n\n/**\n * GitHub signals rate limiting with 403 plus an exhausted remaining-quota\n * header (secondary limits use 403 too), and with 429 on some endpoints.\n * Checking the header first keeps a genuine permission 403 from being\n * reported as a rate limit.\n */\nfunction isRateLimited(error: unknown, status: number): boolean {\n  if (status === 429) return true\n  if (status !== 403) return false\n  const headers = (error as { response?: { headers?: Record<string, unknown> } }).response?.headers\n  const remaining = headers?.['x-ratelimit-remaining']\n  if (remaining !== undefined) return String(remaining) === '0'\n  return /\\brate limit\\b/i.test((error as { message?: string }).message ?? '')\n}\n\nexport interface ProviderErrorInfo {\n  error: string\n  code: string\n  agent_hint: string\n  developer_action?: string\n}\n\n/**\n * Map a provider SDK rejection onto the same structured envelope the local git\n * paths already produce (`code` + `agent_hint` + `developer_action`). Returns\n * `undefined` for anything that is not a recognisable provider HTTP failure,\n * so local git errors and ordinary exceptions pass through untouched.\n */\nexport function mapProviderError(error: unknown): ProviderErrorInfo | undefined {\n  const status = extractHttpStatus(error)\n  if (status === undefined) return undefined\n\n  const detail = sanitiseDetail(error)\n  const withDetail = (summary: string): string => (detail ? `${summary} (${detail})` : summary)\n\n  if (isRateLimited(error, status)) {\n    return {\n      error: withDetail('The git provider rejected the request because the API rate limit is exhausted.'),\n      code: 'PROVIDER_RATE_LIMITED',\n      agent_hint: 'Do not retry immediately — the limit is time-based. Stop the current operation and report it to the developer.',\n      developer_action: 'Wait for the rate-limit window to reset, or use a token with a higher quota.',\n    }\n  }\n\n  switch (status) {\n    case 401:\n      return {\n        error: withDetail('The git provider rejected the credentials.'),\n        code: 'PROVIDER_UNAUTHORIZED',\n        agent_hint: 'The token is missing, malformed, or expired. Not retryable — ask the developer to fix the credentials.',\n        developer_action: 'Check the provider token configured for this Contentrain server and reissue it if it has expired.',\n      }\n    case 403:\n      return {\n        error: withDetail('The git provider denied access to this resource.'),\n        code: 'PROVIDER_FORBIDDEN',\n        agent_hint: 'The credentials are valid but lack permission for this operation. Not retryable — report which operation was refused.',\n        developer_action: 'Grant the token write access to the repository, or check whether branch protection or SSO authorisation is blocking it.',\n      }\n    case 404:\n      return {\n        error: withDetail('The git provider could not find the requested resource.'),\n        code: 'PROVIDER_NOT_FOUND',\n        agent_hint: 'The repository, branch, or path does not exist — or the token cannot see it, which also returns 404. Verify the target before retrying.',\n        developer_action: 'Confirm the repository and branch names in the Contentrain config, and that the token can reach a private repository.',\n      }\n    case 409:\n      return {\n        error: withDetail('The git provider reported a conflict.'),\n        code: 'PROVIDER_CONFLICT',\n        agent_hint: 'The branch moved between read and write. Re-read the current state and rebuild the change before retrying once.',\n        developer_action: 'Usually a concurrent write to the same branch; retrying the operation normally resolves it.',\n      }\n    case 422:\n      return {\n        error: withDetail('The git provider rejected the request as invalid.'),\n        code: 'PROVIDER_VALIDATION_FAILED',\n        agent_hint: 'Well-formed but semantically rejected (e.g. the ref already exists, or a name is invalid). Do not retry unchanged.',\n        developer_action: 'Inspect the detail above — a stale branch left over from an earlier run is the common cause.',\n      }\n    default:\n      if (status >= 500) {\n        return {\n          error: withDetail('The git provider is unavailable.'),\n          code: 'PROVIDER_UNAVAILABLE',\n          agent_hint: 'A server-side failure on the provider. Safe to retry once after a short pause; if it persists, stop and report it.',\n          developer_action: 'Check the provider status page.',\n        }\n      }\n      return {\n        error: withDetail(`The git provider returned HTTP ${status}.