@ixo/domain.md 0.3.0

package/dist/cli.js

@@ -0,0 +1,400 @@
+#!/usr/bin/env node
+import {
+  diffDomains,
+  exportDomain,
+  toSarif
+} from "./chunk-R6QZRNEX.js";
+import {
+  TemplateValidationError,
+  renderTemplateBundle
+} from "./chunk-BYBC2TSS.js";
+import {
+  getRules,
+  getSchemaSource,
+  getSpecification
+} from "./chunk-T3STBWXP.js";
+import {
+  lint
+} from "./chunk-XDIWMZVF.js";
+import {
+  MAX_DOMAIN_BYTES,
+  MAX_LINKED_BYTES,
+  MAX_SCALAR_LENGTH,
+  MAX_YAML_DEPTH,
+  MAX_YAML_NODES,
+  PACKAGE_VERSION
+} from "./chunk-G7PZJYAJ.js";
+
+// src/cli.ts
+import { lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, writeFile } from "fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "path";
+import { pathToFileURL } from "url";
+import { defineCommand, runCommand, showUsage } from "citty";
+import { isAlias, parseDocument, visit as visitYaml } from "yaml";
+var InputError = class extends Error {
+};
+var ConformanceError = class extends Error {
+};
+function stdinBytes(maxBytes) {
+  return new Promise((resolvePromise, reject) => {
+    const chunks = [];
+    let size = 0;
+    process.stdin.on("data", (chunk) => {
+      const bytes = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+      size += bytes.length;
+      if (size > maxBytes) {
+        process.stdin.pause();
+        reject(new InputError(`Standard input exceeds ${maxBytes} bytes.`));
+        return;
+      }
+      chunks.push(bytes);
+    });
+    process.stdin.once("end", () => resolvePromise(Buffer.concat(chunks)));
+    process.stdin.once("error", reject);
+  });
+}
+async function readInput(input) {
+  let bytes;
+  let sourceName = input;
+  if (input === "-") bytes = await stdinBytes(MAX_DOMAIN_BYTES);
+  else {
+    let path = resolve(input);
+    let stat = await lstat(path).catch(() => void 0);
+    if (!stat) throw new InputError(`Input does not exist: ${input}`);
+    if (stat.isSymbolicLink()) throw new InputError(`Symlink inputs are forbidden: ${input}`);
+    if (stat.isDirectory()) {
+      path = join(path, "domain.md");
+      stat = await lstat(path).catch(() => void 0);
+    }
+    if (!stat?.isFile() || stat.isSymbolicLink())
+      throw new InputError(`Expected a regular domain.md file: ${input}`);
+    if (stat.size > MAX_DOMAIN_BYTES)
+      throw new InputError(`Input exceeds ${MAX_DOMAIN_BYTES} bytes: ${input}`);
+    bytes = await readFile(path);
+    sourceName = path;
+  }
+  try {
+    return { content: new TextDecoder("utf-8", { fatal: true }).decode(bytes), sourceName };
+  } catch {
+    throw new InputError(`Input is not valid UTF-8: ${sourceName}`);
+  }
+}
+function textReport(report) {
+  const lines = report.findings.map((item) => {
+    const location = item.path ? ` ${item.path}` : "";
+    return `${item.severity.toUpperCase()} ${item.code}${location}: ${item.message}`;
+  });
+  lines.push(
+    `${report.ok ? "STATIC PASS" : "FAIL"}: ${report.summary.errors} errors, ${report.summary.warnings} warnings, ${report.summary.infos} info`
+  );
+  if (report.externalChecksRequired.length > 0) {
+    lines.push(
+      `External checks required: ${report.externalChecksRequired.map((check) => check.code).join(", ")}`
+    );
+  }
+  return `${lines.join("\n")}
+`;
+}
+function outputLint(report, format) {
+  if (format === "json") return `${JSON.stringify(report, null, 2)}
+`;
+  if (format === "sarif") return `${JSON.stringify(toSarif(report), null, 2)}
+`;
+  if (format === "text") return textReport(report);
+  throw new InputError(`Unsupported format ${format}.`);
+}
+var lintCommand = defineCommand({
+  meta: { name: "lint", description: "Statically validate a domain.md file or package." },
+  args: {
+    input: {
+      type: "positional",
+      required: true,
+      description: "File, package directory, or - for stdin"
+    },
+    format: { type: "string", default: "json", description: "json, text, or sarif" },
+    profile: {
+      type: "string",
+      description: "Assert authoring_draft, persisted_draft, anchored, or runtime"
+    }
+  },
+  async run({ args }) {
+    const input = await readInput(args.input);
+    const validProfiles = [
+      "authoring_draft",
+      "persisted_draft",
+      "anchored",
+      "runtime"
+    ];
+    if (args.profile !== void 0 && !validProfiles.includes(args.profile)) {
+      throw new InputError(`Unsupported profile ${args.profile}.`);
+    }
+    const profile = args.profile;
+    const report = lint(input.content, {
+      sourceName: input.sourceName,
+      ...profile === void 0 ? {} : { expectedProfile: profile }
+    });
+    process.stdout.write(outputLint(report, args.format));
+    process.exitCode = report.ok ? 0 : 1;
+  }
+});
+var diffCommand = defineCommand({
+  meta: { name: "diff", description: "Compare domain.md documents and classify changes." },
+  args: {
+    before: { type: "positional", required: true },
+    after: { type: "positional", required: true },
+    format: { type: "string", default: "json", description: "json or text" },
+    failOn: { type: "string", default: "regression", description: "regression or review" }
+  },
+  async run({ args }) {
+    const [before, after] = await Promise.all([readInput(args.before), readInput(args.after)]);
+    if (args.failOn !== "regression" && args.failOn !== "review")
+      throw new InputError(`Unsupported fail-on mode ${args.failOn}.`);
+    const failOn = args.failOn === "review" ? "review" : "regression";
+    const report = diffDomains(before.content, after.content, { failOn });
+    if (args.format === "json") process.stdout.write(`${JSON.stringify(report, null, 2)}
+`);
+    else if (args.format === "text") {
+      const lines = report.changes.map(
+        (change) => `${change.classification.toUpperCase()} ${change.path}`
+      );
+      lines.push(
+        `Regression: ${report.conformanceRegression}; review required: ${report.requiresReview}`
+      );
+      process.stdout.write(`${lines.join("\n")}
+`);
+    } else throw new InputError(`Unsupported format ${args.format}.`);
+    process.exitCode = report.regression ? 1 : 0;
+  }
+});
+var exportCommand = defineCommand({
+  meta: { name: "export", description: "Export a parsed JSON model or SARIF conformance report." },
+  args: {
+    input: { type: "positional", required: true },
+    format: { type: "string", required: true, description: "json or sarif" }
+  },
+  async run({ args }) {
+    if (args.format !== "json" && args.format !== "sarif")
+      throw new InputError("Export format must be json or sarif.");
+    const input = await readInput(args.input);
+    const report = lint(input.content, { sourceName: input.sourceName });
+    if (args.format === "json" && !report.ok) {
+      throw new ConformanceError(
+        `JSON model export refused: ${report.summary.errors} conformance error(s) remain.`
