@fulmenhq/tsfulmen 0.3.2 → 0.4.0

package/dist/chunk-BTUS6PZZ.js

@@ -0,0 +1,302 @@
+import picomatch from 'picomatch';
+import { readFile, access } from 'fs/promises';
+import { join, dirname, sep } from 'path';
+import glob from 'fast-glob';
+import { accessSync } from 'fs';
+import { fileURLToPath } from 'url';
+
+// src/assets/embedded-resolver.ts
+
+// src/assets/errors.ts
+var AssetResolutionError = class _AssetResolutionError extends Error {
+  constructor(message, assetPath, cause) {
+    super(message);
+    this.assetPath = assetPath;
+    this.cause = cause;
+    this.name = "AssetResolutionError";
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, _AssetResolutionError);
+    }
+  }
+  static notFound(assetPath, mode) {
+    return new _AssetResolutionError(`Asset not found (${mode} resolver): ${assetPath}`, assetPath);
+  }
+  static readFailed(assetPath, code) {
+    return new _AssetResolutionError(`Failed to read asset ${assetPath} (${code})`, assetPath);
+  }
+  static baseDirUnavailable(detail) {
+    return new _AssetResolutionError(`No SSOT asset base directory available: ${detail}`);
+  }
+};
+
+// src/assets/paths.ts
+var ASSET_NAMESPACES = ["schemas", "config", "docs"];
+function rejectCommon(value, kind) {
+  if (!value || value.trim() === "") {
+    throw new AssetResolutionError(`Asset ${kind} must be a non-empty string`);
+  }
+  if (value.includes("\\")) {
+    throw new AssetResolutionError(`Asset ${kind} must be POSIX (no backslashes): ${value}`, value);
+  }
+  if (value.startsWith("/") || /^[A-Za-z]:/.test(value)) {
+    throw new AssetResolutionError(`Asset ${kind} must be relative, got absolute: ${value}`, value);
+  }
+  const segments = value.split("/");
+  for (const seg of segments) {
+    if (seg === "" || seg === "." || seg === "..") {
+      throw new AssetResolutionError(
+        `Asset ${kind} must not contain empty, '.' or '..' segments: ${value}`,
+        value
+      );
+    }
+  }
+  return segments;
+}
+function assertNamespace(value, segments, kind) {
+  const top = segments[0];
+  if (!ASSET_NAMESPACES.includes(top)) {
+    throw new AssetResolutionError(
+      `Asset ${kind} must start with one of ${ASSET_NAMESPACES.join("/")}/ : ${value}`,
+      value
+    );
+  }
+}
+function assertSafeLogicalPath(logicalPath, enforceNamespace = true) {
+  const segments = rejectCommon(logicalPath, "path");
+  if (enforceNamespace) {
+    assertNamespace(logicalPath, segments, "path");
+  }
+  return logicalPath;
+}
+function assertSafePattern(pattern, enforceNamespace = true) {
+  const segments = rejectCommon(pattern, "pattern");
+  if (enforceNamespace) {
+    assertNamespace(pattern, segments, "pattern");
+  }
+  return pattern;
+}
+
+// src/assets/embedded-resolver.ts
+var registeredManifests = [];
+var registrationVersion = 0;
+function getRegistrationVersion() {
+  return registrationVersion;
+}
+function registerEmbeddedAssets(manifest) {
+  const existing = registeredManifests.findIndex((m) => m.domain === manifest.domain);
+  if (existing >= 0) {
+    registeredManifests[existing] = manifest;
+  } else {
+    registeredManifests.push(manifest);
+  }
+  registrationVersion++;
+}
+function hasEmbeddedDomain(domain) {
+  return registeredManifests.some((m) => m.domain === domain);
+}
+function clearEmbeddedAssets() {
+  registeredManifests.length = 0;
+  registrationVersion++;
+}
+function hasEmbeddedAssets() {
+  return registeredManifests.length > 0;
+}
+function buildIndex() {
+  const index = /* @__PURE__ */ new Map();
+  for (const manifest of registeredManifests) {
+    for (const [logicalPath, content] of Object.entries(manifest.files)) {
+      index.set(logicalPath, content);
+    }
+  }
+  return index;
+}
+var EmbeddedAssetResolver = class {
+  mode = "embedded";
+  // Snapshot the index at construction; resolvers are cheap to recreate and the
+  // factory rebuilds when mode changes.
+  index;
+  constructor() {
+    this.index = buildIndex();
+  }
+  async read(logicalPath) {
+    const content = this.index.get(assertSafeLogicalPath(logicalPath));
+    if (content === void 0) {
+      throw AssetResolutionError.notFound(logicalPath, "embedded");
+    }
+    return content;
+  }
+  async list(patterns) {
+    if (patterns.length === 0) {
+      return [];
+    }
+    for (const pattern of patterns) {
+      assertSafePattern(pattern);
+    }
+    const isMatch = picomatch(patterns, { dot: false });
+    return Array.from(this.index.keys()).filter((key) => isMatch(key)).sort();
+  }
+  async has(logicalPath) {
+    try {
+      return this.index.has(assertSafeLogicalPath(logicalPath));
+    } catch {
+      return false;
+    }
+  }
+  provenance() {
+    return { mode: "embedded", embeddedCount: this.index.size };
+  }
+};
+function toPosix(p) {
+  return sep === "/" ? p : p.split(sep).join("/");
+}
+var FsAssetResolver = class {
+  /**
+   * @param baseDir Directory logical paths resolve against.
