@crewx/sdk 0.8.0-rc.72 → 0.8.0-rc.74

package/dist/template/helpers/exec.browser.js

@@ -0,0 +1,41 @@
+"use strict";
+/**
+ * Browser stub for the exec helper.
+ *
+ * Replaces the Node.js exec helper in browser bundles (via package.json "browser" field).
+ * All functions are no-ops or return safe defaults — child_process is not available in browsers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSanitizedEnv = getSanitizedEnv;
+exports.validateCommand = validateCommand;
+exports.isBuiltinAllowed = isBuiltinAllowed;
+exports.validateAllowPattern = validateAllowPattern;
+exports.isAllowed = isAllowed;
+exports.setAuditVerbose = setAuditVerbose;
+exports.logExecAudit = logExecAudit;
+exports.executeCommand = executeCommand;
+function getSanitizedEnv() {
+    return {};
+}
+function validateCommand(_command) {
+    // noop in browser
+}
+function isBuiltinAllowed(_command) {
+    return false;
+}
+function validateAllowPattern(_pattern) {
+    // noop in browser
+}
+function isAllowed(_command, _policy) {
+    return false;
+}
+function setAuditVerbose(_enabled) {
+    // noop in browser
+}
+function logExecAudit(_entry) {
+    // noop in browser
+}
+function executeCommand(_command, _policy) {
+    return '(exec disabled: browser environment)';
+}
+//# sourceMappingURL=exec.browser.js.map

package/dist/template/helpers/exec.d.ts

@@ -0,0 +1,60 @@
+/**
+ * exec Handlebars helper — 5-stage security implementation.
+ *
+ * Ports the security logic from packages/cli-bak/src/utils/template-processor.ts
+ * without using shell-quote or minimatch (not in allowed library list).
+ *
+ * Stages:
+ * 1. Recursion depth check (fail-closed on NaN)
+ * 2. Shell metacharacter validation
+ * 3. Allow-list enforcement (deny > builtin > allow > reject)
+ * 4. Environment isolation (strip sensitive keys)
+ * 5. Result capture (execFileSync with timeout + maxBuffer, wrapped in tags)
+ */
+import type { ExecPolicy } from '../types';
+/**
+ * Returns a copy of process.env with all sensitive keys removed.
+ */
+export declare function getSanitizedEnv(): Record<string, string>;
+/**
+ * Validates a command string for shell metacharacter injection.
+ * @throws Error if shell metacharacters are detected.
+ */
+export declare function validateCommand(command: string): void;
+/**
+ * Checks if a command matches the builtin allowed pattern.
+ * Only npx @crewx/<package> scope is allowed by default.
+ */
+export declare function isBuiltinAllowed(command: string): boolean;
+/**
+ * Validates allow/deny patterns — rejects overly broad wildcards.
+ * @throws Error if pattern is too broad or malformed.
+ */
+export declare function validateAllowPattern(pattern: string): void;
+/**
+ * Checks if a command is allowed by the exec policy.
+ * Priority: deny > builtin(@crewx) > allow > reject
+ */
+export declare function isAllowed(command: string, policy: ExecPolicy): boolean;
+/**
+ * Enable or disable exec audit log output to stderr.
+ * Call with true to show span JSON (verbose mode); false to suppress (default).
+ */
+export declare function setAuditVerbose(enabled: boolean): void;
+/**
+ * Emits a structured audit log entry to stderr.
+ * Only writes when verbose audit mode is enabled via setAuditVerbose(true).
+ */
+export declare function logExecAudit(entry: {
+    command: string;
+    status: 'allowed' | 'denied' | 'error';
+    allowed_by?: string;
+    reason?: string;
+    duration_ms?: number;
+}): void;
+/**
+ * Executes a command and returns the output wrapped in exec-output tags.
+ * Implements all 5 security stages.
+ */
+export declare function executeCommand(command: string, policy: ExecPolicy): string;
+//# sourceMappingURL=exec.d.ts.map

