@contentrain/mcp 3.3.3 → 3.4.0

package/README.md

@@ -248,6 +248,7 @@ The package also exposes low-level modules for embedding and advanced use:
 - `@contentrain/mcp/core/contracts`
 - `@contentrain/mcp/core/ops` — plan APIs (including `planReconcile` and its `bindRef` reader adapter) plus content-root-relative path helpers: `contentDirPath`, `contentFilePath`, `documentFilePath`, `metaFilePath`
 - `@contentrain/mcp/core/overlay-reader`
+- `@contentrain/mcp/core/migration` — the allowlisted migration write path: `createMigrationWriter`, `scopeHash`, `decide`. See **Migration writes** below
 - `@contentrain/mcp/util/detect`
 - `@contentrain/mcp/util/fs`
 - `@contentrain/mcp/git/transaction`
@@ -262,6 +263,60 @@ The package also exposes low-level modules for embedding and advanced use:
 
 These are intended for Contentrain tooling and advanced integrations, not for direct manual editing of `.contentrain/` files.
 
+## Migration Writes
+
+A migration does not deliver content, it delivers a codebase: `src/`, `public/`,
+`package.json`, a lockfile, deploy configuration. The content write path was
+never built for any of that, and widening it would quietly move a security
+boundary the whole product rests on — "Contentrain only writes `.contentrain/`"
+is a promise, not an implementation detail.
+
+`@contentrain/mcp/core/migration` is the gate instead. It wraps a provider whose
+`applyPlan` can already write any path, and puts consent in front of it.
+
+```ts
+import { createMigrationWriter, scopeHash } from '@contentrain/mcp/core/migration'
+
+const scope = {
+  allow: ['src/**', 'public/**', 'package.json', 'astro.config.mjs'],
+  branch: 'migration/acme',
+  base: 'main',
+}
+
+// Show the user `scope`, not the hash. Then bind their consent to it:
+const approval = {
+  scope_hash: await scopeHash(scope),
+  approver: { kind: 'human', id: userId, role: 'owner' },
+  approved_at: new Date().toISOString(),
+}
+
+const writer = createMigrationWriter(provider, scope, approval)
+await writer.applyPlan({ ...plan, step: 'emit', actor })
+writer.audit  // which file, in which step, by which actor, in which commit
+```
+
+What it guarantees:
+
+| | |
+|---|---|
+| **Scope** | Only paths an allowlist pattern covers. `.contentrain/**` is not implicit — a migration that wants the store asks for it, and the person approving sees that it does |
+| **Consent** | One approval, bound to the exact scope by `scope_hash`. An approval of `src/**` cannot be replayed against a scope that also has `.github/workflows/**` |
+| **Branch** | A `migration/*` ref. The `contentrain` branch is never a target and never a base — including through `ApplyPlanInput`'s default, which a migration must not inherit |
+| **Trail** | One `MigrationAuditEntry` per file: step, path, action, the pattern that allowed it, actor, timestamp, commit |
+| **Undo** | One branch, delivered as one PR, revertable with one `git revert` |
+
+Every refusal happens before the provider is called, and a plan is refused
+whole: a plan with one path outside the scope writes nothing at all, not even
+its allowed part. A half-applied migration is harder to recover from than one
+that never started.
+
+The path matcher is a security control and is written to fail closed. Traversal,
+absolute paths, backslash separators, percent-encoding, empty segments and
+control characters are refused before any pattern is consulted; patterns are
+anchored at both ends, so `src/*` does not cover `src/a/b` and nothing matches
+by being a prefix; and regex metacharacters in a pattern are literal, so an
+allowlist entry cannot silently cover more than it reads.
+
 ## Design Constraints
 
 Key design decisions in this package:

package/dist/{content-manager-9yUO24W2.d.mts → content-manager-BqaMkMVk.d.mts}

@@ -1,4 +1,4 @@
-import { _ as RepoReader } from "./index-ByrVsRJE.mjs";
+import { _ as RepoReader } from "./index-A5iw3yDk.mjs";
 import { ContentrainConfig, LocaleStrategy, ModelDefinition, Vocabulary, parseMarkdownFrontmatter as parseFrontmatter, serializeMarkdownFrontmatter as serializeFrontmatter, validateEntryId as validateEntryId$1, validateLocale as validateLocale$1, validateSlug as validateSlug$1 } from "@contentrain/types";
 
 //#region src/core/content-manager.d.ts
@@ -73,4 +73,4 @@ declare function readContent(projectRoot: string, model: ModelDefinition, opts:
 }): Promise<unknown>;
 //#endregion
 export { validateEntryId$1 as _, ListOpts as a, writeContent as b, deleteContent as c, readContent as d, resolveContentDir as f, serializeFrontmatter as g, resolveMdFilePath as h, DeleteOpts as i, listContent as l, resolveLocaleStrategy as m, ContentFileModel as n, LocaleStrategyModel as o, resolveJsonFilePath as p, ContentPathModel as r, WriteResult as s, ContentEntry as t, parseFrontmatter as u, validateLocale$1 as v, validateSlug$1 as y };
-//# sourceMappingURL=content-manager-9yUO24W2.d.mts.map
+//# sourceMappingURL=content-manager-BqaMkMVk.d.mts.map

package/dist/{content-manager-9yUO24W2.d.mts.map → content-manager-BqaMkMVk.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"content-manager-9yUO24W2.d.mts","names":[],"sources":["../src/core/content-manager.ts"],"mappings":";;;;KAyBY,gBAAA,GAAmB,IAAA,CAAK,eAAA;AAAA,KACxB,mBAAA,GAAsB,IAAA,CAAK,eAAA;AAAA,KAC3B,gBAAA,GAAmB,IAAA,CAAK,eAAA;AAAA,iBAEpB,iBAAA,CAAkB,WAAA,UAAqB,KAAA,EAAO,gBAAA;AAAA,iBAO9C,qBAAA,CAAsB,KAAA,EAAO,mBAAA,GAAsB,cAAA;;iBAKnD,mBAAA,CAAoB,GAAA,UAAa,KAAA,EAAO,gBAAA,EAAkB,MAAA;;iBAc1D,iBAAA,CAAkB,GAAA,UAAa,KAAA,EAAO,IAAA,CAAK,eAAA,+BAA8C,MAAA,UAAgB,IAAA;AAAA,UAexG,YAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA,EAAM,MAAA;EA7CQ;;;;;EAmDd,UAAA;EAnDqD;EAqDrD,SAAA;AAAA;AAAA,UAGe,WAAA;EACf,MAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;AAAA;AAAA,UAGe,UAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA;EAxDsE;EA0DtE,aAAA;AAAA;AAAA,UAGe,QAAA;EACf,MAAA;EACA,MAAA,GAAS,MAAA;EACT,OAAA;EACA,KAAA;EACA,MAAA;AAAA;AAAA,iBAKoB,YAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,OAAA,EAAS,YAAA,IACT,MAAA,EAAQ,iBAAA,EACR,UAAA,GAAa,UAAA,UACZ,OAAA,CAAQ,WAAA;AAAA,iBAuJW,aAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,UAAA,GACL,OAAA;;;;;;;;AA3MH;;;;;;;;iBAwVgB,WAAA,CACd,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBACa,WAAA,CACd,MAAA,EAAQ,UAAA,EACR,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBA0QmB,WAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA;EAAQ,MAAA;EAAgB,OAAA;EAAkB,IAAA;AAAA,IACzC,OAAA"}
+{"version":3,"file":"content-manager-BqaMkMVk.d.mts","names":[],"sources":["../src/core/content-manager.ts"],"mappings":";;;;KAyBY,gBAAA,GAAmB,IAAA,CAAK,eAAA;AAAA,KACxB,mBAAA,GAAsB,IAAA,CAAK,eAAA;AAAA,KAC3B,gBAAA,GAAmB,IAAA,CAAK,eAAA;AAAA,iBAEpB,iBAAA,CAAkB,WAAA,UAAqB,KAAA,EAAO,gBAAA;AAAA,iBAO9C,qBAAA,CAAsB,KAAA,EAAO,mBAAA,GAAsB,cAAA;;iBAKnD,mBAAA,CAAoB,GAAA,UAAa,KAAA,EAAO,gBAAA,EAAkB,MAAA;;iBAc1D,iBAAA,CAAkB,GAAA,UAAa,KAAA,EAAO,IAAA,CAAK,eAAA,+BAA8C,MAAA,UAAgB,IAAA;AAAA,UAexG,YAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA,EAAM,MAAA;EA7CQ;;;;;EAmDd,UAAA;EAnDqD;EAqDrD,SAAA;AAAA;AAAA,UAGe,WAAA;EACf,MAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;AAAA;AAAA,UAGe,UAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA;EAxDsE;EA0DtE,aAAA;AAAA;AAAA,UAGe,QAAA;EACf,MAAA;EACA,MAAA,GAAS,MAAA;EACT,OAAA;EACA,KAAA;EACA,MAAA;AAAA;AAAA,iBAKoB,YAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,OAAA,EAAS,YAAA,IACT,MAAA,EAAQ,iBAAA,EACR,UAAA,GAAa,UAAA,UACZ,OAAA,CAAQ,WAAA;AAAA,iBAuJW,aAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,UAAA,GACL,OAAA;;;;;;;;AA3MH;;;;;;;;iBAwVgB,WAAA,CACd,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBACa,WAAA,CACd,MAAA,EAAQ,UAAA,EACR,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBA0QmB,WAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA;EAAQ,MAAA;EAAgB,OAAA;EAAkB,IAAA;AAAA,IACzC,OAAA"}

package/dist/core/config.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader } from "../index-ByrVsRJE.mjs";
+import { _ as RepoReader } from "../index-A5iw3yDk.mjs";
 import { ContentrainConfig, Vocabulary } from "@contentrain/types";
 
