@hawkeyexl/manni 2.2.0 → 2.3.0

package/dist/{chunk-5O4FIGDJ.js → chunk-UCLMW3RE.js}

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // package.json
 var package_default = {
   name: "@hawkeyexl/manni",
-  version: "2.2.0",
+  version: "2.3.0",
   description: "One command line for documentation that is meant to be checked. `manni meta` validates the presence and format of document metadata (Markdown frontmatter and more) against JSON Schema, built for CI. Formerly docmeta.",
   type: "module",
   bin: {
@@ -93,6 +93,7 @@ var package_default = {
     "ajv-formats": "^3.0.1",
     commander: "^15.0.0",
     "fast-glob": "^3.3.2",
+    "github-slugger": "^2.0.0",
     parse5: "^8.0.1",
     picocolors: "^1.1.1",
     picomatch: "^4.0.7",
@@ -1063,7 +1064,6 @@ function verify(flavor, inner, merged, patch, deletions = []) {
 var markdownExtractor = {
   name: "markdown",
   extensions: [".md", ".markdown"],
-  implemented: true,
   extract: (content) => extractFrontmatter(content, "markdown"),
   apply: (content, patch, options) => applyFrontmatter(content, patch, options)
 };
@@ -1072,7 +1072,6 @@ var markdownExtractor = {
 var mdxExtractor = {
   name: "mdx",
   extensions: [".mdx"],
-  implemented: true,
   extract: (content) => extractFrontmatter(content, "mdx"),
   apply: (content, patch, options) => applyFrontmatter(content, patch, options)
 };
@@ -1132,7 +1131,6 @@ function extractHeader(content, lineOffset = 0) {
 var asciidocExtractor = {
   name: "asciidoc",
   extensions: [".adoc", ".asciidoc"],
-  implemented: true,
   apply: (content, patch, options) => applyFencedOnly(content, patch, options, "asciidoc"),
   extract(content) {
     if (hasFrontmatterFence(content)) {
@@ -1218,7 +1216,6 @@ function extractDocinfo(content) {
 var rstExtractor = {
   name: "rst",
   extensions: [".rst"],
-  implemented: true,
   apply: (content, patch, options) => applyFencedOnly(content, patch, options, "rst"),
   extract(content) {
     if (hasFrontmatterFence(content)) {
@@ -2351,7 +2348,6 @@ var xmlExtractor = {
   // DITA topics and maps are XML, and their metadata lives on the root element
   // (`id`, `type`, `xml:lang`, …), so they need no extractor of their own.
   extensions: [".xml", ".dita", ".ditamap"],
-  implemented: true,
   extract(content, filePath, options) {
     return toExtracted(readXml(content, filePath, options));
   },
@@ -2675,7 +2671,6 @@ function verify3(next, before, patch, moved, options) {
 var htmlExtractor = {
   name: "html",
   extensions: [".html", ".htm"],
-  implemented: true,
   extract(content, _filePath, options) {
     const { data, lineMap, colMap } = readHtml(content, options);
     return {
@@ -2705,20 +2700,18 @@ for (const ex of EXTRACTORS) {
   for (const ext of ex.extensions) byExtension.set(ext.toLowerCase(), ex);
 }
 function extractorForExtension(ext) {
-  const ex = byExtension.get(ext.toLowerCase());
-  return ex?.implemented ? ex : void 0;
+  return byExtension.get(ext.toLowerCase());
 }
 function extractorByName(name2) {
   return byName.get(name2.toLowerCase());
 }
 function supportedExtensions() {
-  return EXTRACTORS.filter((e) => e.implemented).flatMap((e) => e.extensions);
+  return EXTRACTORS.flatMap((e) => e.extensions);
 }
 function listFormats() {
   return EXTRACTORS.map((e) => ({
     name: e.name,
     extensions: e.extensions,
-    implemented: e.implemented,
     // Writability is the presence of the optional `apply` method, so a format
     // never has to declare it twice and the two can't drift apart.
     writable: typeof e.apply === "function"
@@ -2733,8 +2726,8 @@ var RENAME_ATTEMPTS = 3;
 function errorCode(err) {
   return typeof err === "object" && err !== null && "code" in err ? String(err.code) : void 0;
 }
-var wait = (ms) => new Promise((resolve20) => {
-  setTimeout(resolve20, ms);
+var wait = (ms) => new Promise((resolve21) => {
+  setTimeout(resolve21, ms);
 });
 async function writeFileAtomic(path, contents) {
   const tmp = join(
@@ -5287,8 +5280,8 @@ var SCHEMA_KEYS = [
   "multipleOf"
 ];
 var RETRY_DELAY_MS = 500;
-var wait2 = (ms) => new Promise((resolve20) => {
-  setTimeout(resolve20, ms);
+var wait2 = (ms) => new Promise((resolve21) => {
+  setTimeout(resolve21, ms);
 });
 var RetryableFetchError = class extends DocmetaError {
 };
@@ -5792,12 +5785,12 @@ function isPlainObject(v) {
 }
 
 // src/meta/core/config.ts
-import { resolve as resolve4 } from "node:path";
+import { resolve as resolve5 } from "node:path";
 import { parse as parseYaml2 } from "yaml";
 
 // src/shared/config-file.ts
 import { readFile as readFile3 } from "node:fs/promises";
-import { basename as basename2, dirname as dirname3, join as join4, relative as relative2, resolve as resolve3 } from "node:path";
+import { basename as basename2, dirname as dirname3, join as join4, relative as relative2, resolve as resolve4 } from "node:path";
 import { parse as parseYaml } from "yaml";
 
 // src/shared/encryption.ts
@@ -5953,6 +5946,55 @@ function searchPath(cwd) {
   }
 }
 
