@intentset/publisher 0.1.0

package/dist/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,KAAK,KAAK,EAAE,KAAK,UAAU,EAAa,MAAM,iBAAiB,CAAC;AAEzG,OAAO,EAAE,KAAK,kBAAkB,EAAwB,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,KAAK,YAAY,EAAgB,MAAM,aAAa,CAAC;AAE9D,eAAO,MAAM,iBAAiB,YAC5B,eAAe,EACf,eAAe,EACf,OAAO,EACP,SAAS,EACT,YAAY,EACZ,UAAU,EACV,sBAAsB,EACtB,SAAS,EACT,SAAS,EACT,MAAM,EACN,SAAS,EACT,MAAM,EACN,cAAc,CACN,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,0HAA0H;AAC1H,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,mGAAmG;IACnG,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,wCAAwC;IACxC,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,0HAA0H;IAC1H,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACpC;AAID,4FAA4F;AAC5F,wBAAgB,OAAO,CACrB,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,cAAc,GACtB,UAAU,CAkDZ;AAED,uHAAuH;AACvH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,YAAY,GAC3C,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,IAAI,CAiBlD"}

package/dist/project.js

@@ -0,0 +1,187 @@
+/**
+ * The audience and release projection (Core §9, catalog P01, P03-P06).
+ *
+ * Deny by default: an artifact is eligible only when every check passes, and
+ * the first that fails is recorded as the reason it was excluded, so a report
+ * can count exclusions by kind. The checks, in order:
+ *
+ *   not-requested         the request names ids and this is not one of them
+ *   not-knowledge         only knowledge is ever published as a document
+ *   draft, retired        Core §7: neither is current publication
+ *   visibility            outside what the projection admits
+ *   audience              the request's audience is not one the knowledge is written for
+ *   availability-missing  no availability block: fails closed (Core §4, §7)
+ *   product ... edition   the request's value is not in that dimension's list (AND across, OR within)
+ *   flag                  the knowledge needs a flag the request does not name (all named flags required)
+ *   needs-review          a source changed since review, a pin is missing, or no reviewer (review.ts)
+ *
+ * An explicitly requested ID that is not eligible is CORE008. Its message
+ * names the reason class, and nothing about the artifact beyond its ID. When
+ * the artifact's visibility is outside the projection, or no artifact has the
+ * ID, the message is the same in both cases and carries no path: a caller
+ * without the authorization cannot learn whether an internal ID exists.
+ */
+import { graphHash } from "@intentset/core";
+import { compareStrings, publicationDiagnostic } from "./diagnostic.js";
+import { admits, checkRequest } from "./request.js";
+import { reviewStatus } from "./review.js";
+export const EXCLUSION_REASONS = [
+    "not-requested",
+    "not-knowledge",
+    "draft",
+    "retired",
+    "visibility",
+    "audience",
+    "availability-missing",
+    "product",
+    "release",
+    "role",
+    "edition",
+    "flag",
+    "needs-review",
+];
+const PUBLISHABLE_STATUSES = new Set(["approved", "implemented", "released", "deprecated"]);
+/** Core §9: select what this request may publish, before any text is sent to a renderer. */
+export function project(graph, registries, request, options) {
+    const checked = checkRequest(request, graph, registries);
+    const diagnostics = [...checked.diagnostics];
+    if (graphHash(graph) !== options.snapshot.graphHash) {
+        diagnostics.push(publicationDiagnostic({
+            code: "PUB001",
+            artifact: null,
+            path: null,
+            message: "The snapshot's graph hash is not the hash of the graph being published.",
+            remediation: "Publish from the graph the snapshot names; provenance must identify the exact snapshot (Core §7, §9).",
+        }));
+    }
+    if (checked.request === null || diagnostics.length > 0) {
+        return { eligible: [], excluded: [], diagnostics, request: null };
+    }
+    const req = checked.request;
+    const requested = req.ids === undefined ? null : new Set(req.ids);
+    const reviews = new Map(options.reviews ?? []);
+    const review = (artifact) => {
+        let status = reviews.get(artifact.meta.id);
+        if (status === undefined) {
+            status = reviewStatus(graph, artifact);
+            reviews.set(artifact.meta.id, status);
+        }
+        return status;
+    };
+    const eligible = [];
+    const excluded = [];
+    const reasons = new Map();
+    for (const id of [...graph.artifacts.keys()].sort(compareStrings)) {
+        const artifact = graph.artifacts.get(id);
+        const reason = requested !== null && !requested.has(id) ? "not-requested" : exclusionReason(artifact, req, review);
+        if (reason === null)
+            eligible.push(artifact);
+        else {
+            excluded.push({ id, reason });
+            reasons.set(id, reason);
+        }
+    }
+    for (const id of req.ids ?? []) {
+        const reason = reasons.get(id);
+        const artifact = graph.artifacts.get(id);
+        if (artifact !== undefined && reason === undefined)
+            continue;
+        diagnostics.push(refusal(id, artifact, reason ?? null, req, artifact === undefined ? null : review(artifact)));
+    }
+    return { eligible, excluded, diagnostics, request: req };
