@kernhq/module-quire 0.13.1 → 0.14.0

package/dist/server/export/pdf.js

@@ -0,0 +1,91 @@
+/**
+ * HTML to PDF, through Gotenberg.
+ *
+ * Gotenberg is a Chromium in a container, and it is already in the stack: `selfhost/docker-compose.yml`
+ * starts it under `--profile preview`, `dev/compose.yml` publishes it on 3500. Nothing in Kern had
+ * ever called it, so this is the first caller and the first thing that has to answer the question
+ * every optional dependency raises — **what happens when it is not there.**
+ *
+ * The answer is one sentence with three parts, and every one of them is load-bearing:
+ *
+ *   - it never produces a half file. The bytes are read in full, in memory, before anything is
+ *     written anywhere; a refusal, a timeout or a closed port throws before the caller has an
+ *     artefact to store, so an export job goes to `failed` with `file_id` still null rather than to
+ *     `done` with a truncated PDF a reader would find out about by opening it;
+ *   - the failure names the URL it tried and the variable that changes it, because the person who
+ *     reads it is an operator looking at a stack, not a developer looking at a stack trace. "PDF
+ *     export could not reach Gotenberg at http://gotenberg:3000" is actionable; `ECONNREFUSED` is
+ *     not;
+ *   - it is bounded. Chromium rendering a five-hundred-page handbook can take minutes or can hang,
+ *     and a job that hangs holds a worker for ever. The request carries a timeout and gives up.
+ *
+ * The default points at the compose service name rather than at nothing, so an instance that has the
+ * `preview` profile on needs no configuration at all and one that does not gets a refusal naming
+ * `GOTENBERG_URL`.
+ */
+import { KernError } from '@kernhq/kernel';
+/** Where the compose stack puts it. `dev/compose.yml` publishes 3500 on the host. */
+export const DEFAULT_GOTENBERG_URL = 'http://gotenberg:3000';
+export const gotenbergUrl = () => process.env.GOTENBERG_URL?.trim() || DEFAULT_GOTENBERG_URL;
+/** Long enough for a big handbook, short enough that a wedged Chromium is not a wedged worker. */
+const DEFAULT_TIMEOUT_MS = 120_000;
+/** A refusal's body is a diagnostic, not a document: enough to act on, never a page of HTML in a log. */
+const REASON_LIMIT = 400;
+/**
+ * A complete PDF, or a throw.
+ *
+ * The HTML has to be self-contained. Gotenberg's Chromium fetches whatever the document references,
+ * from inside its own container — so a presigned storage URL in an `<img src>` is both a network
+ * dependency this has no business having and a workspace uuid handed to a process that did not need
+ * it. Pictures reach here as `data:` URIs, put there by the caller.
+ */
+export async function htmlToPdf(html, options = {}) {
+    const base = (options.url ?? gotenbergUrl()).replace(/\/+$/, '');
+    const endpoint = `${base}/forms/chromium/convert/html`;
+    const form = new FormData();
+    // The part *must* be named `index.html`; Gotenberg renders that file and treats the rest as assets.
+    form.append('files', new Blob([html], { type: 'text/html' }), 'index.html');
+    form.append('paperWidth', '8.27');
+    form.append('paperHeight', '11.7');
+    form.append('marginTop', '0.6');
+    form.append('marginBottom', '0.6');
+    form.append('marginLeft', '0.6');
+    form.append('marginRight', '0.6');
+    form.append('printBackground', 'true');
+    // Without this a callout's tint and a code block's ground are dropped and the page loses its shape.
+    form.append('preferCssPageSize', 'false');
+    if (options.title)
+        form.append('metadata', JSON.stringify({ Title: options.title, Creator: 'Kern Quire' }));
+    let response;
+    try {
+        response = await fetch(endpoint, {
+            method: 'POST',
+            body: form,
+            signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        const why = err instanceof Error && err.name === 'TimeoutError' ? 'did not answer in time' : 'is not reachable';
+        throw new KernError('UNAVAILABLE', `PDF export needs Gotenberg, and ${base} ${why}. Start it (the self-host stack has it under ` +
+            '`--profile preview`) or point GOTENBERG_URL at one that is running.', { service: 'gotenberg', url: base });
+    }
+    if (!response.ok) {
+        const reason = await response.text().catch(() => '');
+        throw new KernError('UNAVAILABLE', `Gotenberg at ${base} refused to render this page (HTTP ${response.status}). ` +
+            `${reason.slice(0, REASON_LIMIT) || 'It gave no reason.'}`, { service: 'gotenberg', url: base, status: response.status });
+    }
+    const bytes = Buffer.from(await response.arrayBuffer());
+    /*
+     * A zero-length 200 is a real Gotenberg failure mode when Chromium dies mid-render, and it is the
+     * one that would otherwise be stored: an empty file, a job marked `done`, and a person who finds
+     * out by double-clicking it. `%PDF` is four bytes and settles it.