package/dist/template/helpers/exec.js

@@ -0,0 +1,230 @@
+"use strict";
+/**
+ * exec Handlebars helper — 5-stage security implementation.
+ *
+ * Ports the security logic from packages/cli-bak/src/utils/template-processor.ts
+ * without using shell-quote or minimatch (not in allowed library list).
+ *
+ * Stages:
+ * 1. Recursion depth check (fail-closed on NaN)
+ * 2. Shell metacharacter validation
+ * 3. Allow-list enforcement (deny > builtin > allow > reject)
+ * 4. Environment isolation (strip sensitive keys)
+ * 5. Result capture (execFileSync with timeout + maxBuffer, wrapped in tags)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSanitizedEnv = getSanitizedEnv;
+exports.validateCommand = validateCommand;
+exports.isBuiltinAllowed = isBuiltinAllowed;
+exports.validateAllowPattern = validateAllowPattern;
+exports.isAllowed = isAllowed;
+exports.setAuditVerbose = setAuditVerbose;
+exports.logExecAudit = logExecAudit;
+exports.executeCommand = executeCommand;
+const child_process_1 = require("child_process");
+const glob_match_1 = require("../../utils/glob-match");
+// Sensitive env key patterns — removed from exec child processes
+const SENSITIVE_ENV_PATTERNS = [
+    /^ANTHROPIC_/i, /^OPENAI_/i, /^AWS_SECRET/i, /^SLACK_/i,
+    /^GITHUB_TOKEN$/i, /^CREWX_MCP_KEY$/i, /^DATABASE_/i,
+    /^AWS_ACCESS_KEY/i, /^AWS_SESSION_TOKEN$/i,
+    /^GH_TOKEN$/i, /^GH_APP_/i,
+    /^NPM_TOKEN$/i, /^NPM_AUTH/i,
+    /^GOOGLE_APPLICATION/i, /^GCLOUD_/i,
+    /^AZURE_/i, /^ARM_/i,
+    /^DOCKER_PASSWORD$/i, /^DOCKER_AUTH/i,
+    /^SSH_PRIVATE/i, /^SSH_AUTH_SOCK$/i,
+    /^CI_JOB_TOKEN$/i, /^ACTIONS_RUNTIME_TOKEN$/i,
+    /^VAULT_TOKEN$/i, /^SONAR_TOKEN$/i, /^CODECOV_TOKEN$/i,
+    /TOKEN$/i, /SECRET$/i, /PASSWORD$/i, /API_KEY$/i,
+];
+// Shell metacharacter pattern — blocks command injection
+const SHELL_METACHAR = /[;|&`$(){}!><\n\r]/;
+// Max recursion depth for exec helper
+const MAX_EXEC_DEPTH = 2;
+// Overly broad patterns that must be rejected in allow/deny lists
+const DANGEROUS_PATTERNS = ['*', '**', '*:*', '* *', '**/*'];
+// ─────────────────────────────────────────────────────────────────────────────
+// Stage 4: Environment isolation
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Returns a copy of process.env with all sensitive keys removed.
+ */
+function getSanitizedEnv() {
+    const env = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value === undefined)
+            continue;
+        if (SENSITIVE_ENV_PATTERNS.some(p => p.test(key)))
+            continue;
+        env[key] = value;
+    }
+    return env;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Stage 1: Shell metacharacter validation
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Validates a command string for shell metacharacter injection.
+ * @throws Error if shell metacharacters are detected.
+ */
+function validateCommand(command) {
+    if (SHELL_METACHAR.test(command)) {
+        throw new Error(`exec blocked: shell metacharacter detected in "${command}"`);
+    }
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Stage 2: Allow-list enforcement
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Checks if a command matches the builtin allowed pattern.
+ * Only npx @crewx/<package> scope is allowed by default.
+ */
+function isBuiltinAllowed(command) {
+    return /^npx\s+@crewx\/[\w-]+/.test(command);
+}
+/**
+ * Validates allow/deny patterns — rejects overly broad wildcards.
+ * @throws Error if pattern is too broad or malformed.
+ */
+function validateAllowPattern(pattern) {
+    // Trim only for dangerous-pattern check (exact match list)
+    if (DANGEROUS_PATTERNS.includes(pattern.trim())) {
+        throw new Error(`exec config error: overly broad pattern "${pattern}" is not allowed`);
+    }
+    // Start-character check uses original pattern (space prefix → rejected)
+    if (!/^[\w./@-]/.test(pattern)) {
+        throw new Error(`exec config error: pattern must start with a command name`);
+    }
+}
+/**
+ * Checks if a command is allowed by the exec policy.
+ * Priority: deny > builtin(@crewx) > allow > reject
+ */
+function isAllowed(command, policy) {
+    const allow = policy.allow ?? [];
+    const deny = policy.deny ?? [];
+    // Validate patterns
+    for (const p of [...allow, ...deny]) {
+        validateAllowPattern(p);
+    }
+    // Step 1: deny takes highest priority
+    if (deny.some(pattern => (0, glob_match_1.matchesPattern)(command, pattern)))
+        return false;