+// src/shared/tools.ts
+import { isAbsolute as isAbsolute2, resolve as resolve3 } from "node:path";
+var TOOL_KEYS = ["vale"];
+var VALE_KEYS = ["config"];
+function isMapping2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function rejectUnknownKeys2(raw, allowed, where, source, toError) {
+  for (const key of Object.keys(raw)) {
+    if (!allowed.includes(key)) {
+      throw toError(
+        `${source}: ${where} has unknown key "${key}". Supported keys: ${allowed.join(", ")}.`
+      );
+    }
+  }
+}
+function parseTools(raw, source, toError) {
+  if (raw === null || raw === void 0) return {};
+  if (!isMapping2(raw)) {
+    throw toError(`${source}: "tools" must be a mapping.`);
+  }
+  rejectUnknownKeys2(raw, TOOL_KEYS, "tools", source, toError);
+  const tools = {};
+  if (Object.hasOwn(raw, "vale")) {
+    tools.vale = parseVale(raw["vale"], source, toError);
+  }
+  return tools;
+}
+function parseVale(raw, source, toError) {
+  if (!isMapping2(raw)) {
+    throw toError(`${source}: tools.vale must be a mapping.`);
+  }
+  rejectUnknownKeys2(raw, VALE_KEYS, "tools.vale", source, toError);
+  const vale = {};
+  if (Object.hasOwn(raw, "config")) {
+    const config = raw["config"];
+    if (typeof config !== "string" || config.trim() === "") {
+      throw toError(`${source}: tools.vale.config must be a non-empty string.`);
+    }
+    vale.config = config;
+  }
+  return vale;
+}
+function valeConfigPath(tools, configDir) {
+  const config = tools.vale?.config;
+  if (config === void 0) return void 0;
+  return isAbsolute2(config) ? config : resolve3(configDir, config);
+}
+
 // src/shared/warn.ts
 var said = /* @__PURE__ */ new Set();
 function warn(message) {
@@ -6000,7 +6042,8 @@ function parseMapping(text2, source, toError) {
   return raw;
 }
 var COLLECTIONS_KEY = "collections";
-var FAMILY_KEYS = [COLLECTIONS_KEY, ENCRYPTION_KEY_FIELD];
+var TOOLS_KEY = "tools";
+var FAMILY_KEYS = [COLLECTIONS_KEY, TOOLS_KEY, ENCRYPTION_KEY_FIELD];
 function slice(document, opts) {
   const { doc } = document;
   if (doc !== null && Object.hasOwn(doc, opts.section)) {
@@ -6016,6 +6059,11 @@ function collectionsOf(document, source, toError) {
   if (doc === null || !Object.hasOwn(doc, COLLECTIONS_KEY)) return [];
   return parseCollections(doc[COLLECTIONS_KEY], source, toError);
 }
+function toolsOf(document, source, toError) {
+  const { doc } = document;
+  if (doc === null || !Object.hasOwn(doc, TOOLS_KEY)) return {};
+  return parseTools(doc[TOOLS_KEY], source, toError);
+}
 function encryptionKeyOf(document, source, toError) {
   const { doc } = document;
   if (doc === null) return {};
@@ -6059,7 +6107,7 @@ var FAMILY_FILES = [
   { names: MOOSE_CONFIG_NAMES, kind: "moose" }
 ];
 async function findConfigFile(cwd, opts) {
-  const start = resolve3(cwd);
+  const start = resolve4(cwd);
   for (const dir of searchPath(start)) {
     for (const { names, kind } of FAMILY_FILES) {
       for (const name2 of names) {
@@ -6077,6 +6125,7 @@ async function findConfigFile(cwd, opts) {
           text: document.text,
           kind,
           collections: collectionsOf(document, source, opts.toError),
+          tools: toolsOf(document, source, opts.toError),
           ...encryptionKeyOf(document, source, opts.toError),
           ...found
         };
@@ -6088,7 +6137,7 @@ async function findConfigFile(cwd, opts) {
       const document = await readDocument(path, source, opts.toError);
       if (document === null) continue;
       warn(
-        `"${name2}" is a deprecated config file name and will stop being read in a future major version. Move its keys under \`${opts.section}:\` in "${FAMILY_CONFIG_NAMES[0] ?? "manni.config.yaml"}", and its paths, exclude and sidecars keys to a top-level collections: list, where sidecars becomes externalMetadata.`
+        `"${name2}" is a deprecated config file name. Move its keys under \`${opts.section}:\` in "${FAMILY_CONFIG_NAMES[0] ?? "manni.config.yaml"}", and its paths, exclude and sidecars keys to a top-level collections: list, where sidecars becomes externalMetadata.`
       );
       return {
         path,
@@ -6098,14 +6147,15 @@ async function findConfigFile(cwd, opts) {
         value: document.doc,
         wrapped: false,
         kind: "legacy",
-        collections: []
+        collections: [],
+        tools: {}
       };
     }
   }
   return null;
 }
 async function readConfigFile(explicitPath, cwd, opts) {
-  const path = resolve3(cwd, explicitPath);
+  const path = resolve4(cwd, explicitPath);
   const document = await readDocument(path, explicitPath, opts.toError);
   if (document === null) {
     throw opts.toError(`Config file not found: "${explicitPath}".`);
@@ -6121,6 +6171,7 @@ async function readConfigFile(explicitPath, cwd, opts) {
     text: document.text,
     kind: "explicit",
     collections: collectionsOf(document, explicitPath, opts.toError),
+    tools: toolsOf(document, explicitPath, opts.toError),
     // An unwrapped document carries no family key (else it would be wrapped),
     // so this only ever reads a family file's key.
     ...encryptionKeyOf(document, explicitPath, opts.toError),
@@ -6128,7 +6179,7 @@ async function readConfigFile(explicitPath, cwd, opts) {
   };
 }
 async function findFamilyConfigFile(cwd, toError) {
-  const start = resolve3(cwd);
+  const start = resolve4(cwd);
   for (const dir of searchPath(start)) {
     for (const { names, kind } of FAMILY_FILES) {
       for (const name2 of names) {
@@ -6146,6 +6197,7 @@ async function findFamilyConfigFile(cwd, toError) {
           wrapped: true,
           kind,
           collections: collectionsOf(document, source, toError),
+          tools: toolsOf(document, source, toError),
           ...tolerantKeysOf(document)
         };
       }
@@ -6154,7 +6206,7 @@ async function findFamilyConfigFile(cwd, toError) {
   return null;
 }
 async function readFamilyConfigFile(explicitPath, cwd, toError) {
-  const path = resolve3(cwd, explicitPath);
+  const path = resolve4(cwd, explicitPath);
   const document = await readDocument(path, explicitPath, toError);
   if (document === null) {
     throw toError(`Config file not found: "${explicitPath}".`);
@@ -6171,6 +6223,7 @@ async function readFamilyConfigFile(explicitPath, cwd, toError) {
     wrapped: family,
     kind: "explicit",
     collections: collectionsOf(document, explicitPath, toError),
+    tools: toolsOf(document, explicitPath, toError),
     ...tolerantKeysOf(document)
   };
 }
@@ -6239,7 +6292,7 @@ var CONFIG_KEYS = [
   "fill",
   "elements"
 ];
-function rejectUnknownKeys2(raw, allowed, where, source) {
+function rejectUnknownKeys3(raw, allowed, where, source) {
   for (const key of Object.keys(raw)) {
     if (!allowed.includes(key)) {
       throw new DocmetaError(
@@ -6309,7 +6362,7 @@ function parseSchemaEntry(entry, where, source) {
     );
   }
   const raw = entry;
-  rejectUnknownKeys2(raw, SCHEMA_ENTRY_KEYS, where, source);
+  rejectUnknownKeys3(raw, SCHEMA_ENTRY_KEYS, where, source);
   if (typeof raw.ref !== "string" || raw.ref.trim() === "") {
     throw new DocmetaError(
       `${source}: ${where}.ref must be a non-empty schema reference string.`
@@ -6462,7 +6515,7 @@ function parseDerive(raw, source) {
     );
   }
   const e = raw;
-  rejectUnknownKeys2(e, DERIVE_KEYS, '"derive"', source);
+  rejectUnknownKeys3(e, DERIVE_KEYS, '"derive"', source);
   if (e.fields === void 0 && e.sources === void 0 && e.codeowners === void 0 && e.commands === void 0 && e.machines === void 0) {
     throw new DocmetaError(
       `${source}: "derive" sets nothing. Give it \`fields:\` to manage, \`commands:\` to derive from a command, or \`sources:\`, \`codeowners:\` or \`machines:\` to shape the reads.`
@@ -6569,7 +6622,7 @@ function parseDeriveCommands(raw, source) {
       );
     }
     const c = value;
-    rejectUnknownKeys2(c, DERIVE_COMMAND_KEYS, where, source);
+    rejectUnknownKeys3(c, DERIVE_COMMAND_KEYS, where, source);
     if (!Array.isArray(c.run) || c.run.length === 0) {
       throw new DocmetaError(
         `${source}: ${where}.run must be a non-empty list of strings, the program first.`
@@ -6601,7 +6654,7 @@ function parseConfigDocument(raw, source) {
     throw new DocmetaError(`${source}: top level must be a mapping.`);
   }
   const obj = raw;
-  rejectUnknownKeys2(obj, CONFIG_KEYS, "the top level", source);
+  rejectUnknownKeys3(obj, CONFIG_KEYS, "the top level", source);
   const config = {};
   if (obj.schemas !== void 0)
     config.schemas = asSchemaList(obj.schemas, "schemas", source);
@@ -6614,7 +6667,7 @@ function parseConfigDocument(raw, source) {
         throw new DocmetaError(`${source}: overrides[${i}] must be a mapping.`);
       }
       const e = entry;
-      rejectUnknownKeys2(e, OVERRIDE_KEYS, `overrides[${i}]`, source);
+      rejectUnknownKeys3(e, OVERRIDE_KEYS, `overrides[${i}]`, source);
       const hasFiles = e.files !== void 0;
       const hasCollection = e.collection !== void 0;
       if (hasFiles === hasCollection) {
@@ -6703,7 +6756,7 @@ function parseChecks(value, source) {
       );
     }
     const e = entry;
-    rejectUnknownKeys2(e, CHECK_KEYS, `checks[${i}]`, source);
+    rejectUnknownKeys3(e, CHECK_KEYS, `checks[${i}]`, source);
     if (typeof e.name !== "string" || e.name === "") {
       throw new DocmetaError(
         `${source}: checks[${i}].name must be a non-empty string.`
@@ -6739,7 +6792,7 @@ function parseSchemaCache(value, source) {
     throw new DocmetaError(`${source}: "schemaCache" must be a mapping.`);
   }
   const raw = value;
-  rejectUnknownKeys2(raw, SCHEMA_CACHE_KEYS, '"schemaCache"', source);
+  rejectUnknownKeys3(raw, SCHEMA_CACHE_KEYS, '"schemaCache"', source);
   const schemaCache = {};
   const ttl = raw.ttlHours;
   if (ttl !== void 0) {
@@ -6759,7 +6812,7 @@ function parseSchemaTrust(value, source) {
     );
   }
   const raw = value;
-  rejectUnknownKeys2(raw, SCHEMA_TRUST_KEYS, '"schemaTrust"', source);
+  rejectUnknownKeys3(raw, SCHEMA_TRUST_KEYS, '"schemaTrust"', source);
   const schemaTrust = {};
   const mode = raw.documentRefs;
   if (mode !== void 0) {
@@ -6786,7 +6839,7 @@ function parseFill(value, source) {
     throw new DocmetaError(`${source}: "fill" must be a mapping.`);
   }
   const raw = value;
-  rejectUnknownKeys2(raw, FILL_KEYS, '"fill"', source);
+  rejectUnknownKeys3(raw, FILL_KEYS, '"fill"', source);
   const fill = {};
   const asString = (key) => {
     const v = raw[key];
@@ -6822,8 +6875,8 @@ function parseFill(value, source) {
 function schemaTrustRoot(cwd, configDir) {
   const git2 = findGitRoot(cwd);
   if (git2 !== null) return { dir: git2, source: "git" };
-  if (configDir !== void 0) return { dir: resolve4(configDir), source: "config" };
-  return { dir: resolve4(cwd), source: "cwd" };
+  if (configDir !== void 0) return { dir: resolve5(configDir), source: "config" };
+  return { dir: resolve5(cwd), source: "cwd" };
 }
 async function loadConfig(explicitPath, cwd = process.cwd()) {
   const file = explicitPath ? await readConfigFile(explicitPath, cwd, CONFIG_FILE) : await findConfigFile(cwd, CONFIG_FILE);
@@ -6887,23 +6940,23 @@ async function resolveRunConfig(opts) {
 }
 