+     */
+    if (bytes.length === 0 || bytes.subarray(0, 4).toString('latin1') !== '%PDF')
+        throw new KernError('UNAVAILABLE', `Gotenberg at ${base} returned something that is not a PDF`, {
+            service: 'gotenberg',
+            url: base,
+            bytes: bytes.length,
+        });
+    return bytes;
+}
+//# sourceMappingURL=pdf.js.map

package/dist/server/export/pdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.js","sourceRoot":"","sources":["../../../src/server/export/pdf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAE5D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAA;AAEpG,kGAAkG;AAClG,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAElC,yGAAyG;AACzG,MAAM,YAAY,GAAG,GAAG,CAAA;AAUxB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,UAAsB,EAAE;IACpE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAChE,MAAM,QAAQ,GAAG,GAAG,IAAI,8BAA8B,CAAA;IAEtD,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,oGAAoG;IACpG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,CAAA;IAC3E,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC/B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IAChC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IACtC,oGAAoG;IACpG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAA;IACzC,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IAE3G,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;SACrE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GACP,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,kBAAkB,CAAA;QACrG,MAAM,IAAI,SAAS,CACjB,aAAa,EACb,mCAAmC,IAAI,IAAI,GAAG,+CAA+C;YAC3F,qEAAqE,EACvE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,CACpC,CAAA;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QACpD,MAAM,IAAI,SAAS,CACjB,aAAa,EACb,gBAAgB,IAAI,sCAAsC,QAAQ,CAAC,MAAM,KAAK;YAC5E,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,oBAAoB,EAAE,EAC5D,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC7D,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IACvD;;;;OAIG;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAC1E,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,gBAAgB,IAAI,uCAAuC,EAAE;YAC9F,OAAO,EAAE,WAAW;YACpB,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAA;IACJ,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/server/export/zip.d.ts

@@ -0,0 +1,31 @@
+export declare function crc32(data: Uint8Array): number;
+export interface ZipEntry {
+    /** the path inside the archive, `/`-separated and never absolute or `..`-relative */
+    path: string;
+    data: Uint8Array;
+}
+/** What a caller may not exceed, so a refusal can name the number it broke. */
+export declare const ZIP_LIMITS: {
+    maxTotalBytes: number;
+    maxEntryBytes: number;
+    maxEntries: number;
+};
+/**
+ * A path that cannot escape the folder somebody unzips into.
+ *
+ * A page title becomes a folder name, and a title is user input: `../../etc/whatever` is a real
+ * archive somebody can be handed, and a tool that follows it writes outside the extraction
+ * directory. Every segment is cleaned rather than rejected, because refusing an export because
+ * somebody named a page `C:\` would be absurd — but the cleaning is total, so nothing survives that
+ * a reader could resolve upwards.
+ */
+export declare function safeZipPath(path: string): string;
+/**
+ * Every entry, in one buffer.
+ *
+ * Sizes are known before anything is written, so no entry carries a data descriptor and no reader
+ * has to seek backwards — which is what makes the output openable by the strictest tools as well as
+ * by the forgiving ones.
+ */
+export declare function writeZip(entries: ZipEntry[], now?: Date): Buffer;
+//# sourceMappingURL=zip.d.ts.map

package/dist/server/export/zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.d.ts","sourceRoot":"","sources":["../../../src/server/export/zip.ts"],"names":[],"mappings":"AAqCA,wBAAgB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAI9C;AAkBD,MAAM,WAAW,QAAQ;IACvB,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,UAAU,CAAA;CACjB;AAED,+EAA+E;AAC/E,eAAO,MAAM,UAAU;;;;CAA4E,CAAA;AAEnG;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAchD;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAa,GAAG,MAAM,CA4EtE"}

package/dist/server/export/zip.js

@@ -0,0 +1,158 @@
+/**
+ * A zip container, written by hand.