+   * @param enforceNamespace Restrict to the SSOT namespaces (schemas/config/docs).
+   *   Default `true` for the package's own asset tree; pass `false` when `baseDir`
+   *   is a consumer-supplied tree they scope themselves (traversal guards still apply).
+   */
+  constructor(baseDir, enforceNamespace = true) {
+    this.baseDir = baseDir;
+    this.enforceNamespace = enforceNamespace;
+  }
+  mode = "fs";
+  resolve(logicalPath) {
+    return join(this.baseDir, assertSafeLogicalPath(logicalPath, this.enforceNamespace));
+  }
+  async read(logicalPath) {
+    const absolute = this.resolve(logicalPath);
+    try {
+      return await readFile(absolute, "utf-8");
+    } catch (error) {
+      const err = error;
+      if (err.code === "ENOENT") {
+        throw AssetResolutionError.notFound(logicalPath, "fs");
+      }
+      throw AssetResolutionError.readFailed(logicalPath, err.code ?? "unknown");
+    }
+  }
+  async list(patterns) {
+    if (patterns.length === 0) {
+      return [];
+    }
+    for (const pattern of patterns) {
+      assertSafePattern(pattern, this.enforceNamespace);
+    }
+    const matches = await glob(patterns, {
+      cwd: this.baseDir,
+      absolute: false,
+      onlyFiles: true,
+      followSymbolicLinks: false,
+      suppressErrors: true,
+      dot: false
+    });
+    return matches.map(toPosix).sort();
+  }
+  async has(logicalPath) {
+    let absolute;
+    try {
+      absolute = this.resolve(logicalPath);
+    } catch {
+      return false;
+    }
+    try {
+      await access(absolute);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  provenance() {
+    return { mode: "fs", baseDir: this.baseDir };
+  }
+  /** The on-disk base directory this resolver reads from. */
+  getBaseDir() {
+    return this.baseDir;
+  }
+};
+var ASSET_ROOT_MARKER = join("schemas", "crucible-ts");
+function dirExists(path) {
+  try {
+    accessSync(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function findAssetBaseDir() {
+  let dir;
+  try {
+    dir = dirname(fileURLToPath(import.meta.url));
+  } catch {
+    return null;
+  }
+  let prev = "";
+  while (dir !== prev) {
+    if (dirExists(join(dir, ASSET_ROOT_MARKER))) {
+      return dir;
+    }
+    prev = dir;
+    dir = dirname(dir);
+  }
+  return null;
+}
+function readModeFromEnv() {
+  const raw = process.env.TSFULMEN_ASSET_MODE?.trim().toLowerCase();
+  if (raw === "fs" || raw === "embedded" || raw === "auto") {
+    return raw;
+  }
+  return void 0;
+}
+function resolveAssets(options = {}) {
+  if (options.baseDir) {
+    return new FsAssetResolver(options.baseDir, false);
+  }
+  const requested = options.mode ?? readModeFromEnv() ?? "auto";
+  if (requested === "fs") {
+    const baseDir2 = findAssetBaseDir();
+    if (!baseDir2) {
+      throw AssetResolutionError.baseDirUnavailable(
+        "mode=fs but no on-disk asset tree found (use mode=embedded in a compiled binary)"
+      );
+    }
+    return new FsAssetResolver(baseDir2);
+  }
+  if (requested === "embedded") {
+    return new EmbeddedAssetResolver();
+  }
+  const baseDir = findAssetBaseDir();
+  if (baseDir) {
+    return new FsAssetResolver(baseDir);
+  }
+  if (hasEmbeddedAssets()) {
+    return new EmbeddedAssetResolver();
+  }
+  throw AssetResolutionError.baseDirUnavailable(
+    "auto: no on-disk asset tree and no embedded assets registered"
+  );
+}
+var cached;
+var cachedKey;
+function getAssetResolver(options = {}) {
+  const key = JSON.stringify({
+    mode: options.mode ?? readModeFromEnv() ?? "auto",
+    baseDir: options.baseDir ?? null,
+    // Fold in the registration version so a cached embedded resolver rebuilds
+    // after a domain is registered (e.g. via ensureEmbeddedDomain).
