@grimoire-rs/indexer 0.1.0

package/dist/cli/init.js

@@ -0,0 +1,317 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+// `grim-indexer init` — scaffold an index repo, following the UX of
+// Microsoft's `yo code` (prompt, write, tell the user what to do next) but
+// none of its runtime: the wizard is @clack/prompts, there is no Yeoman.
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import * as prompts from "@clack/prompts";
+import { CliError, EXIT } from "./exit.js";
+/** Scaffold templates ship beside `dist/`, so this resolves identically from `src/cli/` and `dist/cli/`. */
+const TEMPLATE_DIR = fileURLToPath(new URL("../../templates/", import.meta.url));
+/** `{{name}}`, but never GitHub Actions' `${{ ... }}` — hence the `$` lookbehind. */
+const PLACEHOLDER = /(?<!\$)\{\{\s*([A-Za-z_]\w*)\s*\}\}/g;
+const NAME_RE = /^[a-z0-9][a-z0-9._-]*$/;
+function slug(value) {
+    return value
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+function titleCase(name) {
+    return name
+        .split(/[-_.]+/)
+        .filter(Boolean)
+        .map((word) => word.charAt(0).toUpperCase() + word.slice(1))
+        .join(" ");
+}
+function readTemplate(rel) {
+    const file = path.join(TEMPLATE_DIR, rel);
+    try {
+        return fs.readFileSync(file, "utf8");
+    }
+    catch {
+        throw new CliError(`scaffold template ${rel} is missing from ${TEMPLATE_DIR} — the installed package is incomplete`, EXIT.unavailable);
+    }
+}
+function render(template, vars, rel) {
+    return template.replace(PLACEHOLDER, (match, key) => {
+        if (!(key in vars)) {
+            throw new CliError(`scaffold template ${rel} references unknown placeholder {{${key}}}`);
+        }
+        return vars[key];
+    });
+}
+/** Validate a URL the user typed. Returns the reason it is bad, or `null`. */
+function badUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return "must be an absolute URL, e.g. https://index.example.com";
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        return "must be an http(s) URL";
+    }
+    return null;
+}
+function badName(value) {
+    if (!NAME_RE.test(value)) {
+        return "must be lowercase, start alphanumeric, and contain only a-z 0-9 . _ -";
+    }
+    return null;
+}
+/**
+ * Resolve flags into a complete answer set, prompting for whatever is
+ * missing. `--quick` never prompts, so CI and tests get a deterministic
+ * tree from flags alone.
+ */
+async function resolveAnswers(dir, flags) {
+    const defaultName = slug(path.basename(path.resolve(dir))) || "my-index";
+    // Flags always win, and any flag value is validated whether or not a
+    // prompt would have caught it — `--quick` skips the prompt, not the check.
+    for (const [flag, value, check] of [
+        ["--name", flags.name, badName],
+        ["--registry", flags.registry, badName],
+        ["--base-url", flags.baseUrl, badUrl],
+    ]) {
+        if (value !== undefined) {
+            const reason = check(value);
+            if (reason)
+                throw new CliError(`${flag} ${JSON.stringify(value)}: ${reason}`, EXIT.data);
+        }
+    }
+    if (flags.quick) {
+        const name = flags.name ?? defaultName;
+        return {
+            name,
+            title: flags.title ?? titleCase(name),
+            baseUrl: flags.baseUrl ?? "http://localhost:4321",
+            registryAlias: flags.registry ?? name,
+            registryHost: flags.registryHost ?? "ghcr.io",
+            logo: flags.logo ?? "",
+            forge: flags.forge ?? "github",
+            git: flags.git ?? true,
+            withSkills: flags.withSkills ?? false,
+        };
+    }
+    prompts.intro("grim-indexer — new package index");
+    const name = flags.name ??
+        (await ask(prompts.text({
+            message: "Index name (used as the identifier)",
+            placeholder: defaultName,
+            defaultValue: defaultName,
+            validate: (value) => badName(value || defaultName) ?? undefined,
+        })));
+    const title = flags.title ??
+        (await ask(prompts.text({
+            message: "Display title",
+            placeholder: titleCase(name),
+            defaultValue: titleCase(name),
+        })));
+    const baseUrl = flags.baseUrl ??
+        (await ask(prompts.text({
+            message: "Base URL the index is served from",
+            placeholder: "https://index.example.com",
+            validate: (value) => badUrl(value ?? "") ?? undefined,
+        })));
+    const registryAlias = flags.registry ??