+ *
+ * An export of a subtree or a space is a folder per page with its pictures beside it, which is a zip
+ * and cannot reasonably be anything else. Writing the container here rather than taking a dependency
+ * is a deliberate trade and worth stating: the format needed is the 1989 one — deflate or store, no
+ * encryption, no ZIP64, sizes known before the entry is written — and that is about a hundred lines
+ * of well-specified header. `archiver` and `jszip` are streaming libraries whose job is everything
+ * this does not need, and every module repository commits its own lockfile, so a dependency here is
+ * a lockfile refresh outside the workspace in six places before it is a line of code.
+ *
+ * The limits are the honest part of that trade, and they are checked rather than assumed. No ZIP64
+ * means an archive is refused above 4 GiB, an entry above 4 GiB, or 65,535 entries — refused with a
+ * message, never truncated into a file that unzips to something incomplete. An export that would hit
+ * one of those is a job that fails and says so, which is the rule the whole slice is built on.
+ *
+ * Everything is deflated except what deflate makes bigger, which is most already-compressed pictures.
+ * The comparison is done rather than guessed from the extension: a PNG of flat colour still shrinks.
+ */
+import { deflateRawSync } from 'node:zlib';
+/** 0xFFFFFFFF. Above this an offset or a size needs ZIP64, which this writer does not emit. */
+const MAX_32 = 0xffff_ffff;
+/** The count field in the end-of-central-directory record is 16 bits. */
+const MAX_ENTRIES = 0xffff;
+/** `crc32` over the whole entry, which the reader checks — a wrong one is a "corrupt archive". */
+const CRC_TABLE = (() => {
+    const table = new Int32Array(256);
+    for (let n = 0; n < 256; n++) {
+        let c = n;
+        for (let k = 0; k < 8; k++)
+            c = c & 1 ? 0xedb8_8320 ^ (c >>> 1) : c >>> 1;
+        table[n] = c;
+    }
+    return table;
+})();
+export function crc32(data) {
+    let c = 0xffff_ffff;
+    for (let i = 0; i < data.length; i++)
+        c = CRC_TABLE[(c ^ data[i]) & 0xff] ^ (c >>> 8);
+    return (c ^ 0xffff_ffff) >>> 0;
+}
+/**
+ * The MS-DOS date and time a zip entry carries, from a real clock.
+ *
+ * Not a constant: an archive whose every file is stamped 1980 looks broken in a file manager, and
+ * some restore tools treat it as such. The resolution is two seconds, which is the format's, and the
+ * clock is UTC because the format has no zone and a local one would make the same export produce
+ * different bytes on two machines.
+ */
+function dosStamp(at) {
+    const year = Math.max(1980, at.getUTCFullYear());
+    return {
+        time: (at.getUTCHours() << 11) | (at.getUTCMinutes() << 5) | (at.getUTCSeconds() >> 1),
+        date: ((year - 1980) << 9) | ((at.getUTCMonth() + 1) << 5) | at.getUTCDate(),
+    };
+}
+/** What a caller may not exceed, so a refusal can name the number it broke. */
+export const ZIP_LIMITS = { maxTotalBytes: MAX_32, maxEntryBytes: MAX_32, maxEntries: MAX_ENTRIES };
+/**
+ * A path that cannot escape the folder somebody unzips into.
+ *
+ * A page title becomes a folder name, and a title is user input: `../../etc/whatever` is a real
+ * archive somebody can be handed, and a tool that follows it writes outside the extraction
+ * directory. Every segment is cleaned rather than rejected, because refusing an export because
+ * somebody named a page `C:\` would be absurd — but the cleaning is total, so nothing survives that
+ * a reader could resolve upwards.
+ */
+export function safeZipPath(path) {
+    const segments = path
+        .split('/')
+        .map((segment) => segment
+        .normalize('NFC')
+        // biome-ignore lint/suspicious/noControlCharactersInRegex: control characters are exactly what a filename must not carry
+        .replace(/[\u0000-\u001f\u007f\\:*?"<>|]+/g, '-')
+        .replace(/^\.+$/, '-')
+        .replace(/^\s+|[\s.]+$/g, '')
+        .slice(0, 100))
+        .filter((segment) => segment.length > 0);
+    return segments.join('/');
+}
+/**
+ * Every entry, in one buffer.