+    // Step 2: builtin allowed (@crewx/* scope only)
+    if (isBuiltinAllowed(command))
+        return true;
+    // Step 3: explicit allow patterns
+    return allow.some(pattern => (0, glob_match_1.matchesPattern)(command, pattern));
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Audit log
+// ─────────────────────────────────────────────────────────────────────────────
+/** When false (default), audit logs are suppressed. Set true via setAuditVerbose(). */
+let _verboseAudit = false;
+/**
+ * Enable or disable exec audit log output to stderr.
+ * Call with true to show span JSON (verbose mode); false to suppress (default).
+ */
+function setAuditVerbose(enabled) {
+    _verboseAudit = enabled;
+}
+/**
+ * Emits a structured audit log entry to stderr.
+ * Only writes when verbose audit mode is enabled via setAuditVerbose(true).
+ */
+function logExecAudit(entry) {
+    if (!_verboseAudit)
+        return;
+    const log = JSON.stringify({ span: 'template_exec', ...entry, timestamp: new Date().toISOString() });
+    console.error(log);
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Simple shell argument parser (replaces shell-quote)
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Parses a command string into an array of arguments.
+ * Handles single and double quoted strings.
+ */
+function parseShellArgs(command) {
+    const tokens = [];
+    let current = '';
+    let inSingle = false;
+    let inDouble = false;
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        if (ch === "'" && !inDouble) {
+            inSingle = !inSingle;
+        }
+        else if (ch === '"' && !inSingle) {
+            inDouble = !inDouble;
+        }
+        else if (ch === ' ' && !inSingle && !inDouble) {
+            if (current.length > 0) {
+                tokens.push(current);
+                current = '';
+            }
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (current.length > 0)
+        tokens.push(current);
+    return tokens;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Stage 3 + 5: Execute command with timeout and result capture
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Executes a command and returns the output wrapped in exec-output tags.
+ * Implements all 5 security stages.
+ */
+function executeCommand(command, policy) {
+    const startMs = Date.now();
+    // Stage 1: Recursion depth check (NaN fail-closed)
+    const execDepth = parseInt(process.env.CREWX_EXEC_DEPTH ?? '0', 10);
+    if (isNaN(execDepth) || execDepth >= MAX_EXEC_DEPTH) {
+        logExecAudit({ command, status: 'denied', reason: 'invalid or max recursion depth' });
+        return '(exec blocked: max recursion depth reached)';
+    }
+    // Stage 2a: Shell metacharacter validation
+    try {
+        validateCommand(command);
+    }
+    catch {
+        logExecAudit({ command, status: 'denied', reason: 'shell metacharacter detected' });
+        return `(exec blocked: shell metacharacter detected in "${command}")`;
+    }
+    // Stage 2b/c: Allow-list enforcement (deny > builtin > allow > reject)
+    if (!isAllowed(command, policy)) {
+        logExecAudit({ command, status: 'denied', reason: 'not in allow list' });
+        return `(exec blocked: ${command})`;
+    }
+    // Stage 3 + 4 + 5: Execute with timeout, env isolation, and result capture
+    try {
+        const parsed = parseShellArgs(command);
+        const [bin, ...args] = parsed;
+        if (!bin)
+            return `(exec failed: ${command})`;
+        // Stage 4: Environment isolation
+        const sanitizedEnv = getSanitizedEnv();
+        // Stage 3: Timeout + Stage 5: Result capture
+        const result = (0, child_process_1.execFileSync)(bin, args, {
+            timeout: policy.timeout ?? 5000,
+            maxBuffer: 64 * 1024, // 64KB — OOM prevention
+            encoding: 'utf-8',
+            env: { ...sanitizedEnv, CREWX_EXEC_DEPTH: String(execDepth + 1) },
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const durationMs = Date.now() - startMs;
+        logExecAudit({ command, status: 'allowed', allowed_by: 'policy', duration_ms: durationMs });
+        // Stage 5: Wrap result in structured tags
+        return `<exec-output cmd="${command}">\n${result.trim()}\n</exec-output>`;
+    }
+    catch {
+        logExecAudit({ command, status: 'error', reason: 'execution failed' });
+        return `(exec failed: ${command})`;
+    }
+}
+//# sourceMappingURL=exec.js.map