+    reg: getRegistrationVersion()
+  });
+  if (!cached || cachedKey !== key) {
+    cached = resolveAssets(options);
+    cachedKey = key;
+  }
+  return cached;
+}
+function resetAssetResolver() {
+  cached = void 0;
+  cachedKey = void 0;
+}
+
+export { AssetResolutionError, EmbeddedAssetResolver, FsAssetResolver, clearEmbeddedAssets, findAssetBaseDir, getAssetResolver, hasEmbeddedAssets, hasEmbeddedDomain, registerEmbeddedAssets, resetAssetResolver, resolveAssets };
+//# sourceMappingURL=chunk-BTUS6PZZ.js.map
+//# sourceMappingURL=chunk-BTUS6PZZ.js.map

package/dist/chunk-BTUS6PZZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/assets/errors.ts","../src/assets/paths.ts","../src/assets/embedded-resolver.ts","../src/assets/fs-resolver.ts","../src/assets/resolver.ts"],"names":["join","baseDir"],"mappings":";;;;;;;;;;AAMO,IAAM,oBAAA,GAAN,MAAM,qBAAA,SAA6B,KAAA,CAAM;AAAA,EAC9C,WAAA,CACE,OAAA,EACgB,SAAA,EACA,KAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AACA,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAGZ,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,qBAAoB,CAAA;AAAA,IACpD;AAAA,EACF;AAAA,EAEA,OAAO,QAAA,CAAS,SAAA,EAAmB,IAAA,EAAoC;AACrE,IAAA,OAAO,IAAI,qBAAA,CAAqB,CAAA,iBAAA,EAAoB,IAAI,CAAA,YAAA,EAAe,SAAS,IAAI,SAAS,CAAA;AAAA,EAC/F;AAAA,EAEA,OAAO,UAAA,CAAW,SAAA,EAAmB,IAAA,EAAoC;AAGvE,IAAA,OAAO,IAAI,qBAAA,CAAqB,CAAA,qBAAA,EAAwB,SAAS,CAAA,EAAA,EAAK,IAAI,KAAK,SAAS,CAAA;AAAA,EAC1F;AAAA,EAEA,OAAO,mBAAmB,MAAA,EAAsC;AAC9D,IAAA,OAAO,IAAI,qBAAA,CAAqB,CAAA,wCAAA,EAA2C,MAAM,CAAA,CAAE,CAAA;AAAA,EACrF;AACF;;;ACtBO,IAAM,gBAAA,GAAmB,CAAC,SAAA,EAAW,QAAA,EAAU,MAAM,CAAA;AAE5D,SAAS,YAAA,CAAa,OAAe,IAAA,EAAoC;AACvE,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACjC,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,MAAA,EAAS,IAAI,CAAA,2BAAA,CAA6B,CAAA;AAAA,EAC3E;AACA,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,MAAA,EAAS,IAAI,CAAA,iCAAA,EAAoC,KAAK,IAAI,KAAK,CAAA;AAAA,EAChG;AACA,EAAA,IAAI,MAAM,UAAA,CAAW,GAAG,KAAK,YAAA,CAAa,IAAA,CAAK,KAAK,CAAA,EAAG;AACrD,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,MAAA,EAAS,IAAI,CAAA,iCAAA,EAAoC,KAAK,IAAI,KAAK,CAAA;AAAA,EAChG;AACA,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAChC,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,GAAA,KAAQ,EAAA,IAAM,GAAA,KAAQ,GAAA,IAAO,QAAQ,IAAA,EAAM;AAC7C,MAAA,MAAM,IAAI,oBAAA;AAAA,QACR,CAAA,MAAA,EAAS,IAAI,CAAA,+CAAA,EAAkD,KAAK,CAAA,CAAA;AAAA,QACpE;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,eAAA,CAAgB,KAAA,EAAe,QAAA,EAAoB,IAAA,EAAgC;AAC1F,EAAA,MAAM,GAAA,GAAM,SAAS,CAAC,CAAA;AACtB,EAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,GAAwC,CAAA,EAAG;AACxE,IAAA,MAAM,IAAI,oBAAA;AAAA,MACR,CAAA,MAAA,EAAS,IAAI,CAAA,wBAAA,EAA2B,gBAAA,CAAiB,KAAK,GAAG,CAAC,OAAO,KAAK,CAAA,CAAA;AAAA,MAC9E;AAAA,KACF;AAAA,EACF;AACF;AASO,SAAS,qBAAA,CAAsB,WAAA,EAAqB,gBAAA,GAAmB,IAAA,EAAc;AAC1F,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,WAAA,EAAa,MAAM,CAAA;AACjD,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,eAAA,CAAgB,WAAA,EAAa,UAAU,MAAM,CAAA;AAAA,EAC/C;AACA,EAAA,OAAO,WAAA;AACT;AAQO,SAAS,iBAAA,CAAkB,OAAA,EAAiB,gBAAA,GAAmB,IAAA,EAAc;AAClF,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,OAAA,EAAS,SAAS,CAAA;AAChD,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,eAAA,CAAgB,OAAA,EAAS,UAAU,SAAS,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,OAAA;AACT;;;ACtDA,IAAM,sBAA+C,EAAC;AAOtD,IAAI,mBAAA,GAAsB,CAAA;AAGnB,SAAS,sBAAA,GAAiC;AAC/C,EAAA,OAAO,mBAAA;AACT;AAMO,SAAS,uBAAuB,QAAA,EAAuC;AAC5E,EAAA,MAAM,QAAA,GAAW,oBAAoB,SAAA,CAAU,CAAC,MAAM,CAAA,CAAE,MAAA,KAAW,SAAS,MAAM,CAAA;AAClF,EAAA,IAAI,YAAY,CAAA,EAAG;AACjB,IAAA,mBAAA,CAAoB,QAAQ,CAAA,GAAI,QAAA;AAAA,EAClC,CAAA,MAAO;AACL,IAAA,mBAAA,CAAoB,KAAK,QAAQ,CAAA;AAAA,EACnC;AACA,EAAA,mBAAA,EAAA;AACF;AAGO,SAAS,kBAAkB,MAAA,EAAyB;AACzD,EAAA,OAAO,oBAAoB,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,MAAM,CAAA;AAC5D;AAGO,SAAS,mBAAA,GAA4B;AAC1C,EAAA,mBAAA,CAAoB,MAAA,GAAS,CAAA;AAC7B,EAAA,mBAAA,EAAA;AACF;AAGO,SAAS,iBAAA,GAA6B;AAC3C,EAAA,OAAO,oBAAoB,MAAA,GAAS,CAAA;AACtC;AAGA,SAAS,UAAA,GAAkC;AACzC,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAoB;AACtC,EAAA,KAAA,MAAW,YAAY,mBAAA,EAAqB;AAC1C,IAAA,KAAA,MAAW,CAAC,aAAa,OAAO,CAAA,IAAK,OAAO,OAAA,CAAQ,QAAA,CAAS,KAAK,CAAA,EAAG;AACnE,MAAA,KAAA,CAAM,GAAA,CAAI,aAAa,OAAO,CAAA;AAAA,IAChC;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAEO,IAAM,wBAAN,MAAqD;AAAA,EACjD,IAAA,GAAO,UAAA;AAAA;AAAA;AAAA,EAIC,KAAA;AAAA