+ *
+ * Sizes are known before anything is written, so no entry carries a data descriptor and no reader
+ * has to seek backwards — which is what makes the output openable by the strictest tools as well as
+ * by the forgiving ones.
+ */
+export function writeZip(entries, now = new Date()) {
+    if (entries.length > MAX_ENTRIES)
+        throw new Error(`This export has ${entries.length} files, and a zip may hold ${MAX_ENTRIES}`);
+    const { time, date } = dosStamp(now);
+    const locals = [];
+    const centrals = [];
+    let offset = 0;
+    for (const entry of entries) {
+        const name = Buffer.from(entry.path, 'utf8');
+        const raw = Buffer.from(entry.data.buffer, entry.data.byteOffset, entry.data.byteLength);
+        if (raw.length > MAX_32)
+            throw new Error(`${entry.path} is larger than 4 GB, which a zip cannot hold`);
+        const deflated = raw.length > 0 ? deflateRawSync(raw, { level: 6 }) : Buffer.alloc(0);
+        // Stored rather than deflated when deflate did not help — which is the normal case for a JPEG.
+        const compress = deflated.length < raw.length;
+        const body = compress ? deflated : raw;
+        const crc = crc32(raw);
+        if (offset > MAX_32 - body.length - name.length - 30)
+            throw new Error('This export is larger than 4 GB, which is more than a zip can address');
+        const local = Buffer.alloc(30);
+        local.writeUInt32LE(0x0403_4b50, 0);
+        local.writeUInt16LE(20, 4);
+        // 0x0800: the name below is UTF-8. Without it a Persian page title is mojibake on extraction.
+        local.writeUInt16LE(0x0800, 6);
+        local.writeUInt16LE(compress ? 8 : 0, 8);
+        local.writeUInt16LE(time, 10);
+        local.writeUInt16LE(date, 12);
+        local.writeUInt32LE(crc, 14);
+        local.writeUInt32LE(body.length, 18);
+        local.writeUInt32LE(raw.length, 22);
+        local.writeUInt16LE(name.length, 26);
+        local.writeUInt16LE(0, 28);
+        locals.push(local, name, body);
+        const central = Buffer.alloc(46);
+        central.writeUInt32LE(0x0201_4b50, 0);
+        // Made by a Unix zip (3), spec 2.0 — so the permission bits below are read as Unix ones.
+        central.writeUInt16LE(0x0314, 4);
+        central.writeUInt16LE(20, 6);
+        central.writeUInt16LE(0x0800, 8);
+        central.writeUInt16LE(compress ? 8 : 0, 10);
+        central.writeUInt16LE(time, 12);
+        central.writeUInt16LE(date, 14);
+        central.writeUInt32LE(crc, 16);
+        central.writeUInt32LE(body.length, 20);
+        central.writeUInt32LE(raw.length, 24);
+        central.writeUInt16LE(name.length, 28);
+        central.writeUInt16LE(0, 30);
+        central.writeUInt16LE(0, 32);
+        central.writeUInt16LE(0, 34);
+        central.writeUInt16LE(0, 36);
+        // 0o100644 in the high half: a regular file somebody owns and everyone may read.
+        // Multiplied rather than shifted — `<<` is a 32-bit *signed* operator, so `0o100644 << 16` is
+        // negative and `writeUInt32LE` throws on it. The whole archive fails to build, at the last entry.