+      );
+    }
+    process.stdout.write(
+      exportDomain(input.content, { format: args.format, sourceName: input.sourceName })
+    );
+    process.exitCode = report.ok ? 0 : 1;
+  }
+});
+var specCommand = defineCommand({
+  meta: { name: "spec", description: "Output the bundled domain.md specification." },
+  args: {
+    format: { type: "string", default: "markdown", description: "markdown or json" },
+    rules: { type: "boolean", default: false }
+  },
+  run({ args }) {
+    if (args.format === "markdown") {
+      process.stdout.write(getSpecification());
+      if (args.rules) process.stdout.write(`
+
+${JSON.stringify(getRules(), null, 2)}
+`);
+    } else if (args.format === "json") {
+      process.stdout.write(
+        `${JSON.stringify({ specification: getSpecification(), ...args.rules ? { rules: getRules().rules } : {} }, null, 2)}
+`
+      );
+    } else throw new InputError(`Unsupported format ${args.format}.`);
+  }
+});
+var schemaCommand = defineCommand({
+  meta: { name: "schema", description: "Output the matching domain.md JSON Schema." },
+  run() {
+    process.stdout.write(getSchemaSource());
+  }
+});
+async function parseParameters(path) {
+  let bytes;
+  if (path === "-") bytes = await stdinBytes(MAX_LINKED_BYTES);
+  else {
+    const parameterPath = resolve(path);
+    const stat = await lstat(parameterPath).catch(() => void 0);
+    if (!stat?.isFile() || stat.isSymbolicLink())
+      throw new InputError(`Expected a regular parameter file: ${path}`);
+    if (stat.size > MAX_LINKED_BYTES)
+      throw new InputError(`Parameter file exceeds ${MAX_LINKED_BYTES} bytes: ${path}`);
+    bytes = await readFile(parameterPath);
+  }
+  const source = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  const document = parseDocument(source, { prettyErrors: true, uniqueKeys: true, version: "1.2" });
+  if (document.errors.length > 0 || document.warnings.length > 0)
+    throw new InputError("Parameter file contains invalid or unsafe YAML/JSON.");
+  let unsafe = false;
+  let nodes = 0;
+  let depth = 0;
+  let scalarTooLong = false;
+  visitYaml(document, {
+    Node(_key, node, parents) {
+      const candidate = node;
+      nodes += 1;
+      depth = Math.max(depth, parents.length + 1);
+      if (typeof candidate.value === "string" && candidate.value.length > MAX_SCALAR_LENGTH)
+        scalarTooLong = true;
+      if (isAlias(node) || candidate.anchor || candidate.tag?.startsWith("!")) unsafe = true;
+    },
+    Pair(_key, pair) {
+      const key = pair.key;
+      if (key?.value === "<<") unsafe = true;
+    }
+  });
+  if (unsafe)
+    throw new InputError("Parameter file contains aliases, anchors, merge keys, or custom tags.");
+  if (nodes > MAX_YAML_NODES || depth > MAX_YAML_DEPTH || scalarTooLong) {
+    throw new InputError("Parameter file exceeds YAML node, depth, or scalar limits.");
+  }
+  const value = document.toJS({ maxAliasCount: 0 });
+  if (typeof value !== "object" || value === null || Array.isArray(value))
+    throw new InputError("Parameters must be a mapping.");
+  return value;
+}
+function safeOutputPath(root, relativePath) {
+  const target = resolve(root, relativePath);
+  const fromRoot = relative(resolve(root), target);
+  if (fromRoot === "" || fromRoot === ".." || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot)) {
+    throw new InputError(`Rendered path escapes output root: ${relativePath}`);
+  }
+  return target;
+}
+var initCommand = defineCommand({
+  meta: {
+    name: "init",
+    description: "Render a verified protocol template bundle into an authoring draft."
+  },
+  args: {
+    manifest: { type: "string", required: true },
+    protocol: { type: "string", required: true },
+    derivedType: { type: "string", required: true },
+    params: { type: "string", required: true, description: "JSON/YAML path or -" },
+    output: { type: "string", required: true },
+    manifestSha256: { type: "string" },
+    manifestCid: { type: "string" },
+    ipfsGateway: { type: "string" }
+  },
+  async run({ args }) {
+    const output = resolve(args.output);
+    if (await lstat(output).then(
+      () => true,
+      () => false
+    ))
+      throw new InputError(`Output already exists: ${output}`);
+    const manifestUri = /^[A-Za-z][A-Za-z0-9+.-]*:/.test(args.manifest) ? args.manifest : pathToFileURL(resolve(args.manifest)).href;
+    const derivedTypes = [
+      "dao",
+      "organisation",
+      "project",
+      "asset",
+      "deed",
+      "investment",
+      "oracle",
+      "service",
+      "dataset",
+      "device",
+      "place",
+      "portfolio",
+      "marketplace",
+      "pod",
+      "claim_collection",
+      "custom"
+    ];
+    if (!derivedTypes.includes(args.derivedType)) {
+      throw new InputError(`Unsupported derived type ${args.derivedType}.`);
+    }
+    const derivedType = args.derivedType;
+    let result;
+    try {
+      result = await renderTemplateBundle({
+        manifestUri,
+        expectedProtocol: args.protocol,
+        derivedType,
+        parameters: await parseParameters(args.params),
+        ...args.manifestSha256 ? { manifestSha256: args.manifestSha256 } : {},
+        ...args.manifestCid ? { manifestCid: args.manifestCid } : {},
+        ...args.ipfsGateway ? { ipfsGateway: args.ipfsGateway } : {}
+      });
+    } catch (error) {
+      if (error instanceof TemplateValidationError) throw new ConformanceError(error.message);
+      throw error;
+    }
+    const parent = dirname(output);
+    await mkdir(parent, { recursive: true });
+    const temporary = await mkdtemp(join(parent, `.${basename(output)}-`));
+    try {
+      for (const file of result.files) {
+        const target = safeOutputPath(temporary, file.path);
+        await mkdir(dirname(target), { recursive: true });
+        await writeFile(target, file.bytes, { flag: "wx" });
+      }
+      await writeFile(join(temporary, "provenance.yaml"), result.provenance, { flag: "wx" });
+      if ((await readdir(temporary)).length === 0)
+        throw new InputError("Renderer produced no files.");
+      await rename(temporary, output);
+    } catch (error) {
+      await rm(temporary, { recursive: true, force: true });
+      throw error;
+    }
+    process.stdout.write(
+      `${JSON.stringify(
+        {
+          state: "authoring_draft",
+          output,
+          files: result.files.map((file) => ({
+            path: file.path,
+            role: file.role,
+            sha256: file.sha256
+          })),
+          validation: result.report.summary
+        },
+        null,
+        2
+      )}
+`
+    );
+  }
+});
+var main = defineCommand({
+  meta: {
+    name: "domain.md",
+    version: PACKAGE_VERSION,
+    description: "Authority-aware specification, validation, diff, export, and template tooling for domain.md."