 // src/meta/reporters/sarif.ts
-import { isAbsolute as isAbsolute2 } from "node:path";
+import { isAbsolute as isAbsolute3 } from "node:path";
 
 // src/meta/core/baseline.ts
 import { createHash as createHash3 } from "node:crypto";
 import { existsSync as existsSync2 } from "node:fs";
 import { readFile as readFile4 } from "node:fs/promises";
-import { relative as relative5, resolve as resolve7 } from "node:path";
+import { relative as relative5, resolve as resolve8 } from "node:path";
 
 // src/meta/core/load-files.ts
 import { stat as stat3 } from "node:fs/promises";
-import { extname, relative as relative4, resolve as resolve6 } from "node:path";
+import { extname, relative as relative4, resolve as resolve7 } from "node:path";
 import fg from "fast-glob";
 import picomatch3 from "picomatch";
 
 // src/meta/core/gitignore.ts
 import { spawn } from "node:child_process";
-import { dirname as dirname4, relative as relative3, resolve as resolve5, sep } from "node:path";
+import { dirname as dirname4, relative as relative3, resolve as resolve6, sep } from "node:path";
 var GITIGNORE_UNAVAILABLE = ".gitignore filtering was requested but git could not answer here (no repository, or no git on PATH); no files were skipped.";
 var unavailable = () => ({
   ignored: /* @__PURE__ */ new Set(),
@@ -6917,7 +6970,7 @@ async function gitIgnored(paths, cwd) {
   const byRoot = /* @__PURE__ */ new Map();
   let inSomeRepo = false;
   for (const spelled of paths) {
-    const abs = resolve5(cwd, spelled);
+    const abs = resolve6(cwd, spelled);
     const dir = dirname4(abs);
     let root = rootOf.get(dir);
     if (root === void 0) {
@@ -7029,7 +7082,7 @@ async function resolveTargetSet(opts) {
   for (const input of opts.inputs) {
     if (input === STDIN_TOKEN) continue;
     const posixInput = toPosix(input);
-    const abs = resolve6(cwd, posixInput);
+    const abs = resolve7(cwd, posixInput);
     const st = await statOrNull(abs);
     if (st?.isFile()) {
       named.add(toPosix(relative4(cwd, abs)));
@@ -7077,7 +7130,8 @@ async function resolveTargetSet(opts) {
   }
   return {
     files: [.../* @__PURE__ */ new Set([...named, ...walked])].sort(),
-    gitignoreSkipped
+    gitignoreSkipped,
+    named: [...named].sort()
   };
 }
 function assertNonEmpty(p) {
@@ -7113,12 +7167,12 @@ var FINGERPRINT_RE = /^[0-9a-f]{16}$/;
 function canonicalFilePath(file, ctx) {
   if (!ctx) return file;
   const from = ctx.runBase ?? ctx.base;
-  return relative5(ctx.base, resolve7(from, file)).replace(/\\/g, "/");
+  return relative5(ctx.base, resolve8(from, file)).replace(/\\/g, "/");
 }
 function canonicalSchemaRef(ref, ctx) {
   if (!ctx) return ref;
   if (classifyRef(ref).kind !== "file") return ref;
-  const abs = resolve7(ctx.cwd, ref);
+  const abs = resolve8(ctx.cwd, ref);
   return relative5(ctx.base, abs).replace(/\\/g, "/");
 }
 function fingerprint(e, ctx) {
@@ -7276,17 +7330,17 @@ function countFingerprints(baseline) {
 }
 function resolveBaselineRequest(opts, configured, configDir, cwd, defaults) {
   const named = (label) => ({
-    absPath: resolve7(cwd, label),
+    absPath: resolve8(cwd, label),
     label
   });
   const implied = () => {
     const base = configDir ?? cwd;
     if (configured !== void 0) {
-      return { absPath: resolve7(base, configured), label: configured };
+      return { absPath: resolve8(base, configured), label: configured };
     }
-    const current = resolve7(base, defaults.current);
+    const current = resolve8(base, defaults.current);
     if (defaults.legacy !== void 0) {
-      const legacy = resolve7(base, defaults.legacy);
+      const legacy = resolve8(base, defaults.legacy);
       if (!existsSync2(current) && existsSync2(legacy)) {
         warn(
           `"${defaults.legacy}" is the pre-rename baseline file name. Rename it to "${defaults.current}".`
@@ -7399,7 +7453,7 @@ function uriFrame(frame) {
 }
 function artifactUri(file, frame) {
   const uri = canonicalFilePath(file, frame);
-  if (uri === "" || uri.startsWith("../") || isAbsolute2(uri)) return null;
+  if (uri === "" || uri.startsWith("../") || isAbsolute3(uri)) return null;
   return uri;
 }
 function renderSarif(results, opts = {}) {
@@ -7793,7 +7847,7 @@ async function readCapped(url, res, maxBytes) {
 