+        central.writeUInt32LE(0o100644 * 0x1_0000, 38);
+        central.writeUInt32LE(offset, 42);
+        centrals.push(central, name);
+        offset += local.length + name.length + body.length;
+    }
+    const directory = Buffer.concat(centrals);
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(0x0605_4b50, 0);
+    end.writeUInt16LE(0, 4);
+    end.writeUInt16LE(0, 6);
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(directory.length, 12);
+    end.writeUInt32LE(offset, 16);
+    end.writeUInt16LE(0, 20);
+    return Buffer.concat([...locals, directory, end]);
+}
+//# sourceMappingURL=zip.js.map

package/dist/server/export/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../../../src/server/export/zip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE1C,+FAA+F;AAC/F,MAAM,MAAM,GAAG,WAAW,CAAA;AAC1B,yEAAyE;AACzE,MAAM,WAAW,GAAG,MAAM,CAAA;AAE1B,kGAAkG;AAClG,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;IACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACzE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,EAAE,CAAA;AAEJ,MAAM,UAAU,KAAK,CAAC,IAAgB;IACpC,IAAI,CAAC,GAAG,WAAW,CAAA;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IACvF,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,EAAQ;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAA;IAChD,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE;KAC7E,CAAA;AACH,CAAC;AAQD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;AAEnG;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAI;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO;SACJ,SAAS,CAAC,KAAK,CAAC;QACjB,yHAAyH;SACxH,OAAO,CAAC,kCAAkC,EAAE,GAAG,CAAC;SAChD,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACjB;SACA,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAmB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAC9B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,8BAA8B,WAAW,EAAE,CAAC,CAAA;IAE/F,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxF,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,+CAA+C,CAAC,CAAA;QACtG,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACrF,+FAA+F;QAC/F,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QAEtB,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE;YAClD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;QAE1F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9B,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QACnC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1B,8FAA8F;QAC9F,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAC9B,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7B,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7B,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC5B,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACpC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACnC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACpC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QACrC,yFAAyF;QACzF,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAChC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAChC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3C,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC/B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC/B,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC9B,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,iFAAiF;QACjF,8FAA8F;QAC9F,kGAAkG;QAClG,OAAO,CAAC,aAAa,CAAC,QAAQ,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC9C,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACjC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAE5B,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5B,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACjC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACpC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;AACnD,CAAC"}

package/dist/server/import/csv.d.ts

@@ -0,0 +1,77 @@
+/**
+ * A CSV as a Quire database: columns with guessed types, and rows carrying values of those types.
+ *
+ * A Notion export writes one `.csv` per database — the same file you would get from a spreadsheet —
+ * and a CSV has no types at all. Importing every column as text is the safe answer and the useless
+ * one: a date column you cannot sort by date and a number column that sorts 10 before 9 are the two
+ * complaints a database import gets, and both are the same complaint.
+ *
+ * **So the type is guessed, and the guess is reported.** Every column contributes a sentence to the
+ * import report saying what it was read as and on what evidence — "Due: read as a date, from 12 of 12
+ * values" — because a guess nobody is told about is indistinguishable from a mistake. The rules are
+ * ordered from most specific to least and every one of them demands *every* non-empty value in the
+ * column agree; one stray `n/a` in a date column makes it text, which is the right way round. A
+ * column that is text is not a failure and does not say "failed": it is a column whose values did not
+ * all look like anything narrower.
+ *
+ * What this file does **not** do is guess a relation, a rollup, a formula or a person. Each of those
+ * names something outside the file — another database, another column, a member of this workspace —
+ * and inventing one from a string of text is how an import produces a database that looks right and
+ * computes nothing. They stay text, and the report says so.
+ */
+import type { PropertyConfig, PropertyType } from '../../contract/index.js';
+/**
+ * RFC 4180, with the two departures every real file needs.
+ *
+ * A quoted field may hold newlines and `""` for a literal quote — that part is the specification. The
+ * departures are that a lone `\r` or a `\r\n` both end a record (Excel writes one, Notion the other)
+ * and that a stray quote inside an unquoted field is a character rather than an error, because the
+ * alternative is refusing a file every other reader opens.
+ */
+export declare function parseCsv(source: string): string[][];
+/** `2026-01-05`, `January 5, 2026`, `05/01/2026` — as the ISO string a date cell stores. */
+export declare function parseDateValue(raw: string): string | null;
+/** `1,234.50`, `$99`, `12%` — as the number a numeric sort and a rollup can use. */
+export declare function parseNumberValue(raw: string): {
+    value: number;
+    percent: boolean;
+    currency: string | null;
+} | null;
+export interface GuessedColumn {
+    name: string;
+    type: PropertyType;
+    config: PropertyConfig;
+    /**
+     * What the guess was and what it was made from, in one sentence for the report.
+     *
+     * Written here rather than at the call site because only this function knows the evidence — how
+     * many values agreed, how many distinct choices there were — and a reason assembled later would
+     * either repeat the rules or say less than it could.
+     */
+    note: string;
+}
+/**
+ * One column's type, from its values.
+ *
+ * The order is the whole algorithm: checkbox before number (`1` and `0` are both), number before
+ * date (a bare year is a number), url and email before select (a column of six addresses is not six
+ * choices), multi-select before select (a comma is the only thing that separates them), and select
+ * before text (the fallback that is always true).