`),\n        code: 'PROVIDER_REQUEST_FAILED',\n        agent_hint: 'An unmapped provider failure. Report the status and detail to the developer rather than retrying blindly.',\n      }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,kBAAkB,OAAoC;AACpE,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,KAAA;CACxD,MAAM,SAAU,MAA8B;AAC9C,KAAI,OAAO,WAAW,SAAU,QAAO;CACvC,MAAM,SAAU,MAAyD,OAAO,UAAU;AAC1F,QAAO,OAAO,WAAW,WAAW,SAAS,KAAA;;;AAI/C,SAAgB,gBAAgB,OAAyB;AACvD,QAAO,kBAAkB,MAAM,KAAK;;;;;;;;;;;;AAatC,SAAS,eAAe,OAAwB;CAG9C,MAAM,aAFO,OAA4C,WAAW,OAAO,MAAM,EACzD,QAAQ,2BAA2B,GAAG,CAChC,QAAQ,QAAQ,IAAI,CAAC,MAAM;AACzD,QAAO,UAAU,SAAS,MAAM,GAAG,UAAU,MAAM,GAAG,IAAI,CAAC,KAAK;;;;;;;;AASlE,SAAS,cAAc,OAAgB,QAAyB;AAC9D,KAAI,WAAW,IAAK,QAAO;AAC3B,KAAI,WAAW,IAAK,QAAO;CAE3B,MAAM,aADW,MAA+D,UAAU,WAC9D;AAC5B,KAAI,cAAc,KAAA,EAAW,QAAO,OAAO,UAAU,KAAK;AAC1D,QAAO,kBAAkB,KAAM,MAA+B,WAAW,GAAG;;;;;;;;AAgB9E,SAAgB,iBAAiB,OAA+C;CAC9E,MAAM,SAAS,kBAAkB,MAAM;AACvC,KAAI,WAAW,KAAA,EAAW,QAAO,KAAA;CAEjC,MAAM,SAAS,eAAe,MAAM;CACpC,MAAM,cAAc,YAA6B,SAAS,GAAG,QAAQ,IAAI,OAAO,KAAK;AAErF,KAAI,cAAc,OAAO,OAAO,CAC9B,QAAO;EACL,OAAO,WAAW,iFAAiF;EACnG,MAAM;EACN,YAAY;EACZ,kBAAkB;EACnB;AAGH,SAAQ,QAAR;EACE,KAAK,IACH,QAAO;GACL,OAAO,WAAW,6CAA6C;GAC/D,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,mDAAmD;GACrE,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,0DAA0D;GAC5E,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,wCAAwC;GAC1D,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,oDAAoD;GACtE,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH;AACE,OAAI,UAAU,IACZ,QAAO;IACL,OAAO,WAAW,mCAAmC;IACrD,MAAM;IACN,YAAY;IACZ,kBAAkB;IACnB;AAEH,UAAO;IACL,OAAO,WAAW,kCAAkC,OAAO,GAAG;IAC9D,MAAM;IACN,YAAY;IACb"}
+{"version":3,"file":"errors-DLkAWnzQ.mjs","names":[],"sources":["../src/providers/shared/errors.ts"],"sourcesContent":["/**\n * Error shapes for API-backed providers, and the mapping from those shapes\n * into Contentrain's structured error envelope.\n *\n * Two common error shapes in the provider SDKs we use:\n *\n * - **Octokit** (`@octokit/rest`) — rejects with an `Error` that has a\n *   top-level `.status` number set to the HTTP status code.\n * - **Gitbeaker** (`@gitbeaker/rest`) — rejects with a plain `Error` whose\n *   `.cause` includes `{ response: { status } }`.\n */\n\n/**\n * HTTP status behind a provider SDK rejection, or `undefined` when the error\n * is not an HTTP failure (a local git error, a programming mistake, …).\n *\n * We deliberately do NOT fall back to substring matching on the error\n * message — that leniency can silently mask other failures (forbidden repo,\n * deleted project, rate limits) and produce the wrong answer. If either SDK\n * ever stops populating the status field, the regression surfaces in tests\n * rather than being papered over at the reader layer.\n */\nexport function extractHttpStatus(error: unknown): number | undefined {\n  if (typeof error !== 'object' || error === null) return undefined\n  const direct = (error as { status?: number }).status\n  if (typeof direct === 'number') return direct\n  const nested = (error as { cause?: { response?: { status?: number } } }).cause?.response?.status\n  return typeof nested === 'number' ? nested : undefined\n}\n\n/** Unified \"is this a 404?\" helper for API-backed providers. */\nexport function isNotFoundError(error: unknown): boolean {\n  return extractHttpStatus(error) === 404\n}\n\n/**\n * Provider SDK messages are written for a human reading a terminal, not for an\n * agent deciding what to do next. Octokit appends a documentation URL to most\n * messages and embeds the raw JSON response body on validation failures.\n *\n * The vendor text still carries the only specifics we have (\"Reference already\n * exists\", which field failed), so it is kept as a parenthetical detail rather\n * than discarded — but the doc links are noise for an agent, and an embedded\n * body can be arbitrarily long, so URLs are stripped and the result is capped.\n */\nfunction sanitiseDetail(error: unknown): string {\n  const raw = (error as { message?: string } | undefined)?.message ?? String(error)\n  const withoutUrls = raw.replace(/\\s*-?\\s*https?:\\/\\/\\S+/g, '')\n  const collapsed = withoutUrls.replace(/\\s+/g, ' ').trim()\n  return collapsed.length > 200 ? `${collapsed.slice(0, 197)}…` : collapsed\n}\n\n/**\n * GitHub signals rate limiting with 403 plus an exhausted remaining-quota\n * header (secondary limits use 403 too), and with 429 on some endpoints.\n * Checking the header first keeps a genuine permission 403 from being\n * reported as a rate limit.\n */\nfunction isRateLimited(error: unknown, status: number): boolean {\n  if (status === 429) return true\n  if (status !== 403) return false\n  const headers = (error as { response?: { headers?: Record<string, unknown> } }).response?.headers\n  const remaining = headers?.['x-ratelimit-remaining']\n  if (remaining !== undefined) return String(remaining) === '0'\n  return /\\brate limit\\b/i.test((error as { message?: string }).message ?? '')\n}\n\nexport interface ProviderErrorInfo {\n  error: string\n  code: string\n  agent_hint: string\n  developer_action?: string\n}\n\n/**\n * Map a provider SDK rejection onto the same structured envelope the local git\n * paths already produce (`code` + `agent_hint` + `developer_action`). Returns\n * `undefined` for anything that is not a recognisable provider HTTP failure,\n * so local git errors and ordinary exceptions pass through untouched.