+}
+/** The first check an artifact fails for this request, or null when it is eligible. Requested-ness is the caller's. */
+export function exclusionReason(artifact, request, review) {
+    const { meta } = artifact;
+    if (meta.type !== "knowledge")
+        return "not-knowledge";
+    if (meta.status === "draft")
+        return "draft";
+    if (meta.status === "retired")
+        return "retired";
+    if (!PUBLISHABLE_STATUSES.has(meta.status))
+        return "draft";
+    if (!admits(request, meta.visibility))
+        return "visibility";
+    if (!meta.audiences.includes(request.audience))
+        return "audience";
+    const availability = meta.availability;
+    if (availability === undefined)
+        return "availability-missing";
+    if (!availability.products.includes(request.product))
+        return "product";
+    if (!availability.releases.includes(request.release))
+        return "release";
+    if (!availability.roles.includes(request.role))
+        return "role";
+    if (!availability.editions.includes(request.edition))
+        return "edition";
+    if (!availability.flags.every((flag) => request.flags.includes(flag)))
+        return "flag";
+    if (review(artifact).status !== "current")
+        return "needs-review";
+    return null;
+}
+/** CORE008 for one requested ID. */
+function refusal(id, artifact, reason, request, review) {
+    if (artifact === undefined || !admits(request, artifact.meta.visibility)) {
+        return publicationDiagnostic({
+            code: "CORE008",
+            artifact: id,
+            path: null,
+            message: `${id} was requested but is not publishable (visibility): no artifact with that ID is visible to a ${request.visibility} projection.`,
+            remediation: "Request only knowledge this projection admits; anything else needs a separately authorized projection (Core §9).",
+        });
+    }
+    const { meta } = artifact;
+    const at = { artifact: id, path: artifact.path };
+    const refuse = (field, detail, remediation) => publicationDiagnostic({
+        code: "CORE008",
+        ...at,
+        field,
+        message: `${id} was requested but is not publishable (${reason}): ${detail}.`,
+        remediation,
+    });
+    switch (reason) {
+        case "not-knowledge":
+            return refuse("/intentset/type", `it is a ${meta.type}, and only knowledge is published`, "Request the knowledge that explains it; engineering artifacts are never published as documents (Core §9).");
+        case "draft":
+            return refuse("/intentset/status", `its status is ${meta.status}, and drafts are never published`, "Review the knowledge and set its status to approved or later before publishing it (Core §7, §9).");
+        case "retired":
+            return refuse("/intentset/status", "it is retired, which is excluded from current publication", "Publish the successor named in replacedBy instead (Core §7).");
+        case "audience":
+            return refuse("/intentset/audiences", `it is not written for the ${request.audience} audience`, "Request an audience the knowledge lists, or add this one after reviewing the text for it (Core §9).");
+        case "availability-missing":
+            return refuse("/intentset/availability", "it declares no availability, so publication fails closed", "Add availability with products, releases, roles, editions and flags (Core §7).");
+        case "product":
+        case "release":
+        case "role":
+        case "edition":
+            return refuse(`/intentset/availability/${reason}s`, `it is not available for ${reason} ${request[reason]}`, `Request a ${reason} the knowledge lists, or extend its availability after review; values match exactly (Core §7).`);
+        case "flag": {
+            const needed = (meta.availability?.flags ?? [])
+                .filter((flag) => !request.flags.includes(flag))
+                .sort(compareStrings);
+            return refuse("/intentset/availability/flags", `it requires flag${needed.length === 1 ? "" : "s"} ${needed.join(", ")}, which the request does not name`, "Request every flag the knowledge names; all named flags are required (Core §7).");
+        }
+        default:
+            return refuse(review !== null && review.reviewer === null
+                ? "/intentset/reviewedBy"
+                : `/intentset/extensions/intentset.org~1review`, `it needs review because ${describeReview(review)}`, "Review the knowledge against its current sources, then update reviewedBy, reviewedAt and the intentset.org/review pins (Core §9).");
+    }
+}
+function describeReview(review) {
+    if (review === null)
+        return "its review could not be read";
+    const parts = [];
+    if (review.changed.length > 0)
+        parts.push(`${review.changed.join(", ")} changed since it was reviewed`);
+    if (review.missing.length > 0)
+        parts.push(`its review pins nothing for ${review.missing.join(", ")}`);
+    if (review.reviewer === null)
+        parts.push("it names no reviewer");
+    if (review.reviewedAt === null)
+        parts.push("it gives no review date");
+    return parts.length === 0 ? "its review is not current" : parts.join(", and ");
+}
+//# sourceMappingURL=project.js.map

