@grimoire-rs/indexer 0.1.0

package/dist/renderer/index.js

@@ -0,0 +1,192 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+// Renders the catalog site. The Astro sources ship inside this package
+// (`./astro`, `../public`); the *data* comes from `<outDir>/all.json`,
+// which `src/data/` compiles — nothing here walks an index tree.
+import fs from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { build } from "astro";
+import preact from "@astrojs/preact";
+import { resolveConfig } from "../config.js";
+/** Thrown when `<outDir>/all.json` is missing or malformed. */
+export class RenderInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "RenderInputError";
+    }
+}
+/**
+ * Keep `@astrojs/preact` inside the server bundle.
+ *
+ * Its `server.js` imports the virtual module `astro:preact:opts`, which only
+ * exists inside Vite — left external, Node loads the built prerender entry
+ * and dies on the `astro:` scheme. Astro infers this for a normal project by
+ * crawling the *root's* `package.json`, but the root here is the index repo,
+ * which has no reason to name the renderer's own dependencies.
+ *
+ * It has to be a plugin hook rather than `vite.environments`: Astro rebuilds
+ * `environments.prerender` from scratch (`core/build/vite-build-config.js`),
+ * so a user-supplied entry under that key is dropped. `configEnvironment`
+ * returns are merged for every environment, including `prerender` — which is
+ * the one that actually renders the pages.
+ */
+const bundlePreactRenderer = {
+    name: "grim-indexer:bundle-preact-renderer",
+    configEnvironment(_name, options) {
+        // `true` already means "bundle everything" — adding to it would replace
+        // the boolean with an array and externalize the rest.
+        if (options.resolve?.noExternal === true)
+            return;
+        return { resolve: { noExternal: ["@astrojs/preact"] } };
+    },
+};
+const here = path.dirname(fileURLToPath(import.meta.url));
+/** Astro `srcDir` — pages, layouts, components, content config. */
+export const ASTRO_SRC_DIR = path.join(here, "astro");
+/** Default `public/` layer; holds the fallback favicon. */
+export const DEFAULT_PUBLIC_DIR = path.join(here, "public");
+async function readPackages(outDir) {
+    const file = path.join(outDir, "all.json");
+    let text;
+    try {
+        text = await fs.readFile(file, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            throw new RenderInputError(`${file}: not found — compile the index into outDir first`);
+        }
+        throw err;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        throw new RenderInputError(`${file}: ${err.message}`);
+    }
+    if (!Array.isArray(parsed))
+        throw new RenderInputError(`${file}: expected a JSON array`);
+    return parsed.sort((a, b) => a.name.localeCompare(b.name));
+}
+async function exists(target) {
+    return fs.access(target).then(() => true, () => false);
+}
+/**
+ * Read the user CSS override. Its path is contained to `root` because a
+ * public index takes contribution PRs, and `grim-indexer validate` builds
+ * them — an unconstrained path would let a PR inline any readable file into
+ * the published site.
+ */
+async function readCustomCss(root, customCss) {
+    if (!customCss)
+        return "";
+    const file = path.resolve(root, customCss);
+    if (!file.startsWith(path.resolve(root) + path.sep)) {
+        throw new RenderInputError(`customCss must stay inside the index root: ${customCss}`);
+    }
+    try {
+        return await fs.readFile(file, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            throw new RenderInputError(`${file}: customCss file not found`);
+        }
+        throw err;
+    }
+}
+/**
+ * What Vite must be able to resolve from the Astro root. An index repo has
+ * none of them — `npx @grimoire-rs/indexer build` runs with no local install — so
+ * the staged root gets a `node_modules/` of symlinks to wherever *this*
+ * package's copies actually live.
+ */
+const RUNTIME_DEPS = ["astro", "@astrojs/preact", "preact"];
+// Node refuses to create a directory symlink on Windows without elevation;
+// a junction needs no privilege and behaves the same for resolution.
+const LINK_TYPE = process.platform === "win32" ? "junction" : "dir";
+/**
+ * Build the directory Astro treats as its project root, for one build.
+ *
+ * It cannot be the index repo. Astro resolves its own runtime, and every
+ * `optimizeDeps` entry, starting from `root` — and a user's index repo has
+ * no `node_modules` anywhere on its parent chain, so nothing resolves. It
+ * cannot be this package's own directory either: Astro writes `.astro/` and
+ * a Vite cache into the root, and an installed package (or an `npx` cache)
+ * is the wrong place for that, besides serialising concurrent builds.
+ *
+ * So: a scratch dir that borrows this package's dependencies by symlink. The
+ * index repo contributes data (`all.json`, already read), `enrich/`,
+ * `public/`, and the output location — nothing that has to resolve.
+ *
+ * It sits under the index repo rather than in `os.tmpdir()` because Astro
+ * renames the built server assets out of it and into `outDir`, and that
+ * rename fails with EXDEV across filesystems. Removed again in `finally`.
+ *