 //#region src/core/config.d.ts

package/dist/core/content-manager.d.mts

@@ -1,2 +1,2 @@
-import { _ as validateEntryId, a as ListOpts, b as writeContent, c as deleteContent, d as readContent, f as resolveContentDir, g as serializeFrontmatter, h as resolveMdFilePath, i as DeleteOpts, l as listContent, m as resolveLocaleStrategy, n as ContentFileModel, o as LocaleStrategyModel, p as resolveJsonFilePath, r as ContentPathModel, s as WriteResult, t as ContentEntry, u as parseFrontmatter, v as validateLocale, y as validateSlug } from "../content-manager-9yUO24W2.mjs";
+import { _ as validateEntryId, a as ListOpts, b as writeContent, c as deleteContent, d as readContent, f as resolveContentDir, g as serializeFrontmatter, h as resolveMdFilePath, i as DeleteOpts, l as listContent, m as resolveLocaleStrategy, n as ContentFileModel, o as LocaleStrategyModel, p as resolveJsonFilePath, r as ContentPathModel, s as WriteResult, t as ContentEntry, u as parseFrontmatter, v as validateLocale, y as validateSlug } from "../content-manager-BqaMkMVk.mjs";
 export { ContentEntry, ContentFileModel, ContentPathModel, DeleteOpts, ListOpts, LocaleStrategyModel, WriteResult, deleteContent, listContent, parseFrontmatter, readContent, resolveContentDir, resolveJsonFilePath, resolveLocaleStrategy, resolveMdFilePath, serializeFrontmatter, validateEntryId, validateLocale, validateSlug, writeContent };

package/dist/core/context.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader, a as FileChange } from "../index-ByrVsRJE.mjs";
+import { _ as RepoReader, a as FileChange } from "../index-A5iw3yDk.mjs";
 import { ContextJson, ContextSource } from "@contentrain/types";
 
 //#region src/core/context.d.ts

package/dist/core/contracts/index.d.mts

@@ -1,2 +1,2 @@
-import { _ as RepoReader, a as FileChange, c as MediaAsset, d as MediaListResult, f as MediaProvider, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, l as MediaIngestInput, m as MergeResult, n as Branch, o as FileDiff, p as MediaUpdateInput, r as Commit, s as LOCAL_CAPABILITIES, t as ApplyPlanInput, u as MediaListOptions, v as RepoWriter, y as WriteReadiness } from "../../index-ByrVsRJE.mjs";
+import { _ as RepoReader, a as FileChange, c as MediaAsset, d as MediaListResult, f as MediaProvider, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, l as MediaIngestInput, m as MergeResult, n as Branch, o as FileDiff, p as MediaUpdateInput, r as Commit, s as LOCAL_CAPABILITIES, t as ApplyPlanInput, u as MediaListOptions, v as RepoWriter, y as WriteReadiness } from "../../index-A5iw3yDk.mjs";
 export { ApplyPlanInput, Branch, Commit, CommitAuthor, FileChange, FileDiff, LOCAL_CAPABILITIES, MediaAsset, MediaIngestInput, MediaListOptions, MediaListResult, MediaProvider, MediaUpdateInput, MergeResult, ProviderCapabilities, RepoProvider, RepoReader, RepoWriter, WriteReadiness };

package/dist/core/migration/index.d.mts

@@ -0,0 +1,122 @@
+import { ActorRef, ApplyPlanInput, Commit, RepoProvider, RepoWriter } from "@contentrain/types";
+
+//#region src/core/migration/allowlist.d.ts
+/** A path that is safe to compare against patterns, or undefined. */
+declare function normalizePath(path: string): string | undefined;
+/**
+ * Match one normalised path against one pattern.
+ *
+ * `*` matches within a segment, `**` spans segments. A pattern is anchored at
+ * both ends — `src/*` does not cover `src/a/b`, and nothing covers a path by
+ * being a prefix of it. That strictness is the point: an allowlist is read by a
+ * person deciding whether to approve it, so a pattern has to mean what it looks
+ * like.
+ */
+declare function matchesPattern(path: string, pattern: string): boolean;
+interface AllowDecision {
+  allowed: boolean;
+  /** The pattern that permitted the path, when one did. */
+  pattern?: string;
+  /** Why the path was refused. */
+  reason?: 'malformed' | 'not-allowlisted';
+}
+/**
+ * Whether a write to `path` is permitted by `patterns`.
+ *
+ * `.contentrain/**` is NOT implicit. The content engine's own writes go through
+ * the content path with its own invariants; a migration that also wants to
+ * write the store asks for it explicitly, and the person approving sees that it
+ * does.
+ */
+declare function decide(path: string, patterns: readonly string[]): AllowDecision;
+//#endregion
+//#region src/core/migration/writer.d.ts
+/** Branch names a migration may write to. */
+declare const MIGRATION_BRANCH_PREFIX = "migration/";
+interface MigrationScope {
+  /**
+   * Path patterns this migration may write. `*` matches within a segment,
+   * `**` spans segments. Nothing is implicit — not even `.contentrain/**`.
+   */
+  allow: string[];
+  /** The branch every write lands on. Must start with `migration/`. */
+  branch: string;
+  /** Optional base to fork from. Must not be the content branch. */
+  base?: string;
+}
+/**
+ * A user's consent, bound to the exact scope they were shown.
+ *
+ * `scope_hash` is what makes the consent meaningful: an approval of "may write
+ * `src/**` on `migration/acme`" cannot be replayed against a scope that also
+ * includes `.github/workflows/**`. Compute it with {@link scopeHash} and show
+ * the user the scope, not the hash.
+ */
+interface MigrationApproval {
+  scope_hash: string;
+  approver: ActorRef;
+  /** ISO 8601 UTC. */
+  approved_at: string;
+  /** ISO 8601 UTC; consent past this instant is not consent. */
+  expires_at?: string;
+}
+/** One write, as it happened. The audit trail is a list of these. */
+interface MigrationAuditEntry {
+  /** The step of the migration that produced the write. */
+  step: string;
+  path: string;
+  action: 'write' | 'delete';
+  /** The allowlist pattern that permitted it. */
+  pattern: string;
+  actor: ActorRef;
+  /** ISO 8601 UTC. */
+  at: string;
+  /** The commit the write landed in. */
+  commit: string;
+  branch: string;
+}
+interface MigrationWriteInput extends ApplyPlanInput {
+  /** Names the migration step, for the audit trail. */
+  step: string;
+  /** Who is writing. Recorded on every entry. */
+  actor: ActorRef;
+}
+/**
+ * The wrapped writer. `applyPlan` asks for `step` and `actor` because an audit
+ * trail without them answers "what changed" but not "who did this, and when" —
+ * which is the question a trail exists for. It still satisfies `RepoWriter`, so
+ * anything that takes a provider's writer takes this.
+ */
+interface MigrationWriter extends RepoWriter {
+  applyPlan: (input: MigrationWriteInput) => Promise<Commit>;
+  readonly audit: readonly MigrationAuditEntry[];
+}
+declare class MigrationWriteError extends Error {
+  readonly code: 'scope_not_approved' | 'approval_expired' | 'branch_not_migration' | 'content_branch_target' | 'path_not_allowed';
+  /** The paths that caused a `path_not_allowed` refusal. */
+  readonly paths?: string[] | undefined;
+  constructor(message: string, code: 'scope_not_approved' | 'approval_expired' | 'branch_not_migration' | 'content_branch_target' | 'path_not_allowed', /** The paths that caused a `path_not_allowed` refusal. */
+
+  paths?: string[] | undefined);
+}
+/**
+ * The identity of a scope: the sorted allowlist, the branch and the base.
+ *
+ * Sorted so that two callers listing the same patterns in a different order get
+ * one hash — the user approved a set of permissions, not an ordering. SHA-256
+ * over canonical JSON, matching `computePlanHash` in `@contentrain/types`, so a
+ * consumer can recompute it from the published contract.
+ */
+declare function scopeHash(scope: MigrationScope): Promise<string>;
+/**
+ * Wrap a provider so it will only write a migration's approved scope.
+ *
+ * The returned writer refuses — before touching the provider — a branch that is
+ * not the approved one, any target or base that is the content branch, an
+ * approval that does not match the scope or has expired, and any change whose
+ * path no pattern covers.
+ */
+declare function createMigrationWriter(provider: RepoProvider, scope: MigrationScope, approval: MigrationApproval, audit?: MigrationAuditEntry[]): MigrationWriter;
+//#endregion
+export { type AllowDecision, MIGRATION_BRANCH_PREFIX, type MigrationApproval, type MigrationAuditEntry, type MigrationScope, MigrationWriteError, type MigrationWriteInput, type MigrationWriter, createMigrationWriter, decide, matchesPattern, normalizePath, scopeHash };
+//# sourceMappingURL=index.d.mts.map