package/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAA+D,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzG,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAA2B,MAAM,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAqB,YAAY,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,eAAe;IACf,eAAe;IACf,OAAO;IACP,SAAS;IACT,YAAY;IACZ,UAAU;IACV,sBAAsB;IACtB,SAAS;IACT,SAAS;IACT,MAAM;IACN,SAAS;IACT,MAAM;IACN,cAAc;CACN,CAAC;AA8BX,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAE5F,4FAA4F;AAC5F,MAAM,UAAU,OAAO,CACrB,KAAY,EACZ,UAAsB,EACtB,OAA2B,EAC3B,OAAuB;IAEvB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpD,WAAW,CAAC,IAAI,CACd,qBAAqB,CAAC;YACpB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,yEAAyE;YAClF,WAAW,EACT,uGAAuG;SAC1G,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAuB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,CAAC,QAAkB,EAAgB,EAAE;QAClD,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAgB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAa,CAAC;QACrD,MAAM,MAAM,GAAG,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACnH,IAAI,MAAM,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACxC,CAAC;YACJ,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QAC7D,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC3D,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,eAAe,CAC7B,QAAkB,EAClB,OAA2B,EAC3B,MAA4C;IAE5C,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,eAAe,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,UAAU,CAAC;IAClE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IAC9D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACrF,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oCAAoC;AACpC,SAAS,OAAO,CACd,EAAU,EACV,QAA8B,EAC9B,MAA8B,EAC9B,OAA2B,EAC3B,MAA2B;IAE3B,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACzE,OAAO,qBAAqB,CAAC;YAC3B,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,GAAG,EAAE,gGAAgG,OAAO,CAAC,UAAU,cAAc;YAC9I,WAAW,EACT,kHAAkH;SACrH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC1B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAE,MAAc,EAAE,WAAmB,EAAE,EAAE,CAChF,qBAAqB,CAAC;QACpB,IAAI,EAAE,SAAS;QACf,GAAG,EAAE;QACL,KAAK;QACL,OAAO,EAAE,GAAG,EAAE,0CAA0C,MAAM,MAAM,MAAM,GAAG;QAC7E,WAAW;KACZ,CAAC,CAAC;IACL,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,eAAe;YAClB,OAAO,MAAM,CACX,iBAAiB,EACjB,WAAW,IAAI,CAAC,IAAI,mCAAmC,EACvD,2GAA2G,CAC5G,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,MAAM,CACX,mBAAmB,EACnB,iBAAiB,IAAI,CAAC,MAAM,kCAAkC,EAC9D,kGAAkG,CACnG,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,MAAM,CACX,mBAAmB,EACnB,2DAA2D,EAC3D,8DAA8D,CAC/D,CAAC;QACJ,KAAK,UAAU;YACb,OAAO,MAAM,CACX,sBAAsB,EACtB,6BAA6B,OAAO,CAAC,QAAQ,WAAW,EACxD,qGAAqG,CACtG,CAAC;QACJ,KAAK,sBAAsB;YACzB,OAAO,MAAM,CACX,yBAAyB,EACzB,0DAA0D,EAC1D,gFAAgF,CACjF,CAAC;QACJ,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,MAAM,CACX,2BAA2B,MAAM,GAAG,EACpC,2BAA2B,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,EACtD,aAAa,MAAM,gGAAgG,CACpH,CAAC;QACJ,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;iBAC5C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;iBAC/C,IAAI,CAAC,cAAc,CAAC,CAAC;YACxB,OAAO,MAAM,CACX,+BAA+B,EAC/B,mBAAmB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,EACzG,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD;YACE,OAAO,MAAM,CACX,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBACzC,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,6CAA6C,EACjD,2BAA2B,cAAc,CAAC,MAAM,CAAC,EAAE,EACnD,mIAAmI,CACpI,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAA2B;IACjD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,8BAA8B,CAAC;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACjF,CAAC"}