 // src/meta/core/external-metadata.ts
 import { readFile as readFile6 } from "node:fs/promises";
-import { isAbsolute as isAbsolute3, relative as relative7, resolve as resolve9, sep as sep2 } from "node:path";
+import { isAbsolute as isAbsolute4, relative as relative7, resolve as resolve10, sep as sep2 } from "node:path";
 import {
   LineCounter as LineCounter2,
   isMap as isMap4,
@@ -7806,7 +7860,7 @@ import {
 // src/shared/encryption-key.ts
 import { spawnSync } from "node:child_process";
 import { readFile as readFile5 } from "node:fs/promises";
-import { basename as basename4, dirname as dirname6, join as join6, relative as relative6, resolve as resolve8 } from "node:path";
+import { basename as basename4, dirname as dirname6, join as join6, relative as relative6, resolve as resolve9 } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { isMap as isMap3, parseDocument as parseDocument3, parse as parseYaml3, stringify } from "yaml";
 
@@ -7818,8 +7872,8 @@ var RENAME_ATTEMPTS2 = 3;
 function errorCode2(err) {
   return typeof err === "object" && err !== null && "code" in err ? String(err.code) : void 0;
 }
-var wait3 = (ms) => new Promise((resolve20) => {
-  setTimeout(resolve20, ms);
+var wait3 = (ms) => new Promise((resolve21) => {
+  setTimeout(resolve21, ms);
 });
 async function writeTextAtomic(path, text2) {
   const tmp = join5(
@@ -7868,7 +7922,7 @@ function resolveEncryptionKey(opts) {
   return { key: void 0, source: "none" };
 }
 function relativeSource2(cwd, path) {
-  return relative6(resolve8(cwd), path).replace(/\\/g, "/");
+  return relative6(resolve9(cwd), path).replace(/\\/g, "/");
 }
 function errorCode3(err) {
   return typeof err === "object" && err !== null && "code" in err ? String(err.code) : void 0;
@@ -7891,7 +7945,7 @@ async function fileTarget(file, toError) {
   return { path: file.path, source: file.source, text: text2 ?? file.text };
 }
 async function defaultTarget(cwd) {
-  const root = findGitRoot(cwd) ?? resolve8(cwd);
+  const root = findGitRoot(cwd) ?? resolve9(cwd);
   for (const name2 of [...FAMILY_CONFIG_NAMES, ...MOOSE_CONFIG_NAMES]) {
     const path2 = join6(root, name2);
     const text2 = await readIfPresent(path2);
@@ -7914,20 +7968,20 @@ function withKey(text2, key, previous, source, toError) {
   if (previous === null) doc.delete(ENCRYPTION_KEY_PREVIOUS_FIELD);
   return doc.toString();
 }
-function isMapping2(value) {
+function isMapping3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function verify4(before, after, key, previous, source, toError) {
   const old = before === null ? null : parseYaml3(before);
   const expected = Object.fromEntries(
     Object.entries({
-      ...isMapping2(old) ? old : {},
+      ...isMapping3(old) ? old : {},
       [ENCRYPTION_KEY_FIELD]: key,
       ...typeof previous === "string" ? { [ENCRYPTION_KEY_PREVIOUS_FIELD]: previous } : {}
     }).filter(([name2]) => previous !== null || name2 !== ENCRYPTION_KEY_PREVIOUS_FIELD)
   );
   const reread = parseYaml3(after);
-  if (!isMapping2(reread) || !isDeepStrictEqual(reread, expected)) {
+  if (!isMapping3(reread) || !isDeepStrictEqual(reread, expected)) {
     throw toError(
       `Could not write ${ENCRYPTION_KEY_FIELD} to ${source}; add the key by hand.`
     );
@@ -8206,7 +8260,7 @@ async function loadExternalMetadata(collections, opts) {
         ...opts.env !== void 0 ? { env: opts.env } : {}
       });
     } else {
-      const abs = isAbsolute3(manifest.file) ? manifest.file : resolve9(opts.configDir, manifest.file);
+      const abs = isAbsolute4(manifest.file) ? manifest.file : resolve10(opts.configDir, manifest.file);
       file = reportedPath(abs, opts.base);
       text2 = await readManifest(abs, file);
     }
@@ -8288,7 +8342,7 @@ function parseManifest(manifest, collection, text2, file, configDir, join11, tar
         `Manifest ${where}: "${spelled}" must be a mapping of owned keys to values.`
       );
     }
-    const indexKey = join11 === PATH_JOIN ? resolve9(configDir, spelled) : spelled;
+    const indexKey = join11 === PATH_JOIN ? resolve10(configDir, spelled) : spelled;
     const values = target.get(indexKey) ?? /* @__PURE__ */ new Map();
     for (const kv of pair.value.items) {
       const key = isScalar2(kv.key) ? String(kv.key.value) : String(kv.key);
@@ -8366,7 +8420,7 @@ function mergeExternalMetadata(label, extracted, index, memberOf2, base, options
   const sources = [];
   const joins = [];
   if (label !== STDIN_LABEL) {
-    const byPath = index.byPath.get(resolve9(base, label));
+    const byPath = index.byPath.get(resolve10(base, label));
     if (byPath) sources.push(byPath);
   }
   for (const [field, byValue] of index.byField) {
@@ -8461,7 +8515,7 @@ function externalMetadataPointer(key) {
 }
 function orphanEntries(index, loaded, base, collections) {
   if (!index) return [];
-  const have = new Set(loaded.map((l) => resolve9(base, l)));
+  const have = new Set(loaded.map((l) => resolve10(base, l)));
   return index.entries.filter(
     (e) => inCollections(e, collections) && e.join === PATH_JOIN && e.abs !== void 0 && !have.has(e.abs)
   );
@@ -8496,7 +8550,7 @@ function isFieldLocation(value) {
 }
 