+  },
+  subCommands: {
+    lint: lintCommand,
+    diff: diffCommand,
+    export: exportCommand,
+    spec: specCommand,
+    schema: schemaCommand,
+    init: initCommand
+  }
+});
+async function execute() {
+  const rawArgs = process.argv.slice(2);
+  if (rawArgs.includes("--help") || rawArgs.includes("-h") || rawArgs.length === 0) {
+    await showUsage(main);
+    return;
+  }
+  if (rawArgs.length === 1 && (rawArgs[0] === "--version" || rawArgs[0] === "-v")) {
+    process.stdout.write(`${PACKAGE_VERSION}
+`);
+    return;
+  }
+  await runCommand(main, { rawArgs });
+}
+execute().catch((error) => {
+  const message = error instanceof Error ? error.message : String(error);
+  process.stderr.write(`Error: ${message}
+`);
+  process.exitCode = error instanceof ConformanceError ? 1 : 2;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, writeFile } from 'node:fs/promises';\nimport { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nimport { defineCommand, runCommand, showUsage } from 'citty';\nimport { isAlias, parseDocument, visit as visitYaml } from 'yaml';\n\nimport {\n  MAX_DOMAIN_BYTES,\n  MAX_LINKED_BYTES,\n  MAX_SCALAR_LENGTH,\n  MAX_YAML_DEPTH,\n  MAX_YAML_NODES,\n  PACKAGE_VERSION,\n} from './constants.js';\nimport { diffDomains } from './diff.js';\nimport { exportDomain } from './export.js';\nimport { lint } from './lint.js';\nimport { toSarif } from './sarif.js';\nimport { getRules, getSchemaSource, getSpecification } from './spec.js';\nimport { TemplateValidationError } from './templates/errors.js';\nimport { renderTemplateBundle } from './templates/render.js';\nimport type { TemplateDerivedType } from './templates/types.js';\nimport type { ConformanceProfile, Finding, LintReport } from './types.js';\n\nclass InputError extends Error {}\nclass ConformanceError extends Error {}\n\nfunction stdinBytes(maxBytes: number): Promise<Buffer> {\n  return new Promise((resolvePromise, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    process.stdin.on('data', (chunk: Buffer | string) => {\n      const bytes = typeof chunk === 'string' ? Buffer.from(chunk) : chunk;\n      size += bytes.length;\n      if (size > maxBytes) {\n        process.stdin.pause();\n        reject(new InputError(`Standard input exceeds ${maxBytes} bytes.`));\n        return;\n      }\n      chunks.push(bytes);\n    });\n    process.stdin.once('end', () => resolvePromise(Buffer.concat(chunks)));\n    process.stdin.once('error', reject);\n  });\n}\n\nasync function readInput(input: string): Promise<{ content: string; sourceName: string }> {\n  let bytes: Uint8Array;\n  let sourceName = input;\n  if (input === '-') bytes = await stdinBytes(MAX_DOMAIN_BYTES);\n  else {\n    let path = resolve(input);\n    let stat = await lstat(path).catch(() => undefined);\n    if (!stat) throw new InputError(`Input does not exist: ${input}`);\n    if (stat.isSymbolicLink()) throw new InputError(`Symlink inputs are forbidden: ${input}`);\n    if (stat.isDirectory()) {\n      path = join(path, 'domain.md');\n      stat = await lstat(path).catch(() => undefined);\n    }\n    if (!stat?.isFile() || stat.isSymbolicLink())\n      throw new InputError(`Expected a regular domain.md file: ${input}`);\n    if (stat.size > MAX_DOMAIN_BYTES)\n      throw new InputError(`Input exceeds ${MAX_DOMAIN_BYTES} bytes: ${input}`);\n    bytes = await readFile(path);\n    sourceName = path;\n  }\n  try {\n    return { content: new TextDecoder('utf-8', { fatal: true }).decode(bytes), sourceName };\n  } catch {\n    throw new InputError(`Input is not valid UTF-8: ${sourceName}`);\n  }\n}\n\nfunction textReport(report: LintReport): string {\n  const lines = report.findings.map((item) => {\n    const location = item.path ? ` ${item.path}` : '';\n    return `${item.severity.toUpperCase()} ${item.code}${location}: ${item.message}`;\n  });\n  lines.push(\n    `${report.ok ? 'STATIC PASS' : 'FAIL'}: ${report.summary.errors} errors, ${report.summary.warnings} warnings, ${report.summary.infos} info`,\n  );\n  if (report.externalChecksRequired.length > 0) {\n    lines.push(\n      `External checks required: ${report.externalChecksRequired.map((check) => check.code).join(', ')}`,\n    );\n  }\n  return `${lines.join('\\n')}\\n`;\n}\n\nfunction outputLint(report: LintReport, format: string): string {\n  if (format === 'json') return `${JSON.stringify(report, null, 2)}\\n`;\n  if (format === 'sarif') return `${JSON.stringify(toSarif(report), null, 2)}\\n`;\n  if (format === 'text') return textReport(report);\n  throw new InputError(`Unsupported format ${format}.`);\n}\n\nconst lintCommand = defineCommand({\n  meta: { name: 'lint', description: 'Statically validate a domain.md file or package.' },\n  args: {\n    input: {\n      type: 'positional',\n      required: true,\n      description: 'File, package directory, or - for stdin',\n    },\n    format: { type: 'string', default: 'json', description: 'json, text, or sarif' },\n    profile: {\n      type: 'string',\n      description: 'Assert authoring_draft, persisted_draft, anchored, or runtime',\n    },\n  },\n  async run({ args }) {\n    const input = await readInput(args.input);\n    const validProfiles: ConformanceProfile[] = [\n      'authoring_draft',\n      'persisted_draft',\n      'anchored',\n      'runtime',\n    ];\n    if (args.profile !== undefined && !validProfiles.includes(args.profile as ConformanceProfile)) {\n      throw new InputError(`Unsupported profile ${args.profile}.`);\n    }\n    const profile = args.profile as ConformanceProfile | undefined;\n    const report = lint(input.content, {\n      sourceName: input.sourceName,\n      ...(profile === undefined ? {} : { expectedProfile: profile }),\n    });\n    process.stdout.write(outputLint(report, args.format));\n    process.exitCode = report.ok ? 