\n */\nexport function mapProviderError(error: unknown): ProviderErrorInfo | undefined {\n  const status = extractHttpStatus(error)\n  if (status === undefined) return undefined\n\n  const detail = sanitiseDetail(error)\n  const withDetail = (summary: string): string => (detail ? `${summary} (${detail})` : summary)\n\n  if (isRateLimited(error, status)) {\n    return {\n      error: withDetail('The git provider rejected the request because the API rate limit is exhausted.'),\n      code: 'PROVIDER_RATE_LIMITED',\n      agent_hint: 'Do not retry immediately — the limit is time-based. Stop the current operation and report it to the developer.',\n      developer_action: 'Wait for the rate-limit window to reset, or use a token with a higher quota.',\n    }\n  }\n\n  switch (status) {\n    case 401:\n      return {\n        error: withDetail('The git provider rejected the credentials.'),\n        code: 'PROVIDER_UNAUTHORIZED',\n        agent_hint: 'The token is missing, malformed, or expired. Not retryable — ask the developer to fix the credentials.',\n        developer_action: 'Check the provider token configured for this Contentrain server and reissue it if it has expired.',\n      }\n    case 403:\n      return {\n        error: withDetail('The git provider denied access to this resource.'),\n        code: 'PROVIDER_FORBIDDEN',\n        agent_hint: 'The credentials are valid but lack permission for this operation. Not retryable — report which operation was refused.',\n        developer_action: 'Grant the token write access to the repository, or check whether branch protection or SSO authorisation is blocking it.',\n      }\n    case 404:\n      return {\n        error: withDetail('The git provider could not find the requested resource.'),\n        code: 'PROVIDER_NOT_FOUND',\n        agent_hint: 'The repository, branch, or path does not exist — or the token cannot see it, which also returns 404. Verify the target before retrying.',\n        developer_action: 'Confirm the repository and branch names in the Contentrain config, and that the token can reach a private repository.',\n      }\n    case 409:\n      return {\n        error: withDetail('The git provider reported a conflict.'),\n        code: 'PROVIDER_CONFLICT',\n        agent_hint: 'The branch moved between read and write. Re-read the current state and rebuild the change before retrying once.',\n        developer_action: 'Usually a concurrent write to the same branch; retrying the operation normally resolves it.',\n      }\n    case 422:\n      return {\n        error: withDetail('The git provider rejected the request as invalid.'),\n        code: 'PROVIDER_VALIDATION_FAILED',\n        agent_hint: 'Well-formed but semantically rejected (e.g. the ref already exists, or a name is invalid). Do not retry unchanged.',\n        developer_action: 'Inspect the detail above — a stale branch left over from an earlier run is the common cause.',\n      }\n    default:\n      if (status >= 500) {\n        return {\n          error: withDetail('The git provider is unavailable.'),\n          code: 'PROVIDER_UNAVAILABLE',\n          agent_hint: 'A server-side failure on the provider. Safe to retry once after a short pause; if it persists, stop and report it.',\n          developer_action: 'Check the provider status page.',\n        }\n      }\n      return {\n        error: withDetail(`The git provider returned HTTP ${status}.`),\n        code: 'PROVIDER_REQUEST_FAILED',\n        agent_hint: 'An unmapped provider failure. Report the status and detail to the developer rather than retrying blindly.',\n      }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,kBAAkB,OAAoC;AACpE,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,KAAA;CACxD,MAAM,SAAU,MAA8B;AAC9C,KAAI,OAAO,WAAW,SAAU,QAAO;CACvC,MAAM,SAAU,MAAyD,OAAO,UAAU;AAC1F,QAAO,OAAO,WAAW,WAAW,SAAS,KAAA;;;AAI/C,SAAgB,gBAAgB,OAAyB;AACvD,QAAO,kBAAkB,MAAM,KAAK;;;;;;;;;;;;AAatC,SAAS,eAAe,OAAwB;CAG9C,MAAM,aAFO,OAA4C,WAAW,OAAO,MAAM,EACzD,QAAQ,2BAA2B,GAAG,CAChC,QAAQ,QAAQ,IAAI,CAAC,MAAM;AACzD,QAAO,UAAU,SAAS,MAAM,GAAG,UAAU,MAAM,GAAG,IAAI,CAAC,KAAK;;;;;;;;AASlE,SAAS,cAAc,OAAgB,QAAyB;AAC9D,KAAI,WAAW,IAAK,QAAO;AAC3B,KAAI,WAAW,IAAK,QAAO;CAE3B,MAAM,aADW,MAA+D,UAAU,WAC9D;AAC5B,KAAI,cAAc,KAAA,EAAW,QAAO,OAAO,UAAU,KAAK;AAC1D,QAAO,kBAAkB,KAAM,MAA+B,WAAW,GAAG;;;;;;;;AAgB9E,SAAgB,iBAAiB,OAA+C;CAC9E,MAAM,SAAS,kBAAkB,MAAM;AACvC,KAAI,WAAW,KAAA,EAAW,QAAO,KAAA;CAEjC,MAAM,SAAS,eAAe,MAAM;CACpC,MAAM,cAAc,YAA6B,SAAS,GAAG,QAAQ,IAAI,OAAO,KAAK;AAErF,KAAI,cAAc,OAAO,OAAO,CAC9B,QAAO;EACL,OAAO,WAAW,iFAAiF;EACnG,MAAM;EACN,YAAY;EACZ,kBAAkB;EACnB;AAGH,SAAQ,QAAR;EACE,KAAK,IACH,QAAO;GACL,OAAO,WAAW,6CAA6C;GAC/D,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,mDAAmD;GACrE,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,0DAA0D;GAC5E,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,wCAAwC;GAC1D,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH,KAAK,IACH,QAAO;GACL,OAAO,WAAW,oDAAoD;GACtE,MAAM;GACN,YAAY;GACZ,kBAAkB;GACnB;EACH;AACE,OAAI,UAAU,IACZ,QAAO;IACL,OAAO,WAAW,mCAAmC;IACrD,MAAM;IACN,YAAY;IACZ,kBAAkB;IACnB;AAEH,UAAO;IACL,OAAO,WAAW,kCAAkC,OAAO,GAAG;IAC9D,MAAM;IACN,YAAY;IACb"}