 // src/meta/core/collections.ts
-import { isAbsolute as isAbsolute4, relative as relative8, resolve as resolvePath2, sep as sep3 } from "node:path";
+import { isAbsolute as isAbsolute5, relative as relative8, resolve as resolvePath2, sep as sep3 } from "node:path";
 
 // src/meta/core/projection.ts
 var SYSTEM_COLUMNS = ["_path", "_format", "_present", "_data"];
@@ -8718,7 +8772,7 @@ function memberOf(collections, configDir, base, label) {
   if (collections.length === 0) return [];
   if (label === STDIN_LABEL) return [];
   const rel = relative8(configDir, resolvePath2(base, label)).split(sep3).join("/");
-  if (isAbsolute4(rel)) return [];
+  if (isAbsolute5(rel)) return [];
   return collections.filter((c) => isMember(c, rel)).map((c) => c.name);
 }
 function retainMembers(files, membersFor) {
@@ -9756,12 +9810,12 @@ function utcDate(iso) {
 }
 
 // src/meta/core/derive/index.ts
-import { dirname as dirname9, resolve as resolve11 } from "node:path";
+import { dirname as dirname9, resolve as resolve12 } from "node:path";
 
 // src/meta/core/derive/codeowners.ts
 import { existsSync as existsSync3 } from "node:fs";
 import { readFile as readFile7 } from "node:fs/promises";
-import { dirname as dirname7, relative as relative9, resolve as resolve10, sep as sep4 } from "node:path";
+import { dirname as dirname7, relative as relative9, resolve as resolve11, sep as sep4 } from "node:path";
 import picomatch4 from "picomatch";
 var CODEOWNERS_LOCATIONS = [
   ".github/CODEOWNERS",
@@ -9771,11 +9825,11 @@ var CODEOWNERS_LOCATIONS = [
 ];
 function findCodeowners(root, explicit) {
   if (explicit !== void 0) {
-    const path = resolve10(root, explicit);
+    const path = resolve11(root, explicit);
     return existsSync3(path) ? path : null;
   }
   for (const loc of CODEOWNERS_LOCATIONS) {
-    const path = resolve10(root, ...loc.split("/"));
+    const path = resolve11(root, ...loc.split("/"));
     if (existsSync3(path)) return path;
   }
   return null;
@@ -9890,7 +9944,7 @@ function toGlobs(pattern) {
 var NOT_FOUND_REASON = `no CODEOWNERS file found (looked for ${CODEOWNERS_LOCATIONS.join(", ")})`;
 async function deriveFromCodeowners(inputs, opts) {
   const records = /* @__PURE__ */ new Map();
-  const explicitPath = opts.explicit === void 0 ? void 0 : resolve10(opts.configDir ?? process.cwd(), opts.explicit);
+  const explicitPath = opts.explicit === void 0 ? void 0 : resolve11(opts.configDir ?? process.cwd(), opts.explicit);
   if (explicitPath !== void 0 && !existsSync3(explicitPath)) {
     return {
       status: { available: false, reason: `CODEOWNERS not found at ${explicitPath}` },
@@ -9972,7 +10026,7 @@ function toPosix2(p) {
 // src/meta/core/derive/git.ts
 import { constants as bufferConstants } from "node:buffer";
 import { spawn as spawn3 } from "node:child_process";
-import { dirname as dirname8, extname as extname2, isAbsolute as isAbsolute5, posix as posix2, relative as relative10, sep as sep5 } from "node:path";
+import { dirname as dirname8, extname as extname2, isAbsolute as isAbsolute6, posix as posix2, relative as relative10, sep as sep5 } from "node:path";
 import { parse as parseYaml4 } from "yaml";
 
 // src/shared/pin.ts
@@ -11071,7 +11125,7 @@ async function commitEvidence(run2, root, entry, blame, history, blobs, manifest
 }
 function insideRoot(root, abs) {
   const rel = relative10(root, abs);
-  if (rel === "" || rel.startsWith("..") || isAbsolute5(rel)) return void 0;
+  if (rel === "" || rel.startsWith("..") || isAbsolute6(rel)) return void 0;
   return rel.split(sep5).join("/");
 }
 function entryAt(entry, rel, relAtCommit) {
@@ -11399,7 +11453,7 @@ async function deriveReviewsByRoot(inputs, git2, rootFor, ctx, requested) {
   if (byRoot.size === 0) {
     return unavailable3(requested, "no git repository contains the documents");
   }
-  const cacheDir = resolve11(ctx.configDir ?? ctx.cwd, REVIEW_CACHE_DIR);
+  const cacheDir = resolve12(ctx.configDir ?? ctx.cwd, REVIEW_CACHE_DIR);
   for (const [root, bucket] of byRoot) {
     const client = ctx.reviews ?? await createReviewClient(root, { cwd: ctx.cwd, cache: ctx.cache, cacheDir, requested });
     const identity = await client.detect();
@@ -11581,7 +11635,7 @@ import { readFile as readFile9 } from "node:fs/promises";
 