+ */
+export declare function guessColumn(name: string, rawValues: string[]): GuessedColumn;
+/** `Design, Urgent` → `['Design', 'Urgent']`, which is how every exporter writes a multi-select. */
+export declare const splitChoices: (value: string) => string[];
+/**
+ * One cell, as the value the column's type stores.
+ *
+ * Null means "leave the key out of `props`" rather than "write null": an absent key is what every
+ * other writer in this module produces for an empty cell, and a null would make a `not_contains`
+ * filter behave differently for an imported row than for one somebody typed.
+ *
+ * `select` stores a **scalar** option id and `multi_select` an **array** of them, and the difference
+ * is load-bearing rather than cosmetic: `query.ts` compares a select as text through `props->>'key'`,
+ * so an array there stringifies to `["done"]` and matches no filter anybody can write. The cell
+ * component reads either shape, which is exactly why this is easy to get wrong and invisible on screen.
+ */
+export declare function coerceValue(column: GuessedColumn, raw: string): unknown;
+//# sourceMappingURL=csv.d.ts.map

package/dist/server/import/csv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.d.ts","sourceRoot":"","sources":["../../../src/server/import/csv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAgB,MAAM,yBAAyB,CAAA;AAWzF;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CA4DnD;AAeD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAazD;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,GACV;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CASrE;AAyBD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,YAAY,CAAA;IAClB,MAAM,EAAE,cAAc,CAAA;IACtB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,aAAa,CAmF5E;AAED,oGAAoG;AACpG,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAAM,EAIb,CAAA;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAwBvE"}

package/dist/server/import/csv.js

@@ -0,0 +1,263 @@
+/** Enough rows for the guess to mean something without reading a whole spreadsheet twice. */
+const SAMPLE = 500;
+/** Above this a column of distinct strings is prose, not a set of choices. */
+const MAX_OPTIONS = 40;
+/** A choice longer than this is a sentence somebody typed, not a label. */
+const MAX_OPTION_LENGTH = 60;
+/**
+ * RFC 4180, with the two departures every real file needs.
+ *
+ * A quoted field may hold newlines and `""` for a literal quote — that part is the specification. The
+ * departures are that a lone `\r` or a `\r\n` both end a record (Excel writes one, Notion the other)
+ * and that a stray quote inside an unquoted field is a character rather than an error, because the
+ * alternative is refusing a file every other reader opens.
+ */
+export function parseCsv(source) {
+    const rows = [];
+    let row = [];
+    let field = '';
+    let quoted = false;
+    let sawField = false;
+    const endField = () => {
+        row.push(field);
+        field = '';
+        sawField = false;
+    };
+    const endRow = () => {
+        endField();
+        rows.push(row);
+        row = [];
+    };
+    for (let i = 0; i < source.length; i++) {
+        const ch = source[i];
+        if (quoted) {
+            if (ch !== '"') {
+                field += ch;
+                continue;
+            }
+            if (source[i + 1] === '"') {
+                field += '"';
+                i++;
+                continue;
+            }
+            quoted = false;
+            continue;
+        }
+        if (ch === '"' && !sawField) {
+            quoted = true;
+            sawField = true;
+            continue;
+        }
+        if (ch === ',') {
+            endField();
+            continue;
+        }
+        if (ch === '\r') {
+            if (source[i + 1] === '\n')
+                i++;
+            endRow();
+            continue;
+        }
+        if (ch === '\n') {
+            endRow();
+            continue;
+        }
+        field += ch;
+        sawField = true;
+    }
+    // A file ending in a newline has already closed its last row; anything else is still open.
+    if (field.length > 0 || row.length > 0)
+        endRow();
+    // A trailing empty record is what a file ending in a newline leaves behind, and it is not a row.