package/dist/{fs-DLbVB-Ek.mjs → fs-DJv5G8uL.mjs}

@@ -49,4 +49,4 @@ function contentrainDir(projectRoot) {
 //#endregion
 export { readJson as a, writeText as c, readDir as i, ensureDir as n, readText as o, pathExists as r, writeJson as s, contentrainDir as t };
 
-//# sourceMappingURL=fs-DLbVB-Ek.mjs.map
+//# sourceMappingURL=fs-DJv5G8uL.mjs.map

package/dist/{fs-DLbVB-Ek.mjs.map → fs-DJv5G8uL.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"fs-DLbVB-Ek.mjs","names":[],"sources":["../src/util/fs.ts"],"sourcesContent":["import { readFile, readdir, access, writeFile, mkdir } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport { canonicalStringify } from '@contentrain/types'\n\nexport async function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await access(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport async function readJson<T>(filePath: string): Promise<T | null> {\n  try {\n    const raw = await readFile(filePath, 'utf-8')\n    return JSON.parse(raw) as T\n  } catch {\n    return null\n  }\n}\n\nexport async function readDir(dirPath: string): Promise<string[]> {\n  try {\n    return await readdir(dirPath)\n  } catch {\n    return []\n  }\n}\n\nexport async function writeJson(filePath: string, data: unknown, fieldOrder?: readonly string[]): Promise<void> {\n  await mkdir(join(filePath, '..'), { recursive: true })\n  await writeFile(filePath, canonicalStringify(data, fieldOrder), 'utf-8')\n}\n\nexport async function ensureDir(dirPath: string): Promise<void> {\n  await mkdir(dirPath, { recursive: true })\n}\n\nexport async function readText(filePath: string): Promise<string | null> {\n  try {\n    return await readFile(filePath, 'utf-8')\n  } catch {\n    return null\n  }\n}\n\nexport async function writeText(filePath: string, content: string): Promise<void> {\n  await mkdir(join(filePath, '..'), { recursive: true })\n  await writeFile(filePath, content, 'utf-8')\n}\n\nexport function contentrainDir(projectRoot: string): string {\n  return join(projectRoot, '.contentrain')\n}\n"],"mappings":";;;;AAIA,eAAsB,WAAW,UAAoC;AACnE,KAAI;AACF,QAAM,OAAO,SAAS;AACtB,SAAO;SACD;AACN,SAAO;;;AAIX,eAAsB,SAAY,UAAqC;AACrE,KAAI;EACF,MAAM,MAAM,MAAM,SAAS,UAAU,QAAQ;AAC7C,SAAO,KAAK,MAAM,IAAI;SAChB;AACN,SAAO;;;AAIX,eAAsB,QAAQ,SAAoC;AAChE,KAAI;AACF,SAAO,MAAM,QAAQ,QAAQ;SACvB;AACN,SAAO,EAAE;;;AAIb,eAAsB,UAAU,UAAkB,MAAe,YAA+C;AAC9G,OAAM,MAAM,KAAK,UAAU,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,OAAM,UAAU,UAAU,mBAAmB,MAAM,WAAW,EAAE,QAAQ;;AAG1E,eAAsB,UAAU,SAAgC;AAC9D,OAAM,MAAM,SAAS,EAAE,WAAW,MAAM,CAAC;;AAG3C,eAAsB,SAAS,UAA0C;AACvE,KAAI;AACF,SAAO,MAAM,SAAS,UAAU,QAAQ;SAClC;AACN,SAAO;;;AAIX,eAAsB,UAAU,UAAkB,SAAgC;AAChF,OAAM,MAAM,KAAK,UAAU,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,OAAM,UAAU,UAAU,SAAS,QAAQ;;AAG7C,SAAgB,eAAe,aAA6B;AAC1D,QAAO,KAAK,aAAa,eAAe"}
+{"version":3,"file":"fs-DJv5G8uL.mjs","names":[],"sources":["../src/util/fs.ts"],"sourcesContent":["import { readFile, readdir, access, writeFile, mkdir } from 'node:fs/promises'\nimport { join } from 'node:path'\nimport { canonicalStringify } from '@contentrain/types'\n\nexport async function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await access(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport async function readJson<T>(filePath: string): Promise<T | null> {\n  try {\n    const raw = await readFile(filePath, 'utf-8')\n    return JSON.parse(raw) as T\n  } catch {\n    return null\n  }\n}\n\nexport async function readDir(dirPath: string): Promise<string[]> {\n  try {\n    return await readdir(dirPath)\n  } catch {\n    return []\n  }\n}\n\nexport async function writeJson(filePath: string, data: unknown, fieldOrder?: readonly string[]): Promise<void> {\n  await mkdir(join(filePath, '..'), { recursive: true })\n  await writeFile(filePath, canonicalStringify(data, fieldOrder), 'utf-8')\n}\n\nexport async function ensureDir(dirPath: string): Promise<void> {\n  await mkdir(dirPath, { recursive: true })\n}\n\nexport async function readText(filePath: string): Promise<string | null> {\n  try {\n    return await readFile(filePath, 'utf-8')\n  } catch {\n    return null\n  }\n}\n\nexport async function writeText(filePath: string, content: string): Promise<void> {\n  await mkdir(join(filePath, '..'), { recursive: true })\n  await writeFile(filePath, content, 'utf-8')\n}\n\nexport function contentrainDir(projectRoot: string): string {\n  return join(projectRoot, '.contentrain')\n}\n"],"mappings":";;;;AAIA,eAAsB,WAAW,UAAoC;AACnE,KAAI;AACF,QAAM,OAAO,SAAS;AACtB,SAAO;SACD;AACN,SAAO;;;AAIX,eAAsB,SAAY,UAAqC;AACrE,KAAI;EACF,MAAM,MAAM,MAAM,SAAS,UAAU,QAAQ;AAC7C,SAAO,KAAK,MAAM,IAAI;SAChB;AACN,SAAO;;;AAIX,eAAsB,QAAQ,SAAoC;AAChE,KAAI;AACF,SAAO,MAAM,QAAQ,QAAQ;SACvB;AACN,SAAO,EAAE;;;AAIb,eAAsB,UAAU,UAAkB,MAAe,YAA+C;AAC9G,OAAM,MAAM,KAAK,UAAU,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,OAAM,UAAU,UAAU,mBAAmB,MAAM,WAAW,EAAE,QAAQ;;AAG1E,eAAsB,UAAU,SAAgC;AAC9D,OAAM,MAAM,SAAS,EAAE,WAAW,MAAM,CAAC;;AAG3C,eAAsB,SAAS,UAA0C;AACvE,KAAI;AACF,SAAO,MAAM,SAAS,UAAU,QAAQ;SAClC;AACN,SAAO;;;AAIX,eAAsB,UAAU,UAAkB,SAAgC;AAChF,OAAM,MAAM,KAAK,UAAU,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,OAAM,UAAU,UAAU,SAAS,QAAQ;;AAG7C,SAAgB,eAAe,aAA6B;AAC1D,QAAO,KAAK,aAAa,eAAe"}