 // src/meta/core/relocation.ts
 import { access, readFile as readFile8, stat as stat5, unlink } from "node:fs/promises";
-import { basename as basename5, extname as extname3, isAbsolute as isAbsolute6, join as join8, relative as relative11, resolve as resolve12, sep as sep6 } from "node:path";
+import { basename as basename5, extname as extname3, isAbsolute as isAbsolute7, join as join8, relative as relative11, resolve as resolve13, sep as sep6 } from "node:path";
 import picomatch6 from "picomatch";
 import {
   LineCounter as LineCounter4,
@@ -12115,7 +12169,7 @@ var Model = class {
     for (const c of this.collections) {
       c.externalMetadata.forEach((m, index) => {
         const url = classifyRef(m.file).kind === "url";
-        const absPath = url ? void 0 : isAbsolute6(m.file) ? m.file : resolve12(configDir, m.file);
+        const absPath = url ? void 0 : isAbsolute7(m.file) ? m.file : resolve13(configDir, m.file);
         this.manifests.push({
           collection: c.name,
           index,
@@ -12272,8 +12326,8 @@ var Model = class {
   /** A label relative to the config directory, posix; undefined outside it. */
   relative(label) {
     if (label === "<stdin>") return void 0;
-    const rel = toPosix3(relative11(this.configDir, resolve12(this.ctx.base, label)));
-    return isAbsolute6(rel) || rel.startsWith("../") ? void 0 : rel;
+    const rel = toPosix3(relative11(this.configDir, resolve13(this.ctx.base, label)));
+    return isAbsolute7(rel) || rel.startsWith("../") ? void 0 : rel;
   }
 };
 function dedupe2(xs) {
@@ -12287,13 +12341,13 @@ async function collectionPath(target, cwd, configDir) {
   const posix4 = target.replace(/\\/g, "/");
   const scanned = picomatch6.scan(posix4);
   if (scanned.isGlob) {
-    const rel2 = toPosix3(relative11(configDir, resolve12(cwd, scanned.base === "" ? "." : scanned.base)));
-    if (isAbsolute6(rel2) || rel2 === ".." || rel2.startsWith("../")) return void 0;
+    const rel2 = toPosix3(relative11(configDir, resolve13(cwd, scanned.base === "" ? "." : scanned.base)));
+    if (isAbsolute7(rel2) || rel2 === ".." || rel2.startsWith("../")) return void 0;
     return rel2 === "" ? scanned.glob : `${rel2}/${scanned.glob}`;
   }
-  const abs = resolve12(cwd, posix4);
+  const abs = resolve13(cwd, posix4);
   const rel = toPosix3(relative11(configDir, abs));
-  if (isAbsolute6(rel) || rel.startsWith("..")) return void 0;
+  if (isAbsolute7(rel) || rel.startsWith("..")) return void 0;
   let directory = posix4.endsWith("/");
   if (!directory) {
     try {
@@ -12315,7 +12369,7 @@ async function exists(absPath, file) {
   }
 }
 function plannedConfigDir(ctx) {
-  return ctx.configDir ?? findGitRoot(ctx.cwd) ?? resolve12(ctx.cwd);
+  return ctx.configDir ?? findGitRoot(ctx.cwd) ?? resolve13(ctx.cwd);
 }
 async function keyHome(ctx, label, data, key) {
   const model = new Model(ctx, plannedConfigDir(ctx));
@@ -12336,7 +12390,7 @@ async function keyHome(ctx, label, data, key) {
   return { kind: "unowned", home: (await model.home(label, false)).proposed };
 }
 function entryFor(m, label, data, configDir, base, key) {
-  if (m.join === PATH_JOIN) return toPosix3(relative11(configDir, resolve12(base, label)));
+  if (m.join === PATH_JOIN) return toPosix3(relative11(configDir, resolve13(base, label)));
   let raw = data[m.join];
   if (isEncryptedValue(raw)) {
     const k = key();
@@ -12377,7 +12431,7 @@ async function planRelocation(ctx, request) {
       if (beyond) return void 0;
       throw new DocmetaError(`Unsupported file type "${extname3(label)}" for "${label}". Use --as to override.`);
     }
-    const absPath = resolve12(ctx.base, label);
+    const absPath = resolve13(ctx.base, label);
     const elements = resolveElements(label, ctx.config, currentMembers(label));
     let content = "";
     let own2 = {};
@@ -12590,7 +12644,7 @@ async function planRelocation(ctx, request) {
     });
     const labels = dedupe2([
       ...request.files,
-      ...walked.files.map((f) => reported(resolve12(configDir, f), ctx.base))
+      ...walked.files.map((f) => reported(resolve13(configDir, f), ctx.base))
     ]).filter((label) => model.members(label).includes(name2));
     for (const label of labels) {
       const page = await load(label, !runSet.has(label));
@@ -13205,7 +13259,7 @@ function relocationOffers(plan) {
 }
 
 // src/meta/commands/validate.ts
-import { resolve as resolve14, extname as extname4 } from "node:path";
+import { resolve as resolve15, extname as extname4 } from "node:path";
 
 // src/meta/core/checks.ts
 var CHECK_KEYWORD = "check";
@@ -13343,7 +13397,7 @@ async function runChecks(checks, entries, ctx = {}) {
 }
 
 // src/meta/core/derive/provenance-place.ts
-import { isAbsolute as isAbsolute7, relative as relative12, resolve as resolve13, sep as sep7 } from "node:path";
+import { isAbsolute as isAbsolute8, relative as relative12, resolve as resolve14, sep as sep7 } from "node:path";
 var toPosix4 = (p) => p.split(sep7).join("/");
 function provenanceManifests(collections, configDir, base) {
   const out = [];
@@ -13355,7 +13409,7 @@ function provenanceManifests(collections, configDir, base) {
           `collection ${collection.name}: ${PROVENANCE_FIELD} cannot come from a URL manifest, because manni meta derive writes it.`
         );
       }
-      const absPath = isAbsolute7(manifest.file) ? manifest.file : resolve13(configDir, manifest.file);
+      const absPath = isAbsolute8(manifest.file) ? manifest.file : resolve14(configDir, manifest.file);
       const rel = relative12(base, absPath);
       out.push({
         collection: collection.name,
@@ -13379,7 +13433,7 @@ function provenancePlace(label, data, manifests, collections, configDir, base) {
     );
   }
   if (manifest.join === PATH_JOIN) {
-    const entry = toPosix4(relative12(configDir, resolve13(base, label)));
+    const entry = toPosix4(relative12(configDir, resolve14(base, label)));
     return { manifest, absPath: manifest.absPath, entry, join: manifest.join };
   }
   const value = data[manifest.join];
@@ -13643,7 +13697,7 @@ async function runValidate(opts) {
       const place = provenanceManifests2.length === 0 ? void 0 : readerPlace(label, extracted.data, provenanceManifests2, declaredCollections, configDir ?? cwd, base);
       deriveInputs.push({
         label,
-        absPath: resolve14(base, label),
+        absPath: resolve15(base, label),
         content,
         extracted,
         ...place !== void 0 ? { provenanceManifest: place } : {}
@@ -13774,7 +13828,7 @@ async function runValidate(opts) {
     await processOne(STDIN_LABEL, content, forcedExtractor.extensions[0] ?? "");
   }
   for (const file of files) {
-    const content = await readFile9(resolve14(base, file), "utf8");
+    const content = await readFile9(resolve15(base, file), "utf8");
     await processOne(file, content, extname4(file));
   }
   if (unverified > 0) opts.onNotice?.(unverifiedWarning(unverified));
@@ -13920,7 +13974,7 @@ async function runValidate(opts) {
 