+ * `public/` is three layers, later wins: the packaged defaults, the index
+ * repo's own `public/`, and whatever the data compile already wrote into
+ * `outDir`. That last layer is the point — Astro empties `outDir` before it
+ * builds, and `/all.json` is a frozen public URL that must survive.
+ */
+async function stage(root, outDir) {
+    const dir = await fs.mkdtemp(path.join(root, ".index-"));
+    const src = path.join(dir, "src");
+    await fs.cp(ASTRO_SRC_DIR, src, { recursive: true });
+    for (const dep of RUNTIME_DEPS) {
+        const real = path.dirname(fileURLToPath(import.meta.resolve(`${dep}/package.json`)));
+        const link = path.join(dir, "node_modules", dep);
+        await fs.mkdir(path.dirname(link), { recursive: true }); // `@scope/` needs its dir
+        await fs.symlink(real, link, LINK_TYPE);
+    }
+    // `content.config.ts` globs `./enrich` relative to the Astro root, so the
+    // index repo's tree has to appear there. Absent is fine: the glob loader
+    // degrades to an empty collection.
+    const enrich = path.join(root, "enrich");
+    if (await exists(enrich))
+        await fs.symlink(enrich, path.join(dir, "enrich"), LINK_TYPE);
+    const staticDir = path.join(dir, "public");
+    await fs.mkdir(staticDir, { recursive: true });
+    for (const layer of [DEFAULT_PUBLIC_DIR, path.join(root, "public"), outDir]) {
+        // ponytail: copy, not rename — an index's data is kilobytes plus logos.
+        if (await exists(layer))
+            await fs.cp(layer, staticDir, { recursive: true, force: true });
+    }
+    return { dir, src };
+}
+/** Render the catalog site from `<outDir>/all.json` into `outDir`. */
+export async function buildSite(opts) {
+    const config = resolveConfig(opts.config);
+    const packages = await readPackages(opts.outDir);
+    const css = await readCustomCss(opts.root, config.customCss);
+    const staged = await stage(opts.root, opts.outDir);
+    // Astro routes its server build through `<cwd>/.astro/` whenever `outDir`
+    // is not under `process.cwd()` (`getOutDirWithinCwd`). That fallback is
+    // wanted here: the built prerender entry is imported by plain Node, so it
+    // has to sit where the staged `node_modules` resolves, not in an index
+    // repo that has none. Running from the staged dir puts it there.
+    const cwd = process.cwd();
+    process.chdir(staged.dir);
+    try {
+        await build({
+            // The staged dir, never the index repo — see `stage`.
+            root: staged.dir,
+            // The index repo owns no Astro config; picking one up would let a
+            // stray file silently change the frozen routes.
+            configFile: false,
+            srcDir: staged.src,
+            publicDir: path.join(staged.dir, "public"),
+            outDir: opts.outDir,
+            site: config.site,
+            integrations: [preact()],
+            vite: {
+                define: { __GRIMOIRE_DATA__: JSON.stringify({ config, packages, css }) },
+                plugins: [bundlePreactRenderer],
+            },
+        });
+    }
+    finally {
+        process.chdir(cwd);
+        await fs.rm(staged.dir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/renderer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/renderer/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC,uEAAuE;AACvE,uEAAuE;AACvE,iEAAiE;AACjE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,aAAa,EAAmB,MAAM,cAAc,CAAC;AAW9D,+DAA+D;AAC/D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,qCAAqC;IAC3C,iBAAiB,CAAC,KAAa,EAAE,OAA+C;QAC9E,wEAAwE;QACxE,sDAAsD;QACtD,IAAI,OAAO,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI;YAAE,OAAO;QACjD,OAAO,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;CACF,CAAC;AAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAE5D,KAAK,UAAU,YAAY,CAAC,MAAc;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,mDAAmD,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACzF,OAAQ,MAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc;IAClC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC3B,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,SAAwB;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CAAC,8CAA8C,SAAS,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAE5D,2EAA2E;AAC3E,qEAAqE;AACrE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,MAAc;IAC/C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,0BAA0B;QACnF,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IAExF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5E,wEAAwE;QACxE,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC;YACV,sDAAsD;YACtD,IAAI,EAAE,MAAM,CAAC,GAAG;YAChB,kEAAkE;YAClE,gDAAgD;YAChD,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,MAAM,CAAC,GAAG;YAClB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC;YAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,EAAE;gBACJ,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE;gBACxE,OAAO,EAAE,CAAC,oBAAoB,CAAC;aAChC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/renderer/public/favicon.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">
+  <rect width="100" height="100" rx="20" fill="#6d4fc4"/>
+  <text x="50" y="72" font-size="62" font-family="ui-monospace, monospace" font-weight="bold" fill="#ffffff" text-anchor="middle">g</text>
+</svg>