package/dist/core/migration/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../src/core/migration/allowlist.ts","../../../src/core/migration/writer.ts"],"mappings":";;;;iBA4BgB,aAAA,CAAc,IAAA;;AAA9B;;;;;AAyBA;;;iBAAgB,cAAA,CAAe,IAAA,UAAc,OAAA;AAAA,UAiB5B,aAAA;EACf,OAAA;EAD4B;EAG5B,OAAA;EAH4B;EAK5B,MAAA;AAAA;;;;AAWF;;;;;iBAAgB,MAAA,CAAO,IAAA,UAAc,QAAA,sBAA8B,aAAA;;;;cCrDtD,uBAAA;AAAA,UAEI,cAAA;EDPY;;;;ECY3B,KAAA;EDa4B;ECX5B,MAAA;EDW6B;ECT7B,IAAA;AAAA;;;;;;;;;UAWe,iBAAA;EACf,UAAA;EACA,QAAA,EAAU,QAAA;ED6BoE;EC3B9E,WAAA;ED2BmC;ECzBnC,UAAA;AAAA;;UAIe,mBAAA;;EAEf,IAAA;EACA,IAAA;EACA,MAAA;;EAEA,OAAA;EACA,KAAA,EAAO,QAAA;EArCQ;EAuCf,EAAA;;EAEA,MAAA;EACA,MAAA;AAAA;AAAA,UAGe,mBAAA,SAA4B,cAAA;EApCvC;EAsCJ,IAAA;EA3Be;EA6Bf,KAAA,EAAO,QAAA;AAAA;;;;;;;UASQ,eAAA,SAAwB,UAAA;EACvC,SAAA,GAAY,KAAA,EAAO,mBAAA,KAAwB,OAAA,CAAQ,MAAA;EAAA,SAC1C,KAAA,WAAgB,mBAAA;AAAA;AAAA,cAGd,mBAAA,SAA4B,KAAA;EAAA,SAG5B,IAAA;EAlCX;EAAA,SAyCW,KAAA;cART,OAAA,UACS,IAAA,qHA9BX;;EAqCW,KAAA;AAAA;;;;;;AA5Bb;;;iBA2CsB,SAAA,CAAU,KAAA,EAAO,cAAA,GAAiB,OAAA;;;;;;;AA9BxD;;iBAoDgB,qBAAA,CACd,QAAA,EAAU,YAAA,EACV,KAAA,EAAO,cAAA,EACP,QAAA,EAAU,iBAAA,EACV,KAAA,GAAO,mBAAA,KACN,eAAA"}

package/dist/core/migration/index.mjs

@@ -0,0 +1,150 @@
+import { CONTENTRAIN_BRANCH, canonicalStringify } from "@contentrain/types";
+//#region src/core/migration/allowlist.ts
+/** Placeholders used while compiling a glob; neither can occur in a path. */
+const GLOBSTAR_SLASH = "\0GS\0";
+const GLOBSTAR = "\0G\0";
+const CONTROL_CHAR_MAX = 31;
+function hasControlCharacter(value) {
+	for (let i = 0; i < value.length; i += 1) if (value.charCodeAt(i) <= CONTROL_CHAR_MAX) return true;
+	return false;
+}
+/** A path that is safe to compare against patterns, or undefined. */
+function normalizePath(path) {
+	if (path === "" || path.length > 4096) return void 0;
+	if (hasControlCharacter(path)) return void 0;
+	if (path.includes("\\")) return void 0;
+	if (path.includes("%")) return void 0;
+	if (path.startsWith("/")) return void 0;
+	const segments = path.split("/");
+	if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) return void 0;
+	return segments.join("/");
+}
+/**
+* Match one normalised path against one pattern.
+*
+* `*` matches within a segment, `**` spans segments. A pattern is anchored at
+* both ends — `src/*` does not cover `src/a/b`, and nothing covers a path by
+* being a prefix of it. That strictness is the point: an allowlist is read by a
+* person deciding whether to approve it, so a pattern has to mean what it looks
+* like.
+*/
+function matchesPattern(path, pattern) {
+	if (normalizePath(pattern.replaceAll("*", "x")) === void 0) return false;
+	const escaped = pattern.replace(/[.+^${}()|[\]]/g, "\\$&").replaceAll("**/", GLOBSTAR_SLASH).replaceAll("**", GLOBSTAR).replaceAll("*", "[^/]*").replaceAll(GLOBSTAR_SLASH, "(?:[^/]+/)*").replaceAll(GLOBSTAR, ".*");
+	return new RegExp(`^${escaped}$`).test(path);
+}
+/**
+* Whether a write to `path` is permitted by `patterns`.
+*
+* `.contentrain/**` is NOT implicit. The content engine's own writes go through
+* the content path with its own invariants; a migration that also wants to
+* write the store asks for it explicitly, and the person approving sees that it
+* does.
+*/
+function decide(path, patterns) {
+	const normalized = normalizePath(path);
+	if (normalized === void 0) return {
+		allowed: false,
+		reason: "malformed"
+	};
+	for (const pattern of patterns) if (matchesPattern(normalized, pattern)) return {
+		allowed: true,
+		pattern
+	};
+	return {
+		allowed: false,
+		reason: "not-allowlisted"
+	};
+}
+//#endregion
+//#region src/core/migration/writer.ts
+/** Branch names a migration may write to. */
+const MIGRATION_BRANCH_PREFIX = "migration/";
+var MigrationWriteError = class extends Error {
+	constructor(message, code, paths) {
+		super(message);
+		this.code = code;
+		this.paths = paths;
+		this.name = "MigrationWriteError";
+	}
+};
+/**
+* The identity of a scope: the sorted allowlist, the branch and the base.
+*
+* Sorted so that two callers listing the same patterns in a different order get
+* one hash — the user approved a set of permissions, not an ordering. SHA-256
+* over canonical JSON, matching `computePlanHash` in `@contentrain/types`, so a
+* consumer can recompute it from the published contract.
+*/
+async function scopeHash(scope) {
+	const payload = canonicalStringify({
+		allow: [...new Set(scope.allow)].toSorted(),
+		branch: scope.branch,
+		base: scope.base
+	});
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(payload));
+	return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function isContentBranch(name) {
+	return name === CONTENTRAIN_BRANCH;
+}
+/**
+* Wrap a provider so it will only write a migration's approved scope.
+*
+* The returned writer refuses — before touching the provider — a branch that is
+* not the approved one, any target or base that is the content branch, an
+* approval that does not match the scope or has expired, and any change whose
+* path no pattern covers.
+*/
+function createMigrationWriter(provider, scope, approval, audit = []) {
+	let verified;
+	const assertScope = async (now) => {
+		verified ??= await scopeHash(scope);
+		if (approval.scope_hash !== verified) throw new MigrationWriteError("The approval was given for a different scope. Show the user the current allowlist and branch, and collect consent again.", "scope_not_approved");
+		if (approval.expires_at && approval.expires_at <= now) throw new MigrationWriteError(`The approval expired at ${approval.expires_at}.`, "approval_expired");
+		if (!scope.branch.startsWith("migration/")) throw new MigrationWriteError(`A migration writes to "${MIGRATION_BRANCH_PREFIX}*"; "${scope.branch}" is not one.`, "branch_not_migration");
+		if (isContentBranch(scope.branch) || isContentBranch(scope.base)) throw new MigrationWriteError(`A migration never targets or forks the "${CONTENTRAIN_BRANCH}" branch — that ref is the content state's single source of truth.`, "content_branch_target");
+	};
+	return {
+		get audit() {
+			return audit;
+		},
+		async applyPlan(input) {
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			await assertScope(now);
+			if (input.branch !== scope.branch) throw new MigrationWriteError(`The approval covers "${scope.branch}"; this write targets "${input.branch}".`, "branch_not_migration");
+			if (isContentBranch(input.branch) || isContentBranch(input.base)) throw new MigrationWriteError(`A migration never targets or forks the "${CONTENTRAIN_BRANCH}" branch.`, "content_branch_target");
+			const decisions = input.changes.map((change) => ({
+				change,
+				decision: decide(change.path, scope.allow)
+			}));
+			const refused = decisions.filter((entry) => !entry.decision.allowed);
+			if (refused.length) {
+				const paths = refused.map((entry) => entry.change.path);
+				throw new MigrationWriteError(`${paths.length} path${paths.length === 1 ? "" : "s"} outside the approved scope: ${paths.slice(0, 5).join(", ")}${paths.length > 5 ? ", …" : ""}`, "path_not_allowed", paths);
+			}
+			const commit = await provider.applyPlan({
+				...input,
+				base: input.base ?? scope.base
+			});
+			for (const { change, decision } of decisions) audit.push({
+				step: input.step ?? "unnamed",
+				path: change.path,
+				action: change.content === null ? "delete" : "write",
+				pattern: decision.pattern,
+				actor: input.actor ?? {
+					kind: "system",
+					id: "migration"
+				},
+				at: now,
+				commit: commit.sha,
+				branch: input.branch
+			});
+			return commit;
+		}
+	};
+}
+//#endregion
+export { MIGRATION_BRANCH_PREFIX, MigrationWriteError, createMigrationWriter, decide, matchesPattern, normalizePath, scopeHash };
+
+//# sourceMappingURL=index.mjs.map