,EAEjB,WAAA,GAAc;AACZ,IAAA,IAAA,CAAK,QAAQ,UAAA,EAAW;AAAA,EAC1B;AAAA,EAEA,MAAM,KAAK,WAAA,EAAsC;AAC/C,IAAA,MAAM,UAAU,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,qBAAA,CAAsB,WAAW,CAAC,CAAA;AACjE,IAAA,IAAI,YAAY,MAAA,EAAW;AACzB,MAAA,MAAM,oBAAA,CAAqB,QAAA,CAAS,WAAA,EAAa,UAAU,CAAA;AAAA,IAC7D;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,QAAA,EAAuC;AAChD,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,MAAA,iBAAA,CAAkB,OAAO,CAAA;AAAA,IAC3B;AACA,IAAA,MAAM,UAAU,SAAA,CAAU,QAAA,EAAU,EAAE,GAAA,EAAK,OAAO,CAAA;AAClD,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,CAChC,MAAA,CAAO,CAAC,GAAA,KAAQ,OAAA,CAAQ,GAAG,CAAC,EAC5B,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,IAAI,WAAA,EAAuC;AAC/C,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,qBAAA,CAAsB,WAAW,CAAC,CAAA;AAAA,IAC1D,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,UAAA,GAA8B;AAC5B,IAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,aAAA,EAAe,IAAA,CAAK,MAAM,IAAA,EAAK;AAAA,EAC5D;AACF;ACrGA,SAAS,QAAQ,CAAA,EAAmB;AAClC,EAAA,OAAO,GAAA,KAAQ,MAAM,CAAA,GAAI,CAAA,CAAE,MAAM,GAAG,CAAA,CAAE,KAAK,GAAG,CAAA;AAChD;AAEO,IAAM,kBAAN,MAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASpD,WAAA,CACmB,OAAA,EACA,gBAAA,GAAmB,IAAA,EACpC;AAFiB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,gBAAA,GAAA,gBAAA;AAAA,EAChB;AAAA,EAXM,IAAA,GAAO,IAAA;AAAA,EAaR,QAAQ,WAAA,EAA6B;AAG3C,IAAA,OAAO,KAAK,IAAA,CAAK,OAAA,EAAS,sBAAsB,WAAA,EAAa,IAAA,CAAK,gBAAgB,CAAC,CAAA;AAAA,EACrF;AAAA,EAEA,MAAM,KAAK,WAAA,EAAsC;AAC/C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,OAAA,CAAQ,WAAW,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,QAAA,CAAS,QAAA,EAAU,OAAO,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,GAAA,GAAM,KAAA;AACZ,MAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU;AACzB,QAAA,MAAM,oBAAA,CAAqB,QAAA,CAAS,WAAA,EAAa,IAAI,CAAA;AAAA,MACvD;AAGA,MAAA,MAAM,oBAAA,CAAqB,UAAA,CAAW,WAAA,EAAa,GAAA,CAAI,QAAQ,SAAS,CAAA;AAAA,IAC1E;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,QAAA,EAAuC;AAChD,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,MAAA,iBAAA,CAAkB,OAAA,EAAS,KAAK,gBAAgB,CAAA;AAAA,IAClD;AAGA,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,EAAU;AAAA,MACnC,KAAK,IAAA,CAAK,OAAA;AAAA,MACV,QAAA,EAAU,KAAA;AAAA,MACV,SAAA,EAAW,IAAA;AAAA,MACX,mBAAA,EAAqB,KAAA;AAAA,MACrB,cAAA,EAAgB,IAAA;AAAA,MAChB,GAAA,EAAK;AAAA,KACN,CAAA;AACD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,CAAE,IAAA,EAAK;AAAA,EACnC;AAAA,EAEA,MAAM,IAAI,WAAA,EAAuC;AAC/C,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,IAAA,CAAK,QAAQ,WAAW,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,QAAQ,CAAA;AACrB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,UAAA,GAA8B;AAC5B,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,EAC7C;AAAA;AAAA,EAGA,UAAA,GAAqB;AACnB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AACF;ACzEA,IAAM,iBAAA,GAAoBA,IAAAA,CAAK,SAAA,EAAW,aAAa,CAAA;AAEvD,SAAS,UAAU,IAAA,EAAuB;AACxC,EAAA,IAAI;AACF,IAAA,UAAA,CAAW,IAAI,CAAA;AACf,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAQO,SAAS,gBAAA,GAAkC;AAChD,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,OAAA,CAAQ,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,OAAO,QAAQ,IAAA,EAAM;AACnB,IAAA,IAAI,SAAA,CAAUA,IAAAA,CAAK,GAAA,EAAK,iBAAiB,CAAC,CAAA,EAAG;AAC3C,MAAA,OAAO,GAAA;AAAA,IACT;AACA,IAAA,IAAA,GAAO,GAAA;AACP,IAAA,GAAA,GAAM,QAAQ,GAAG,CAAA;AAAA,EACnB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,eAAA,GAAyC;AAChD,EAAA,MAAM,MAAM,OAAA,CAAQ,GAAA,CAAI,mBAAA,EAAqB,IAAA,GAAO,WAAA,EAAY;AAChE,EAAA,IAAI,GAAA,KAAQ,IAAA,IAAQ,GAAA,KAAQ,UAAA,IAAc,QAAQ,MAAA,EAAQ;AACxD,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAaO,SAAS,aAAA,CAAc,OAAA,GAAgC,EAAC,EAAkB;AAC/E,EAAA,IAAI,QAAQ,OAAA,EAAS;AAGnB,IAAA,OAAO,IAAI,eAAA,CAAgB,OAAA,CAAQ,OAAA,EAAS,KAAK,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,SAAA,GAAuB,OAAA,CAAQ,IAAA,IAAQ,eAAA,EAAgB,IAAK,MAAA;AAElE,EAAA,IAAI,cAAc,IAAA,EAAM;AACtB,IAAA,MAAMC,WAAU,gBAAA,EAAiB;AACjC,IAAA,IAAI,CAACA,QAAAA,EAAS;AACZ,MAAA,MAAM,oBAAA,CAAqB,kBAAA;AAAA,QACzB;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAI,gBAAgBA,QAAO,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,IAAA,OAAO,IAAI,qBAAA,EAAsB;AAAA,EACnC;AAGA,EAAA,MAAM,UAAU,gBAAA,EAAiB;AACjC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,IAAI,gBAAgB,OAAO,CAAA;AAAA,EACpC;AACA,EAAA,IAAI,mBAAkB,EAAG;AACvB,IAAA,OAAO,IAAI,qBAAA,EAAsB;AAAA,EACnC;AACA,EAAA,MAAM,oBAAA,CAAqB,kBAAA;AAAA,IACzB;AAAA,GACF;AACF;AAEA,IAAI,MAAA;AACJ,IAAI,SAAA;AAMG,SAAS,gBAAA,CAAiB,OAAA,GAAgC,EAAC,EAAkB;AAClF,EAAA,MAAM,GAAA,GAAM,KAAK,SAAA,CAAU;AAAA,IACzB,IAAA,EAAM,OAAA,CAAQ,IAAA,IAAQ,eAAA,EAAgB,IAAK,MAAA;AAAA,IAC3C,OAAA,EAAS,QAAQ,OAAA,IAAW,IAAA;AAAA;AAAA;AAAA,IAG5B,KAAK,sBAAA;AAAuB,GAC7B,CAAA;AACD,EAAA,IAAI,CAAC,MAAA,IAAU,SAAA,KAAc,GAAA,EAAK;AAChC,IAAA,MAAA,GAAS,cAAc,OAAO,CAAA;AAC9B,IAAA,SAAA,GAAY,GAAA;AAAA,EACd;AACA,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,kBAAA,GAA2B;AACzC,EAAA,MAAA,GAAS,MAAA;AACT,EAAA,SAAA,GAAY,MAAA;AACd","file":"chunk-BTUS6PZZ.js","sourcesContent":["/**\n * Asset resolution - Error handling\n *\n * Custom error classes for SSOT asset resolution (filesystem or embedded).\n */\n\nexport class AssetResolutionError extends Error {\n  constructor(\n    message: string,\n    public readonly assetPath?: string,\n    public readonly cause?: Error,\n  ) {\n    super(message);\n    this.name = \"AssetResolutionError\";\n\n    // Maintain proper stack trace for V8\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AssetResolutionError);\n    }\n  }\n\n  static notFound(assetPath: string, mode: string): AssetResolutionError {\n    return new AssetResolutionError(`Asset not found (${mode} resolver): ${assetPath}`, assetPath);\n  }\n\n  static readFailed(assetPath: string, code: string): AssetResolutionError {\n    // Reference the logical path + error code only; never interpolate a raw FS\n    // error message, which can carry the absolute host path (info disclosure).\n    return new AssetResolutionError(`Failed to read asset ${assetPath} (${code})`, assetPath);\n  }\n\n  static baseDirUnavailable(detail: string): AssetResolutionError {\n    return new AssetResolutionError(`No SSOT asset base directory available: ${detail}`);\n  }\n}\n","/**\n * Asset resolution - Logical path & pattern validation\n *\n * `./assets` is a public export, so logical paths and glob patterns are\n * caller-controlled. These guards prevent path traversal (reading outside the\n * package root via `..`, absolute paths, or non-POSIX separators) and restrict\n * resolution to the SSOT asset namespaces tsfulmen actually ships.\n */\n\nimport { AssetResolutionError } from \"./errors.js\";\n\n/** Top-level directories that make up the SSOT asset namespace. */\nexport const ASSET_NAMESPACES = [\"schemas\", \"config\", \"docs\"] as const;\n\nfunction rejectCommon(value: string, kind: \"path\" | \"pattern\"): string[] {\n  if (!value || value.trim() === \"\") {\n    throw new AssetResolutionError(`Asset ${kind} must be a non-empty string`);\n  }\n  if (value.includes(\"\\\\\")) {\n    throw new AssetResolutionError(`Asset ${kind} must be POSIX (no backslashes): ${value}`, value);\n  }\n  if (value.startsWith(\"/\") || /^[A-Za-z]:/.test(value)) {\n    throw new AssetResolutionError(`Asset ${kind} must be relative, got absolute: ${value}`, value);\n  }\n  const segments = value.split(\"/\");\n  for (const seg of segments) {\n    if (seg === \"\" || seg === \".\" || seg === \"..\") {\n      throw new AssetResolutionError(\n        `Asset ${kind} must not contain empty, '.' or '..' segments: ${value}`,\n        value,\n      );\n    }\n  }\n  return segments;\n}\n\nfunction assertNamespace(value: string, segments: string[], kind: \"path\" | \"pattern\"): void {\n  const top = segments[0];\n  if (!ASSET_NAMESPACES.includes(top as (typeof ASSET_NAMESPACES)[number])) {\n    throw new AssetResolutionError(\n      `Asset ${kind} must start with one of ${ASSET_NAMESPACES.join(\"/\")}/ : ${value}`,\n      value,\n    );\n  }\n}\n\n/**\n * Validate a logical asset path. Always rejects traversal/absolute/non-POSIX\n * inputs (the security guard). When `enforceNamespace` (the default — used by the\n * package's own asset resolver), also restricts to the SSOT namespaces. Resolvers\n * pointed at a consumer-supplied `baseDir` pass `enforceNamespace: false` since\n * the consumer owns and scopes that tree. Returns the (unchanged) safe path.\n */\nexport function assertSafeLogicalPath(logicalPath: string, enforceNamespace = true): string {\n  const segments = rejectCommon(logicalPath, \"path\");\n  if (enforceNamespace) {\n    assertNamespace(logicalPath, segments, \"path\");\n  }\n  return logicalPath;\n}\n\n/**\n * Validate a glob pattern. Always rejects `..