package/dist/template/helpers/fenced_code.d.ts

@@ -0,0 +1,22 @@
+/**
+ * fenced_code Handlebars helper — wraps content in a Markdown fenced code block.
+ *
+ * Usage in templates:
+ *   {{fenced_code myCode lang="typescript"}}
+ *   {{fenced_code myCode}}              ← no language specified
+ */
+/**
+ * Options hash passed by Handlebars for the fenced_code helper.
+ */
+export interface FencedCodeOptions {
+    hash?: {
+        lang?: string;
+    };
+}
+/**
+ * Wraps content in a Markdown fenced code block.
+ * @param content - The code content to wrap.
+ * @param options - Handlebars options object (may contain hash.lang).
+ */
+export declare function fencedCodeHelper(content: string, options: FencedCodeOptions): string;
+//# sourceMappingURL=fenced_code.d.ts.map

package/dist/template/helpers/fenced_code.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * fenced_code Handlebars helper — wraps content in a Markdown fenced code block.
+ *
+ * Usage in templates:
+ *   {{fenced_code myCode lang="typescript"}}
+ *   {{fenced_code myCode}}              ← no language specified
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fencedCodeHelper = fencedCodeHelper;
+/**
+ * Wraps content in a Markdown fenced code block.
+ * @param content - The code content to wrap.
+ * @param options - Handlebars options object (may contain hash.lang).
+ */
+function fencedCodeHelper(content, options) {
+    const lang = options?.hash?.lang ?? '';
+    return `\`\`\`${lang}\n${content ?? ''}\n\`\`\``;
+}
+//# sourceMappingURL=fenced_code.js.map

package/dist/template/helpers/format-conversation.d.ts

@@ -0,0 +1,30 @@
+/**
+ * formatConversation Handlebars block helper.
+ *
+ * Ported from packages/sdk-bak/src/services/layout-renderer.service.ts:230~297.
+ * Block mode only — the default.yaml template uses block mode exclusively.
+ * Inline/fallback template file read is excluded (environment-independence concern).
+ *
+ * Unlike exec/shell-quote (which were excluded for RCE risk), formatConversation
+ * is pure string manipulation with no code execution — RCE is not a concern.
+ */
+export interface FormatConversationBlockContext {
+    messages: any[];
+    platform: string;
+    messagesCount: number;
+    agentIds: string[];
+    primaryAgentId: string;
+}
+/**
+ * Handlebars block helper for conversation history formatting.
+ *
+ * Usage in template:
+ *   {{#formatConversation messages platform}}
+ *     ...block content with {{messages}}, {{platform}}, {{messagesCount}},
+ *       {{agentIds}}, {{primaryAgentId}}...
+ *   {{/formatConversation}}
+ *
+ * Returns '' for empty/non-array messages.
+ */
+export declare function formatConversationHelper(this: any, messages: any, platform: any, options?: any): string;
+//# sourceMappingURL=format-conversation.d.ts.map

package/dist/template/helpers/format-conversation.js

@@ -0,0 +1,53 @@
+"use strict";
+/**
+ * formatConversation Handlebars block helper.
+ *
+ * Ported from packages/sdk-bak/src/services/layout-renderer.service.ts:230~297.
+ * Block mode only — the default.yaml template uses block mode exclusively.
+ * Inline/fallback template file read is excluded (environment-independence concern).
+ *
+ * Unlike exec/shell-quote (which were excluded for RCE risk), formatConversation
+ * is pure string manipulation with no code execution — RCE is not a concern.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatConversationHelper = formatConversationHelper;
+/**
+ * Extract unique assistant agent IDs from messages.
+ * An assistant message with metadata.agent_id is considered an agent turn.
+ */
+function extractAgentIds(messages) {
+    return Array.from(new Set(messages
+        .filter((msg) => msg?.isAssistant && msg?.metadata?.agent_id)
+        .map((msg) => String(msg.metadata.agent_id))));
+}
+/**
+ * Handlebars block helper for conversation history formatting.
+ *
+ * Usage in template:
+ *   {{#formatConversation messages platform}}
+ *     ...block content with {{messages}}, {{platform}}, {{messagesCount}},
+ *       {{agentIds}}, {{primaryAgentId}}...
+ *   {{/formatConversation}}
+ *
+ * Returns '' for empty/non-array messages.
+ */
+function formatConversationHelper(messages, platform, options) {
+    if (!Array.isArray(messages) || messages.length === 0) {
+        return '';
+    }
+    const isBlockHelper = options && typeof options.fn === 'function';
+    if (!isBlockHelper) {
+        return '';
+    }
+    const assistantAgentIds = extractAgentIds(messages);
+    const primaryAgentId = assistantAgentIds.length > 0 ? assistantAgentIds[0] : '';
+    const context = {
+        messages,
+        platform: typeof platform === 'string' ? platform : '',
+        messagesCount: messages.length,
+        agentIds: assistantAgentIds,
+        primaryAgentId,
+    };
+    return options.fn(context);
+}
+//# sourceMappingURL=format-conversation.js.map