package/dist/core/migration/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/core/migration/allowlist.ts","../../../src/core/migration/writer.ts"],"sourcesContent":["// ─── Path allowlisting ───\n//\n// The security boundary for migration writes. A migration writes `src/`,\n// `public/`, `package.json`, a lockfile and deploy configuration — everything\n// the content engine deliberately never touches — so the guarantee cannot come\n// from \"only `.contentrain/`\" any more. It comes from a list the user saw and\n// approved.\n//\n// Which makes this matcher a security control, not a convenience. It is written\n// to fail closed: anything it cannot confidently normalise is denied, and the\n// tricks that defeat naive matchers — traversal, absolute paths, backslashes,\n// percent-encoded separators, a leading `./` — are rejected before a pattern is\n// even consulted.\n\n/** Placeholders used while compiling a glob; neither can occur in a path. */\nconst GLOBSTAR_SLASH = '\u0000GS\u0000'\nconst GLOBSTAR = '\u0000G\u0000'\n\nconst CONTROL_CHAR_MAX = 0x1f\n\nfunction hasControlCharacter(value: string): boolean {\n  for (let i = 0; i < value.length; i += 1) {\n    if (value.charCodeAt(i) <= CONTROL_CHAR_MAX) return true\n  }\n  return false\n}\n\n/** A path that is safe to compare against patterns, or undefined. */\nexport function normalizePath(path: string): string | undefined {\n  if (path === '' || path.length > 4096) return undefined\n  // Control characters, including the NUL that truncates a C-side path.\n  if (hasControlCharacter(path)) return undefined\n  // A backslash is a separator on Windows and a literal elsewhere; treating it\n  // as either makes the two platforms disagree about what a pattern covers.\n  if (path.includes('\\\\')) return undefined\n  // `%2e%2e` and friends: this layer compares raw repository paths, so a path\n  // arriving percent-encoded is either a bug or an attempt.\n  if (path.includes('%')) return undefined\n  if (path.startsWith('/')) return undefined\n  const segments = path.split('/')\n  if (segments.some(segment => segment === '' || segment === '.' || segment === '..')) return undefined\n  return segments.join('/')\n}\n\n/**\n * Match one normalised path against one pattern.\n *\n * `*` matches within a segment, `**` spans segments. A pattern is anchored at\n * both ends — `src/*` does not cover `src/a/b`, and nothing covers a path by\n * being a prefix of it. That strictness is the point: an allowlist is read by a\n * person deciding whether to approve it, so a pattern has to mean what it looks\n * like.\n */\nexport function matchesPattern(path: string, pattern: string): boolean {\n  // A pattern is held to the same shape as a path, with `*` standing in for a\n  // name. A pattern that could not be a path cannot describe one.\n  if (normalizePath(pattern.replaceAll('*', 'x')) === undefined) return false\n\n  const escaped = pattern\n    .replace(/[.+^${}()|[\\]]/g, '\\\\$&')\n    // `**/` may also match nothing, so `src/**/x.ts` covers `src/x.ts`.\n    .replaceAll('**/', GLOBSTAR_SLASH)\n    .replaceAll('**', GLOBSTAR)\n    .replaceAll('*', '[^/]*')\n    .replaceAll(GLOBSTAR_SLASH, '(?:[^/]+/)*')\n    .replaceAll(GLOBSTAR, '.*')\n\n  return new RegExp(`^${escaped}$`).test(path)\n}\n\nexport interface AllowDecision {\n  allowed: boolean\n  /** The pattern that permitted the path, when one did. */\n  pattern?: string\n  /** Why the path was refused. */\n  reason?: 'malformed' | 'not-allowlisted'\n}\n\n/**\n * Whether a write to `path` is permitted by `patterns`.\n *\n * `.contentrain/**` is NOT implicit. The content engine's own writes go through\n * the content path with its own invariants; a migration that also wants to\n * write the store asks for it explicitly, and the person approving sees that it\n * does.\n */\nexport function decide(path: string, patterns: readonly string[]): AllowDecision {\n  const normalized = normalizePath(path)\n  if (normalized === undefined) return { allowed: false, reason: 'malformed' }\n  for (const pattern of patterns) {\n    if (matchesPattern(normalized, pattern)) return { allowed: true, pattern }\n  }\n  return { allowed: false, reason: 'not-allowlisted' }\n}\n","// ─── The allowlisted migration write path ───\n//\n// A migration does not deliver content, it delivers a codebase: `src/`,\n// `public/`, `package.json`, a lockfile, deploy configuration. None of that is\n// what the content engine's write path was built for, and widening that path\n// would quietly move a security boundary the whole product rests on.\n//\n// So this is a wrapper, not a provider. `GitHubProvider.applyPlan` can already\n// write any path; what was missing was a gate in front of it. The gate carries\n// every requirement the repository-boundary contract asks for:\n//\n//   scope     a file allowlist; nothing outside it is written\n//   consent   one explicit approval, bound to the exact scope it was shown\n//   branch    a `migration/*` ref; the content branch is never a target or base\n//   trail     which file, in which step, by which actor, in which commit\n//   undo      one branch, delivered as one PR, revertable in one `git revert`\n//\n// Every refusal happens before the provider is called. A rejected plan writes\n// nothing at all — not the allowed part of it — because a half-applied\n// migration is harder to reason about than one that did not start.\n\nimport type {\n  ActorRef,\n  ApplyPlanInput,\n  Commit,\n  FileChange,\n  RepoProvider,\n  RepoWriter,\n} from '@contentrain/types'\nimport { CONTENTRAIN_BRANCH, canonicalStringify } from '@contentrain/types'\nimport { decide } from './allowlist.js'\n\n/** Branch names a migration may write to. */\nexport const MIGRATION_BRANCH_PREFIX = 'migration/'\n\nexport interface MigrationScope {\n  /**\n   * Path patterns this migration may write. `*` matches within a segment,\n   * `**` spans segments. Nothing is implicit — not even `.contentrain/**`.\n   */\n  allow: string[]\n  /** The branch every write lands on. Must start with `migration/`. */\n  branch: string\n  /** Optional base to fork from. Must not be the content branch. */\n  base?: string\n}\n\n/**\n * A user's consent, bound to the exact scope they were shown.\n *\n * `scope_hash` is what makes the consent meaningful: an approval of \"may write\n * `src/**` on `migration/acme`\" cannot be replayed against a scope that also\n * includes `.github/workflows/**`. Compute it with {@link scopeHash} and show\n * the user the scope, not the hash.\n */\nexport interface MigrationApproval {\n  scope_hash: string\n  approver: ActorRef\n  /** ISO 8601 UTC. */\n  approved_at: string\n  /** ISO 8601 UTC; consent past this instant is not consent. */\n  expires_at?: string\n}\n\n/** One write, as it happened. The audit trail is a list of these. */\nexport interface MigrationAuditEntry {\n  /** The step of the migration that produced the write. */\n  step: string\n  path: string\n  action: 'write' | 'delete'\n  /** The allowlist pattern that permitted it. */\n  pattern: string\n  actor: ActorRef\n  /** ISO 8601 UTC. */\n  at: string\n  /** The commit the write landed in. */\n  commit: string\n  branch: string\n}\n\nexport interface MigrationWriteInput extends ApplyPlanInput {\n  /** Names the migration step, for the audit trail. */\n  step: string\n  /** Who is writing. Recorded on every entry. */\n  actor: ActorRef\n}\n\n/**\n * The wrapped writer. `applyPlan` asks for `step` and `actor` because an audit\n * trail without them answers \"what changed\" but not \"who did this, and when\" —\n * which is the question a trail exists for. It still satisfies `RepoWriter`, so\n * anything that takes a provider's writer takes this.\n */\nexport interface MigrationWriter extends RepoWriter {\n  applyPlan: (input: MigrationWriteInput) => Promise<Commit>\n  readonly audit: readonly MigrationAuditEntry[]\n}\n\nexport class MigrationWriteError extends Error {\n  constructor(\n    message: string,\n    readonly code:\n      | 'scope_not_approved'\n      | 'approval_expired'\n      | 'branch_not_migration'\n      | 'content_branch_target'\n      | 'path_not_allowed',\n    /** The paths that caused a `path_not_allowed` refusal. */\n    readonly paths?: string[],\n  ) {\n    super(message)\n    this.name = 'MigrationWriteError'\n  }\n}\n\n/**\n * The identity of a scope: the sorted allowlist, the branch and the base.