`/absolute/backslash patterns; glob\n * metacharacters (`*`, `{}`, etc.) are allowed within segments. Namespace\n * restriction is applied only when `enforceNamespace` (see\n * {@link assertSafeLogicalPath}).\n */\nexport function assertSafePattern(pattern: string, enforceNamespace = true): string {\n  const segments = rejectCommon(pattern, \"pattern\");\n  if (enforceNamespace) {\n    assertNamespace(pattern, segments, \"pattern\");\n  }\n  return pattern;\n}\n","/**\n * Asset resolution - Embedded backend\n *\n * Reads SSOT assets from generated, build-embedded manifests instead of the\n * filesystem, so loads work inside a `bun --compile` single-file binary (no\n * asset tree on disk). T3 codegen emits per-domain {@link EmbeddedAssetManifest}\n * modules and registers them via {@link registerEmbeddedAssets}; this resolver\n * composes whatever has been registered.\n *\n * Until T3 lands, no manifests are registered, so the embedded resolver is\n * empty — `read()` throws a clear \"not found\" and `list()` returns `[]`.\n */\n\nimport picomatch from \"picomatch\";\nimport { AssetResolutionError } from \"./errors.js\";\nimport { assertSafeLogicalPath, assertSafePattern } from \"./paths.js\";\nimport type { AssetProvenance, AssetResolver, EmbeddedAssetManifest } from \"./types.js\";\n\n/** Process-level registry of embedded asset manifests (composed by domain). */\nconst registeredManifests: EmbeddedAssetManifest[] = [];\n\n/**\n * Monotonic counter bumped on every registration change. The resolver factory\n * folds this into its cache key so a cached embedded resolver is never stale\n * after a domain is registered (entarch watch-item).\n */\nlet registrationVersion = 0;\n\n/** Current registration version (see {@link registrationVersion}). */\nexport function getRegistrationVersion(): number {\n  return registrationVersion;\n}\n\n/**\n * Register a generated embedded-asset manifest. Idempotent per domain\n * (re-registering a domain replaces it). Called by generated modules.\n */\nexport function registerEmbeddedAssets(manifest: EmbeddedAssetManifest): void {\n  const existing = registeredManifests.findIndex((m) => m.domain === manifest.domain);\n  if (existing >= 0) {\n    registeredManifests[existing] = manifest;\n  } else {\n    registeredManifests.push(manifest);\n  }\n  registrationVersion++;\n}\n\n/** Whether a specific domain has been registered. */\nexport function hasEmbeddedDomain(domain: string): boolean {\n  return registeredManifests.some((m) => m.domain === domain);\n}\n\n/** Clear all registered manifests. For testing only. */\nexport function clearEmbeddedAssets(): void {\n  registeredManifests.length = 0;\n  registrationVersion++;\n}\n\n/** Whether any embedded manifests have been registered. */\nexport function hasEmbeddedAssets(): boolean {\n  return registeredManifests.length > 0;\n}\n\n/** Flatten registered manifests into a single logical-path -> content map. */\nfunction buildIndex(): Map<string, string> {\n  const index = new Map<string, string>();\n  for (const manifest of registeredManifests) {\n    for (const [logicalPath, content] of Object.entries(manifest.files)) {\n      index.set(logicalPath, content);\n    }\n  }\n  return index;\n}\n\nexport class EmbeddedAssetResolver implements AssetResolver {\n  readonly mode = \"embedded\" as const;\n\n  // Snapshot the index at construction; resolvers are cheap to recreate and the\n  // factory rebuilds when mode changes.\n  private readonly index: Map<string, string>;\n\n  constructor() {\n    this.index = buildIndex();\n  }\n\n  async read(logicalPath: string): Promise<string> {\n    const content = this.index.get(assertSafeLogicalPath(logicalPath));\n    if (content === undefined) {\n      throw AssetResolutionError.notFound(logicalPath, \"embedded\");\n    }\n    return content;\n  }\n\n  async list(patterns: string[]): Promise<string[]> {\n    if (patterns.length === 0) {\n      return [];\n    }\n    for (const pattern of patterns) {\n      assertSafePattern(pattern);\n    }\n    const isMatch = picomatch(patterns, { dot: false });\n    return Array.from(this.index.keys())\n      .filter((key) => isMatch(key))\n      .sort();\n  }\n\n  async has(logicalPath: string): Promise<boolean> {\n    try {\n      return this.index.has(assertSafeLogicalPath(logicalPath));\n    } catch {\n      return false;\n    }\n  }\n\n  provenance(): AssetProvenance {\n    return { mode: \"embedded\", embeddedCount: this.index.size };\n  }\n}\n","/**\n * Asset resolution - Filesystem backend\n *\n * Reads SSOT assets from the on-disk `schemas/crucible-ts` / `config/crucible-ts`\n * trees shipped in the npm package. This is the current (pre-v0.4.0) behavior,\n * now centralized behind the {@link AssetResolver} contract.