+    while (rows.length > 0 && rows.at(-1).every((value) => value.trim() === ''))
+        rows.pop();
+    return rows;
+}
+const TRUE_WORDS = new Set(['yes', 'true', 'checked', 'done', 'y', '✓', '✔']);
+const FALSE_WORDS = new Set(['no', 'false', 'unchecked', 'n', '✗', '✘']);
+const RE_NUMBER = /^-?\d{1,3}(?:,\d{3})*(?:\.\d+)?$|^-?\d*\.?\d+$/;
+const RE_CURRENCY = /^\s*([$£€¥₹﷼])\s*/;
+const RE_EMAIL = /^[^\s@]+@[^\s@.]+\.[^\s@]+$/;
+const RE_ISO_DATE = /^\d{4}-\d{2}-\d{2}(?:[T ]\d{2}:\d{2}(?::\d{2})?(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})?)?$/;
+const RE_LONG_DATE = /^[A-Za-z]{3,9}\s+\d{1,2},?\s+\d{4}(?:\s+\d{1,2}:\d{2}\s*(?:[AaPp][Mm])?)?$/;
+const RE_SLASH_DATE = /^\d{1,2}\/\d{1,2}\/\d{4}$/;
+/** A value nobody filled in. Notion writes an empty cell; a spreadsheet sometimes writes a dash. */
+const isEmpty = (value) => value.trim() === '' || value.trim() === '-';
+/** `2026-01-05`, `January 5, 2026`, `05/01/2026` — as the ISO string a date cell stores. */
+export function parseDateValue(raw) {
+    const value = raw.trim();
+    if (RE_ISO_DATE.test(value)) {
+        const at = new Date(value.length === 10 ? `${value}T00:00:00Z` : value.replace(' ', 'T'));
+        return Number.isNaN(at.getTime()) ? null : value.length === 10 ? value : at.toISOString();
+    }
+    if (RE_LONG_DATE.test(value) || RE_SLASH_DATE.test(value)) {
+        const at = new Date(value);
+        if (Number.isNaN(at.getTime()))
+            return null;
+        // Date-only input has no time to keep, and a `date` cell draws the first ten characters.
+        return /\d{1,2}:\d{2}/.test(value) ? at.toISOString() : at.toISOString().slice(0, 10);
+    }
+    return null;
+}
+/** `1,234.50`, `$99`, `12%` — as the number a numeric sort and a rollup can use. */
+export function parseNumberValue(raw) {
+    let value = raw.trim();
+    const currency = RE_CURRENCY.exec(value)?.[1] ?? null;
+    if (currency)
+        value = value.replace(RE_CURRENCY, '');
+    const percent = value.endsWith('%');
+    if (percent)
+        value = value.slice(0, -1).trim();
+    if (!RE_NUMBER.test(value))
+        return null;
+    const parsed = Number(value.replaceAll(',', ''));
+    return Number.isFinite(parsed) ? { value: parsed, percent, currency } : null;
+}
+/** An option id derived from its label, so the same choice keeps the same id across two imports. */
+function optionId(label, taken) {
+    const base = label
+        .toLowerCase()
+        .normalize('NFKD')
+        .replace(/[^\p{Letter}\p{Number}]+/gu, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 48) || 'option';
+    let id = base;
+    for (let n = 2; taken.has(id); n++)
+        id = `${base}-${n}`;
+    taken.add(id);
+    return id;
+}
+/**
+ * The palette a select column's choices are coloured from.
+ *
+ * Cycled rather than random: two imports of the same file produce the same colours, and a person
+ * re-running an import after fixing one row does not find their board repainted.
+ */
+const OPTION_COLOURS = ['slate', 'accent', 'success', 'warning', 'danger', 'info'];
+/**
+ * One column's type, from its values.
+ *
+ * The order is the whole algorithm: checkbox before number (`1` and `0` are both), number before
+ * date (a bare year is a number), url and email before select (a column of six addresses is not six
+ * choices), multi-select before select (a comma is the only thing that separates them), and select
+ * before text (the fallback that is always true).