package/dist/renderer/types.d.ts

@@ -0,0 +1,34 @@
+import type { IndexRecord } from "../data/index.js";
+import type { ResolvedSiteConfig } from "../config.js";
+/**
+ * A record from `all.json` viewed through the fields the catalog renders.
+ * `IndexRecord` types the frozen index metadata and leaves enrichment as
+ * `unknown` under its index signature; this narrows the ones the templates
+ * touch. All optional — enrichment is best-effort, the site renders without.
+ */
+export interface CatalogPackage extends IndexRecord {
+    repository?: string;
+    title?: string;
+    summary?: string;
+    version?: string;
+    license?: string;
+    keywords?: string[];
+    created?: string;
+    deprecated?: string | null;
+    replacedBy?: string;
+    tags?: string[];
+    logo?: string;
+}
+/**
+ * The build-time payload `buildSite` injects through Vite `define`. Read it
+ * through `astro/lib/data.ts`, never from a hydrated island — that would
+ * inline the whole catalog into the client bundle.
+ */
+export interface GrimoireData {
+    config: ResolvedSiteConfig;
+    /** Every record from `<outDir>/all.json`, sorted by name. */
+    packages: CatalogPackage[];
+    /** Contents of `config.customCss`, already read from disk. Empty = none. */
+    css: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/renderer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/renderer/types.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/renderer/types.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+export {};
+//# sourceMappingURL=types.js.map

package/dist/renderer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/renderer/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC"}

package/dist/validate/adapters/files.d.ts

@@ -0,0 +1,17 @@
+export type FileRead = {
+    kind: "missing";
+} | {
+    kind: "text";
+    text: string;
+} | {
+    kind: "error";
+    reason: string;
+};
+/**
+ * Read `relative` from inside `root`.
+ *
+ * `missing` is a real outcome, not an error — a changed path with no file in
+ * the PR tree is a deletion by the namespace owner.
+ */
+export declare function readIndexFile(root: string, relative: string): Promise<FileRead>;
+//# sourceMappingURL=files.d.ts.map

package/dist/validate/adapters/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/validate/adapters/files.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAMtC;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC,CAgCnB"}

package/dist/validate/adapters/files.js

@@ -0,0 +1,50 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * Filesystem reads of a checkout. The PR tree is untrusted data: every read is
+ * confined to the tree root, symlinks are refused rather than followed, and a
+ * size cap applies before any content is loaded.
+ */
+import { lstat, readFile, realpath } from "node:fs/promises";
+import { isAbsolute, resolve, sep } from "node:path";
+import { MAX_METADATA_BYTES } from "../core/metadata.js";
+function contained(base, target) {
+    return target === base || target.startsWith(base + sep);
+}
+/**
+ * Read `relative` from inside `root`.
+ *
+ * `missing` is a real outcome, not an error — a changed path with no file in
+ * the PR tree is a deletion by the namespace owner.
+ */
+export async function readIndexFile(root, relative) {
+    if (relative.includes("\0") || isAbsolute(relative)) {
+        return { kind: "error", reason: "path must be relative to the index root" };
+    }
+    const base = await realpath(root).catch(() => null);
+    if (base === null) {
+        return { kind: "error", reason: `cannot resolve index root ${root}` };
+    }
+    const target = resolve(base, relative);
+    if (!contained(base, target)) {
+        return { kind: "error", reason: "path escapes the index root" };
+    }
+    const stat = await lstat(target).catch(() => null);
+    if (stat === null)
+        return { kind: "missing" };
+    if (stat.isSymbolicLink()) {
+        return { kind: "error", reason: "symlinks are not accepted" };
+    }
+    if (!stat.isFile())
+        return { kind: "error", reason: "not a regular file" };
+    if (stat.size > MAX_METADATA_BYTES) {
+        return { kind: "error", reason: `larger than ${MAX_METADATA_BYTES} bytes` };
+    }
+    // Catches a symlinked *parent* directory, which lstat on the leaf cannot see.
+    const real = await realpath(target).catch(() => null);
+    if (real === null || !contained(base, real)) {
+        return { kind: "error", reason: "path escapes the index root" };
+    }
+    return { kind: "text", text: await readFile(target, "utf8") };
+}
+//# sourceMappingURL=files.js.map