\n */\n\nimport { access, readFile } from \"node:fs/promises\";\nimport { join, sep } from \"node:path\";\nimport glob from \"fast-glob\";\nimport { AssetResolutionError } from \"./errors.js\";\nimport { assertSafeLogicalPath, assertSafePattern } from \"./paths.js\";\nimport type { AssetProvenance, AssetResolver } from \"./types.js\";\n\n/** Normalize a logical path to POSIX separators (logical paths are always POSIX). */\nfunction toPosix(p: string): string {\n  return sep === \"/\" ? p : p.split(sep).join(\"/\");\n}\n\nexport class FsAssetResolver implements AssetResolver {\n  readonly mode = \"fs\" as const;\n\n  /**\n   * @param baseDir Directory logical paths resolve against.\n   * @param enforceNamespace Restrict to the SSOT namespaces (schemas/config/docs).\n   *   Default `true` for the package's own asset tree; pass `false` when `baseDir`\n   *   is a consumer-supplied tree they scope themselves (traversal guards still apply).\n   */\n  constructor(\n    private readonly baseDir: string,\n    private readonly enforceNamespace = true,\n  ) {}\n\n  private resolve(logicalPath: string): string {\n    // Validate before joining — prevents `..`/absolute/non-POSIX traversal out of\n    // baseDir via the public `./assets` surface.\n    return join(this.baseDir, assertSafeLogicalPath(logicalPath, this.enforceNamespace));\n  }\n\n  async read(logicalPath: string): Promise<string> {\n    const absolute = this.resolve(logicalPath);\n    try {\n      return await readFile(absolute, \"utf-8\");\n    } catch (error) {\n      const err = error as NodeJS.ErrnoException;\n      if (err.code === \"ENOENT\") {\n        throw AssetResolutionError.notFound(logicalPath, \"fs\");\n      }\n      // Reference the logical path + error code only — avoid leaking the absolute\n      // host path that a raw FS error message (e.g. EACCES) would carry (secrev).\n      throw AssetResolutionError.readFailed(logicalPath, err.code ?? \"unknown\");\n    }\n  }\n\n  async list(patterns: string[]): Promise<string[]> {\n    if (patterns.length === 0) {\n      return [];\n    }\n    for (const pattern of patterns) {\n      assertSafePattern(pattern, this.enforceNamespace);\n    }\n    // Patterns are package-root-relative; glob with `cwd: baseDir` and return\n    // logical (relative, POSIX) paths so callers never see absolute paths.\n    const matches = await glob(patterns, {\n      cwd: this.baseDir,\n      absolute: false,\n      onlyFiles: true,\n      followSymbolicLinks: false,\n      suppressErrors: true,\n      dot: false,\n    });\n    return matches.map(toPosix).sort();\n  }\n\n  async has(logicalPath: string): Promise<boolean> {\n    let absolute: string;\n    try {\n      absolute = this.resolve(logicalPath);\n    } catch {\n      return false; // invalid/traversing path → not present\n    }\n    try {\n      await access(absolute);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  provenance(): AssetProvenance {\n    return { mode: \"fs\", baseDir: this.baseDir };\n  }\n\n  /** The on-disk base directory this resolver reads from. */\n  getBaseDir(): string {\n    return this.baseDir;\n  }\n}\n","/**\n * Asset resolution - Resolver factory & mode selection\n *\n * Chooses between the filesystem and embedded backends. Default is `auto`:\n * prefer the filesystem when the on-disk asset tree is present/readable, else\n * fall back to embedded generated modules (the `bun --compile` case). The mode\n * can be forced with the `TSFULMEN_ASSET_MODE` env var or an explicit option.\n */\n\nimport { accessSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport {\n  EmbeddedAssetResolver,\n  getRegistrationVersion,\n  hasEmbeddedAssets,\n} from \"./embedded-resolver.js\";\nimport { AssetResolutionError } from \"./errors.js\";\nimport { FsAssetResolver } from \"./fs-resolver.js\";\nimport type { AssetMode, AssetResolver } from \"./types.js\";\n\n/**\n * Marker that identifies the package-root asset tree. Used both to locate the\n * base dir by walking upward and to test FS availability for `auto` selection.