\n *\n * Sorted so that two callers listing the same patterns in a different order get\n * one hash — the user approved a set of permissions, not an ordering. SHA-256\n * over canonical JSON, matching `computePlanHash` in `@contentrain/types`, so a\n * consumer can recompute it from the published contract.\n */\nexport async function scopeHash(scope: MigrationScope): Promise<string> {\n  const payload = canonicalStringify({\n    allow: [...new Set(scope.allow)].toSorted(),\n    branch: scope.branch,\n    base: scope.base,\n  })\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(payload))\n  return [...new Uint8Array(digest)].map(byte => byte.toString(16).padStart(2, '0')).join('')\n}\n\nfunction isContentBranch(name: string | undefined): boolean {\n  return name === CONTENTRAIN_BRANCH\n}\n\n/**\n * Wrap a provider so it will only write a migration's approved scope.\n *\n * The returned writer refuses — before touching the provider — a branch that is\n * not the approved one, any target or base that is the content branch, an\n * approval that does not match the scope or has expired, and any change whose\n * path no pattern covers.\n */\nexport function createMigrationWriter(\n  provider: RepoProvider,\n  scope: MigrationScope,\n  approval: MigrationApproval,\n  audit: MigrationAuditEntry[] = [],\n): MigrationWriter {\n  let verified: string | undefined\n\n  const assertScope = async (now: string): Promise<void> => {\n    verified ??= await scopeHash(scope)\n    if (approval.scope_hash !== verified) {\n      throw new MigrationWriteError(\n        'The approval was given for a different scope. Show the user the current allowlist and branch, and collect consent again.',\n        'scope_not_approved',\n      )\n    }\n    if (approval.expires_at && approval.expires_at <= now) {\n      throw new MigrationWriteError(`The approval expired at ${approval.expires_at}.`, 'approval_expired')\n    }\n    if (!scope.branch.startsWith(MIGRATION_BRANCH_PREFIX)) {\n      throw new MigrationWriteError(\n        `A migration writes to \"${MIGRATION_BRANCH_PREFIX}*\"; \"${scope.branch}\" is not one.`,\n        'branch_not_migration',\n      )\n    }\n    if (isContentBranch(scope.branch) || isContentBranch(scope.base)) {\n      throw new MigrationWriteError(\n        `A migration never targets or forks the \"${CONTENTRAIN_BRANCH}\" branch — that ref is the content state's single source of truth.`,\n        'content_branch_target',\n      )\n    }\n  }\n\n  return {\n    get audit() {\n      return audit\n    },\n\n    async applyPlan(input: MigrationWriteInput): Promise<Commit> {\n      const now = new Date().toISOString()\n      await assertScope(now)\n\n      if (input.branch !== scope.branch) {\n        throw new MigrationWriteError(\n          `The approval covers \"${scope.branch}\"; this write targets \"${input.branch}\".`,\n          'branch_not_migration',\n        )\n      }\n      if (isContentBranch(input.branch) || isContentBranch(input.base)) {\n        throw new MigrationWriteError(\n          `A migration never targets or forks the \"${CONTENTRAIN_BRANCH}\" branch.`,\n          'content_branch_target',\n        )\n      }\n\n      // Decide every path before writing any of them. A plan that is partly\n      // outside the scope is refused whole: a migration that wrote half its\n      // files is worse to recover from than one that wrote none.\n      const decisions = input.changes.map((change: FileChange) => ({ change, decision: decide(change.path, scope.allow) }))\n      const refused = decisions.filter(entry => !entry.decision.allowed)\n      if (refused.length) {\n        const paths = refused.map(entry => entry.change.path)\n        throw new MigrationWriteError(\n          `${paths.length} path${paths.length === 1 ? '' : 's'} outside the approved scope: ${paths.slice(0, 5).join(', ')}${paths.length > 5 ? ', …' : ''}`,\n          'path_not_allowed',\n          paths,\n        )\n      }\n\n      // `base` defaults to the content branch on `ApplyPlanInput`, which is\n      // exactly what a migration must not fork. Make the intent explicit rather\n      // than inheriting an invariant written for content.\n      const commit = await provider.applyPlan({ ...input, base: input.base ?? scope.base })\n\n      for (const { change, decision } of decisions) {\n        audit.push({\n          step: input.step ?? 'unnamed',\n          path: change.path,\n          action: change.content === null ? 'delete' : 'write',\n          pattern: decision.pattern!,\n          actor: input.actor ?? { kind: 'system', id: 'migration' },\n          at: now,\n          commit: commit.sha,\n          branch: input.branch,\n        })\n      }\n\n      return commit\n    },\n  }\n}\n"],"mappings":";;;AAeA,MAAM,iBAAiB;AACvB,MAAM,WAAW;AAEjB,MAAM,mBAAmB;AAEzB,SAAS,oBAAoB,OAAwB;AACnD,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,EACrC,KAAI,MAAM,WAAW,EAAE,IAAI,iBAAkB,QAAO;AAEtD,QAAO;;;AAIT,SAAgB,cAAc,MAAkC;AAC9D,KAAI,SAAS,MAAM,KAAK,SAAS,KAAM,QAAO,KAAA;AAE9C,KAAI,oBAAoB,KAAK,CAAE,QAAO,KAAA;AAGtC,KAAI,KAAK,SAAS,KAAK,CAAE,QAAO,KAAA;AAGhC,KAAI,KAAK,SAAS,IAAI,CAAE,QAAO,KAAA;AAC/B,KAAI,KAAK,WAAW,IAAI,CAAE,QAAO,KAAA;CACjC,MAAM,WAAW,KAAK,MAAM,IAAI;AAChC,KAAI,SAAS,MAAK,YAAW,YAAY,MAAM,YAAY,OAAO,YAAY,KAAK,CAAE,QAAO,KAAA;AAC5F,QAAO,SAAS,KAAK,IAAI;;;;;;;;;;;AAY3B,SAAgB,eAAe,MAAc,SAA0B;AAGrE,KAAI,cAAc,QAAQ,WAAW,KAAK,IAAI,CAAC,KAAK,KAAA,EAAW,QAAO;CAEtE,MAAM,UAAU,QACb,QAAQ,mBAAmB,OAAO,CAElC,WAAW,OAAO,eAAe,CACjC,WAAW,MAAM,SAAS,CAC1B,WAAW,KAAK,QAAQ,CACxB,WAAW,gBAAgB,cAAc,CACzC,WAAW,UAAU,KAAK;AAE7B,QAAO,IAAI,OAAO,IAAI,QAAQ,GAAG,CAAC,KAAK,KAAK;;;;;;;;;;AAmB9C,SAAgB,OAAO,MAAc,UAA4C;CAC/E,MAAM,aAAa,cAAc,KAAK;AACtC,KAAI,eAAe,KAAA,EAAW,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAa;AAC5E,MAAK,MAAM,WAAW,SACpB,KAAI,eAAe,YAAY,QAAQ,CAAE,QAAO;EAAE,SAAS;EAAM;EAAS;AAE5E,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAmB;;;;;AC3DtD,MAAa,0BAA0B;AAiEvC,IAAa,sBAAb,cAAyC,MAAM;CAC7C,YACE,SACA,MAOA,OACA;AACA,QAAM,QAAQ;AATL,OAAA,OAAA;AAOA,OAAA,QAAA;AAGT,OAAK,OAAO;;;;;;;;;;;AAYhB,eAAsB,UAAU,OAAwC;CACtE,MAAM,UAAU,mBAAmB;EACjC,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,CAAC,CAAC,UAAU;EAC3C,QAAQ,MAAM;EACd,MAAM,MAAM;EACb,CAAC;CACF,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,aAAa,CAAC,OAAO,QAAQ,CAAC;AACvF,QAAO,CAAC,GAAG,IAAI,WAAW,OAAO,CAAC,CAAC,KAAI,SAAQ,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;AAG7F,SAAS,gBAAgB,MAAmC;AAC1D,QAAO,SAAS;;;;;;;;;;AAWlB,SAAgB,sBACd,UACA,OACA,UACA,QAA+B,EAAE,EAChB;CACjB,IAAI;CAEJ,MAAM,cAAc,OAAO,QAA+B;AACxD,eAAa,MAAM,UAAU,MAAM;AACnC,MAAI,SAAS,eAAe,SAC1B,OAAM,IAAI,oBACR,4HACA,qBACD;AAEH,MAAI,SAAS,cAAc,SAAS,cAAc,IAChD,OAAM,IAAI,oBAAoB,2BAA2B,SAAS,WAAW,IAAI,mBAAmB;AAEtG,MAAI,CAAC,MAAM,OAAO,WAAA,aAAmC,CACnD,OAAM,IAAI,oBACR,0BAA0B,wBAAwB,OAAO,MAAM,OAAO,gBACtE,uBACD;AAEH,MAAI,gBAAgB,MAAM,OAAO,IAAI,gBAAgB,MAAM,KAAK,CAC9D,OAAM,IAAI,oBACR,2CAA2C,mBAAmB,qEAC9D,wBACD;;AAIL,QAAO;EACL,IAAI,QAAQ;AACV,UAAO;;EAGT,MAAM,UAAU,OAA6C;GAC3D,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AACpC,SAAM,YAAY,IAAI;AAEtB,OAAI,MAAM,WAAW,MAAM,OACzB,OAAM,IAAI,oBACR,wBAAwB,MAAM,OAAO,yBAAyB,MAAM,OAAO,KAC3E,uBACD;AAEH,OAAI,gBAAgB,MAAM,OAAO,IAAI,gBAAgB,MAAM,KAAK,CAC9D,OAAM,IAAI,oBACR,2CAA2C,mBAAmB,YAC9D,wBACD;GAMH,MAAM,YAAY,MAAM,QAAQ,KAAK,YAAwB;IAAE;IAAQ,UAAU,OAAO,OAAO,MAAM,MAAM,MAAM;IAAE,EAAE;GACrH,MAAM,UAAU,UAAU,QAAO,UAAS,CAAC,MAAM,SAAS,QAAQ;AAClE,OAAI,QAAQ,QAAQ;IAClB,MAAM,QAAQ,QAAQ,KAAI,UAAS,MAAM,OAAO,KAAK;AACrD,UAAM,IAAI,oBACR,GAAG,MAAM,OAAO,OAAO,MAAM,WAAW,IAAI,KAAK,IAAI,+BAA+B,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK,GAAG,MAAM,SAAS,IAAI,QAAQ,MAC9I,oBACA,MACD;;GAMH,MAAM,SAAS,MAAM,SAAS,UAAU;IAAE,GAAG;IAAO,MAAM,MAAM,QAAQ,MAAM;IAAM,CAAC;AAErF,QAAK,MAAM,EAAE,QAAQ,cAAc,UACjC,OAAM,KAAK;IACT,MAAM,MAAM,QAAQ;IACpB,MAAM,OAAO;IACb,QAAQ,OAAO,YAAY,OAAO,WAAW;IAC7C,SAAS,SAAS;IAClB,OAAO,MAAM,SAAS;KAAE,MAAM;KAAU,IAAI;KAAa;IACzD,IAAI;IACJ,QAAQ,OAAO;IACf,QAAQ,MAAM;IACf,CAAC;AAGJ,UAAO;;EAEV"}