package/dist/publish.d.ts

@@ -0,0 +1,42 @@
+import { type Diagnostic, type Graph, type Registries } from "@intentset/core";
+import { type GeneratedDocument, type PublicationMeta } from "./generate.ts";
+import { type Snapshot } from "./project.ts";
+import { type IndexedRequest, type PublicationRequest } from "./request.ts";
+import type { ReviewStatus } from "./review.ts";
+/** Why a document that passed the projection was still not published. */
+export declare const REFUSAL_REASONS: readonly ["reference", "title", "directive", "markset"];
+export type RefusalReason = (typeof REFUSAL_REASONS)[number];
+export interface PublishOptions {
+    snapshot: Snapshot;
+    /** The publication timestamp written into every document; an input, so output is reproducible. */
+    publishedAt: string;
+    /** Also render each document as a complete HTML page with Markset's default stylesheet inlined. */
+    renderHtml?: boolean;
+    reviews?: ReadonlyMap<string, ReviewStatus>;
+}
+export interface PublishedDocument extends GeneratedDocument {
+    html?: string;
+}
+export interface PublicationIndex {
+    snapshot: Snapshot;
+    /** The request without authorization flags, or null when it was refused. */
+    request: IndexedRequest | null;
+    published: string[];
+    /** Exclusions by reason, keys sorted, zero counts left out. */
+    excludedCounts: Record<string, number>;
+}
+export interface PublishResult {
+    documents: PublishedDocument[];
+    index: PublicationIndex;
+    diagnostics: Diagnostic[];
+    ok: boolean;
+}
+export declare function publish(graph: Graph, registries: Registries, request: PublicationRequest, options: PublishOptions): PublishResult;
+/**
+ * A complete page through render-html, with the provenance block carried into
+ * the head, after the charset, as one `<meta name="intentset-publication">`
+ * whose content is the block's canonical JSON, so the HTML keeps what the
+ * Markset source keeps.
+ */
+export declare function renderDocument(markset: string, publication: PublicationMeta): string;
+//# sourceMappingURL=publish.d.ts.map

package/dist/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,KAAK,EACV,KAAK,UAAU,EAIhB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAoB,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAwB,KAAK,QAAQ,EAAW,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAA0B,MAAM,cAAc,CAAC;AACpG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,yEAAyE;AACzE,eAAO,MAAM,eAAe,YAAI,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,kGAAkG;IAClG,WAAW,EAAE,MAAM,CAAC;IACpB,mGAAmG;IACnG,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,4EAA4E;IAC5E,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,EAAE,EAAE,OAAO,CAAC;CACb;AAED,wBAAgB,OAAO,CACrB,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,cAAc,GACtB,aAAa,CAsEf;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,MAAM,CAOpF"}