package/dist/git/branch-lifecycle.d.mts

@@ -1,2 +1,2 @@
-import { a as RemoteDeleteResult, c as checkBranchHealth, d as deleteRemoteBranch, f as isRefMerged, i as RemoteBranchList, l as classifyMergedBranches, m as pruneMergedRemoteBranches, n as BranchHealthCheck, o as RemotePruneResult, p as listRemoteCrBranches, r as CleanupResult, s as branchDiff, t as BranchDiffResult, u as cleanupMergedBranches } from "../branch-lifecycle-DhzHfzs3.mjs";
-export { BranchDiffResult, BranchHealthCheck, CleanupResult, RemoteBranchList, RemoteDeleteResult, RemotePruneResult, branchDiff, checkBranchHealth, classifyMergedBranches, cleanupMergedBranches, deleteRemoteBranch, isRefMerged, listRemoteCrBranches, pruneMergedRemoteBranches };
+import { _ as pruneMergedRemoteBranches, a as RemoteBranchList, c as branchDiff, d as cleanupMergedBranches, f as contentBranchRelation, g as networkGit, h as listRemoteCrBranches, i as ContentBranchRelation, l as checkBranchHealth, m as isRefMerged, n as BranchHealthCheck, o as RemoteDeleteResult, p as deleteRemoteBranch, r as CleanupResult, s as RemotePruneResult, t as BranchDiffResult, u as classifyMergedBranches } from "../branch-lifecycle-DGlgjnC7.mjs";
+export { BranchDiffResult, BranchHealthCheck, CleanupResult, ContentBranchRelation, RemoteBranchList, RemoteDeleteResult, RemotePruneResult, branchDiff, checkBranchHealth, classifyMergedBranches, cleanupMergedBranches, contentBranchRelation, deleteRemoteBranch, isRefMerged, listRemoteCrBranches, networkGit, pruneMergedRemoteBranches };

package/dist/git/branch-lifecycle.mjs

@@ -1,5 +1,5 @@
-import "../fs-DLbVB-Ek.mjs";
-import "../identity-D8QoGxhT.mjs";
-import "../config-VlRKRwAS.mjs";
-import { a as deleteRemoteBranch, c as pruneMergedRemoteBranches, i as cleanupMergedBranches, n as checkBranchHealth, o as isRefMerged, r as classifyMergedBranches, s as listRemoteCrBranches, t as branchDiff } from "../branch-lifecycle-B6PXZ2N7.mjs";
-export { branchDiff, checkBranchHealth, classifyMergedBranches, cleanupMergedBranches, deleteRemoteBranch, isRefMerged, listRemoteCrBranches, pruneMergedRemoteBranches };
+import "../fs-DJv5G8uL.mjs";
+import "../config-B8a4JBT1.mjs";
+import "../identity-CxAB9Qb8.mjs";
+import { a as contentBranchRelation, c as listRemoteCrBranches, i as cleanupMergedBranches, l as networkGit, n as checkBranchHealth, o as deleteRemoteBranch, r as classifyMergedBranches, s as isRefMerged, t as branchDiff, u as pruneMergedRemoteBranches } from "../branch-lifecycle-DUOoyNWn.mjs";
+export { branchDiff, checkBranchHealth, classifyMergedBranches, cleanupMergedBranches, contentBranchRelation, deleteRemoteBranch, isRefMerged, listRemoteCrBranches, networkGit, pruneMergedRemoteBranches };

package/dist/git/errors.d.mts

@@ -0,0 +1,30 @@
+//#region src/git/errors.d.ts
+/**
+ * Error normalization for git-backed MCP operations.
+ *
+ * `simple-git` surfaces a failed `git commit`/`push`/`merge` as a `GitError`
+ * whose `message` is the raw subprocess stderr — which, for hook tooling
+ * (commitlint, husky, lefthook), is colorized multi-line text. Returning that
+ * verbatim inside a JSON error produces an unreadable ANSI-escaped blob.
+ *
+ * This helper strips ANSI, preserves any structured fields the thrown error
+ * already carries (`code`/`agent_hint`/`developer_action`), and detects git
+ * hook rejections so the agent gets an actionable, structured envelope.
+ */
+declare function stripAnsi(input: string): string;
+interface NormalizedError {
+  error: string;
+  stage?: string;
+  hook?: string;
+  code?: string;
+  agent_hint?: string;
+  developer_action?: string;
+}
+/**
+ * Normalize any thrown error into a structured, ANSI-free envelope for MCP
+ * tool responses. `stage` labels where it happened (e.g. 'content_save').
+ */
+declare function normalizeOperationError(err: unknown, stage?: string): NormalizedError;
+//#endregion
+export { NormalizedError, normalizeOperationError, stripAnsi };
+//# sourceMappingURL=errors.d.mts.map