 // src/meta/commands/get.ts
 import { readFile as readFile10 } from "node:fs/promises";
-import { resolve as resolve15, extname as extname5 } from "node:path";
+import { resolve as resolve16, extname as extname5 } from "node:path";
 async function runGet(opts) {
   const cwd = opts.cwd ?? process.cwd();
   if (opts.fields.length === 0) {
@@ -14006,7 +14060,7 @@ async function runGet(opts) {
         const place = provenanceManifests2.length === 0 ? void 0 : readerPlace(label, own2.data, provenanceManifests2, declaredCollections, configDir ?? cwd, base);
         deriveInputs.push({
           label,
-          absPath: resolve15(base, label),
+          absPath: resolve16(base, label),
           content,
           extracted: own2,
           ...place !== void 0 ? { provenanceManifest: place } : {}
@@ -14048,7 +14102,7 @@ async function runGet(opts) {
     readOne(STDIN_LABEL, opts.stdinContent ?? "", forced.extensions[0] ?? "");
   }
   for (const file of files) {
-    const content = await readFile10(resolve15(base, file), "utf8");
+    const content = await readFile10(resolve16(base, file), "utf8");
     readOne(file, content, extname5(file));
   }
   if (deriving) {
@@ -14175,7 +14229,7 @@ function parseJsonPointer(pointer) {
 // src/meta/commands/schemas.ts
 import { existsSync as existsSync4 } from "node:fs";
 import { mkdir as mkdir2, readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname10, extname as extname6, isAbsolute as isAbsolute8, join as join9, relative as relative13, resolve as resolve16, sep as sep8 } from "node:path";
+import { dirname as dirname10, extname as extname6, isAbsolute as isAbsolute9, join as join9, relative as relative13, resolve as resolve17, sep as sep8 } from "node:path";
 import { parseDocument as parseDocument7, parse as parseYaml6, stringify as stringify3 } from "yaml";
 function getSchemasInfo() {
   return { builtins: listBuiltins(), formats: listFormats() };
@@ -14269,13 +14323,13 @@ async function runVendorSchema(opts) {
     );
   }
   const loaded = await loadConfig(opts.configPath, cwd);
-  const configPath = loaded?.path ?? resolve16(cwd, DEFAULT_CONFIG_NAME);
+  const configPath = loaded?.path ?? resolve17(cwd, DEFAULT_CONFIG_NAME);
   const configDir = loaded?.dir ?? cwd;
-  const absDir = resolve16(cwd, opts.dir ?? DEFAULT_VENDOR_DIR);
+  const absDir = resolve17(cwd, opts.dir ?? DEFAULT_VENDOR_DIR);
   const absFile = join9(absDir, vendorFileName(url));
   await assertNotIgnored(absFile, absDir, cwd, opts.onNotice);
   const fromConfig = posixRelative(configDir, absFile);
-  const ref = isAbsolute8(fromConfig) || fromConfig === "" ? absFile : fromConfig.startsWith(".") ? fromConfig : `./${fromConfig}`;
+  const ref = isAbsolute9(fromConfig) || fromConfig === "" ? absFile : fromConfig.startsWith(".") ? fromConfig : `./${fromConfig}`;
   const { bytes } = await fetchSchemaBytes(url, {
     ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {},
     ...opts.maxBytes !== void 0 ? { maxBytes: opts.maxBytes } : {}
@@ -14452,7 +14506,7 @@ async function runInferSchema(opts) {
   }
   let absOut;
   if (opts.out !== void 0) {
-    absOut = resolve16(cwd, opts.out);
+    absOut = resolve17(cwd, opts.out);
     await assertNotIgnored(
       absOut,
       dirname10(absOut),
@@ -14540,7 +14594,7 @@ async function runInferSchema(opts) {
     scanOne(STDIN_LABEL, opts.stdinContent ?? "", forced.extensions[0] ?? "");
   }
   for (const file of files) {
-    const content = await readFile11(resolve16(base, file), "utf8");
+    const content = await readFile11(resolve17(base, file), "utf8");
     scanOne(file, content, extname6(file));
   }
   for (const u of unreadable) {
@@ -14602,7 +14656,7 @@ async function runInferSchema(opts) {
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { existsSync as existsSync5 } from "node:fs";
 import { mkdir as mkdir3, open as open2, readFile as readFile12, rename as rename3, rm as rm3 } from "node:fs/promises";
-import { dirname as dirname11, isAbsolute as isAbsolute9, resolve as resolve17, extname as extname7, sep as sep9 } from "node:path";
+import { dirname as dirname11, isAbsolute as isAbsolute10, resolve as resolve18, extname as extname7, sep as sep9 } from "node:path";
 
 // src/shared/prompt.ts
 import { createInterface } from "node:readline";
@@ -14941,10 +14995,10 @@ async function runQuery(opts) {
     readOne(STDIN_LABEL, opts.stdinContent ?? "", ext);
   }
   for (const file of files) {
-    const content = await readFile12(resolve17(base, file), "utf8");
+    const content = await readFile12(resolve18(base, file), "utf8");
     readOne(file, content, extname7(file));
   }
-  const db = opts.db === void 0 ? void 0 : { resolved: resolve17(cwd, opts.db), display: opts.db };
+  const db = opts.db === void 0 ? void 0 : { resolved: resolve18(cwd, opts.db), display: opts.db };
   const run2 = await runSql(sql, entries, {
     target: db,
     params: boundParams,
@@ -15085,7 +15139,7 @@ async function runSql(sql, entries, ctx) {
         const place = manifests.length === 0 ? void 0 : readerPlace(e.label, e.own.data, manifests, ctx.declaredCollections, manifestRoot, ctx.base);
         return {
           label: e.label,
-          absPath: resolve17(ctx.base, e.label),
+          absPath: resolve18(ctx.base, e.label),
           content: e.content,
           extracted: e.own,
           ...place !== void 0 ? { provenanceManifest: place } : {}
@@ -15550,20 +15604,20 @@ function displayPath(ctx, abs) {
 }
 function assertSchemaWriteWithin(ctx, abs) {
   const within = posixRelative(ctx.trustRoot.dir, abs);
-  if (within !== "" && !within.startsWith("..") && !isAbsolute9(within)) return;
+  if (within !== "" && !within.startsWith("..") && !isAbsolute10(within)) return;
   throw new DocmetaError(
     `The resolved schema "${abs}" lives outside ${ctx.trustRoot.dir}; DDL edits schemas inside the repository. Evolve it where it lives, or vendor a copy in.`
   );
 }
 function foldPath(p) {
-  const abs = resolve17(p);
+  const abs = resolve18(p);
   return process.platform === "win32" ? abs.toLowerCase() : abs;
 }
 function filePinsByPath(ctx) {
   const byPath = /* @__PURE__ */ new Map();
   for (const [ref, pin] of collectSchemaPins(ctx.config)) {
     if (classifyRef(ref).kind !== "file") continue;
-    byPath.set(foldPath(resolve17(ctx.cwd, ref)), pin);
+    byPath.set(foldPath(resolve18(ctx.cwd, ref)), pin);
   }
   return byPath;
 }
@@ -15591,7 +15645,7 @@ async function loadSetMembers(refs, ctx) {
       });
       continue;
     }
-    const abs = resolve17(ctx.cwd, ref);
+    const abs = resolve18(ctx.cwd, ref);
     const canon = foldPath(abs);
     if (seenFiles.has(canon)) continue;
     seenFiles.add(canon);
@@ -15796,7 +15850,7 @@ async function planSchemaMutation(ops, entries, ctx) {
     const [, name2, ver] = target.builtinId.split(":");
     const safe = (s) => s.replace(/[^A-Za-z0-9._-]/g, "-");
     const forkName = `${safe(name2 ?? "schema")}-${safe(ver ?? "0")}.local.json`;
-    schemaAbs = resolve17(ctx.configDir ?? ctx.cwd, "schemas", forkName);
+    schemaAbs = resolve18(ctx.configDir ?? ctx.cwd, "schemas", forkName);
     assertSchemaWriteWithin(ctx, schemaAbs);
     if (existsSync5(schemaAbs)) {
       throw new DocmetaError(
@@ -15963,7 +16017,7 @@ async function planConfigEdit(ctx, edit, runRefs) {
     }
     return void 0;
   };
-  const rebaseRaw = (raw) => classifyRef(raw).kind === "file" && !isAbsolute9(raw) ? resolve17(configDir, raw) : raw;
+  const rebaseRaw = (raw) => classifyRef(raw).kind === "file" && !isAbsolute10(raw) ? resolve18(configDir, raw) : raw;
   const wantSet = runRefs.map(rebaseRaw).sort().join("\n");
   const seqResolvesToRunSet = (node) => {
     if (!isSeq5(node)) return false;
@@ -16008,7 +16062,7 @@ async function planConfigEdit(ctx, edit, runRefs) {
       if (!isMap8(item)) continue;
       const raw = rawRefOf(item);
       if (raw === void 0 || classifyRef(raw).kind !== "file") continue;
-      const abs = isAbsolute9(raw) ? raw : resolve17(configDir, raw);
+      const abs = isAbsolute10(raw) ? raw : resolve18(configDir, raw);
       if (foldPath(abs) !== wantPath) continue;
       pinFrom = item.get("integrity");
       item.set("integrity", edit.integrity.value);
@@ -16237,7 +16291,7 @@ function buildChanges(diff, entries, sentinel, ctx, renameHints = [], booleanAdd
         `"${file}": no writable format for that extension.`
       );
     }
-    if (existsSync5(resolve17(ctx.base, file))) {
+    if (existsSync5(resolve18(ctx.base, file))) {
       throw new DocmetaError(
         `"${file}" already exists; INSERT creates new files only.`
       );
@@ -16256,7 +16310,7 @@ function buildChanges(diff, entries, sentinel, ctx, renameHints = [], booleanAdd
         `"${from}" -> "${to}": a rename may not change the extension.`
       );
     }
-    if (existsSync5(resolve17(ctx.base, to))) {
+    if (existsSync5(resolve18(ctx.base, to))) {
       throw new DocmetaError(
         `"${to}" already exists; the rename would overwrite it.`
       );
@@ -16285,13 +16339,13 @@ function validateNewPath(p, base) {
   const refuse = (why) => {
     throw new DocmetaError(`"${p}" is not a usable path: ${why}.`);
   };
-  if (isAbsolute9(p)) refuse("it is absolute");
+  if (isAbsolute10(p)) refuse("it is absolute");
   if (p.split(/[\\/]/).some((segment) => segment === "..")) {
     refuse("it traverses upward");
   }
-  const abs = resolve17(base, p);
-  if (abs === resolve17(base)) refuse("it points at the corpus root, not a file");
-  if (!abs.startsWith(resolve17(base) + sep9)) refuse("it escapes the corpus");
+  const abs = resolve18(base, p);
+  if (abs === resolve18(base)) refuse("it points at the corpus root, not a file");
+  if (!abs.startsWith(resolve18(base) + sep9)) refuse("it escapes the corpus");
 }
 function refuseJoinFieldChanges(changes, entries, ctx) {
   const index = ctx.externalMetadata;
@@ -16442,7 +16496,7 @@ async function planManifestEdits(changes, entries, ctx, renameHints) {
     );
     const index = await leftOut;
     if (index === null) return void 0;
-    const abs = resolve17(ctx.base, file);
+    const abs = resolve18(ctx.base, file);
     const named = index.entries.find(
       (e) => e.join === PATH_JOIN && e.abs === abs && excluded.includes(e.collection)
     );
@@ -16489,7 +16543,7 @@ async function planManifestEdits(changes, entries, ctx, renameHints) {
       continue;
     }
     if ("renamed" in c) {
-      const supplied = ctx.externalMetadata?.byPath.get(resolve17(ctx.base, c.file));
+      const supplied = ctx.externalMetadata?.byPath.get(resolve18(ctx.base, c.file));
       const seen = /* @__PURE__ */ new Set();
       for (const [key, sv] of supplied ?? []) {
         if (seen.has(sv.file) || !ctx.memberships(c.file).includes(sv.collection)) continue;
@@ -16791,14 +16845,14 @@ async function applyChanges(changes, entries, ctx, schemaPlan, manifestWrites =
   const pendingWrites = [];
   const pendingRenames = [];
   for (const [label, ops] of grouped) {
-    const path = resolve17(ctx.base, label);
+    const path = resolve18(ctx.base, label);
     if (ops.renamedTo !== void 0) {
       if (!existsSync5(path)) {
         throw new DocmetaError(
           `"${label}" is gone from disk since it was read; re-run the query.`
         );
       }
-      const toDisk = resolve17(ctx.base, ops.renamedTo);
+      const toDisk = resolve18(ctx.base, ops.renamedTo);
       if (existsSync5(toDisk)) {
         throw new DocmetaError(
           `"${ops.renamedTo}" appeared on disk since the plan; re-run the query.`
@@ -17052,7 +17106,7 @@ function skipExpression(sql, from) {
 