package/dist/publish.js

@@ -0,0 +1,132 @@
+/**
+ * Publication (Core §9): project, check references, generate, render.
+ *
+ *   canonical files -> validated graph -> exact snapshot
+ *     -> authorized audience projection (project.ts)
+ *     -> reviewed knowledge (review.ts)
+ *     -> references and titles checked (references.ts)
+ *     -> generated Markset (generate.ts) -> HTML
+ *
+ * Selection happens before any text reaches a renderer. A document whose
+ * references, titles or Markset fail is not emitted. Links are checked against
+ * what is actually being published, so a document that links to one refused
+ * here is refused in turn; this repeats until nothing more is refused.
+ *
+ * The index is what a customer-facing tool may read (Core §10): the snapshot,
+ * the request without its authorization flags, the published IDs, and the
+ * number of artifacts excluded for each reason. It names nothing that was not
+ * published.
+ *
+ * Deterministic: the same graph, request, snapshot and `publishedAt` give the
+ * same bytes.
+ */
+import { readFileSync } from "node:fs";
+import { canonicalJson, hasErrors, sortDiagnostics, } from "@intentset/core";
+import { parseDocument } from "@markset-lang/parser";
+import { defaultStylesheetPath, renderPage } from "@markset-lang/render-html";
+import { compareStrings } from "./diagnostic.js";
+import { generateDocument } from "./generate.js";
+import { project } from "./project.js";
+import { checkReferences, checkTitles } from "./references.js";
+import { admits, indexedRequest } from "./request.js";
+/** Why a document that passed the projection was still not published. */
+export const REFUSAL_REASONS = ["reference", "title", "directive", "markset"];
+export function publish(graph, registries, request, options) {
+    const projection = project(graph, registries, request, { snapshot: options.snapshot, reviews: options.reviews });
+    const diagnostics = [...projection.diagnostics];
+    const counts = new Map();
+    const count = (reason) => counts.set(reason, (counts.get(reason) ?? 0) + 1);
+    // Only what the projection could see is counted: a customer index that said
+    // "not-knowledge: 12" would tell its reader how many internal records exist.
+    // A refused request admits nothing, so it counts nothing (invariant 4).
+    for (const exclusion of projection.excluded) {
+        const visibility = graph.artifacts.get(exclusion.id)?.meta.visibility;
+        if (projection.request !== null && visibility !== undefined && admits(projection.request, visibility)) {
+            count(exclusion.reason);
+        }
+    }
+    const req = projection.request;
+    const documents = [];
+    if (req !== null) {
+        const candidates = projection.eligible;
+        const allowedTitles = new Set(candidates.map((artifact) => artifact.meta.title.trim()));
+        const refused = new Map();
+        const generated = new Map();
+        for (const artifact of candidates) {
+            const titles = checkTitles(artifact, graph, req, allowedTitles);
+            const result = generateDocument(graph, artifact, req, options);
+            diagnostics.push(...titles, ...result.diagnostics);
+            if (result.document !== null)
+                generated.set(artifact.meta.id, result.document);
+            if (titles.length > 0)
+                refused.set(artifact.meta.id, "title");
+            else if (result.diagnostics.some((d) => d.code === "PUB004"))
+                refused.set(artifact.meta.id, "directive");
+            else if (result.document === null)
+                refused.set(artifact.meta.id, "markset");
+        }
+        let published = new Set(candidates.map((artifact) => artifact.meta.id).filter((id) => !refused.has(id)));
+        let round = candidates;
+        while (round.length > 0) {
+            const failed = [];
+            for (const artifact of round) {
+                const found = checkReferences(artifact, graph, req, published);
+                if (found.length === 0)
+                    continue;
+                diagnostics.push(...found);
+                failed.push(artifact.meta.id);
+                refused.set(artifact.meta.id, "reference");
+            }
+            published = new Set([...published].filter((id) => !failed.includes(id)));
+            round = failed.length === 0 ? [] : candidates.filter((artifact) => published.has(artifact.meta.id));
+        }
+        for (const reason of refused.values())
+            count(reason);
+        for (const id of [...published].sort(compareStrings)) {
+            const document = { ...generated.get(id) };
+            if (options.renderHtml === true)
+                document.html = renderDocument(document.markset, document.publication);
+            documents.push(document);
+        }
+    }
+    const excludedCounts = {};
+    for (const reason of [...counts.keys()].sort(compareStrings))
+        excludedCounts[reason] = counts.get(reason);
+    const sorted = sortDiagnostics(diagnostics);
+    return {
+        documents,
+        index: {
+            snapshot: { commit: options.snapshot.commit, graphHash: options.snapshot.graphHash },
+            request: req === null ? null : indexedRequest(req),
+            published: documents.map((document) => document.id),
+            excludedCounts,
+        },
+        diagnostics: sorted,
+        ok: !hasErrors(sorted),
+    };
+}
+let stylesheet = null;
+/** Markset's default stylesheet, read once. */
+function defaultStylesheet() {
+    stylesheet ??= readFileSync(defaultStylesheetPath, "utf8");
+    return stylesheet;
+}
+/**
+ * A complete page through render-html, with the provenance block carried into
+ * the head, after the charset, as one `<meta name="intentset-publication">`
+ * whose content is the block's canonical JSON, so the HTML keeps what the
+ * Markset source keeps.
+ */
+export function renderDocument(markset, publication) {
+    const page = renderPage(parseDocument(markset).ast, { stylesheet: { inline: defaultStylesheet() } });
+    const meta = `<meta name="intentset-publication" content="${escapeAttribute(canonicalJson(publication))}">\n`;
+    const anchor = '<meta charset="utf-8">\n';
+    const at = page.indexOf(anchor);
+    if (at === -1)
+        throw new Error("render-html returned a page without a charset declaration");
+    return page.slice(0, at + anchor.length) + meta + page.slice(at + anchor.length);
+}
+function escapeAttribute(value) {
+    return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+//# sourceMappingURL=publish.js.map