package/dist/validate/adapters/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/validate/adapters/files.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAOzD,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC7C,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,QAAgB;IAEhB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,IAAI,EAAE,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,kBAAkB,QAAQ,EAAE,CAAC;IAC9E,CAAC;IAED,8EAA8E;IAC9E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAClE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/validate/adapters/forge.d.ts

@@ -0,0 +1,25 @@
+export interface NamespaceIdentity {
+    kind: "user" | "org" | "group";
+    /** Numeric account/group id as a string — the authorization key. */
+    id: string;
+    /** Canonical path/login the forge reports. Display and case-folding only. */
+    path: string;
+}
+export interface Forge {
+    /** Identity of `namespace`, or null when the forge does not know it. */
+    namespaceIdentity(namespace: string): Promise<NamespaceIdentity | null>;
+    /** Is `author` a member of this org/group namespace? */
+    isMember(namespace: string, author: {
+        login: string;
+        id: string;
+    }): Promise<boolean>;
+}
+export interface ForgeConfig {
+    /** API base, e.g. `https://api.github.com` or `https://gitlab.com/api/v4`. */
+    apiBase: string;
+    token?: string;
+    /** GitLab only: membership threshold (30 = Developer). */
+    minAccessLevel?: number;
+}
+export declare function createForge(forge: "github" | "gitlab", config: ForgeConfig): Forge;
+//# sourceMappingURL=forge.d.ts.map

package/dist/validate/adapters/forge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.d.ts","sourceRoot":"","sources":["../../../src/validate/adapters/forge.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;IAC/B,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,KAAK;IACpB,wEAAwE;IACxE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACxE,wDAAwD;IACxD,QAAQ,CACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GACpC,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA8GD,wBAAgB,WAAW,CACzB,KAAK,EAAE,QAAQ,GAAG,QAAQ,EAC1B,MAAM,EAAE,WAAW,GAClB,KAAK,CAEP"}