0 : 1;\n  },\n});\n\nconst diffCommand = defineCommand({\n  meta: { name: 'diff', description: 'Compare domain.md documents and classify changes.' },\n  args: {\n    before: { type: 'positional', required: true },\n    after: { type: 'positional', required: true },\n    format: { type: 'string', default: 'json', description: 'json or text' },\n    failOn: { type: 'string', default: 'regression', description: 'regression or review' },\n  },\n  async run({ args }) {\n    const [before, after] = await Promise.all([readInput(args.before), readInput(args.after)]);\n    if (args.failOn !== 'regression' && args.failOn !== 'review')\n      throw new InputError(`Unsupported fail-on mode ${args.failOn}.`);\n    const failOn = args.failOn === 'review' ? 'review' : 'regression';\n    const report = diffDomains(before.content, after.content, { failOn });\n    if (args.format === 'json') process.stdout.write(`${JSON.stringify(report, null, 2)}\\n`);\n    else if (args.format === 'text') {\n      const lines = report.changes.map(\n        (change) => `${change.classification.toUpperCase()} ${change.path}`,\n      );\n      lines.push(\n        `Regression: ${report.conformanceRegression}; review required: ${report.requiresReview}`,\n      );\n      process.stdout.write(`${lines.join('\\n')}\\n`);\n    } else throw new InputError(`Unsupported format ${args.format}.`);\n    process.exitCode = report.regression ? 1 : 0;\n  },\n});\n\nconst exportCommand = defineCommand({\n  meta: { name: 'export', description: 'Export a parsed JSON model or SARIF conformance report.' },\n  args: {\n    input: { type: 'positional', required: true },\n    format: { type: 'string', required: true, description: 'json or sarif' },\n  },\n  async run({ args }) {\n    if (args.format !== 'json' && args.format !== 'sarif')\n      throw new InputError('Export format must be json or sarif.');\n    const input = await readInput(args.input);\n    const report = lint(input.content, { sourceName: input.sourceName });\n    if (args.format === 'json' && !report.ok) {\n      throw new ConformanceError(\n        `JSON model export refused: ${report.summary.errors} conformance error(s) remain.`,\n      );\n    }\n    process.stdout.write(\n      exportDomain(input.content, { format: args.format, sourceName: input.sourceName }),\n    );\n    process.exitCode = report.ok ? 0 : 1;\n  },\n});\n\nconst specCommand = defineCommand({\n  meta: { name: 'spec', description: 'Output the bundled domain.md specification.' },\n  args: {\n    format: { type: 'string', default: 'markdown', description: 'markdown or json' },\n    rules: { type: 'boolean', default: false },\n  },\n  run({ args }) {\n    if (args.format === 'markdown') {\n      process.stdout.write(getSpecification());\n      if (args.rules) process.stdout.write(`\\n\\n${JSON.stringify(getRules(), null, 2)}\\n`);\n    } else if (args.format === 'json') {\n      process.stdout.write(\n        `${JSON.stringify({ specification: getSpecification(), ...(args.rules ? { rules: getRules().rules } : {}) }, null, 2)}\\n`,\n      );\n    } else throw new InputError(`Unsupported format ${args.format}.`);\n  },\n});\n\nconst schemaCommand = defineCommand({\n  meta: { name: 'schema', description: 'Output the matching domain.md JSON Schema.' },\n  run() {\n    process.stdout.write(getSchemaSource());\n  },\n});\n\nasync function parseParameters(path: string): Promise<Record<string, unknown>> {\n  let bytes: Uint8Array;\n  if (path === '-') bytes = await stdinBytes(MAX_LINKED_BYTES);\n  else {\n    const parameterPath = resolve(path);\n    const stat = await lstat(parameterPath).catch(() => undefined);\n    if (!stat?.isFile() || stat.isSymbolicLink())\n      throw new InputError(`Expected a regular parameter file: ${path}`);\n    if (stat.size > MAX_LINKED_BYTES)\n      throw new InputError(`Parameter file exceeds ${MAX_LINKED_BYTES} bytes: ${path}`);\n    bytes = await readFile(parameterPath);\n  }\n  const source = new TextDecoder('utf-8', { fatal: true }).decode(bytes);\n  const document = parseDocument(source, { prettyErrors: true, uniqueKeys: true, version: '1.2' });\n  if (document.errors.length > 0 || document.warnings.length > 0)\n    throw new InputError('Parameter file contains invalid or unsafe YAML/JSON.');\n  let unsafe = false;\n  let nodes = 0;\n  let depth = 0;\n  let scalarTooLong = false;\n  visitYaml(document, {\n    Node(_key, node, parents) {\n      const candidate = node as { anchor?: string; tag?: string; value?: unknown };\n      nodes += 1;\n      depth = Math.max(depth, parents.length + 1);\n      if (typeof candidate.value === 'string' && candidate.value.length > MAX_SCALAR_LENGTH)\n        scalarTooLong = true;\n      if (isAlias(node) || candidate.anchor || candidate.tag?.startsWith('!')) unsafe = true;\n    },\n    Pair(_key, pair) {\n      const key = pair.key as { value?: unknown } | null;\n      if (key?.value === '<<') unsafe = true;\n    },\n  });\n  if (unsafe)\n    throw new InputError('Parameter file contains aliases, anchors, merge keys, or custom tags.');\n  if (nodes > MAX_YAML_NODES || depth > MAX_YAML_DEPTH || scalarTooLong) {\n    throw new InputError('Parameter file exceeds YAML node, depth, or scalar limits.');\n  }\n  const value: unknown = document.toJS({ maxAliasCount: 0 });\n  if (typeof value !== 'object' || value === null || Array.isArray(value))\n    throw new InputError('Parameters must be a mapping.');\n  return value as Record<string, unknown>;\n}\n\nfunction safeOutputPath(root: string, relativePath: string): string {\n  const target = resolve(root, relativePath);\n  const fromRoot = relative(resolve(root), target);\n  if (\n    fromRoot === '' ||\n    fromRoot === '..' ||\n    fromRoot.startsWith(`..