+ */
+export function guessColumn(name, rawValues) {
+    const values = rawValues.slice(0, SAMPLE).filter((value) => !isEmpty(value));
+    const total = values.length;
+    const from = `from ${total} of ${rawValues.length} value${rawValues.length === 1 ? '' : 's'}`;
+    const plain = (type, what, config = {}) => ({
+        name,
+        type,
+        config,
+        note: `${name}: read as ${what}, ${from}`,
+    });
+    if (total === 0)
+        return {
+            name,
+            type: 'text',
+            config: {},
+            note: `${name}: read as text — the column has no values to judge`,
+        };
+    const lower = values.map((value) => value.trim().toLowerCase());
+    if (lower.every((value) => TRUE_WORDS.has(value) || FALSE_WORDS.has(value)))
+        return plain('checkbox', 'a checkbox');
+    const numbers = values.map(parseNumberValue);
+    if (numbers.every((n) => n !== null)) {
+        const percent = numbers.every((n) => n.percent);
+        const currency = numbers.find((n) => n.currency)?.currency ?? null;
+        const decimals = values.map((value) => (value.split('.')[1] ?? '').replace(/[^\d]/g, '').length);
+        const config = {
+            format: percent ? 'percent' : currency ? 'currency' : 'plain',
+            precision: Math.min(8, Math.max(...decimals, 0)),
+        };
+        return plain('number', percent ? 'a percentage' : currency ? 'an amount of money' : 'a number', config);
+    }
+    if (values.every((value) => parseDateValue(value) !== null)) {
+        const withTime = values.some((value) => /\d{1,2}:\d{2}/.test(value));
+        return plain('date', withTime ? 'a date and time' : 'a date', { includeTime: withTime });
+    }
+    if (values.every((value) => /^https?:\/\/\S+$/i.test(value.trim())))
+        return plain('url', 'a link');
+    if (values.every((value) => RE_EMAIL.test(value.trim())))
+        return plain('email', 'an email address');
+    const options = (labels) => {
+        const taken = new Set();
+        const ids = new Map();
+        const out = [];
+        labels.forEach((label, index) => {
+            const id = optionId(label, taken);
+            ids.set(label, id);
+            out.push({ id, label, colour: OPTION_COLOURS[index % OPTION_COLOURS.length] });
+        });
+        return { options: out, ids };
+    };
+    // A multi-select is a select whose cells hold more than one choice, so it is only worth guessing
+    // when at least one cell actually does — otherwise every select with a comma in one label becomes
+    // one, and the column silently stops matching an `equals` filter.
+    if (values.some((value) => value.includes(','))) {
+        const parts = [...new Set(values.flatMap((value) => splitChoices(value)))];
+        if (parts.length > 0 && parts.length <= MAX_OPTIONS && parts.every((p) => p.length <= MAX_OPTION_LENGTH))
+            return {
+                name,
+                type: 'multi_select',
+                config: { options: options(parts).options },
+                note: `${name}: read as a multi-select with ${parts.length} choices, ${from}`,
+            };
+    }
+    const distinct = [...new Set(values.map((value) => value.trim()))];
+    if (distinct.length <= MAX_OPTIONS &&
+        distinct.length < total &&
+        distinct.every((value) => value.length <= MAX_OPTION_LENGTH))
+        return {
+            name,
+            type: 'select',
+            config: { options: options(distinct).options },
+            note: `${name}: read as a select with ${distinct.length} choices, ${from}`,
+        };
+    return plain('text', 'text');
+}
+/** `Design, Urgent` → `['Design', 'Urgent']`, which is how every exporter writes a multi-select. */
+export const splitChoices = (value) => value
+    .split(',')
+    .map((part) => part.trim())
+    .filter((part) => part.length > 0);
+/**
+ * One cell, as the value the column's type stores.
+ *
+ * Null means "leave the key out of `props`" rather than "write null": an absent key is what every
+ * other writer in this module produces for an empty cell, and a null would make a `not_contains`
+ * filter behave differently for an imported row than for one somebody typed.
+ *
+ * `select` stores a **scalar** option id and `multi_select` an **array** of them, and the difference
+ * is load-bearing rather than cosmetic: `query.ts` compares a select as text through `props->>'key'`,
+ * so an array there stringifies to `["done"]` and matches no filter anybody can write. The cell
+ * component reads either shape, which is exactly why this is easy to get wrong and invisible on screen.
+ */
+export function coerceValue(column, raw) {
+    if (isEmpty(raw))
+        return null;
+    const value = raw.trim();
+    switch (column.type) {
+        case 'checkbox':
+            return TRUE_WORDS.has(value.toLowerCase());
+        case 'number':
+            return parseNumberValue(value)?.value ?? null;
+        case 'date':
+            return parseDateValue(value);
+        case 'select': {
+            const option = (column.config.options ?? []).find((o) => o.label === value);
+            return option ? option.id : null;
+        }
+        case 'multi_select': {
+            const wanted = splitChoices(value);
+            const ids = wanted
+                .map((label) => (column.config.options ?? []).find((o) => o.label === label)?.id)
+                .filter((id) => id !== undefined);
+            return ids.length > 0 ? ids : null;
+        }
+        default:
+            return value;
+    }
+}
+//# sourceMappingURL=csv.js.map