package/dist/validate/adapters/forge.js

@@ -0,0 +1,100 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * Forge lookups — GitHub and GitLab. Read-only: this module resolves who owns a
+ * namespace and whether an account belongs to it. It never merges, comments, or
+ * approves; deciding is `core/`'s job and acting is the caller's.
+ */
+import { requestJson, USER_AGENT } from "./http.js";
+function field(data, key) {
+    if (typeof data !== "object" || data === null)
+        return undefined;
+    return data[key];
+}
+function idOf(data) {
+    const id = field(data, "id");
+    return typeof id === "number" && Number.isInteger(id) ? String(id) : null;
+}
+function stringOf(data, key) {
+    const value = field(data, key);
+    return typeof value === "string" ? value : "";
+}
+/** Trailing slash off, so every path below can start with one. */
+function base(apiBase) {
+    return apiBase.replace(/\/+$/, "");
+}
+function github(config) {
+    const headers = {
+        Accept: "application/vnd.github+json",
+        "User-Agent": USER_AGENT,
+    };
+    if (config.token)
+        headers.Authorization = `Bearer ${config.token}`;
+    const api = base(config.apiBase);
+    return {
+        async namespaceIdentity(namespace) {
+            const { status, data } = await requestJson(`${api}/users/${encodeURIComponent(namespace)}`, headers);
+            if (status !== 200)
+                return null;
+            const id = idOf(data);
+            if (id === null)
+                return null;
+            return {
+                kind: stringOf(data, "type") === "Organization" ? "org" : "user",
+                id,
+                path: stringOf(data, "login"),
+            };
+        },
+        async isMember(namespace, author) {
+            // Public membership only — GitHub does not disclose private membership to
+            // a token that is not itself an org member.
+            const { status } = await requestJson(`${api}/orgs/${encodeURIComponent(namespace)}/public_members/${encodeURIComponent(author.login)}`, headers);
+            return status === 204;
+        },
+    };
+}
+function gitlab(config) {
+    const headers = { "User-Agent": USER_AGENT };
+    if (config.token)
+        headers["PRIVATE-TOKEN"] = config.token;
+    const api = base(config.apiBase);
+    const minAccess = config.minAccessLevel ?? 30;
+    return {
+        async namespaceIdentity(namespace) {
+            const group = await requestJson(`${api}/namespaces/${encodeURIComponent(namespace)}`, headers);
+            if (group.status === 200 && field(group.data, "kind") !== "user") {
+                const id = idOf(group.data);
+                if (id !== null) {
+                    return { kind: "group", id, path: stringOf(group.data, "full_path") };
+                }
+            }
+            // `/namespaces` is membership-scoped, so a bot token cannot see foreign
+            // user namespaces. The public `/users` lookup also carries the USER id,
+            // which is what grim stamps into `owner.id` (a user namespace's own id is
+            // invisible to anyone but its owner).
+            const users = await requestJson(`${api}/users?username=${encodeURIComponent(namespace)}`, headers);
+            if (users.status !== 200 || !Array.isArray(users.data))
+                return null;
+            const hits = users.data.filter((user) => stringOf(user, "username").toLowerCase() === namespace.toLowerCase());
+            if (hits.length !== 1)
+                return null;
+            const id = idOf(hits[0]);
+            if (id === null)
+                return null;
+            return { kind: "user", id, path: stringOf(hits[0], "username") };
+        },
+        async isMember(namespace, author) {
+            if (!/^\d+$/.test(author.id))
+                return false;
+            // `/members/all/` includes inherited membership: a parent-group member
+            // owns subgroup namespaces too.
+            const { status, data } = await requestJson(`${api}/groups/${encodeURIComponent(namespace)}/members/all/${author.id}`, headers);
+            const level = field(data, "access_level");
+            return status === 200 && typeof level === "number" && level >= minAccess;
+        },
+    };
+}
+export function createForge(forge, config) {
+    return forge === "github" ? github(config) : gitlab(config);
+}
+//# sourceMappingURL=forge.js.map

package/dist/validate/adapters/forge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.js","sourceRoot":"","sources":["../../../src/validate/adapters/forge.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA4BpD,SAAS,KAAK,CAAC,IAAa,EAAE,GAAW;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,OAAQ,IAAgC,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,GAAW;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,kEAAkE;AAClE,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB;IACjC,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,6BAA6B;QACrC,YAAY,EAAE,UAAU;KACzB,CAAC;IACF,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEjC,OAAO;QACL,KAAK,CAAC,iBAAiB,CAAC,SAAS;YAC/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CACxC,GAAG,GAAG,UAAU,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAC/C,OAAO,CACR,CAAC;YACF,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBAChE,EAAE;gBACF,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;aAC9B,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM;YAC9B,0EAA0E;YAC1E,4CAA4C;YAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAClC,GAAG,GAAG,SAAS,kBAAkB,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACjG,OAAO,CACR,CAAC;YACF,OAAO,MAAM,KAAK,GAAG,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB;IACjC,MAAM,OAAO,GAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;IAE9C,OAAO;QACL,KAAK,CAAC,iBAAiB,CAAC,SAAS;YAC/B,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,GAAG,GAAG,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACpD,OAAO,CACR,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;gBACjE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBACxE,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,wEAAwE;YACxE,0EAA0E;YAC1E,sCAAsC;YACtC,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,GAAG,GAAG,mBAAmB,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACxD,OAAO,CACR,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAC5B,CAAC,IAAI,EAAE,EAAE,CACP,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CACvE,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM;YAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3C,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CACxC,GAAG,GAAG,WAAW,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,MAAM,CAAC,EAAE,EAAE,EACzE,OAAO,CACR,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC1C,OAAO,MAAM,KAAK,GAAG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,SAAS,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAA0B,EAC1B,MAAmB;IAEnB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC"}