+        (await ask(prompts.text({
+            message: "Registry alias packages are published under",
+            placeholder: name,
+            defaultValue: name,
+            validate: (value) => badName(value || name) ?? undefined,
+        })));
+    const logo = flags.logo ??
+        (await ask(prompts.text({
+            message: "Brand logo (path or URL, blank for none)",
+            defaultValue: "",
+        })));
+    const forge = flags.forge ??
+        (await ask(prompts.select({
+            message: "CI to scaffold",
+            options: [
+                { value: "github", label: "GitHub Actions" },
+                { value: "gitlab", label: "GitLab CI" },
+                { value: "both", label: "Both" },
+            ],
+            initialValue: "github",
+        })));
+    const git = flags.git ??
+        (await ask(prompts.confirm({ message: "Initialize a git repository?", initialValue: true })));
+    return {
+        name,
+        title,
+        baseUrl,
+        registryAlias,
+        registryHost: flags.registryHost ?? "ghcr.io",
+        logo,
+        forge,
+        git,
+        withSkills: flags.withSkills ?? false,
+    };
+}
+/** Unwrap a clack prompt, turning Ctrl-C into a clean non-error abort. */
+async function ask(pending) {
+    const value = await pending;
+    if (prompts.isCancel(value)) {
+        prompts.cancel("Cancelled — nothing written.");
+        throw new CliError("cancelled", EXIT.ok);
+    }
+    return value;
+}
+function json(value) {
+    return JSON.stringify(value, null, 2) + "\n";
+}
+/**
+ * `index.config.json`, in the shape `loadConfig` validates. Every
+ * key is optional there, so an unanswered prompt omits its key rather than
+ * writing an empty string the validator would reject.
+ */
+function siteConfig(answers) {
+    return json({
+        site: answers.baseUrl,
+        brand: answers.title,
+        description: `${answers.title} — a Grimoire package index.`,
+        ...(answers.logo ? { favicon: answers.logo } : {}),
+        registry: { alias: answers.registryAlias, index: answers.baseUrl },
+    });
+}
+/**
+ * `index-policy.json` — the committed allowlist the contribution gate reads.
+ * `registryHosts` bounds which registries an entry may point at (empty or
+ * absent means any public DNS host); `reservedNamespaces` are refused before
+ * any network call; `trustedBots` names accounts allowed to announce for a
+ * namespace they do not own — prefer the object form, `{ login, id,
+ * namespaces }`, since a bare string pins no account id and scopes nothing.
+ */
+function indexPolicy(answers) {
+    return json({
+        version: 1,
+        registryHosts: [answers.registryHost],
+        reservedNamespaces: ["grim", "grimoire", "index"],
+        trustedBots: [],
+    });
+}
+/** The complete scaffold as (destination path, content) pairs — nothing touches disk yet. */
+function plan(answers, version) {
+    const vars = {
+        name: answers.name,
+        title: answers.title,
+        baseUrl: answers.baseUrl,
+        registryAlias: answers.registryAlias,
+        registryHost: answers.registryHost,
+        logo: answers.logo,
+        version,
+        // The reusable workflows are pinned by tag; Renovate's `github-actions`
+        // manager bumps this in every scaffolded repo.
+        ref: `v${version}`,
+    };
+    const from = (rel, dest) => ({
+        path: dest,
+        content: render(readTemplate(rel), vars, rel),
+    });
+    const files = [
+        { path: "index/.gitkeep", content: "" },
+        { path: "index.config.json", content: siteConfig(answers) },
+        { path: "index-policy.json", content: indexPolicy(answers) },
+        from("gitignore", ".gitignore"),
+        from("README.md", "README.md"),
+    ];
+    if (answers.forge === "github" || answers.forge === "both") {
+        files.push(from("github-pages.yml", ".github/workflows/pages.yml"));
+        files.push(from("github-validate.yml", ".github/workflows/validate.yml"));
+    }
+    if (answers.forge === "gitlab" || answers.forge === "both") {
+        files.push(from("gitlab-ci.yml", ".gitlab-ci.yml"));
+    }
+    if (answers.withSkills) {
+        files.push({ path: "skills/.gitkeep", content: "" });
+        files.push(from("publish.toml", "publish.toml"));
+    }
+    return files;
+}
+/**
+ * Write the scaffold. Re-running is safe: a file whose content already
+ * matches is reported `unchanged`, and one the user has edited is left
+ * alone as `skipped` unless `--force`.