package/dist/git/errors.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.mts","names":[],"sources":["../../src/git/errors.ts"],"mappings":";;AAmBA;;;;;AAIA;;;;;;iBAJgB,SAAA,CAAU,KAAA;AAAA,UAIT,eAAA;EACf,KAAA;EACA,KAAA;EACA,IAAA;EACA,IAAA;EACA,UAAA;EACA,gBAAA;AAAA;;;;;iBAOc,uBAAA,CAAwB,GAAA,WAAc,KAAA,YAAiB,eAAA"}

package/dist/git/errors.mjs

@@ -0,0 +1,2 @@
+import { n as stripAnsi, t as normalizeOperationError } from "../errors-BmLE-JSC.mjs";
+export { normalizeOperationError, stripAnsi };

package/dist/git/identity.mjs

@@ -1,2 +1,2 @@
-import { a as resetGitBinary, i as gitBinary, n as authorConfig, r as createGit, t as NETWORK_UNSAFE } from "../identity-D8QoGxhT.mjs";
+import { a as resetGitBinary, i as gitBinary, n as authorConfig, r as createGit, t as NETWORK_UNSAFE } from "../identity-CxAB9Qb8.mjs";
 export { NETWORK_UNSAFE, authorConfig, createGit, gitBinary, resetGitBinary };

package/dist/git/reconcile.d.mts

@@ -0,0 +1,49 @@
+import { r as ReconcilePlan } from "../index-_HJVkDJa.mjs";
+import { BaseAdvance, ConflictResolution, ContextSource, RemotePush, SyncResult } from "@contentrain/types";
+
+//#region src/git/reconcile.d.ts
+interface ReconcileBranchesOptions {
+  /** Preview only — plan, never touch a ref. Default true. */
+  dryRun?: boolean;
+  /** Decisions for previously reported conflicts, matched by id. */
+  resolutions?: ConflictResolution[];
+  /** Stamped into the regenerated context.json. */
+  source?: ContextSource;
+}
+interface ReconcileBranchesResult {
+  /**
+   * `in_sync` — nothing to reconcile (base already contained in contentrain
+   * and no content differences; a base merely behind was fast-forwarded).
+   * `preview` — dry-run: the plan says what WOULD happen.
+   * `conflicts` — unresolved conflicts remain; nothing was written.
+   * `reconciled` — the merge commit landed and the base branch advanced.
+   */
+  action: 'in_sync' | 'preview' | 'conflicts' | 'reconciled';
+  plan: ReconcilePlan;
+  base: string;
+  merge_base: string | null;
+  commit?: string;
+  base_advance?: BaseAdvance;
+  sync?: SyncResult;
+  remote_push?: RemotePush;
+}
+/**
+ * Content-aware reconcile of a diverged `contentrain` ↔ base pair, local
+ * executor. Plans with three `GitRefReader`s (no checkout, developer tree
+ * untouched), then — when clean or fully resolved — performs a REAL
+ * `git merge --no-commit` in a temp worktree and writes the ENTIRE plan
+ * output over it before committing: for content-owned paths the planner is
+ * authoritative, never git's textual auto-merge (its line-level result can
+ * be non-canonical or wrong without ever surfacing as a conflict). Git
+ * still resolves everything the planner does not own — source files, lock
+ * files — exactly as a manual merge would. The commit joins both parents,
+ * so afterwards the base branch is an ancestor again and the ordinary
+ * fast-forward advance works.
+ *
+ * Reconcile never runs inside a write path: it is an explicit, separate
+ * step (tool, CLI, or Studio background job).
+ */
+declare function reconcileBranches(projectRoot: string, options?: ReconcileBranchesOptions): Promise<ReconcileBranchesResult>;
+//#endregion
+export { ReconcileBranchesOptions, ReconcileBranchesResult, reconcileBranches };
+//# sourceMappingURL=reconcile.d.mts.map

package/dist/git/reconcile.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.d.mts","names":[],"sources":["../../src/git/reconcile.ts"],"mappings":";;;;UAoBiB,wBAAA;;EAEf,MAAA;EAFe;EAIf,WAAA,GAAc,kBAAA;;EAEd,MAAA,GAAS,aAAA;AAAA;AAAA,UAGM,uBAAA;EALD;;;;;AAKhB;;EAQE,MAAA;EACA,IAAA,EAAM,aAAA;EACN,IAAA;EACA,UAAA;EACA,MAAA;EACA,YAAA,GAAe,WAAA;EACf,IAAA,GAAO,UAAA;EACP,WAAA,GAAc,UAAA;AAAA;;;;;;;;;;;;;AAmBhB;;;;iBAAsB,iBAAA,CACpB,WAAA,UACA,OAAA,GAAS,wBAAA,GACR,OAAA,CAAQ,uBAAA"}

package/dist/git/reconcile.mjs

@@ -0,0 +1,13 @@
+import "../reconcile-D5FTVW5z.mjs";
+import "../context-CxpTATh4.mjs";
+import "../model-manager-DqwL8ptm.mjs";
+import "../fs-DJv5G8uL.mjs";
+import "../meta-manager-g3shoZES.mjs";
+import "../config-B8a4JBT1.mjs";
+import "../validator-B2GhPM3L.mjs";
+import "../identity-CxAB9Qb8.mjs";
+import "../branch-lifecycle-DUOoyNWn.mjs";
+import "../id-CjGMPP1k.mjs";
+import "../transaction-BxDiiakv.mjs";
+import { t as reconcileBranches } from "../reconcile-M7KBZtdn.mjs";
+export { reconcileBranches };

package/dist/git/transaction.d.mts

@@ -1,37 +1,82 @@
-import { a as RemoteDeleteResult } from "../branch-lifecycle-DhzHfzs3.mjs";
-import { SyncResult, WorkflowMode } from "@contentrain/types";
+import { o as RemoteDeleteResult } from "../branch-lifecycle-DGlgjnC7.mjs";
+import { BaseAdvance, RemotePush, SyncResult, WorkflowMode } from "@contentrain/types";
+import { SimpleGit } from "simple-git";
 