package/dist/core/model-manager.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader } from "../index-ByrVsRJE.mjs";
+import { _ as RepoReader } from "../index-A5iw3yDk.mjs";
 import { MODEL_FIELD_ORDER, ModelDefinition, ModelSummary, ModelSummary as ModelSummary$1 } from "@contentrain/types";
 import { z } from "zod";
 

package/dist/core/ops/index.d.mts

@@ -1,6 +1,6 @@
-import { _ as RepoReader, a as FileChange } from "../../index-ByrVsRJE.mjs";
-import { t as ContentEntry } from "../../content-manager-9yUO24W2.mjs";
-import { a as ContentSaveEntryResult, i as ReconcileResult, n as ReconcileInput, o as ContentSavePlan, r as ReconcilePlan, s as OpPlan, t as planReconcile } from "../../index-_HJVkDJa.mjs";
+import { _ as RepoReader, a as FileChange } from "../../index-A5iw3yDk.mjs";
+import { t as ContentEntry } from "../../content-manager-BqaMkMVk.mjs";
+import { a as ContentSaveEntryResult, i as ReconcileResult, n as ReconcileInput, o as ContentSavePlan, r as ReconcilePlan, s as OpPlan, t as planReconcile } from "../../index-DKZNUqpP.mjs";
 import { ContentrainConfig, ModelDefinition, Vocabulary } from "@contentrain/types";
 
 //#region src/core/ops/apply-to-worktree.d.ts

package/dist/core/overlay-reader.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader, a as FileChange } from "../index-ByrVsRJE.mjs";
+import { _ as RepoReader, a as FileChange } from "../index-A5iw3yDk.mjs";
 
 //#region src/core/overlay-reader.d.ts
 /**

package/dist/core/validator/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader } from "../../index-ByrVsRJE.mjs";
+import { _ as RepoReader } from "../../index-A5iw3yDk.mjs";
 import { EntryMeta, FieldDef, ModelDefinition, ValidationError, ValidationResult } from "@contentrain/types";
 
 //#region src/core/validator/entry.d.ts

package/dist/git/reconcile.d.mts

@@ -1,4 +1,4 @@
-import { r as ReconcilePlan } from "../index-_HJVkDJa.mjs";
+import { r as ReconcilePlan } from "../index-DKZNUqpP.mjs";
 import { BaseAdvance, ConflictResolution, ContextSource, RemotePush, SyncResult } from "@contentrain/types";
 
 //#region src/git/reconcile.d.ts

package/dist/index-A5iw3yDk.d.mts

@@ -0,0 +1,2 @@
+import { ApplyPlanInput as ApplyPlanInput$1, Branch, Commit as Commit$1, CommitAuthor, FileChange, FileDiff, LOCAL_CAPABILITIES, MediaAsset, MediaIngestInput, MediaListOptions, MediaListResult, MediaProvider, MediaUpdateInput, MergeResult, ProviderCapabilities as ProviderCapabilities$1, RepoProvider as RepoProvider$1, RepoReader, RepoWriter as RepoWriter$1, WriteReadiness } from "@contentrain/types";
+export { RepoReader as _, FileChange as a, MediaAsset as c, MediaListResult as d, MediaProvider as f, RepoProvider$1 as g, ProviderCapabilities$1 as h, CommitAuthor as i, MediaIngestInput as l, MergeResult as m, Branch as n, FileDiff as o, MediaUpdateInput as p, Commit$1 as r, LOCAL_CAPABILITIES as s, ApplyPlanInput$1 as t, MediaListOptions as u, RepoWriter$1 as v, WriteReadiness as y };

package/dist/{index-_HJVkDJa.d.mts → index-DKZNUqpP.d.mts}

@@ -1,4 +1,4 @@
-import { _ as RepoReader, a as FileChange } from "./index-ByrVsRJE.mjs";
+import { _ as RepoReader, a as FileChange } from "./index-A5iw3yDk.mjs";
 import { ConflictItem, ConflictResolution, ContextSource } from "@contentrain/types";
 