${sep}`) ||\n    isAbsolute(fromRoot)\n  ) {\n    throw new InputError(`Rendered path escapes output root: ${relativePath}`);\n  }\n  return target;\n}\n\nconst initCommand = defineCommand({\n  meta: {\n    name: 'init',\n    description: 'Render a verified protocol template bundle into an authoring draft.',\n  },\n  args: {\n    manifest: { type: 'string', required: true },\n    protocol: { type: 'string', required: true },\n    derivedType: { type: 'string', required: true },\n    params: { type: 'string', required: true, description: 'JSON/YAML path or -' },\n    output: { type: 'string', required: true },\n    manifestSha256: { type: 'string' },\n    manifestCid: { type: 'string' },\n    ipfsGateway: { type: 'string' },\n  },\n  async run({ args }) {\n    const output = resolve(args.output);\n    if (\n      await lstat(output).then(\n        () => true,\n        () => false,\n      )\n    )\n      throw new InputError(`Output already exists: ${output}`);\n    const manifestUri = /^[A-Za-z][A-Za-z0-9+.-]*:/.test(args.manifest)\n      ? args.manifest\n      : pathToFileURL(resolve(args.manifest)).href;\n    const derivedTypes: TemplateDerivedType[] = [\n      'dao',\n      'organisation',\n      'project',\n      'asset',\n      'deed',\n      'investment',\n      'oracle',\n      'service',\n      'dataset',\n      'device',\n      'place',\n      'portfolio',\n      'marketplace',\n      'pod',\n      'claim_collection',\n      'custom',\n    ];\n    if (!derivedTypes.includes(args.derivedType as TemplateDerivedType)) {\n      throw new InputError(`Unsupported derived type ${args.derivedType}.`);\n    }\n    const derivedType = args.derivedType as TemplateDerivedType;\n    let result;\n    try {\n      result = await renderTemplateBundle({\n        manifestUri,\n        expectedProtocol: args.protocol,\n        derivedType,\n        parameters: await parseParameters(args.params),\n        ...(args.manifestSha256 ? { manifestSha256: args.manifestSha256 } : {}),\n        ...(args.manifestCid ? { manifestCid: args.manifestCid } : {}),\n        ...(args.ipfsGateway ? { ipfsGateway: args.ipfsGateway } : {}),\n      });\n    } catch (error) {\n      if (error instanceof TemplateValidationError) throw new ConformanceError(error.message);\n      throw error;\n    }\n    const parent = dirname(output);\n    await mkdir(parent, { recursive: true });\n    const temporary = await mkdtemp(join(parent, `.${basename(output)}-`));\n    try {\n      for (const file of result.files) {\n        const target = safeOutputPath(temporary, file.path);\n        await mkdir(dirname(target), { recursive: true });\n        await writeFile(target, file.bytes, { flag: 'wx' });\n      }\n      await writeFile(join(temporary, 'provenance.yaml'), result.provenance, { flag: 'wx' });\n      if ((await readdir(temporary)).length === 0)\n        throw new InputError('Renderer produced no files.');\n      await rename(temporary, output);\n    } catch (error) {\n      await rm(temporary, { recursive: true, force: true });\n      throw error;\n    }\n    process.stdout.write(\n      `${JSON.stringify(\n        {\n          state: 'authoring_draft',\n          output,\n          files: result.files.map((file) => ({\n            path: file.path,\n            role: file.role,\n            sha256: file.sha256,\n          })),\n          validation: result.report.summary,\n        },\n        null,\n        2,\n      )}\\n`,\n    );\n  },\n});\n\nconst main = defineCommand({\n  meta: {\n    name: 'domain.md',\n    version: PACKAGE_VERSION,\n    description:\n      'Authority-aware specification, validation, diff, export, and template tooling for domain.md.',\n  },\n  subCommands: {\n    lint: lintCommand,\n    diff: diffCommand,\n    export: exportCommand,\n    spec: specCommand,\n    schema: schemaCommand,\n    init: initCommand,\n  },\n});\n\nasync function execute(): Promise<void> {\n  const rawArgs = process.argv.slice(2);\n  if (rawArgs.includes('--help') || rawArgs.includes('-h') || rawArgs.length === 0) {\n    await showUsage(main);\n    return;\n  }\n  if (rawArgs.length === 1 && (rawArgs[0] === '--version' || rawArgs[0] === '-v')) {\n    process.stdout.write(`${PACKAGE_VERSION}\\n`);\n    return;\n  }\n  await runCommand(main, { rawArgs });\n}\n\nexecute().catch((error: unknown) => {\n  const message = error instanceof Error ? error.message : String(error);\n  process.stderr.write(`Error: ${message}\\n`);\n  process.exitCode = error instanceof ConformanceError ? 1 : 2;\n});\n\nexport type { Finding };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,OAAO,OAAO,SAAS,UAAU,SAAS,QAAQ,IAAI,iBAAiB;AAChF,SAAS,UAAU,SAAS,YAAY,MAAM,UAAU,SAAS,WAAW;AAC5E,SAAS,qBAAqB;AAE9B,SAAS,eAAe,YAAY,iBAAiB;AACrD,SAAS,SAAS,eAAe,SAAS,iBAAiB;AAoB3D,IAAM,aAAN,cAAyB,MAAM;AAAC;AAChC,IAAM,mBAAN,cAA+B,MAAM;AAAC;AAEtC,SAAS,WAAW,UAAmC;AACrD,SAAO,IAAI,QAAQ,CAAC,gBAAgB,WAAW;AAC7C,UAAM,SAAmB,CAAC;AAC1B,QAAI,OAAO;AACX,YAAQ,MAAM,GAAG,QAAQ,CAAC,UAA2B;AACnD,YAAM,QAAQ,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,IAAI;AAC/D,cAAQ,MAAM;AACd,UAAI,OAAO,UAAU;AACnB,gBAAQ,MAAM,MAAM;AACpB,eAAO,IAAI,WAAW,0BAA0B,QAAQ,SAAS,CAAC;AAClE;AAAA,MACF;AACA,aAAO,KAAK,KAAK;AAAA,IACnB,CAAC;AACD,YAAQ,MAAM,KAAK,OAAO,MAAM,eAAe,OAAO,OAAO,MAAM,CAAC,CAAC;AACrE,YAAQ,MAAM,KAAK,SAAS,MAAM;AAAA,EACpC,CAAC;AACH;AAEA,eAAe,UAAU,OAAiE;AACxF,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI,UAAU,IAAK,SAAQ,MAAM,WAAW,gBAAgB;AAAA,OACvD;AACH,QAAI,OAAO,QAAQ,KAAK;AACxB,QAAI,OAAO,MAAM,MAAM,IAAI,EAAE,MAAM,MAAM,MAAS;AAClD,QAAI,CAAC,KAAM,OAAM,IAAI,WAAW,yBAAyB,KAAK,EAAE;AAChE,QAAI,KAAK,eAAe,EAAG,OAAM,IAAI,WAAW,iCAAiC,KAAK,EAAE;AACxF,QAAI,KAAK,YAAY,GAAG;AACtB,aAAO,KAAK,MAAM,WAAW;AAC7B,aAAO,MAAM,MAAM,IAAI,EAAE,MAAM,MAAM,MAAS;AAAA,IAChD;AACA,QAAI,CAAC,MAAM,OAAO,KAAK,KAAK,eAAe;AACzC,YAAM,IAAI,WAAW,sCAAsC,KAAK,EAAE;AACpE,QAAI,KAAK,OAAO;AACd,YAAM,IAAI,WAAW,iBAAiB,gBAAgB,WAAW,KAAK,EAAE;AAC1E,YAAQ,MAAM,SAAS,IAAI;AAC3B,iBAAa;AAAA,EACf;AACA,MAAI;AACF,WAAO,EAAE,SAAS,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,WAAW;AAAA,EACxF,QAAQ;AACN,UAAM,IAAI,WAAW,6BAA6B,UAAU,EAAE;AAAA,EAChE;AACF;AAEA,SAAS,WAAW,QAA4B;AAC9C,QAAM,QAAQ,OAAO,SAAS,IAAI,CAAC,SAAS;AAC1C,UAAM,WAAW,KAAK,OAAO,IAAI,KAAK,IAAI,KAAK;AAC/C,WAAO,GAAG,KAAK,SAAS,YAAY,CAAC,IAAI,KAAK,IAAI,GAAG,QAAQ,KAAK,KAAK,OAAO;AAAA,EAChF,CAAC;AACD,QAAM;AAAA,IACJ,GAAG,OAAO,KAAK,gBAAgB,MAAM,KAAK,OAAO,QAAQ,MAAM,YAAY,OAAO,QAAQ,QAAQ,cAAc,OAAO,QAAQ,KAAK;AAAA,EACtI;AACA,MAAI,OAAO,uBAAuB,SAAS,GAAG;AAC5C,UAAM;AAAA,MACJ,6BAA6B,OAAO,uBAAuB,IAAI,CAAC,UAAU,MAAM,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,IAClG;AAAA,EACF;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;AAEA,SAAS,WAAW,QAAoB,QAAwB;AAC9D,MAAI,WAAW,OAAQ,QAAO,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAChE,MAAI,WAAW,QAAS,QAAO,GAAG,KAAK,UAAU,QAAQ,MAAM,GAAG,MAAM,CAAC,CAAC;AAAA;AAC1E,MAAI,WAAW,OAAQ,QAAO,WAAW,MAAM;AAC/C,QAAM,IAAI,WAAW,sBAAsB,MAAM,GAAG;AACtD;AAEA,IAAM,cAAc,cAAc;AAAA,EAChC,MAAM,EAAE,MAAM,QAAQ,aAAa,mDAAmD;AAAA,EACtF,MAAM;AAAA,IACJ,OAAO;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,aAAa;AAAA,IACf;AAAA,IACA,QAAQ,EAAE,MAAM,UAAU,SAAS,QAAQ,aAAa,uBAAuB;AAAA,IAC/E,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,IACf;AAAA,EACF;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,QAAQ,MAAM,UAAU,KAAK,KAAK;AACxC,UAAM,gBAAsC;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,KAAK,YAAY,UAAa,CAAC,cAAc,SAAS,KAAK,OAA6B,GAAG;AAC7F,YAAM,IAAI,WAAW,uBAAuB,KAAK,OAAO,GAAG;AAAA,IAC7D;AACA,UAAM,UAAU,KAAK;AACrB,UAAM,SAAS,KAAK,MAAM,SAAS;AAAA,MACjC,YAAY,MAAM;AAAA,MAClB,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,iBAAiB,QAAQ;AAAA,IAC9D,CAAC;AACD,YAAQ,OAAO,MAAM,WAAW,QAAQ,KAAK,MAAM,CAAC;AACpD,YAAQ,WAAW,OAAO,KAAK,IAAI;AAAA,EACrC;AACF,CAAC;AAED,IAAM,cAAc,cAAc;AAAA,EAChC,MAAM,EAAE,MAAM,QAAQ,aAAa,oDAAoD;AAAA,EACvF,MAAM;AAAA,IACJ,QAAQ,EAAE,MAAM,cAAc,UAAU,KAAK;AAAA,IAC7C,OAAO,EAAE,MAAM,cAAc,UAAU,KAAK;AAAA,IAC5C,QAAQ,EAAE,MAAM,UAAU,SAAS,QAAQ,aAAa,eAAe;AAAA,IACvE,QAAQ,EAAE,MAAM,UAAU,SAAS,cAAc,aAAa,uBAAuB;AAAA,EACvF;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,CAAC,QAAQ,KAAK,IAAI,MAAM,QAAQ,IAAI,CAAC,UAAU,KAAK,MAAM,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC;AACzF,QAAI,KAAK,WAAW,gBAAgB,KAAK,WAAW;AAClD,YAAM,IAAI,WAAW,4BAA4B,KAAK,MAAM,GAAG;AACjE,UAAM,SAAS,KAAK,WAAW,WAAW,WAAW;AACrD,UAAM,SAAS,YAAY,OAAO,SAAS,MAAM,SAAS,EAAE,OAAO,CAAC;AACpE,QAAI,KAAK,WAAW,OAAQ,SAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,aAC9E,KAAK,WAAW,QAAQ;AAC/B,YAAM,QAAQ,OAAO,QAAQ;AAAA,QAC3B,CAAC,WAAW,GAAG,OAAO,eAAe,YAAY,CAAC,IAAI,OAAO,IAAI;AAAA,MACnE;AACA,YAAM;AAAA,QACJ,eAAe,OAAO,qBAAqB,sBAAsB,OAAO,cAAc;AAAA,MACxF;AACA,cAAQ,OAAO,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,IAC9C,MAAO,OAAM,IAAI,WAAW,sBAAsB,KAAK,MAAM,GAAG;AAChE,YAAQ,WAAW,OAAO,aAAa,IAAI;AAAA,EAC7C;AACF,CAAC;AAED,IAAM,gBAAgB,cAAc;AAAA,EAClC,MAAM,EAAE,MAAM,UAAU,aAAa,0DAA0D;AAAA,EAC/F,MAAM;AAAA,IACJ,OAAO,EAAE,MAAM,cAAc,UAAU,KAAK;AAAA,IAC5C,QAAQ,EAAE,MAAM,UAAU,UAAU,MAAM,aAAa,gBAAgB;AAAA,EACzE;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,QAAI,KAAK,WAAW,UAAU,KAAK,WAAW;AAC5C,YAAM,IAAI,WAAW,sCAAsC;AAC7D,UAAM,QAAQ,MAAM,UAAU,KAAK,KAAK;AACxC,UAAM,SAAS,KAAK,MAAM,SAAS,EAAE,YAAY,MAAM,WAAW,CAAC;AACnE,QAAI,KAAK,WAAW,UAAU,CAAC,OAAO,IAAI;AACxC,YAAM,IAAI;AAAA,QACR,8BAA8B,OAAO,QAAQ,MAAM;AAAA,MACrD;AAAA,IACF;AACA,YAAQ,OAAO;AAAA,MACb,aAAa,MAAM,SAAS,EAAE,QAAQ,KAAK,QAAQ,YAAY,MAAM,WAAW,CAAC;AAAA,IACnF;AACA,YAAQ,WAAW,OAAO,KAAK,IAAI;AAAA,EACrC;AACF,CAAC;AAED,IAAM,cAAc,cAAc;AAAA,EAChC,MAAM,EAAE,MAAM,QAAQ,aAAa,8CAA8C;AAAA,EACjF,MAAM;AAAA,IACJ,QAAQ,EAAE,MAAM,UAAU,SAAS,YAAY,aAAa,mBAAmB;AAAA,IAC/E,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,EAC3C;AAAA,EACA,IAAI,EAAE,KAAK,GAAG;AACZ,QAAI,KAAK,WAAW,YAAY;AAC9B,cAAQ,OAAO,MAAM,iBAAiB,CAAC;AACvC,UAAI,KAAK,MAAO,SAAQ,OAAO,MAAM;AAAA;AAAA,EAAO,KAAK,UAAU,SAAS,GAAG,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,IACrF,WAAW,KAAK,WAAW,QAAQ;AACjC,cAAQ,OAAO;AAAA,QACb,GAAG,KAAK,UAAU,EAAE,eAAe,iBAAiB,GAAG,GAAI,KAAK,QAAQ,EAAE,OAAO,SAAS,EAAE,MAAM,IAAI,CAAC,EAAG,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,MACvH;AAAA,IACF,MAAO,OAAM,IAAI,WAAW,sBAAsB,KAAK,MAAM,GAAG;AAAA,EAClE;AACF,CAAC;AAED,IAAM,gBAAgB,cAAc;AAAA,EAClC,MAAM,EAAE,MAAM,UAAU,aAAa,6CAA6C;AAAA,EAClF,MAAM;AACJ,YAAQ,OAAO,MAAM,gBAAgB,CAAC;AAAA,EACxC;AACF,CAAC;AAED,eAAe,gBAAgB,MAAgD;AAC7E,MAAI;AACJ,MAAI,SAAS,IAAK,SAAQ,MAAM,WAAW,gBAAgB;AAAA,OACtD;AACH,UAAM,gBAAgB,QAAQ,IAAI;AAClC,UAAM,OAAO,MAAM,MAAM,aAAa,EAAE,MAAM,MAAM,MAAS;AAC7D,QAAI,CAAC,MAAM,OAAO,KAAK,KAAK,eAAe;AACzC,YAAM,IAAI,WAAW,sCAAsC,IAAI,EAAE;AACnE,QAAI,KAAK,OAAO;AACd,YAAM,IAAI,WAAW,0BAA0B,gBAAgB,WAAW,IAAI,EAAE;AAClF,YAAQ,MAAM,SAAS,aAAa;AAAA,EACtC;AACA,QAAM,SAAS,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK;AACrE,QAAM,WAAW,cAAc,QAAQ,EAAE,cAAc,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC;AAC/F,MAAI,SAAS,OAAO,SAAS,KAAK,SAAS,SAAS,SAAS;AAC3D,UAAM,IAAI,WAAW,sDAAsD;AAC7E,MAAI,SAAS;AACb,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,gBAAgB;AACpB,YAAU,UAAU;AAAA,IAClB,KAAK,MAAM,MAAM,SAAS;AACxB,YAAM,YAAY;AAClB,eAAS;AACT,cAAQ,KAAK,IAAI,OAAO,QAAQ,SAAS,CAAC;AAC1C,UAAI,OAAO,UAAU,UAAU,YAAY,UAAU,MAAM,SAAS;AAClE,wBAAgB;AAClB,UAAI,QAAQ,IAAI,KAAK,UAAU,UAAU,UAAU,KAAK,WAAW,GAAG,EAAG,UAAS;AAAA,IACpF;AAAA,IACA,KAAK,MAAM,MAAM;AACf,YAAM,MAAM,KAAK;AACjB,UAAI,KAAK,UAAU,KAAM,UAAS;AAAA,IACpC;AAAA,EACF,CAAC;AACD,MAAI;AACF,UAAM,IAAI,WAAW,uEAAuE;AAC9F,MAAI,QAAQ,kBAAkB,QAAQ,kBAAkB,eAAe;AACrE,UAAM,IAAI,WAAW,4DAA4D;AAAA,EACnF;AACA,QAAM,QAAiB,SAAS,KAAK,EAAE,eAAe,EAAE,CAAC;AACzD,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AACpE,UAAM,IAAI,WAAW,+BAA+B;AACtD,SAAO;AACT;AAEA,SAAS,eAAe,MAAc,cAA8B;AAClE,QAAM,SAAS,QAAQ,MAAM,YAAY;AACzC,QAAM,WAAW,SAAS,QAAQ,IAAI,GAAG,MAAM;AAC/C,MACE,aAAa,MACb,aAAa,QACb,SAAS,WAAW,KAAK,GAAG,EAAE,KAC9B,WAAW,QAAQ,GACnB;AACA,UAAM,IAAI,WAAW,sCAAsC,YAAY,EAAE;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,IAAM,cAAc,cAAc;AAAA,EAChC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,UAAU,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,IAC3C,UAAU,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,IAC3C,aAAa,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,IAC9C,QAAQ,EAAE,MAAM,UAAU,UAAU,MAAM,aAAa,sBAAsB;AAAA,IAC7E,QAAQ,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,IACzC,gBAAgB,EAAE,MAAM,SAAS;AAAA,IACjC,aAAa,EAAE,MAAM,SAAS;AAAA,IAC9B,aAAa,EAAE,MAAM,SAAS;AAAA,EAChC;AAAA,EACA,MAAM,IAAI,EAAE,KAAK,