package/dist/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAKL,aAAa,EACb,SAAS,EACT,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAgD,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAuC,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAgD,MAAM,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGpG,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AAgCvF,MAAM,UAAU,OAAO,CACrB,KAAY,EACZ,UAAsB,EACtB,OAA2B,EAC3B,OAAuB;IAEvB,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjH,MAAM,WAAW,GAAG,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,MAAuC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7G,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC;QACtE,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACtG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;IAC/B,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;QAEvD,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/D,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;iBACzD,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;iBACpG,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzG,IAAI,KAAK,GAAe,UAAU,CAAC;QACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACjC,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAC7C,CAAC;YACD,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzE,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtG,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAsB,EAAE,GAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAuB,EAAE,CAAC;YACpF,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,cAAc,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC;IACpH,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO;QACL,SAAS;QACT,KAAK,EAAE;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE;YACpF,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC;YAClD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,cAAc;SACf;QACD,WAAW,EAAE,MAAM;QACnB,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,IAAI,UAAU,GAAkB,IAAI,CAAC;AAErC,+CAA+C;AAC/C,SAAS,iBAAiB;IACxB,UAAU,KAAK,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,WAA4B;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,+CAA+C,eAAe,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC9G,MAAM,MAAM,GAAG,0BAA0B,CAAC;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1G,CAAC"}

package/dist/references.d.ts

@@ -0,0 +1,32 @@
+import { type Artifact, type Diagnostic, type Graph } from "@intentset/core";
+import { type PublicationRequest } from "./request.ts";
+export type ReferenceKind = "id" | "link" | "path";
+export interface Reference {
+    /** The referenced artifact's ID. */
+    id: string;
+    via: ReferenceKind;
+    /** 1-based line in the body. */
+    line: number;
+}
+/** Every reference from a knowledge body to another artifact in the graph, sorted by ID, kind, line. */
+export declare function findReferences(artifact: Artifact, graph: Graph): Reference[];
+/**
+ * Resolve a link destination against the linking document to a repository
+ * path. Null for anything that is not a repository file: a URL with a scheme,
+ * a protocol-relative URL, a fragment, or a path that leaves the repository.
+ */
+export declare function resolveTarget(url: string, fromPath: string): string | null;
+/**
+ * CORE008 for each referenced artifact this projection may not show: one
+ * diagnostic per referenced ID, at the first failing reference's line.
+ */
+export declare function checkReferences(artifact: Artifact, graph: Graph, request: PublicationRequest, published: ReadonlySet<string>): Diagnostic[];
+/**
+ * PUB002 for each artifact outside the projection whose title (three or more
+ * words) the body contains, unless that title is in `allowedTitles` (the
+ * document's own and those of what is being published).
+ */
+export declare function checkTitles(artifact: Artifact, graph: Graph, request: PublicationRequest, allowedTitles: ReadonlySet<string>): Diagnostic[];
+/** The title as a case-sensitive pattern: any whitespace between words, word-bounded at either end that is a word character. */
+export declare function titlePattern(title: string): RegExp;
+//# sourceMappingURL=references.d.ts.map

package/dist/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../src/references.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,KAAK,KAAK,EAAc,MAAM,iBAAiB,CAAC;AAIzF,OAAO,EAAE,KAAK,kBAAkB,EAAU,MAAM,cAAc,CAAC;AAE/D,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,aAAa,CAAC;IACnB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAaD,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,EAAE,CAqD5E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqB1E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,GAC7B,UAAU,EAAE,CAgCd;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,GACjC,UAAU,EAAE,CAuBd;AAED,gIAAgI;AAChI,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKlD"}