package/dist/template/helpers/include.d.ts

@@ -0,0 +1,16 @@
+/**
+ * include Handlebars helper — returns inline string content as-is.
+ *
+ * Usage in templates:
+ *   {{{include someVariable}}}
+ *   {{{include "literal string"}}}
+ *
+ * Note: File-path based document loading is handled in SDK-006 (DocumentLoader).
+ * This helper supports only inline string content (already in context).
+ */
+/**
+ * Returns the given string content unchanged.
+ * Returns empty string for null/undefined.
+ */
+export declare function includeHelper(content: string): string;
+//# sourceMappingURL=include.d.ts.map

package/dist/template/helpers/include.js

@@ -0,0 +1,23 @@
+"use strict";
+/**
+ * include Handlebars helper — returns inline string content as-is.
+ *
+ * Usage in templates:
+ *   {{{include someVariable}}}
+ *   {{{include "literal string"}}}
+ *
+ * Note: File-path based document loading is handled in SDK-006 (DocumentLoader).
+ * This helper supports only inline string content (already in context).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.includeHelper = includeHelper;
+/**
+ * Returns the given string content unchanged.
+ * Returns empty string for null/undefined.
+ */
+function includeHelper(content) {
+    if (content === null || content === undefined)
+        return '';
+    return String(content);
+}
+//# sourceMappingURL=include.js.map

package/dist/template/helpers/p1p2.d.ts

@@ -0,0 +1,37 @@
+/**
+ * P1/P2 Handlebars helper implementations.
+ *
+ * P1: truncate, length, escapeHandlebars
+ * P2: formatFileSize, formatTimestamp
+ *
+ * Ported from packages/cli-bak/src/utils/template-processor.ts.
+ * formatConversation is intentionally excluded (user confirmed).
+ */
+/**
+ * Truncate text to maxLength, appending remaining char count if truncated.
+ * {{truncate text 500}} or {{{truncate text 500}}}
+ */
+export declare function truncateHelper(text: string, maxLength: number): string;
+/**
+ * Return the length of an array or string.
+ * {{length array}} / {{length string}}
+ */
+export declare function lengthHelper(value: unknown): number;
+/**
+ * Escape Handlebars delimiters in user-provided content.
+ * Prevents secondary template compilation of user content.
+ * {{{escapeHandlebars text}}}
+ */
+export declare function escapeHandlebarsHelper(text: string): string;
+/**
+ * Format a byte count as a human-readable file size string.
+ * {{formatFileSize bytes}}
+ */
+export declare function formatFileSizeHelper(bytes: number): string;
+/**
+ * Format a Date or ISO timestamp string into a locale-aware display string.
+ * Returns empty string for invalid or falsy input.
+ * {{formatTimestamp timestamp}}
+ */
+export declare function formatTimestampHelper(timestamp: Date | string | null | undefined): string;
+//# sourceMappingURL=p1p2.d.ts.map