 //#region src/git/transaction.d.ts
+/**
+ * Block-timeout for fetch/push inside transactions. These calls inherit the
+ * host's credential setup (see networkGit); without a timeout a hung SSH
+ * passphrase prompt would hang the MCP call with it.
+ */
+declare const NETWORK_TIMEOUT_MS = 10000;
 interface ContextUpdate {
   tool: string;
   model: string;
   locale?: string;
   entries?: string[];
 }
+/**
+ * Result of completing a write transaction.
+ *
+ * A diverged base branch is NOT an error: the content is committed and merged
+ * into the contentrain branch either way — only the base fast-forward is
+ * pending. `base_advance: 'blocked_diverged'` reports that truthfully instead
+ * of failing a write that in fact landed.
+ */
+interface CompleteResult {
+  action: 'auto-merged' | 'pending-review';
+  commit: string;
+  sync?: SyncResult;
+  warning?: string;
+  /** Present on `auto-merged`: did the base branch advance to the contentrain tip? */
+  base_advance?: BaseAdvance;
+  /** Present on `auto-merged`: outcome of pushing the contentrain branch. */
+  remote_push?: RemotePush;
+}
+/** Result of landing a feature branch via {@link mergeBranch}. */
+interface MergeBranchResult {
+  action: 'merged';
+  commit: string;
+  sync: SyncResult;
+  base_advance: BaseAdvance;
+  remote_push: RemotePush;
+  warning?: string;
+  remote?: RemoteDeleteResult;
+}
 interface GitTransaction {
   worktree: string;
   branch: string;
   write(callback: (worktreePath: string) => Promise<void>): Promise<void>;
   commit(message: string, contextUpdate?: ContextUpdate): Promise<string>;
-  complete(): Promise<{
-    action: 'auto-merged' | 'pending-review';
-    commit: string;
-    sync?: SyncResult;
-    warning?: string;
-  }>;
+  complete(): Promise<CompleteResult>;
   cleanup(): Promise<void>;
 }
 declare function ensureContentBranch(projectRoot: string): Promise<void>;
+declare function selectiveSync(projectRoot: string, _worktreePath: string, contentrainTip: string, _previousBaseRef?: string, dirtyFilesBeforeUpdate?: Set<string>): Promise<SyncResult>;
 declare function createTransaction(projectRoot: string, branchName: string, options?: {
   workflowOverride?: WorkflowMode;
 }): Promise<GitTransaction>;
-declare function mergeBranch(projectRoot: string, branchName: string): Promise<{
-  action: 'merged';
-  commit: string;
-  sync: SyncResult;
-  remote?: RemoteDeleteResult;
-}>;
+declare function mergeBranch(projectRoot: string, branchName: string): Promise<MergeBranchResult>;
 declare function buildBranchName(scope: string, target: string, locale?: string): string;
+/**
+ * True when `ancestor` is an ancestor of (or equal to) `descendant`.
+ * Implemented with `rev-list --count` because `merge-base --is-ancestor`
+ * signals via exit code with empty stderr — simple-git reports that as
+ * success, so it cannot express a negative verdict.
+ */
+declare function isAncestor(git: SimpleGit, ancestor: string, descendant: string): Promise<boolean>;
+/**
+ * Push the contentrain branch (with one fetch-merge-retry) and, when the base
+ * advanced, the base branch. Returns the push outcome for contentrain; the
+ * base push is best-effort and never demotes the outcome, because the
+ * contentrain branch is the content SSOT — it is what the CDN reads.
+ *
+ * The retry absorbs a concurrent remote advance (another writer pushed
+ * contentrain first): fetch, merge the remote tip into the local worktree's
+ * contentrain, push again. A conflicting retry-merge is aborted and reported
+ * as `rejected` — that is a real divergence, not a race.
+ */
+declare function pushContentBranches(projectRoot: string, worktreePath: string, wtGit: SimpleGit, remoteName: string, baseBranch: string, baseAdvanced: boolean): Promise<RemotePush>;
 //#endregion
-export { ContextUpdate, GitTransaction, buildBranchName, createTransaction, ensureContentBranch, mergeBranch };
+export { CompleteResult, ContextUpdate, GitTransaction, MergeBranchResult, NETWORK_TIMEOUT_MS, buildBranchName, createTransaction, ensureContentBranch, isAncestor, mergeBranch, pushContentBranches, selectiveSync };
 //# sourceMappingURL=transaction.d.mts.map