package/dist/references.js

@@ -0,0 +1,196 @@
+/**
+ * References out of a knowledge body (Core §9, catalog P02).
+ *
+ * A published document may refer only to what its projection may show. Three
+ * kinds of reference are found:
+ *
+ *   id    a bare artifact ID in the text, word-bounded, code included
+ *   link  a Markdown link, image or definition, or an href/src in raw HTML,
+ *         whose destination resolves to an artifact's file
+ *   path  an artifact's repository path written out in the text
+ *
+ * An ID reference fails when the artifact's visibility is outside the
+ * projection: the ID itself is then something this audience is not shown. A
+ * link or path reference fails when the artifact is not published in this
+ * projection, since the reader would be sent to, or told of, a canonical
+ * file. The product the request names is not a leak when mentioned by ID.
+ *
+ * Separately, the text may not contain the title of an artifact the
+ * projection does not admit (three or more words, case-sensitive, any run of
+ * whitespace between words), unless that title is also the title of
+ * something being published. That is PUB002.
+ *
+ * Every message names the referencing document and the referenced ID, and
+ * never the referenced artifact's title or path.
+ */
+import { posix } from "node:path";
+import { ID_PATTERN } from "@intentset/core";
+import { parseDocument } from "@markset-lang/parser";
+import { bodyLineOffset, fileLocation, lineAt } from "./body.js";
+import { compareStrings, publicationDiagnostic } from "./diagnostic.js";
+import { admits } from "./request.js";
+/** ID_PATTERN, unanchored and bounded so it does not match inside a longer token. */
+const VIA_WORDS = { id: "ID", link: "link", path: "path" };
+/** "ID", "ID and link", "ID, link and path". */
+function listing(words) {
+    return words.length < 2 ? words.join("") : `${words.slice(0, -1).join(", ")} and ${words[words.length - 1]}`;
+}
+const ID_IN_TEXT = new RegExp(`(?<![A-Za-z0-9_-])${ID_PATTERN.source.slice(1, -1)}(?![A-Za-z0-9_-])`, "g");
+const HTML_TARGET = /\b(?:href|src)\s*=\s*(?:"([^"]*)"|'([^']*)')/gi;
+/** Every reference from a knowledge body to another artifact in the graph, sorted by ID, kind, line. */
+export function findReferences(artifact, graph) {
+    const self = artifact.meta.id;
+    const body = artifact.body;
+    const found = [];
+    const add = (id, via, line) => {
+        if (id !== self && graph.artifacts.has(id))
+            found.push({ id, via, line });
+    };
+    for (const match of body.matchAll(ID_IN_TEXT))
+        add(match[0], "id", lineAt(body, match.index));
+    const byPath = new Map();
+    for (const [id, other] of graph.artifacts)
+        byPath.set(other.path, id);
+    const visit = (node) => {
+        if (typeof node !== "object" || node === null)
+            return;
+        const n = node;
+        const line = n.position?.start.line ?? 1;
+        const targets = [];
+        if ((n.type === "link" || n.type === "image" || n.type === "definition") && typeof n.url === "string")
+            targets.push(n.url);
+        if (n.type === "html" && typeof n.value === "string") {
+            for (const match of n.value.matchAll(HTML_TARGET))
+                targets.push(match[1] ?? match[2] ?? "");
+        }
+        for (const url of targets) {
+            const path = resolveTarget(url, artifact.path);
+            const id = path === null ? undefined : byPath.get(path);
+            if (id !== undefined)
+                add(id, "link", line);
+        }
+        for (const child of n.children ?? [])
+            visit(child);
+    };
+    visit(parseDocument(body).ast);
+    for (const [id, other] of graph.artifacts) {
+        let from = 0;
+        for (;;) {
+            const index = body.indexOf(other.path, from);
+            if (index === -1)
+                break;
+            const before = index === 0 ? "" : body[index - 1];
+            const after = body[index + other.path.length] ?? "";
+            if (!/[A-Za-z0-9_./-]/.test(before) && !/[A-Za-z0-9_/-]/.test(after)) {
+                add(id, "path", lineAt(body, index));
+                break;
+            }
+            from = index + 1;
+        }
+    }
+    return found.sort((a, b) => compareStrings(a.id, b.id) || compareStrings(a.via, b.via) || a.line - b.line);
+}
+/**
+ * Resolve a link destination against the linking document to a repository
+ * path. Null for anything that is not a repository file: a URL with a scheme,