+ */
+function write(dir, files, force) {
+    const written = [];
+    for (const file of files) {
+        const abs = path.join(dir, file.path);
+        let outcome;
+        if (fs.existsSync(abs)) {
+            if (fs.readFileSync(abs, "utf8") === file.content) {
+                written.push({ path: file.path, outcome: "unchanged" });
+                continue;
+            }
+            if (!force) {
+                written.push({ path: file.path, outcome: "skipped" });
+                continue;
+            }
+            outcome = "overwritten";
+        }
+        else {
+            outcome = "created";
+        }
+        fs.mkdirSync(path.dirname(abs), { recursive: true });
+        fs.writeFileSync(abs, file.content);
+        written.push({ path: file.path, outcome });
+    }
+    return written;
+}
+function initGit(dir) {
+    if (fs.existsSync(path.join(dir, ".git")))
+        return false;
+    try {
+        execFileSync("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
+        return true;
+    }
+    catch {
+        console.error("warning: `git init` failed — initialize the repository yourself");
+        return false;
+    }
+}
+function nextSteps(result, answers) {
+    const rel = path.relative(process.cwd(), result.dir);
+    // A relative path that climbs out of the working directory is worse than
+    // the absolute one it was derived from.
+    const target = rel === "" ? "" : rel.startsWith("..") ? result.dir : rel;
+    const cd = target === "" ? "" : `cd ${target}\n`;
+    const lines = [
+        `${cd}npx @grimoire-rs/indexer build`,
+        "",
+        "Then:",
+        "  1. Add packages under index/<namespace>/<package>/metadata.json",
+        "  2. Push to your forge — CI builds and publishes the site",
+    ];
+    if (answers.baseUrl === "http://localhost:4321") {
+        lines.push("  3. Set baseUrl in index.config.json to the real site URL");
+    }
+    return lines.join("\n");
+}
+export async function init(dir, flags, version) {
+    const target = path.resolve(dir);
+    const answers = await resolveAnswers(target, flags);
+    fs.mkdirSync(target, { recursive: true });
+    const files = write(target, plan(answers, version), flags.force ?? false);
+    const gitInitialized = answers.git ? initGit(target) : false;
+    const result = { dir: target, files, gitInitialized };
+    for (const file of files) {
+        console.log(`  ${file.outcome.padEnd(12)}${file.path}`);
+    }
+    const skipped = files.filter((f) => f.outcome === "skipped");
+    if (skipped.length > 0) {
+        console.error(`\n${skipped.length} file(s) differ from the scaffold and were left alone. ` +
+            `Re-run with --force to overwrite them.`);
+    }
+    prompts.note(nextSteps(result, answers), "Next steps");
+    prompts.outro(`Index "${answers.name}" ready in ${target}`);
+    return EXIT.ok;
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC,oEAAoE;AACpE,2EAA2E;AAC3E,yEAAyE;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAiB,MAAM,WAAW,CAAC;AAE1D,4GAA4G;AAC5G,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjF,qFAAqF;AACrF,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAE3D,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAyCzC,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,KAAK,CAAC,QAAQ,CAAC;SACf,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,qBAAqB,GAAG,oBAAoB,YAAY,wCAAwC,EAChG,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB,EAAE,IAA4B,EAAE,GAAW;IACzE,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC1D,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,QAAQ,CAAC,qBAAqB,GAAG,qCAAqC,GAAG,IAAI,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAW,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,uEAAuE,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAgB;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;IAEzE,qEAAqE;IACrE,2EAA2E;IAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI;QACjC,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;QAC/B,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC;QACvC,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;KAC7B,EAAE,CAAC;QACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,MAAM;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,WAAW,CAAC;QACvC,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB;YACjD,aAAa,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YACrC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;YAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,QAAQ;YAC9B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK;SACtC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAElD,MAAM,IAAI,GACR,KAAK,CAAC,IAAI;QACV,CAAC,MAAM,GAAG,CACR,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,qCAAqC;YAC9C,WAAW,EAAE,WAAW;YACxB,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,SAAS;SAChE,CAAC,CACH,CAAC,CAAC;IAEL,MAAM,KAAK,GACT,KAAK,CAAC,KAAK;QACX,CAAC,MAAM,GAAG,CACR,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC;YAC5B,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC;SAC9B,CAAC,CACH,CAAC,CAAC;IAEL,MAAM,OAAO,GACX,KAAK,CAAC,OAAO;QACb,CAAC,MAAM,GAAG,CACR,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,mCAAmC;YAC5C,WAAW,EAAE,2BAA2B;YACxC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,SAAS;SACtD,CAAC,CACH,CAAC,CAAC;IAEL,MAAM,aAAa,GACjB,KAAK,CAAC,QAAQ;QACd,CAAC,MAAM,GAAG,CACR,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,6CAA6C;YACtD,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,SAAS;SACzD,CAAC,CACH,CAAC,CAAC;IAEL,MAAM,IAAI,GACR,KAAK,CAAC,IAAI;QACV,CAAC,MAAM,GAAG,CACR,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,0CAA0C;YACnD,YAAY,EAAE,EAAE;SACjB,CAAC,CACH,CAAC,CAAC;IAEL,MAAM,KAAK,GACT,KAAK,CAAC,KAAK;QACX,CAAC,MAAM,GAAG,CACR,OAAO,CAAC,MAAM,CAAQ;YACpB,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBAC5C,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;gBACvC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;aACjC;YACD,YAAY,EAAE,QAAQ;SACvB,CAAC,CACH,CAAC,CAAC;IAEL,MAAM,GAAG,GACP,KAAK,CAAC,GAAG;QACT,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhG,OAAO;QACL,IAAI;QACJ,KAAK;QACL,OAAO;QACP,aAAa;QACb,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;QAC7C,IAAI;QACJ,KAAK;QACL,GAAG;QACH,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK;KACtC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,GAAG,CAAI,OAA4B;IAChD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;IAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,OAAoB;IACtC,OAAO,IAAI,CAAC;QACV,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,8BAA8B;QAC3D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;KACnE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,OAAoB;IACvC,OAAO,IAAI,CAAC;QACV,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;QACrC,kBAAkB,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;QACjD,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,SAAS,IAAI,CAAC,OAAoB,EAAE,OAAe;IACjD,MAAM,IAAI,GAA2B;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,wEAAwE;QACxE,+CAA+C;QAC/C,GAAG,EAAE,IAAI,OAAO,EAAE;KACnB,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC;KAC9C,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE;QACvC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE;QAC3D,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;QAC5D,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;KAC/B,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,KAAK,CACZ,GAAW,EACX,KAA+C,EAC/C,KAAc;IAEd,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,OAAoB,CAAC;QAEzB,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YACD,OAAO,GAAG,aAAa,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAkB,EAAE,OAAoB;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,yEAAyE;IACzE,wCAAwC;IACxC,MAAM,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG;QACZ,GAAG,EAAE,gCAAgC;QACrC,EAAE;QACF,OAAO;QACP,mEAAmE;QACnE,4DAA4D;KAC7D,CAAC;IACF,IAAI,OAAO,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,KAAgB,EAAE,OAAe;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEpD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAElE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,KAAK,OAAO,CAAC,MAAM,yDAAyD;YAC1E,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACvD,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,CAAC,IAAI,cAAc,MAAM,EAAE,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,2 @@
+export declare function run(argv: string[]): Promise<number>;
+//# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAuEA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0EzD"}

package/dist/cli/main.js

@@ -0,0 +1,112 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+// Argument parsing and the single place errors become exit codes. The bin
+// entry (`index.ts`) does nothing but call `run` and set `process.exitCode`.
+import fs from "node:fs";
+import { fileURLToPath } from "node:url";
+import { Command, CommanderError, Option } from "commander";
+import { build } from "./build.js";
+import { CliError, EXIT } from "./exit.js";
+import { init } from "./init.js";
+import { validate } from "./validate.js";
+/** Read from disk rather than imported, so `rootDir: src` stays intact. */
+function packageVersion() {
+    const manifest = fileURLToPath(new URL("../../package.json", import.meta.url));
+    const parsed = JSON.parse(fs.readFileSync(manifest, "utf8"));
+    const version = parsed.version;
+    return typeof version === "string" ? version : "0.0.0";
+}
+/**
+ * Map a thrown value to an exit code, printing whatever the user needs to
+ * see. Commander has already written its own usage text by the time its
+ * errors land here.
+ */
+function classify(err) {
+    if (err instanceof CommanderError) {
+        // `--help` and `--version` also arrive here, with exitCode 0.