package/dist/template/helpers/p1p2.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * P1/P2 Handlebars helper implementations.
+ *
+ * P1: truncate, length, escapeHandlebars
+ * P2: formatFileSize, formatTimestamp
+ *
+ * Ported from packages/cli-bak/src/utils/template-processor.ts.
+ * formatConversation is intentionally excluded (user confirmed).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.truncateHelper = truncateHelper;
+exports.lengthHelper = lengthHelper;
+exports.escapeHandlebarsHelper = escapeHandlebarsHelper;
+exports.formatFileSizeHelper = formatFileSizeHelper;
+exports.formatTimestampHelper = formatTimestampHelper;
+// ── P1 Helpers ────────────────────────────────────────────────────────────────
+/**
+ * Truncate text to maxLength, appending remaining char count if truncated.
+ * {{truncate text 500}} or {{{truncate text 500}}}
+ */
+function truncateHelper(text, maxLength) {
+    if (!text)
+        return '';
+    if (text.length <= maxLength)
+        return text;
+    const remaining = text.length - maxLength;
+    return `${text.substring(0, maxLength)} (...+${remaining} chars)`;
+}
+/**
+ * Return the length of an array or string.
+ * {{length array}} / {{length string}}
+ */
+function lengthHelper(value) {
+    if (Array.isArray(value))
+        return value.length;
+    if (typeof value === 'string')
+        return value.length;
+    return 0;
+}
+/**
+ * Escape Handlebars delimiters in user-provided content.
+ * Prevents secondary template compilation of user content.
+ * {{{escapeHandlebars text}}}
+ */
+function escapeHandlebarsHelper(text) {
+    if (typeof text !== 'string')
+        return '';
+    return text.replace(/\{\{/g, '&#123;&#123;').replace(/\}\}/g, '&#125;&#125;');
+}
+// ── P2 Helpers ────────────────────────────────────────────────────────────────
+const FILE_SIZE_UNITS = ['B', 'KB', 'MB', 'GB'];
+/**
+ * Format a byte count as a human-readable file size string.
+ * {{formatFileSize bytes}}
+ */
+function formatFileSizeHelper(bytes) {
+    if (bytes === 0)
+        return '0 B';
+    const i = Math.min(Math.floor(Math.log(bytes) / Math.log(1024)), FILE_SIZE_UNITS.length - 1);
+    const value = Math.round((bytes / Math.pow(1024, i)) * 100) / 100;
+    return `${value} ${FILE_SIZE_UNITS[i]}`;
+}
+/**
+ * Format a Date or ISO timestamp string into a locale-aware display string.
+ * Returns empty string for invalid or falsy input.
+ * {{formatTimestamp timestamp}}
+ */
+function formatTimestampHelper(timestamp) {
+    if (!timestamp)
+        return '';
+    try {
+        const date = timestamp instanceof Date ? timestamp : new Date(timestamp);
+        if (isNaN(date.getTime()))
+            return '';
+        return date.toLocaleString('ko-KR', {
+            year: 'numeric',
+            month: '2-digit',
+            day: '2-digit',
+            hour: '2-digit',
+            minute: '2-digit',
+            second: '2-digit',
+            hour12: false,
+        });
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=p1p2.js.map

package/dist/template/loader/DocumentLoader.d.ts

@@ -0,0 +1,48 @@
+/**
+ * DocumentLoader — loads documents from crewx.yaml `documents:` section.
+ *
+ * Supports:
+ *   - Inline string:       `notice: "Some text"`
+ *   - Inline object:       `notice: { content: "Some text" }`
+ *   - File path (relative):  `guide: { path: "docs/guide.md" }`
+ *   - File path (absolute):  `guide: { path: "/abs/docs/guide.md" }`
+ *
+ * File I/O is delegated to IFsAdapter for testability and future WEB compat.
+ */
+import type { IFsAdapter } from '../../platform/IFsAdapter';
+export declare class DocumentLoader {
+    private readonly docs;
+    private readonly fs;
+    constructor(fsAdapter?: IFsAdapter);
+    /**
+     * Load all documents from the `documents:` section of crewx.yaml.
+     *
+     * @param sources     - Record of document name → source (string, {path}, or {content})
+     * @param projectRoot - Base directory for resolving relative file paths
+     */
+    load(sources?: Record<string, unknown>, projectRoot?: string): Promise<void>;
+    /** Get document text content by name. Returns undefined if not loaded. */
+    getContent(name: string): Promise<string | undefined>;
+    /**
+     * Get a simple TOC (table of contents) for a markdown document.
+     * Extracts headings (lines starting with `#`) and returns them as an indented list.
+     * Returns undefined if there are no headings.
+     */
+    getToc(name: string): Promise<string | undefined>;
+    /** Get the resolved absolute file path for a file-based document. */
+    getPath(name: string): string | undefined;
+    /** Get all loaded document names. */
+    getNames(): string[];
+    /**
+     * Build a documents context object suitable for Handlebars template rendering.
+     * Returns `{ docName: { content, toc, path? }, ... }`.
+     */
+    buildContext(): Promise<Record<string, {
+        content: string;
+        toc?: string;
+        path?: string;
+    }>>;
+    private loadFromFile;
+    private resolve;
+}
+//# sourceMappingURL=DocumentLoader.d.ts.map