GAAG;AAClB,UAAM,SAAS,QAAQ,KAAK,MAAM;AAClC,QACE,MAAM,MAAM,MAAM,EAAE;AAAA,MAClB,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAEA,YAAM,IAAI,WAAW,0BAA0B,MAAM,EAAE;AACzD,UAAM,cAAc,4BAA4B,KAAK,KAAK,QAAQ,IAC9D,KAAK,WACL,cAAc,QAAQ,KAAK,QAAQ,CAAC,EAAE;AAC1C,UAAM,eAAsC;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa,SAAS,KAAK,WAAkC,GAAG;AACnE,YAAM,IAAI,WAAW,4BAA4B,KAAK,WAAW,GAAG;AAAA,IACtE;AACA,UAAM,cAAc,KAAK;AACzB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,qBAAqB;AAAA,QAClC;AAAA,QACA,kBAAkB,KAAK;AAAA,QACvB;AAAA,QACA,YAAY,MAAM,gBAAgB,KAAK,MAAM;AAAA,QAC7C,GAAI,KAAK,iBAAiB,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,QACrE,GAAI,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;AAAA,QAC5D,GAAI,KAAK,cAAc,EAAE,aAAa,KAAK,YAAY,IAAI,CAAC;AAAA,MAC9D,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,iBAAiB,wBAAyB,OAAM,IAAI,iBAAiB,MAAM,OAAO;AACtF,YAAM;AAAA,IACR;AACA,UAAM,SAAS,QAAQ,MAAM;AAC7B,UAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AACvC,UAAM,YAAY,MAAM,QAAQ,KAAK,QAAQ,IAAI,SAAS,MAAM,CAAC,GAAG,CAAC;AACrE,QAAI;AACF,iBAAW,QAAQ,OAAO,OAAO;AAC/B,cAAM,SAAS,eAAe,WAAW,KAAK,IAAI;AAClD,cAAM,MAAM,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,cAAM,UAAU,QAAQ,KAAK,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,MACpD;AACA,YAAM,UAAU,KAAK,WAAW,iBAAiB,GAAG,OAAO,YAAY,EAAE,MAAM,KAAK,CAAC;AACrF,WAAK,MAAM,QAAQ,SAAS,GAAG,WAAW;AACxC,cAAM,IAAI,WAAW,6BAA6B;AACpD,YAAM,OAAO,WAAW,MAAM;AAAA,IAChC,SAAS,OAAO;AACd,YAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACpD,YAAM;AAAA,IACR;AACA,YAAQ,OAAO;AAAA,MACb,GAAG,KAAK;AAAA,QACN;AAAA,UACE,OAAO;AAAA,UACP;AAAA,UACA,OAAO,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,YACjC,MAAM,KAAK;AAAA,YACX,MAAM,KAAK;AAAA,YACX,QAAQ,KAAK;AAAA,UACf,EAAE;AAAA,UACF,YAAY,OAAO,OAAO;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA;AAAA,IACH;AAAA,EACF;AACF,CAAC;AAED,IAAM,OAAO,cAAc;AAAA,EACzB,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,aACE;AAAA,EACJ;AAAA,EACA,aAAa;AAAA,IACX,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AACF,CAAC;AAED,eAAe,UAAyB;AACtC,QAAM,UAAU,QAAQ,KAAK,MAAM,CAAC;AACpC,MAAI,QAAQ,SAAS,QAAQ,KAAK,QAAQ,SAAS,IAAI,KAAK,QAAQ,WAAW,GAAG;AAChF,UAAM,UAAU,IAAI;AACpB;AAAA,EACF;AACA,MAAI,QAAQ,WAAW,MAAM,QAAQ,CAAC,MAAM,eAAe,QAAQ,CAAC,MAAM,OAAO;AAC/E,YAAQ,OAAO,MAAM,GAAG,eAAe;AAAA,CAAI;AAC3C;AAAA,EACF;AACA,QAAM,WAAW,MAAM,EAAE,QAAQ,CAAC;AACpC;AAEA,QAAQ,EAAE,MAAM,CAAC,UAAmB;AAClC,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAQ,OAAO,MAAM,UAAU,OAAO;AAAA,CAAI;AAC1C,UAAQ,WAAW,iBAAiB,mBAAmB,IAAI;AAC7D,CAAC;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+import { a as DiffOptions, b as DiffReport, E as ExportOptions } from './cli-KcUIQEiE.js';
+export { C as ChangeClassification, c as ConformanceProfile, d as ConstitutionDeclaration, e as ConstitutionStatus, f as ConstitutionalAI, g as ConstitutionalExecution, h as ConstitutionalGovernance, i as ConstitutionalInstrument, j as ConstitutionalInstrumentFunction, k as ConstitutionalSubjectProfile, l as DomainChange, m as DomainDocument, n as DomainMode, D as DomainRecord, o as DomainSection, p as ExternalCheck, F as Finding, q as FindingSummary, L as LegalEffect, r as LintOptions, s as LintReport, P as ParseOptions, t as ParseResult, S as Severity, u as SourceLocation } from './cli-KcUIQEiE.js';
+export { C as CONSTITUTIONAL_ARCHETYPES, a as CONSTITUTIONAL_SUBJECT_TYPES, b as CONSTITUTION_AI_MODES, c as CONSTITUTION_EXECUTION_MODES, d as CONSTITUTION_INSTRUMENT_FUNCTIONS, e as CONSTITUTION_STATUSES, f as CONSTITUTION_TYPES, P as PACKAGE_VERSION, S as SPEC_VERSION, l as lint, p as parseDomain } from './workers-Dr8B8a2O.js';
+export { CapsuleCanonicalizationError, CapsuleExternalCheck, CapsuleExternalCheckCategory, CapsuleValidationOptions, CapsuleValidationReport, JcsGoldenVector, JsonPrimitive, JsonValue, StrictJsonDocument, StrictJsonOptions, StrictJsonResult, canonicalizeCapsuleJson, capsuleJcsSha256, oracleCapsuleReleaseDigest, oracleCapsuleReleaseProjection, parseCapsuleJson, validateOracleCapsule } from './capsule/index.js';
+export { getOracleCapsuleContract, getOracleCapsuleJcsVectors, getOracleCapsuleSchema, getOracleCapsuleSourceLockSchema, getRules, getSchema, getSchemaSource, getSpecification, getTemplateManifestSchema } from './spec.js';
+export { F as FileTemplateResolver, H as HttpsTemplateResolver, I as IpfsTemplateResolver, R as RenderTemplateRequest, a as RenderTemplateResult, b as RenderedFile, c as ResolvedTemplateResource, d as TemplateBundleRecord, e as TemplateDerivedType, f as TemplateFileRecord, T as TemplateManifest, g as TemplateResolver, h as TemplateResolverContext, i as TemplateRole, j as TemplateValidationError, k as renderTemplateBundle } from './resolver-B3mwnjJq.js';
+
+declare function diffDomains(beforeContent: string, afterContent: string, options?: DiffOptions): DiffReport;
+
+declare function exportDomain(content: string, options: ExportOptions): string;
+
+export { DiffOptions, DiffReport, ExportOptions, diffDomains, exportDomain };

package/dist/index.js

@@ -0,0 +1,83 @@
+import {
+  diffDomains,
+  exportDomain
+} from "./chunk-R6QZRNEX.js";
+import {
+  CapsuleCanonicalizationError,
+  canonicalizeCapsuleJson,
+  capsuleJcsSha256,
+  oracleCapsuleReleaseDigest,
+  oracleCapsuleReleaseProjection,
+  parseCapsuleJson,
+  validateOracleCapsule
+} from "./chunk-W7MRQP7I.js";
+import {
+  FileTemplateResolver,
+  HttpsTemplateResolver,
+  IpfsTemplateResolver,
+  TemplateValidationError,
+  renderTemplateBundle
+} from "./chunk-BYBC2TSS.js";
+import {
+  getOracleCapsuleContract,
+  getOracleCapsuleJcsVectors,
+  getOracleCapsuleSchema,
+  getOracleCapsuleSourceLockSchema,
+  getRules,
+  getSchema,
+  getSchemaSource,
+  getSpecification,
+  getTemplateManifestSchema
+} from "./chunk-T3STBWXP.js";
+import {
+  lint,
+  parseDomain
+} from "./chunk-XDIWMZVF.js";
+import {
+  CONSTITUTIONAL_ARCHETYPES,
+  CONSTITUTIONAL_SUBJECT_TYPES,
+  CONSTITUTION_AI_MODES,
+  CONSTITUTION_EXECUTION_MODES,