+        return err.exitCode === 0 ? EXIT.ok : EXIT.usage;
+    }
+    if (err instanceof CliError) {
+        if (err.code !== EXIT.ok)
+            console.error(err.message);
+        return err.code;
+    }
+    if (err instanceof Error && "code" in err && err.code === "ERR_MODULE_NOT_FOUND") {
+        console.error(`${err.message}\nthis build of grim-indexer is incomplete — run \`npm run build\``);
+        return EXIT.unavailable;
+    }
+    // How the compiler, the config loader, and the renderer reject bad input
+    // — a data problem in the repo being built, not a bug in the tool. Matched
+    // by name so `build`'s modules stay dynamically imported.
+    if (err instanceof Error &&
+        ["IndexValidationError", "SiteConfigError", "RenderInputError"].includes(err.name)) {
+        console.error(err.message);
+        return EXIT.data;
+    }
+    console.error(err instanceof Error ? err.message : String(err));
+    return EXIT.failure;
+}
+export async function run(argv) {
+    const version = packageVersion();
+    let code = EXIT.ok;
+    const program = new Command()
+        .name("grim-indexer")
+        .description("Run your own grim package index")
+        .version(version)
+        .exitOverride();
+    program
+        .command("init")
+        .argument("[dir]", "directory to scaffold into", ".")
+        .description("scaffold an index repo")
+        .option("--quick", "skip every prompt and take defaults (for CI)")
+        .option("--name <name>", "index identifier")
+        .option("--title <title>", "display title")
+        .option("--base-url <url>", "URL the index is served from")
+        .option("--registry <alias>", "registry alias packages are published under")
+        .option("--registry-host <host>", "OCI registry host", "ghcr.io")
+        .option("--logo <path>", "brand logo path or URL")
+        .addOption(new Option("--forge <forge>", "CI to scaffold").choices(["github", "gitlab", "both"]))
+        .option("--no-git", "do not run `git init`")
+        .option("--with-skills", "scaffold the combined layout: this repo holds its skills and its index")
+        .option("--force", "overwrite files that differ from the scaffold")
+        .action(async (dir, opts, cmd) => {
+        code = await init(dir, 
+        // `--no-git` defaults `git` to true, which would silently answer the
+        // interactive prompt; only an explicit flag counts as an answer.
+        { ...opts, git: cmd.getOptionValueSource("git") === "cli" ? opts.git : undefined }, version);
+    });
+    program
+        .command("build")
+        .argument("[root]", "index repo root", ".")
+        .description("compile index/** and render the site into dist/")
+        .option("--out-dir <dir>", "output directory", "dist")
+        .action(async (root, opts) => {
+        code = await build(root, { outDir: opts.outDir });
+    });
+    program
+        .command("validate")
+        .argument("[files...]", "changed index/** paths from the PR/MR diff")
+        .description("contribution gate: exit 0 = eligible for auto-merge")
+        .option("--root <dir>", "trusted base checkout — the committed state", ".")
+        // Required, but enforced in `validate` rather than by commander: the gate
+        // contract puts a missing `--pr-tree` in the 65 bucket, not commander's 64.