package/dist/validate/adapters/http.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The one HTTP call site. Node 22's global `fetch`, no HTTP dependency.
+ *
+ * Bounded on every axis a hostile endpoint controls: a wall-clock timeout, a
+ * response-size cap enforced while streaming, and no redirect following — a
+ * `Location` under someone else's control is an SSRF pivot past the host
+ * policy that was checked before the call.
+ */
+export declare const USER_AGENT = "grim-indexer-bot";
+export declare const TIMEOUT_MS = 30000;
+export declare const MAX_RESPONSE_BYTES: number;
+export interface HttpResponse {
+    /** HTTP status, or 0 when the request never completed. */
+    status: number;
+    body: string;
+    header(name: string): string;
+}
+export declare function request(url: string, headers?: Record<string, string>): Promise<HttpResponse>;
+/** `request` plus a `JSON.parse` that yields `null` instead of throwing. */
+export declare function requestJson(url: string, headers?: Record<string, string>): Promise<{
+    status: number;
+    data: unknown;
+}>;
+//# sourceMappingURL=http.d.ts.map

package/dist/validate/adapters/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/validate/adapters/http.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AAEH,eAAO,MAAM,UAAU,qBAAqB,CAAC;AAC7C,eAAO,MAAM,UAAU,QAAS,CAAC;AACjC,eAAO,MAAM,kBAAkB,QAAc,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AA4BD,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,OAAO,CAAC,YAAY,CAAC,CAoBvB;AAED,4EAA4E;AAC5E,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAQ5C"}

package/dist/validate/adapters/http.js

@@ -0,0 +1,75 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * The one HTTP call site. Node 22's global `fetch`, no HTTP dependency.
+ *
+ * Bounded on every axis a hostile endpoint controls: a wall-clock timeout, a
+ * response-size cap enforced while streaming, and no redirect following — a
+ * `Location` under someone else's control is an SSRF pivot past the host
+ * policy that was checked before the call.
+ */
+export const USER_AGENT = "grim-indexer-bot";
+export const TIMEOUT_MS = 30_000;
+export const MAX_RESPONSE_BYTES = 1024 * 1024;
+async function readCapped(response, cap) {
+    if (!response.body)
+        return "";
+    const reader = response.body.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            size += value.byteLength;
+            if (size > cap) {
+                await reader.cancel();
+                return null;
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+export async function request(url, headers = {}) {
+    const none = { status: 0, body: "", header: () => "" };
+    try {
+        const response = await fetch(url, {
+            headers: { "User-Agent": USER_AGENT, ...headers },
+            // ponytail: redirects are refused, not followed. If a real registry ever
+            // needs one, re-run the host policy on the Location and follow one hop.
+            redirect: "manual",
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+        const body = await readCapped(response, MAX_RESPONSE_BYTES);
+        if (body === null)
+            return none;
+        return {
+            status: response.status,
+            body,
+            header: (name) => response.headers.get(name) ?? "",
+        };
+    }
+    catch {
+        return none;
+    }
+}
+/** `request` plus a `JSON.parse` that yields `null` instead of throwing. */
+export async function requestJson(url, headers = {}) {
+    const response = await request(url, headers);
+    if (response.body === "")
+        return { status: response.status, data: null };
+    try {
+        return { status: response.status, data: JSON.parse(response.body) };
+    }
+    catch {
+        return { status: response.status, data: null };
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/validate/adapters/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/validate/adapters/http.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AACjC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AAS9C,KAAK,UAAU,UAAU,CACvB,QAAkB,EAClB,GAAW;IAEX,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE;YACjD,yEAAyE;YACzE,wEAAwE;YACxE,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI;YACJ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;SACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;AACH,CAAC"}

package/dist/validate/adapters/registry.d.ts

@@ -0,0 +1,16 @@
+export interface RegistryConfig {
+    /** `user:token` for registries that do not serve anonymous pull tokens. */
+    auth?: string;
+    /** Committed registry-host allowlist; also bounds where credentials go. */
+    allowlist?: readonly string[];
+}
+interface TokenRequest {
+    url: string;
+    /** May the configured credential be sent to this realm? */
+    credentialed: boolean;
+}
+export declare function tokenRequest(challenge: string, registryHost: string, repository: string, allowlist?: readonly string[]): TokenRequest | null;
+/** True when `<host>/v2/<repository>/tags/list` lists at least one tag. */
+export declare function refReachable(host: string, repository: string, config?: RegistryConfig): Promise<boolean>;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/validate/adapters/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/validate/adapters/registry.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAOD,UAAU,YAAY;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAC5B,YAAY,GAAG,IAAI,CAuBrB;AA0BD,2EAA2E;AAC3E,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,cAAmB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAsBlB"}