\n */\nconst ASSET_ROOT_MARKER = join(\"schemas\", \"crucible-ts\");\n\nfunction dirExists(path: string): boolean {\n  try {\n    accessSync(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Find the package-root directory that contains the SSOT asset trees by walking\n * upward from this module. Works for both source (`src/assets/`) and bundled\n * (`dist/`) layouts without hard-coded depths — and returns `null` inside a\n * `bun --compile` binary where no such directory exists on disk.\n */\nexport function findAssetBaseDir(): string | null {\n  let dir: string;\n  try {\n    dir = dirname(fileURLToPath(import.meta.url));\n  } catch {\n    return null;\n  }\n\n  // Walk up to the filesystem root looking for the asset-root marker.\n  let prev = \"\";\n  while (dir !== prev) {\n    if (dirExists(join(dir, ASSET_ROOT_MARKER))) {\n      return dir;\n    }\n    prev = dir;\n    dir = dirname(dir);\n  }\n  return null;\n}\n\nfunction readModeFromEnv(): AssetMode | undefined {\n  const raw = process.env.TSFULMEN_ASSET_MODE?.trim().toLowerCase();\n  if (raw === \"fs\" || raw === \"embedded\" || raw === \"auto\") {\n    return raw;\n  }\n  return undefined;\n}\n\nexport interface ResolveAssetsOptions {\n  /** Force a mode. Precedence: explicit option > `TSFULMEN_ASSET_MODE` > `auto`. */\n  mode?: AssetMode;\n  /** Override the FS base dir (e.g. a consumer's own asset tree). Implies `fs`. */\n  baseDir?: string;\n}\n\n/**\n * Build an {@link AssetResolver} for the requested (or auto-detected) mode.\n * Stateless — callers that want a cached instance use {@link getAssetResolver}.\n */\nexport function resolveAssets(options: ResolveAssetsOptions = {}): AssetResolver {\n  if (options.baseDir) {\n    // Consumer-supplied tree: they scope it, so don't impose the SSOT namespace\n    // (traversal guards still apply). Used by e.g. a custom schema-registry baseDir.\n    return new FsAssetResolver(options.baseDir, false);\n  }\n\n  const requested: AssetMode = options.mode ?? readModeFromEnv() ?? \"auto\";\n\n  if (requested === \"fs\") {\n    const baseDir = findAssetBaseDir();\n    if (!baseDir) {\n      throw AssetResolutionError.baseDirUnavailable(\n        \"mode=fs but no on-disk asset tree found (use mode=embedded in a compiled binary)\",\n      );\n    }\n    return new FsAssetResolver(baseDir);\n  }\n\n  if (requested === \"embedded\") {\n    return new EmbeddedAssetResolver();\n  }\n\n  // auto: prefer FS when the asset tree is present, else embedded.\n  const baseDir = findAssetBaseDir();\n  if (baseDir) {\n    return new FsAssetResolver(baseDir);\n  }\n  if (hasEmbeddedAssets()) {\n    return new EmbeddedAssetResolver();\n  }\n  throw AssetResolutionError.baseDirUnavailable(\n    \"auto: no on-disk asset tree and no embedded assets registered\",\n  );\n}\n\nlet cached: AssetResolver | undefined;\nlet cachedKey: string | undefined;\n\n/**\n * Cached resolver keyed on the effective options. Most call sites should use\n * this; pass fresh options (or different env) to rebuild.\n */\nexport function getAssetResolver(options: ResolveAssetsOptions = {}): AssetResolver {\n  const key = JSON.stringify({\n    mode: options.mode ?? readModeFromEnv() ?? \"auto\",\n    baseDir: options.baseDir ?? null,\n    // Fold in the registration version so a cached embedded resolver rebuilds\n    // after a domain is registered (e.g. via ensureEmbeddedDomain).\n    reg: getRegistrationVersion(),\n  });\n  if (!cached || cachedKey !== key) {\n    cached = resolveAssets(options);\n    cachedKey = key;\n  }\n  return cached;\n}\n\n/** Reset the cached resolver. For testing / after registering embedded assets. */\nexport function resetAssetResolver(): void {\n  cached = undefined;\n  cachedKey = undefined;\n}\n\n// Embedded-asset registration is STATIC PER-SUBPATH (entarch-sanctioned fallback;\n// see planning/tsfulmen/v040-shaping.md §0.7). Each feature subpath statically\n// imports + registers only its own domain manifest, so a foundry/schema/taxonomy\n// consumer's published bundle carries only the assets it uses — and the `./assets`\n// core (this module) references NO generated content, keeping dist/assets/index.js\n// lean. (Dynamic per-domain lazy loading would require global tsup `splitting`,\n// which we deliberately avoid.) Cache stays correct because registerEmbeddedAssets\n// bumps a version that getAssetResolver folds into its cache key.\n"]}