+        .option("--pr-tree <dir>", "checkout of the PR head, read as data only")
+        .option("--policy <file>", "path to index-policy.json")
+        .addOption(new Option("--forge <forge>", "forge hosting the contribution").choices([
+        "github",
+        "gitlab",
+    ]))
+        .option("--author-login <login>", "contribution author's forge login")
+        .option("--author-id <id>", "contribution author's numeric forge id")
+        .action(async (files, opts) => {
+        code = await validate(files, opts);
+    });
+    try {
+        await program.parseAsync(argv);
+    }
+    catch (err) {
+        return classify(err);
+    }
+    return code;
+}
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC,0EAA0E;AAC1E,6EAA6E;AAC7E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAiB,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAc,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAsB,MAAM,eAAe,CAAC;AAgB7D,2EAA2E;AAC3E,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC1D,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QAClC,8DAA8D;QAC9D,OAAO,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACjF,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,CAAC,OAAO,oEAAoE,CACnF,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,0DAA0D;IAC1D,IACE,GAAG,YAAY,KAAK;QACpB,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAClF,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,IAAI,GAAa,IAAI,CAAC,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,cAAc,CAAC;SACpB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,OAAO,CAAC,OAAO,CAAC;SAChB,YAAY,EAAE,CAAC;IAElB,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,CAAC;SACpD,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,SAAS,EAAE,8CAA8C,CAAC;SACjE,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC;SAC1C,MAAM,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;SAC1D,MAAM,CAAC,oBAAoB,EAAE,6CAA6C,CAAC;SAC3E,MAAM,CAAC,wBAAwB,EAAE,mBAAmB,EAAE,SAAS,CAAC;SAChE,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC;SACjD,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,MAAM,CAAC,UAAU,EAAE,uBAAuB,CAAC;SAC3C,MAAM,CACL,eAAe,EACf,wEAAwE,CACzE;SACA,MAAM,CAAC,SAAS,EAAE,+CAA+C,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAoB,EAAE,GAAY,EAAE,EAAE;QAChE,IAAI,GAAG,MAAM,IAAI,CACf,GAAG;QACH,qEAAqE;QACrE,iEAAiE;QACjE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAClF,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC;SAC1C,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAyB,EAAE,EAAE;QACxD,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CAAC,YAAY,EAAE,4CAA4C,CAAC;SACpE,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,cAAc,EAAE,6CAA6C,EAAE,GAAG,CAAC;QAC3E,0EAA0E;QAC1E,4EAA4E;SAC3E,MAAM,CAAC,iBAAiB,EAAE,4CAA4C,CAAC;SACvE,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;SACtD,SAAS,CACR,IAAI,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC,OAAO,CAAC;QACtE,QAAQ;QACR,QAAQ;KACT,CAAC,CACH;SACA,MAAM,CAAC,wBAAwB,EAAE,mCAAmC,CAAC;SACrE,MAAM,CAAC,kBAAkB,EAAE,wCAAwC,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,KAAe,EAAE,IAAmB,EAAE,EAAE;QACrD,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/validate.d.ts

@@ -0,0 +1,18 @@
+import { type ExitCode } from "./exit.js";
+export type ValidateForge = "github" | "gitlab";
+export interface ValidateFlags {
+    root?: string;
+    prTree?: string;
+    policy?: string;
+    forge?: ValidateForge;
+    authorLogin?: string;
+    authorId?: string;
+}
+/**
+ * @param files Changed `index/**` paths as CI's `git diff --name-only`
+ *   printed them — repo-relative, and passed through unchanged. An empty set
+ *   is not "check everything": the gate has nothing to authorize and returns
+ *   ineligible.
+ */
+export declare function validate(files: string[], flags: ValidateFlags): Promise<ExitCode>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/cli/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/cli/validate.ts"],"names":[],"mappings":"AAeA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG1D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAgFD;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqDvF"}

package/dist/cli/validate.js

@@ -0,0 +1,139 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+// `grim-indexer validate` — the contribution gate CI runs on a PR/MR.
+//
+// The contract callers depend on is the exit code, and only that:
+//   0        -> eligible for auto-merge
+//   non-zero -> manual review required
+//
+// This is also where CI plumbing lives: forge, PR author, and the committed
+// registry-host allowlist are read off the environment and the policy file
+// so the generated workflow stays a thin caller with no logic of its own.
+import fs from "node:fs";
+import path from "node:path";
+import { CliError, EXIT } from "./exit.js";
+function detectForge() {
+    if (process.env.GITHUB_ACTIONS)
+        return "github";
+    if (process.env.GITLAB_CI)
+        return "gitlab";
+    return undefined;
+}
+/**
+ * The PR/MR author, from whatever the forge exposes. GitHub carries it in
+ * the event payload; GitLab's merge-request pipeline runs as the author, so
+ * `GITLAB_USER_*` is the author.
+ */
+function detectAuthor(forge) {
+    if (forge === "gitlab") {
+        const login = process.env.GITLAB_USER_LOGIN;
+        const id = process.env.GITLAB_USER_ID;
+        return login && id ? { login, id } : undefined;
+    }
+    const eventPath = process.env.GITHUB_EVENT_PATH;
+    if (!eventPath)
+        return undefined;
+    let event;
+    try {
+        event = JSON.parse(fs.readFileSync(eventPath, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+    const user = event
+        ?.pull_request?.user;
+    if (typeof user?.login !== "string" || (typeof user.id !== "number" && typeof user.id !== "string")) {
+        return undefined;
+    }
+    return { login: user.login, id: String(user.id) };
+}
+/**
+ * Read the committed allowlist. An absent default-location file is fine —
+ * the gate then bounds nothing. An explicitly requested one that is absent
+ * or malformed is a data error, never a silent pass.