+  CONSTITUTION_INSTRUMENT_FUNCTIONS,
+  CONSTITUTION_STATUSES,
+  CONSTITUTION_TYPES,
+  PACKAGE_VERSION,
+  SPEC_VERSION
+} from "./chunk-G7PZJYAJ.js";
+export {
+  CONSTITUTIONAL_ARCHETYPES,
+  CONSTITUTIONAL_SUBJECT_TYPES,
+  CONSTITUTION_AI_MODES,
+  CONSTITUTION_EXECUTION_MODES,
+  CONSTITUTION_INSTRUMENT_FUNCTIONS,
+  CONSTITUTION_STATUSES,
+  CONSTITUTION_TYPES,
+  CapsuleCanonicalizationError,
+  FileTemplateResolver,
+  HttpsTemplateResolver,
+  IpfsTemplateResolver,
+  PACKAGE_VERSION,
+  SPEC_VERSION,
+  TemplateValidationError,
+  canonicalizeCapsuleJson,
+  capsuleJcsSha256,
+  diffDomains,
+  exportDomain,
+  getOracleCapsuleContract,
+  getOracleCapsuleJcsVectors,
+  getOracleCapsuleSchema,
+  getOracleCapsuleSourceLockSchema,
+  getRules,
+  getSchema,
+  getSchemaSource,
+  getSpecification,
+  getTemplateManifestSchema,
+  lint,
+  oracleCapsuleReleaseDigest,
+  oracleCapsuleReleaseProjection,
+  parseCapsuleJson,
+  parseDomain,
+  renderTemplateBundle,
+  validateOracleCapsule
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/resolver-B3mwnjJq.d.ts

@@ -0,0 +1,96 @@
+import { s as LintReport } from './cli-KcUIQEiE.js';
+
+type TemplateRole = 'domain.md' | 'description' | 'changelog' | 'manifest' | 'playbook' | 'schema' | 'resource' | 'policy' | 'supporting';
+type TemplateDerivedType = 'dao' | 'organisation' | 'project' | 'asset' | 'deed' | 'investment' | 'oracle' | 'service' | 'dataset' | 'device' | 'place' | 'portfolio' | 'marketplace' | 'pod' | 'claim_collection' | 'custom';
+interface TemplateFileRecord {
+    role: TemplateRole;
+    path: string;
+    media_type: 'text/markdown' | 'application/yaml' | 'application/json' | 'text/plain';
+    max_bytes: number;
+    uri?: string;
+    cid?: string | null;
+    sha256?: string | null;
+    required: boolean;
+}
+interface TemplateBundleRecord {
+    derived_type: TemplateDerivedType;
+    bundle_version: string;
+    files: TemplateFileRecord[];
+}
+interface TemplateManifest {
+    version: '1.0.0-rc.3';
+    kind: 'domain.md/template-manifest';
+    protocol: string;
+    protocol_version: string;
+    bundles: TemplateBundleRecord[];
+}
+interface ResolvedTemplateResource {
+    uri: string;
+    bytes: Uint8Array;
+    mediaType?: string;
+}
+interface TemplateResolverContext {
+    maxBytes: number;
+    timeoutMs: number;
+}
+interface TemplateResolver {
+    supports(uri: string): boolean;
+    resolve(uri: string, context: TemplateResolverContext): Promise<ResolvedTemplateResource>;
+}
+interface RenderTemplateRequest {
+    manifestUri: string;
+    expectedProtocol: string;
+    derivedType: TemplateDerivedType;
+    parameters: Record<string, unknown>;
+    manifestSha256?: string;
+    manifestCid?: string;
+    ipfsGateway?: string;
+    resolvers?: TemplateResolver[];
+    timeoutMs?: number;
+}
+interface RenderedFile {
+    role: string;
+    path: string;
+    bytes: Uint8Array;
+    sha256: string;
+    sourceUri: string;
+}
+interface RenderTemplateResult {
+    files: RenderedFile[];
+    provenance: string;
+    report: LintReport;
+    manifest: TemplateManifest;
+}
+
+declare function renderTemplateBundle(request: RenderTemplateRequest): Promise<RenderTemplateResult>;
+
+declare class TemplateValidationError extends Error {
+    readonly name = "TemplateValidationError";
+}
+
+declare function validateHttpsTarget(url: URL, addresses?: string[]): void;
+declare class FileTemplateResolver implements TemplateResolver {
+    supports(uri: string): boolean;
+    resolve(uri: string, context: TemplateResolverContext): Promise<ResolvedTemplateResource>;
+    static resolveRelative(manifestUri: string, logicalPath: string): Promise<string>;
+}
+interface HttpsResolverOptions {
+    maxRedirects?: number;
+}
+declare class HttpsTemplateResolver implements TemplateResolver {
+    readonly maxRedirects: number;
+    constructor(options?: HttpsResolverOptions);
+    supports(uri: string): boolean;
+    resolve(uri: string, context: TemplateResolverContext): Promise<ResolvedTemplateResource>;
+    private fetch;
+}
+declare class IpfsTemplateResolver implements TemplateResolver {
+    private readonly gateway;
+    private readonly https;
+    constructor(gateway: string, httpsResolver?: HttpsTemplateResolver);
+    supports(uri: string): boolean;
+    resolve(uri: string, context: TemplateResolverContext): Promise<ResolvedTemplateResource>;
+}
+declare function relativeTemplateUri(manifestUri: string, logicalPath: string): string;
+
+export { FileTemplateResolver as F, HttpsTemplateResolver as H, IpfsTemplateResolver as I, type RenderTemplateRequest as R, type TemplateManifest as T, type RenderTemplateResult as a, type RenderedFile as b, type ResolvedTemplateResource as c, type TemplateBundleRecord as d, type TemplateDerivedType as e, type TemplateFileRecord as f, type TemplateResolver as g, type TemplateResolverContext as h, type TemplateRole as i, TemplateValidationError as j, renderTemplateBundle as k, relativeTemplateUri as r, validateHttpsTarget as v };

package/dist/spec.d.ts

@@ -0,0 +1,20 @@
+import { D as DomainRecord } from './cli-KcUIQEiE.js';
+
+declare function getSpecification(): string;
+declare function getSchema(): DomainRecord;
+declare function getSchemaSource(): string;
+declare function getTemplateManifestSchema(): DomainRecord;
+declare function getOracleCapsuleSchema(): DomainRecord;
+declare function getOracleCapsuleSourceLockSchema(): DomainRecord;
+declare function getOracleCapsuleContract(): string;
+declare function getOracleCapsuleJcsVectors(): unknown;
+declare function getRules(): {
+    specVersion: string;
+    rules: Array<{
+        code: string;
+        severity: string;
+        description: string;
+    }>;
+};
+
+export { getOracleCapsuleContract, getOracleCapsuleJcsVectors, getOracleCapsuleSchema, getOracleCapsuleSourceLockSchema, getRules, getSchema, getSchemaSource, getSpecification, getTemplateManifestSchema };