 //#region src/core/ops/types.d.ts
@@ -82,4 +82,4 @@ interface ReconcilePlan extends OpPlan<ReconcileResult> {
 declare function planReconcile(input: ReconcileInput): Promise<ReconcilePlan>;
 //#endregion
 export { ContentSaveEntryResult as a, ReconcileResult as i, ReconcileInput as n, ContentSavePlan as o, ReconcilePlan as r, OpPlan as s, planReconcile as t };
-//# sourceMappingURL=index-_HJVkDJa.d.mts.map
+//# sourceMappingURL=index-DKZNUqpP.d.mts.map

package/dist/{index-_HJVkDJa.d.mts.map → index-DKZNUqpP.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"index-_HJVkDJa.d.mts","names":[],"sources":["../src/core/ops/types.ts","../src/core/ops/reconcile/types.ts","../src/core/ops/reconcile/plan.ts"],"mappings":";;;;;;;AAUA;;;;;UAAiB,MAAA;EAEN;EAAT,OAAA,EAAS,UAAA;EAED;EAAR,MAAA,EAAQ,OAAA;EAEE;EAAV,UAAA;AAAA;AAAA,UAGe,sBAAA;EACf,MAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;AAAA;AAAA,KAGU,eAAA,GAAkB,MAAA,CAAO,sBAAA;;;AAjBrC;;;;;;;;AAAA,UCGiB,cAAA;EACf,IAAA,EAAM,UAAA;EACN,IAAA,EAAM,UAAA;EACN,MAAA,EAAQ,UAAA;EDGO;ECDf,WAAA,GAAc,kBAAA;;EAEd,MAAA,GAAS,aAAA;AAAA;AAAA,UAGM,eAAA;EDDf;ECGA,YAAA;EDDA;ECGA,kBAAA;EACA,oBAAA;EDDU;ECGV,oBAAA;;EAEA,WAAA;AAAA;;;;AAnBF;;;UA4BiB,aAAA,SAAsB,MAAA,CAAO,eAAA;EAC5C,SAAA,EAAW,YAAA;AAAA;;;;;;ADhCb;;;;;;;;;iBEkDsB,aAAA,CAAc,KAAA,EAAO,cAAA,GAAiB,OAAA,CAAQ,aAAA"}
+{"version":3,"file":"index-DKZNUqpP.d.mts","names":[],"sources":["../src/core/ops/types.ts","../src/core/ops/reconcile/types.ts","../src/core/ops/reconcile/plan.ts"],"mappings":";;;;;;;AAUA;;;;;UAAiB,MAAA;EAEN;EAAT,OAAA,EAAS,UAAA;EAED;EAAR,MAAA,EAAQ,OAAA;EAEE;EAAV,UAAA;AAAA;AAAA,UAGe,sBAAA;EACf,MAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;AAAA;AAAA,KAGU,eAAA,GAAkB,MAAA,CAAO,sBAAA;;;AAjBrC;;;;;;;;AAAA,UCGiB,cAAA;EACf,IAAA,EAAM,UAAA;EACN,IAAA,EAAM,UAAA;EACN,MAAA,EAAQ,UAAA;EDGO;ECDf,WAAA,GAAc,kBAAA;;EAEd,MAAA,GAAS,aAAA;AAAA;AAAA,UAGM,eAAA;EDDf;ECGA,YAAA;EDDA;ECGA,kBAAA;EACA,oBAAA;EDDU;ECGV,oBAAA;;EAEA,WAAA;AAAA;;;;AAnBF;;;UA4BiB,aAAA,SAAsB,MAAA,CAAO,eAAA;EAC5C,SAAA,EAAW,YAAA;AAAA;;;;;;ADhCb;;;;;;;;;iBEkDsB,aAAA,CAAc,KAAA,EAAO,cAAA,GAAiB,OAAA,CAAQ,aAAA"}

package/dist/index.mjs

@@ -15,7 +15,7 @@ import "./transaction-BR2jg4uj.mjs";
 import "./local-DbPlR0Br.mjs";
 import "./detect-CI32ynpq.mjs";
 import "./annotations-CXHPnS-M.mjs";
-import { n as createServer } from "./server-BgyNDHvp.mjs";
+import { n as createServer } from "./server-Do2BcSBg.mjs";
 import "./errors-BmLE-JSC.mjs";
 import "./reconcile-EANDIp_T.mjs";
 import "./scan-config-C5zzygeH.mjs";

package/dist/providers/github/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader, a as FileChange, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput } from "../../index-ByrVsRJE.mjs";
+import { _ as RepoReader, a as FileChange, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput } from "../../index-A5iw3yDk.mjs";
 import { Octokit } from "@octokit/rest";
 
 //#region src/providers/github/app-auth.d.ts

package/dist/providers/gitlab/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput } from "../../index-ByrVsRJE.mjs";
+import { _ as RepoReader, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput } from "../../index-A5iw3yDk.mjs";
 import { Gitlab } from "@gitbeaker/rest";
 
 //#region src/providers/gitlab/capabilities.d.ts

package/dist/providers/local/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as RepoReader, a as FileChange, g as RepoProvider, h as ProviderCapabilities$1, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, y as WriteReadiness } from "../../index-ByrVsRJE.mjs";
+import { _ as RepoReader, a as FileChange, g as RepoProvider$1, h as ProviderCapabilities$1, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit$1, y as WriteReadiness } from "../../index-A5iw3yDk.mjs";
 import { BaseAdvance, RemotePush, SyncResult, WorkflowMode } from "@contentrain/types";
 
 //#region src/providers/local/types.d.ts
@@ -34,7 +34,7 @@ interface LocalApplyPlanInput {
   /** Override workflow for this call; defaults to the project's configured workflow. */
   workflowOverride?: WorkflowMode;
 }
-interface LocalApplyResult extends Commit {
+interface LocalApplyResult extends Commit$1 {
   /**
    * `auto-merged` — changes fast-forwarded onto the base branch and the
    * developer's working tree was selectively re-synced.
@@ -72,7 +72,7 @@ interface LocalApplyResult extends Commit {
  * `update-ref` in `transaction.mergeBranch`, so arbitrary merge targets
  * would bypass that invariant.
  */
-declare class LocalProvider implements RepoProvider {
+declare class LocalProvider implements RepoProvider$1 {
   readonly projectRoot: string;
   readonly capabilities: ProviderCapabilities$1;
   private readonly reader;
@@ -109,7 +109,7 @@ declare class LocalProvider implements RepoProvider {
     changes: FileChange[];
     message: string;
     author: CommitAuthor;
-  }): Promise<Commit>;
+  }): Promise<Commit$1>;
 }
 //#endregion
 //#region src/providers/local/reader.d.ts