package/dist/git/transaction.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.d.mts","names":[],"sources":["../../src/git/transaction.ts"],"mappings":";;;;UAeiB,aAAA;EACf,IAAA;EACA,KAAA;EACA,MAAA;EACA,OAAA;AAAA;AAAA,UAGe,cAAA;EACf,QAAA;EACA,MAAA;EACA,KAAA,CAAM,QAAA,GAAW,YAAA,aAAyB,OAAA,SAAgB,OAAA;EAC1D,MAAA,CAAO,OAAA,UAAiB,aAAA,GAAgB,aAAA,GAAgB,OAAA;EACxD,QAAA,IAAY,OAAA;IAAU,MAAA;IAA0C,MAAA;IAAgB,IAAA,GAAO,UAAA;IAAY,OAAA;EAAA;EACnG,OAAA,IAAW,OAAA;AAAA;AAAA,iBAGS,mBAAA,CAAoB,WAAA,WAAsB,OAAA;AAAA,iBA4I1C,iBAAA,CACpB,WAAA,UACA,UAAA,UACA,OAAA;EAAY,gBAAA,GAAmB,YAAA;AAAA,IAC9B,OAAA,CAAQ,cAAA;AAAA,iBAuQW,WAAA,CACpB,WAAA,UACA,UAAA,WACC,OAAA;EAAU,MAAA;EAAkB,MAAA;EAAgB,IAAA,EAAM,UAAA;EAAY,MAAA,GAAS,kBAAA;AAAA;AAAA,iBAsI1D,eAAA,CAAgB,KAAA,UAAe,MAAA,UAAgB,MAAA"}
+{"version":3,"file":"transaction.d.mts","names":[],"sources":["../../src/git/transaction.ts"],"mappings":";;;;;;;AAoBA;;;cAAa,kBAAA;AAAA,UAEI,aAAA;EACf,IAAA;EACA,KAAA;EACA,MAAA;EACA,OAAA;AAAA;;;;;;AAWF;;;UAAiB,cAAA;EACf,MAAA;EACA,MAAA;EACA,IAAA,GAAO,UAAA;EACP,OAAA;EAHA;EAKA,YAAA,GAAe,WAAA;EAHf;EAKA,WAAA,GAAc,UAAA;AAAA;;UAIC,iBAAA;EACf,MAAA;EACA,MAAA;EACA,IAAA,EAAM,UAAA;EACN,YAAA,EAAc,WAAA;EACd,WAAA,EAAa,UAAA;EACb,OAAA;EACA,MAAA,GAAS,kBAAA;AAAA;AAAA,UAGM,cAAA;EACf,QAAA;EACA,MAAA;EACA,KAAA,CAAM,QAAA,GAAW,YAAA,aAAyB,OAAA,SAAgB,OAAA;EAC1D,MAAA,CAAO,OAAA,UAAiB,aAAA,GAAgB,aAAA,GAAgB,OAAA;EACxD,QAAA,IAAY,OAAA,CAAQ,cAAA;EACpB,OAAA,IAAW,OAAA;AAAA;AAAA,iBAGS,mBAAA,CAAoB,WAAA,WAAsB,OAAA;AAAA,iBAiC1C,aAAA,CACpB,WAAA,UACA,aAAA,UACA,cAAA,UACA,gBAAA,WACA,sBAAA,GAAyB,GAAA,WACxB,OAAA,CAAQ,UAAA;AAAA,iBAqGW,iBAAA,CACpB,WAAA,UACA,UAAA,UACA,OAAA;EAAY,gBAAA,GAAmB,YAAA;AAAA,IAC9B,OAAA,CAAQ,cAAA;AAAA,iBAiQW,WAAA,CACpB,WAAA,UACA,UAAA,WACC,OAAA,CAAQ,iBAAA;AAAA,iBAoKK,eAAA,CAAgB,KAAA,UAAe,MAAA,UAAgB,MAAA;;;;AAjkB/D;;;iBA+kBsB,UAAA,CAAW,GAAA,EAAK,SAAA,EAAW,QAAA,UAAkB,UAAA,WAAqB,OAAA;;;;;;;;;;;;iBAoBlE,mBAAA,CACpB,WAAA,UACA,YAAA,UACA,KAAA,EAAO,SAAA,EACP,UAAA,UACA,UAAA,UACA,YAAA,YACC,OAAA,CAAQ,UAAA"}

package/dist/git/transaction.mjs

@@ -1,11 +1,10 @@
-import "../serialization-tmgfFBOh.mjs";
-import "../fs-DLbVB-Ek.mjs";
-import "../meta-manager-B_Se183X.mjs";
-import "../identity-D8QoGxhT.mjs";
-import "../config-VlRKRwAS.mjs";
-import "../branch-lifecycle-B6PXZ2N7.mjs";
-import "../model-manager-DgyKMjLN.mjs";
-import "../context-C3x6I3cE.mjs";
-import "../id-BjhaIxTL.mjs";
-import { i as mergeBranch, n as createTransaction, r as ensureContentBranch, t as buildBranchName } from "../transaction-BW9ektWu.mjs";
-export { buildBranchName, createTransaction, ensureContentBranch, mergeBranch };
+import "../context-CxpTATh4.mjs";
+import "../model-manager-DqwL8ptm.mjs";
+import "../fs-DJv5G8uL.mjs";
+import "../meta-manager-g3shoZES.mjs";
+import "../config-B8a4JBT1.mjs";
+import "../identity-CxAB9Qb8.mjs";
+import "../branch-lifecycle-DUOoyNWn.mjs";
+import "../id-CjGMPP1k.mjs";
+import { a as isAncestor, c as selectiveSync, i as ensureContentBranch, n as buildBranchName, o as mergeBranch, r as createTransaction, s as pushContentBranches, t as NETWORK_TIMEOUT_MS } from "../transaction-BxDiiakv.mjs";
+export { NETWORK_TIMEOUT_MS, buildBranchName, createTransaction, ensureContentBranch, isAncestor, mergeBranch, pushContentBranches, selectiveSync };

package/dist/{graph-builder-BEocwW13.mjs → graph-builder-C9NS7y-a.mjs}

@@ -1,5 +1,5 @@
-import { o as readText, r as pathExists } from "./fs-DLbVB-Ek.mjs";
-import { a as classifyFile, i as autoDetectSourceDirs, n as SCAN_EXTENSIONS, o as discoverFiles } from "./scan-config-Dx49nCqk.mjs";
+import { o as readText, r as pathExists } from "./fs-DJv5G8uL.mjs";
+import { a as classifyFile, i as autoDetectSourceDirs, n as SCAN_EXTENSIONS, o as discoverFiles } from "./scan-config-C5zzygeH.mjs";
 import { dirname, extname, join, relative } from "node:path";
 //#region src/core/graph-builder.ts
 const MAX_ORPHANS = 10;
@@ -159,4 +159,4 @@ async function buildGraph(projectRoot, options) {
 //#endregion
 export { buildGraph as t };
 
-//# sourceMappingURL=graph-builder-BEocwW13.mjs.map
+//# sourceMappingURL=graph-builder-C9NS7y-a.mjs.map