 // src/meta/commands/fill.ts
 import { readFile as readFile13 } from "node:fs/promises";
-import { resolve as resolve18, extname as extname8, join as join10 } from "node:path";
+import { resolve as resolve19, extname as extname8, join as join10 } from "node:path";
 import {
   completeValidatedJSON,
   makeProvider,
@@ -17916,7 +17970,7 @@ async function runFill(opts) {
     }
     const changed = next !== content || manifestChanged;
     if (next !== content && !dryRun && label !== "<stdin>") {
-      await writeFileAtomic(resolve18(base, label), next);
+      await writeFileAtomic(resolve19(base, label), next);
     }
     if (manifestChanged) {
       let texts;
@@ -17948,7 +18002,7 @@ async function runFill(opts) {
   const prepareAll = async () => ({
     stdin: usingStdin ? await prepareOne("<stdin>", opts.stdinContent ?? "", forcedExtractor?.extensions[0] ?? "") : void 0,
     files: await mapConcurrent(files, concurrency, async (file) => {
-      const content = await readFile13(resolve18(base, file), "utf8");
+      const content = await readFile13(resolve19(base, file), "utf8");
       return prepareOne(file, content, extname8(file));
     })
   });
@@ -18378,7 +18432,7 @@ async function mapConcurrent(items2, limit, fn) {
 
 // src/meta/commands/derive.ts
 import { readFile as readFile14 } from "node:fs/promises";
-import { extname as extname9, relative as relative14, resolve as resolve19, sep as sep10 } from "node:path";
+import { extname as extname9, relative as relative14, resolve as resolve20, sep as sep10 } from "node:path";
 var GENERATED_BY_ENV = "MANNI_GENERATED_BY";
 var SOURCE_HINT = "narrow --sources or --fields";
 async function runDerive(opts) {
@@ -18489,7 +18543,7 @@ async function runDerive(opts) {
   const files = fromCollections ? retainMembers(walked, membersFor) : walked;
   const rangesByPage = /* @__PURE__ */ new Map();
   for (const t of targets) {
-    const label = relative14(base, resolve19(base, t.page)).split(sep10).join("/");
+    const label = relative14(base, resolve20(base, t.page)).split(sep10).join("/");
     if (!files.includes(label)) {
       throw new DocmetaError(
         `${t.target} does not name one file that derive reads; a range names lines of one file.`
@@ -18514,7 +18568,7 @@ async function runDerive(opts) {
     const loaded2 = /* @__PURE__ */ new Map();
     const errors2 = /* @__PURE__ */ new Map();
     for (const label of files) {
-      const absPath = resolve19(base, label);
+      const absPath = resolve20(base, label);
       const extractor = forcedExtractor ?? extractorForExtension(extname9(label));
       if (!extractor) {
         errors2.set(label, {
@@ -19698,6 +19752,7 @@ export {
   encryptValue,
   decryptValue,
   findGitRoot,
+  valeConfigPath,
   notice,
   findConfigFile,
   readConfigFile,
@@ -19877,4 +19932,4 @@ export {
   renderQuery,
   renderQueryCsv
 };
-//# sourceMappingURL=chunk-5O4FIGDJ.js.map
+//# sourceMappingURL=chunk-UCLMW3RE.js.map