package/dist/providers/local/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../../src/providers/local/types.ts","../../../src/providers/local/provider.ts","../../../src/providers/local/reader.ts"],"mappings":";;;;;UAIiB,kBAAA;EACf,IAAA;EACA,KAAA;EACA,MAAA;EACA,OAAA;AAAA;;;;;;AAYF;;;;UAAiB,mBAAA;EAYL;EAVV,MAAA;EAY+B;EAV/B,OAAA,EAAS,UAAA;EAFT;EAIA,OAAA;EAFS;EAIT,MAAA,GAAS,YAAA;EAAT;EAEA,IAAA;EAAA;EAEA,OAAA,GAAU,kBAAA;EAAA;EAEV,gBAAA,GAAmB,YAAA;AAAA;AAAA,UAGJ,gBAAA,SAAyB,MAAA;EAHT;AAGjC;;;;;EAOE,cAAA;EAPwC;EASxC,IAAA,GAAO,UAAA;EATuC;EAW9C,OAAA;EAJA;;;;;EAUA,YAAA,GAAe,WAAA;EAEf;EAAA,WAAA,GAAc,UAAA;AAAA;;;;;AApDhB;;;;;;;;;;AAgBA;;;cC8Ba,aAAA,YAAyB,YAAA;EAAA,SAIR,WAAA;EAAA,SAHnB,YAAA,EAAc,sBAAA;EAAA,iBACN,MAAA;cAEW,WAAA;EAI5B,QAAA,CAAS,IAAA,UAAc,GAAA,YAAe,OAAA;EAItC,aAAA,CAAc,IAAA,UAAc,GAAA,YAAe,OAAA;EAI3C,UAAA,CAAW,IAAA,UAAc,GAAA,YAAe,OAAA;ED1C/B;;;;;ECmDH,mBAAA,CAAA,GAAuB,OAAA,CAAQ,cAAA;EAO/B,SAAA,CAAU,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,gBAAA;EA6BrD,YAAA,CAAa,MAAA,YAAkB,OAAA,CAAQ,MAAA;EAIjC,YAAA,CAAa,IAAA,UAAc,OAAA,YAAmB,OAAA;EAKpD,YAAA,CAAa,IAAA,WAAe,OAAA;EAI5B,aAAA,CAAc,MAAA,UAAgB,IAAA,YAAgB,OAAA,CAAQ,QAAA;EAKtD,WAAA,CAAY,MAAA,UAAgB,IAAA,WAAe,OAAA,CAAQ,WAAA;EAInD,QAAA,CAAS,MAAA,UAAgB,IAAA,YAAgB,OAAA;EAKzC,gBAAA,CAAA,GAAoB,OAAA;EAId,YAAA,CAAa,IAAA,UAAc,IAAA,WAAe,OAAA;EDxFjC;;;;;;;ECwGT,iBAAA,CAAkB,KAAA;IACtB,MAAA;IACA,IAAA;IACA,MAAA;IACA,OAAA,EAAS,UAAA;IACT,OAAA;IACA,MAAA,EAAQ,YAAA;EAAA,IACN,OAAA,CAAQ,MAAA;AAAA;;;;;;ADjKd;;;;;;;;cEWa,WAAA,YAAuB,UAAA;EAAA,SACN,WAAA;cAAA,WAAA;EAEtB,QAAA,CAAS,IAAA,UAAc,IAAA,YAAgB,OAAA;EAIvC,aAAA,CAAc,IAAA,UAAc,IAAA,YAAgB,OAAA;EAQ5C,UAAA,CAAW,IAAA,UAAc,IAAA,YAAgB,OAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../src/providers/local/types.ts","../../../src/providers/local/provider.ts","../../../src/providers/local/reader.ts"],"mappings":";;;;;UAIiB,kBAAA;EACf,IAAA;EACA,KAAA;EACA,MAAA;EACA,OAAA;AAAA;;;;;;AAYF;;;;UAAiB,mBAAA;EAYL;EAVV,MAAA;EAY+B;EAV/B,OAAA,EAAS,UAAA;EAFT;EAIA,OAAA;EAFS;EAIT,MAAA,GAAS,YAAA;EAAT;EAEA,IAAA;EAAA;EAEA,OAAA,GAAU,kBAAA;EAAA;EAEV,gBAAA,GAAmB,YAAA;AAAA;AAAA,UAGJ,gBAAA,SAAyB,QAAA;EAHT;AAGjC;;;;;EAOE,cAAA;EAPwC;EASxC,IAAA,GAAO,UAAA;EATuC;EAW9C,OAAA;EAJA;;;;;EAUA,YAAA,GAAe,WAAA;EAEf;EAAA,WAAA,GAAc,UAAA;AAAA;;;;;AApDhB;;;;;;;;;;AAgBA;;;cC8Ba,aAAA,YAAyB,cAAA;EAAA,SAIR,WAAA;EAAA,SAHnB,YAAA,EAAc,sBAAA;EAAA,iBACN,MAAA;cAEW,WAAA;EAI5B,QAAA,CAAS,IAAA,UAAc,GAAA,YAAe,OAAA;EAItC,aAAA,CAAc,IAAA,UAAc,GAAA,YAAe,OAAA;EAI3C,UAAA,CAAW,IAAA,UAAc,GAAA,YAAe,OAAA;ED1C/B;;;;;ECmDH,mBAAA,CAAA,GAAuB,OAAA,CAAQ,cAAA;EAO/B,SAAA,CAAU,KAAA,EAAO,mBAAA,GAAsB,OAAA,CAAQ,gBAAA;EA6BrD,YAAA,CAAa,MAAA,YAAkB,OAAA,CAAQ,MAAA;EAIjC,YAAA,CAAa,IAAA,UAAc,OAAA,YAAmB,OAAA;EAKpD,YAAA,CAAa,IAAA,WAAe,OAAA;EAI5B,aAAA,CAAc,MAAA,UAAgB,IAAA,YAAgB,OAAA,CAAQ,QAAA;EAKtD,WAAA,CAAY,MAAA,UAAgB,IAAA,WAAe,OAAA,CAAQ,WAAA;EAInD,QAAA,CAAS,MAAA,UAAgB,IAAA,YAAgB,OAAA;EAKzC,gBAAA,CAAA,GAAoB,OAAA;EAId,YAAA,CAAa,IAAA,UAAc,IAAA,WAAe,OAAA;EDxFjC;;;;;;;ECwGT,iBAAA,CAAkB,KAAA;IACtB,MAAA;IACA,IAAA;IACA,MAAA;IACA,OAAA,EAAS,UAAA;IACT,OAAA;IACA,MAAA,EAAQ,YAAA;EAAA,IACN,OAAA,CAAQ,QAAA;AAAA;;;;;;ADjKd;;;;;;;;cEWa,WAAA,YAAuB,UAAA;EAAA,SACN,WAAA;cAAA,WAAA;EAEtB,QAAA,CAAS,IAAA,UAAc,IAAA,YAAgB,OAAA;EAIvC,aAAA,CAAc,IAAA,UAAc,IAAA,YAAgB,OAAA;EAQ5C,UAAA,CAAW,IAAA,UAAc,IAAA,YAAgB,OAAA;AAAA"}

package/dist/server/http/index.d.mts

@@ -1,4 +1,4 @@
-import { r as ToolProvider } from "../../server-SDsD0XGM.mjs";
+import { r as ToolProvider } from "../../server-CUtmhlno.mjs";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import http from "node:http";
 

package/dist/server/http/index.mjs

@@ -14,7 +14,7 @@ import "../../transaction-BR2jg4uj.mjs";
 import "../../local-DbPlR0Br.mjs";
 import "../../detect-CI32ynpq.mjs";
 import "../../annotations-CXHPnS-M.mjs";
-import { n as createServer } from "../../server-BgyNDHvp.mjs";
+import { n as createServer } from "../../server-Do2BcSBg.mjs";
 import "../../errors-BmLE-JSC.mjs";
 import "../../reconcile-EANDIp_T.mjs";
 import "../../scan-config-C5zzygeH.mjs";

package/dist/{server-SDsD0XGM.d.mts → server-CUtmhlno.d.mts}

@@ -1,4 +1,4 @@
-import { g as RepoProvider } from "./index-ByrVsRJE.mjs";
+import { g as RepoProvider } from "./index-A5iw3yDk.mjs";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 //#region src/server.d.ts
@@ -62,4 +62,4 @@ declare function createServer(projectRoot: string): McpServer;
 declare function createServer(opts: CreateServerOptions): McpServer;
 //#endregion
 export { createServer as i, DEFAULT_INSTRUCTIONS as n, ToolProvider as r, CreateServerOptions as t };
-//# sourceMappingURL=server-SDsD0XGM.d.mts.map
+//# sourceMappingURL=server-CUtmhlno.d.mts.map

package/dist/{server-SDsD0XGM.d.mts.map → server-CUtmhlno.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"server-SDsD0XGM.d.mts","names":[],"sources":["../src/server.ts"],"mappings":";;;;;;AAYA;;;;;KAAY,YAAA,GAAe,YAAA;;;;;AA6B3B;cAVa,oBAAA;AAAA,UAUI,mBAAA;EAOQ;;;;;;EAAvB,QAAA,GAAW,YAAA;EAiEG;;;;;AAChB;EA3DE,WAAA;;;;;;EAMA,YAAA;AAAA;;;;;;;;;;;;;;;;;;;;;iBAoDc,YAAA,CAAa,WAAA,WAAsB,SAAA;AAAA,iBACnC,YAAA,CAAa,IAAA,EAAM,mBAAA,GAAsB,SAAA"}
+{"version":3,"file":"server-CUtmhlno.d.mts","names":[],"sources":["../src/server.ts"],"mappings":";;;;;;AAYA;;;;;KAAY,YAAA,GAAe,YAAA;;;;;AA6B3B;cAVa,oBAAA;AAAA,UAUI,mBAAA;EAOQ;;;;;;EAAvB,QAAA,GAAW,YAAA;EAiEG;;;;;AAChB;EA3DE,WAAA;;;;;;EAMA,YAAA;AAAA;;;;;;;;;;;;;;;;;;;;;iBAoDc,YAAA,CAAa,WAAA,WAAsB,SAAA;AAAA,iBACnC,YAAA,CAAa,IAAA,EAAM,mBAAA,GAAsB,SAAA"}

package/dist/{server-BgyNDHvp.mjs → server-Do2BcSBg.mjs}

@@ -3022,7 +3022,7 @@ function registerMediaTools(server, provider, _projectRoot) {
 }
 //#endregion
 //#region package.json
-var version = "3.3.3";
+var version = "3.4.0";
 //#endregion
 //#region src/server.ts
 /**
@@ -3097,4 +3097,4 @@ function resolveServerContext(input) {
 //#endregion
 export { createServer as n, DEFAULT_INSTRUCTIONS as t };
 
-//# sourceMappingURL=server-BgyNDHvp.mjs.map
+//# sourceMappingURL=server-Do2BcSBg.mjs.map