+ */
+function readPolicy(file, explicit) {
+    let text;
+    try {
+        text = fs.readFileSync(file, "utf8");
+    }
+    catch {
+        if (explicit)
+            throw new CliError(`${file}: cannot be read`, EXIT.data);
+        return {};
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        throw new CliError(`${file}: ${err.message}`, EXIT.data);
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new CliError(`${file}: must contain a JSON object`, EXIT.data);
+    }
+    const policy = parsed;
+    for (const key of ["registryHosts", "reservedNamespaces"]) {
+        const value = policy[key];
+        if (value === undefined)
+            continue;
+        if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) {
+            throw new CliError(`${file}: ${key} must be an array of strings`, EXIT.data);
+        }
+    }
+    if (policy.trustedBots !== undefined && !Array.isArray(policy.trustedBots)) {
+        throw new CliError(`${file}: trustedBots must be an array`, EXIT.data);
+    }
+    return policy;
+}
+/**
+ * @param files Changed `index/**` paths as CI's `git diff --name-only`
+ *   printed them — repo-relative, and passed through unchanged. An empty set
+ *   is not "check everything": the gate has nothing to authorize and returns
+ *   ineligible.
+ */
+export async function validate(files, flags) {
+    const root = path.resolve(flags.root ?? ".");
+    const forge = flags.forge ?? detectForge();
+    if (!forge) {
+        throw new CliError("cannot tell which forge this is; pass --forge github|gitlab", EXIT.usage);
+    }
+    const author = flags.authorLogin && flags.authorId
+        ? { login: flags.authorLogin, id: flags.authorId }
+        : detectAuthor(forge);
+    if (!author) {
+        throw new CliError("cannot determine the contribution author; pass --author-login and --author-id", EXIT.usage);
+    }
+    // Not defaulted to `root`. Passing the same dir for both silently disables
+    // the committed-owner-id continuity check — the one that stops a
+    // re-registered login from inheriting the previous owner's packages — and a
+    // gate that quietly drops a check is worse than one that refuses to run.
+    if (!flags.prTree) {
+        throw new CliError("--pr-tree is required: the directory holding the PR head", EXIT.data);
+    }
+    const policyFile = flags.policy
+        ? path.resolve(flags.policy)
+        : path.join(root, "index-policy.json");
+    const policy = readPolicy(policyFile, flags.policy !== undefined);
+    const { runValidate } = await import("../validate/index.js");
+    const { eligible, reasons } = await runValidate({
+        forge,
+        root,
+        prTree: path.resolve(flags.prTree),
+        changedFiles: files,
+        author,
+        ...(policy.registryHosts ? { registryHosts: policy.registryHosts } : {}),
+        ...(policy.reservedNamespaces ? { reservedNamespaces: policy.reservedNamespaces } : {}),
+        ...(policy.trustedBots ? { trustedBots: policy.trustedBots } : {}),
+    });
+    if (eligible) {
+        console.log("eligible for auto-merge");
+        return EXIT.ok;
+    }
+    console.error("manual review required:");
+    for (const reason of reasons) {
+        console.error(`  - ${reason}`);
+    }
+    return EXIT.failure;
+}
+//# sourceMappingURL=validate.js.map

package/dist/cli/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/cli/validate.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC,sEAAsE;AACtE,EAAE;AACF,kEAAkE;AAClE,wCAAwC;AACxC,uCAAuC;AACvC,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAiB,MAAM,WAAW,CAAC;AAsB1D,SAAS,WAAW;IAClB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAoB;IACxC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACtC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAChD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAI,KAAyE;QACrF,EAAE,YAAY,EAAE,IAAI,CAAC;IACvB,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;QACpG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,QAAiB;IACjD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,8BAA8B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,oBAAoB,CAAU,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,KAAK,GAAG,8BAA8B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,gCAAgC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,KAAoB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,6DAA6D,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GACV,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ;QACjC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE;QAClD,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAChB,+EAA+E,EAC/E,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,iEAAiE;IACjE,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAAC,0DAA0D,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM;QAC7B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAElE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC;QAC9C,KAAK;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,YAAY,EAAE,KAAK;QACnB,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC,CAAC;IAEH,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC"}