+ * a protocol-relative URL, a fragment, or a path that leaves the repository.
+ */
+export function resolveTarget(url, fromPath) {
+    const trimmed = url.trim();
+    if (trimmed === "" ||
+        trimmed.startsWith("#") ||
+        trimmed.startsWith("//") ||
+        /^[A-Za-z][A-Za-z0-9+.-]*:/.test(trimmed)) {
+        return null;
+    }
+    let target = trimmed.split("#")[0].split("?")[0];
+    try {
+        target = decodeURIComponent(target);
+    }
+    catch {
+        // A malformed escape is compared as written.
+    }
+    if (target === "")
+        return null;
+    const joined = target.startsWith("/") ? target.replace(/^\/+/, "") : posix.join(posix.dirname(fromPath), target);
+    const normal = posix.normalize(joined);
+    if (normal === ".." || normal.startsWith("../"))
+        return null;
+    return normal.replace(/^\.\//, "");
+}
+/**
+ * CORE008 for each referenced artifact this projection may not show: one
+ * diagnostic per referenced ID, at the first failing reference's line.
+ */
+export function checkReferences(artifact, graph, request, published) {
+    const offset = bodyLineOffset(artifact);
+    const failing = new Map();
+    for (const ref of findReferences(artifact, graph)) {
+        const target = graph.artifacts.get(ref.id);
+        const fails = ref.via === "id"
+            ? ref.id !== request.product && !admits(request, target.meta.visibility)
+            : !published.has(ref.id);
+        if (!fails)
+            continue;
+        const list = failing.get(ref.id);
+        if (list === undefined)
+            failing.set(ref.id, [ref]);
+        else
+            list.push(ref);
+    }
+    const diagnostics = [];
+    for (const id of [...failing.keys()].sort(compareStrings)) {
+        const refs = failing.get(id);
+        const vias = [...new Set(refs.map((ref) => VIA_WORDS[ref.via]))];
+        const first = Math.min(...refs.map((ref) => ref.line));
+        diagnostics.push(publicationDiagnostic({
+            code: "CORE008",
+            artifact: artifact.meta.id,
+            path: artifact.path,
+            location: fileLocation(offset, first),
+            message: `${artifact.meta.id} refers to ${id} by ${listing(vias)}, which this ${request.visibility} projection does not publish.`,
+            remediation: "Remove the reference, or replace it with reviewed wording safe for this audience; a published document may refer only to what its projection shows (Core §9).",
+        }));
+    }
+    return diagnostics;
+}
+/**
+ * PUB002 for each artifact outside the projection whose title (three or more
+ * words) the body contains, unless that title is in `allowedTitles` (the
+ * document's own and those of what is being published).
+ */
+export function checkTitles(artifact, graph, request, allowedTitles) {
+    const offset = bodyLineOffset(artifact);
+    const diagnostics = [];
+    for (const id of [...graph.artifacts.keys()].sort(compareStrings)) {
+        const other = graph.artifacts.get(id);
+        if (id === artifact.meta.id || admits(request, other.meta.visibility))
+            continue;
+        const title = other.meta.title.trim();
+        if (title.split(/\s+/).length < 3 || allowedTitles.has(title))
+            continue;
+        const match = titlePattern(title).exec(artifact.body);
+        if (match === null)
+            continue;
+        diagnostics.push(publicationDiagnostic({
+            code: "PUB002",
+            artifact: artifact.meta.id,
+            path: artifact.path,
+            location: fileLocation(offset, lineAt(artifact.body, match.index)),
+            message: `${artifact.meta.id} contains the title of ${id}, which this ${request.visibility} projection does not admit.`,
+            remediation: "Reword the guidance so it does not repeat the title of an artifact this audience may not see (Core §9).",
+        }));
+    }
+    return diagnostics;
+}
+/** The title as a case-sensitive pattern: any whitespace between words, word-bounded at either end that is a word character. */
+export function titlePattern(title) {
+    const words = title.trim().split(/\s+/).map(escapeRegExp);
+    const start = /^[\p{L}\p{N}_]/u.test(title.trim()) ? "(?<![\\p{L}\\p{N}_])" : "";
+    const end = /[\p{L}\p{N}_]$/u.test(title.trim()) ? "(?![\\p{L}\\p{N}_])" : "";
+    return new RegExp(`${start}${words.join("\\s+")}${end}`, "u");
+}
+function escapeRegExp(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=references.js.map