@kernhq/module-quire 0.13.1 → 0.15.0

package/dist/server/export/zip.js

@@ -0,0 +1,158 @@
+/**
+ * A zip container, written by hand.
+ *
+ * An export of a subtree or a space is a folder per page with its pictures beside it, which is a zip
+ * and cannot reasonably be anything else. Writing the container here rather than taking a dependency
+ * is a deliberate trade and worth stating: the format needed is the 1989 one — deflate or store, no
+ * encryption, no ZIP64, sizes known before the entry is written — and that is about a hundred lines
+ * of well-specified header. `archiver` and `jszip` are streaming libraries whose job is everything
+ * this does not need, and every module repository commits its own lockfile, so a dependency here is
+ * a lockfile refresh outside the workspace in six places before it is a line of code.
+ *
+ * The limits are the honest part of that trade, and they are checked rather than assumed. No ZIP64
+ * means an archive is refused above 4 GiB, an entry above 4 GiB, or 65,535 entries — refused with a
+ * message, never truncated into a file that unzips to something incomplete. An export that would hit
+ * one of those is a job that fails and says so, which is the rule the whole slice is built on.
+ *
+ * Everything is deflated except what deflate makes bigger, which is most already-compressed pictures.
+ * The comparison is done rather than guessed from the extension: a PNG of flat colour still shrinks.
+ */
+import { deflateRawSync } from 'node:zlib';
+/** 0xFFFFFFFF. Above this an offset or a size needs ZIP64, which this writer does not emit. */
+const MAX_32 = 0xffff_ffff;
+/** The count field in the end-of-central-directory record is 16 bits. */
+const MAX_ENTRIES = 0xffff;
+/** `crc32` over the whole entry, which the reader checks — a wrong one is a "corrupt archive". */
+const CRC_TABLE = (() => {
+    const table = new Int32Array(256);
+    for (let n = 0; n < 256; n++) {
+        let c = n;
+        for (let k = 0; k < 8; k++)
+            c = c & 1 ? 0xedb8_8320 ^ (c >>> 1) : c >>> 1;
+        table[n] = c;
+    }
+    return table;
+})();
+export function crc32(data) {
+    let c = 0xffff_ffff;
+    for (let i = 0; i < data.length; i++)
+        c = CRC_TABLE[(c ^ data[i]) & 0xff] ^ (c >>> 8);
+    return (c ^ 0xffff_ffff) >>> 0;
+}
+/**
+ * The MS-DOS date and time a zip entry carries, from a real clock.
+ *
+ * Not a constant: an archive whose every file is stamped 1980 looks broken in a file manager, and
+ * some restore tools treat it as such. The resolution is two seconds, which is the format's, and the
+ * clock is UTC because the format has no zone and a local one would make the same export produce
+ * different bytes on two machines.
+ */
+function dosStamp(at) {
+    const year = Math.max(1980, at.getUTCFullYear());
+    return {
+        time: (at.getUTCHours() << 11) | (at.getUTCMinutes() << 5) | (at.getUTCSeconds() >> 1),
+        date: ((year - 1980) << 9) | ((at.getUTCMonth() + 1) << 5) | at.getUTCDate(),
+    };
+}
+/** What a caller may not exceed, so a refusal can name the number it broke. */
+export const ZIP_LIMITS = { maxTotalBytes: MAX_32, maxEntryBytes: MAX_32, maxEntries: MAX_ENTRIES };
+/**
+ * A path that cannot escape the folder somebody unzips into.
+ *
+ * A page title becomes a folder name, and a title is user input: `../../etc/whatever` is a real
+ * archive somebody can be handed, and a tool that follows it writes outside the extraction
+ * directory. Every segment is cleaned rather than rejected, because refusing an export because
+ * somebody named a page `C:\` would be absurd — but the cleaning is total, so nothing survives that
+ * a reader could resolve upwards.
+ */
+export function safeZipPath(path) {
+    const segments = path
+        .split('/')
+        .map((segment) => segment
+        .normalize('NFC')
+        // biome-ignore lint/suspicious/noControlCharactersInRegex: control characters are exactly what a filename must not carry
+        .replace(/[\u0000-\u001f\u007f\\:*?"<>|]+/g, '-')
+        .replace(/^\.+$/, '-')
+        .replace(/^\s+|[\s.]+$/g, '')
+        .slice(0, 100))
+        .filter((segment) => segment.length > 0);
+    return segments.join('/');
+}
+/**
+ * Every entry, in one buffer.
+ *
+ * Sizes are known before anything is written, so no entry carries a data descriptor and no reader
+ * has to seek backwards — which is what makes the output openable by the strictest tools as well as
+ * by the forgiving ones.
+ */
+export function writeZip(entries, now = new Date()) {
+    if (entries.length > MAX_ENTRIES)
+        throw new Error(`This export has ${entries.length} files, and a zip may hold ${MAX_ENTRIES}`);
+    const { time, date } = dosStamp(now);
+    const locals = [];
+    const centrals = [];
+    let offset = 0;
+    for (const entry of entries) {
+        const name = Buffer.from(entry.path, 'utf8');
+        const raw = Buffer.from(entry.data.buffer, entry.data.byteOffset, entry.data.byteLength);
+        if (raw.length > MAX_32)
+            throw new Error(`${entry.path} is larger than 4 GB, which a zip cannot hold`);
+        const deflated = raw.length > 0 ? deflateRawSync(raw, { level: 6 }) : Buffer.alloc(0);
+        // Stored rather than deflated when deflate did not help — which is the normal case for a JPEG.
+        const compress = deflated.length < raw.length;
+        const body = compress ? deflated : raw;
+        const crc = crc32(raw);
+        if (offset > MAX_32 - body.length - name.length - 30)
+            throw new Error('This export is larger than 4 GB, which is more than a zip can address');
+        const local = Buffer.alloc(30);
+        local.writeUInt32LE(0x0403_4b50, 0);
+        local.writeUInt16LE(20, 4);
+        // 0x0800: the name below is UTF-8. Without it a Persian page title is mojibake on extraction.
+        local.writeUInt16LE(0x0800, 6);
+        local.writeUInt16LE(compress ? 8 : 0, 8);
+        local.writeUInt16LE(time, 10);
+        local.writeUInt16LE(date, 12);
+        local.writeUInt32LE(crc, 14);
+        local.writeUInt32LE(body.length, 18);
+        local.writeUInt32LE(raw.length, 22);
+        local.writeUInt16LE(name.length, 26);
+        local.writeUInt16LE(0, 28);
+        locals.push(local, name, body);
+        const central = Buffer.alloc(46);
+        central.writeUInt32LE(0x0201_4b50, 0);
+        // Made by a Unix zip (3), spec 2.0 — so the permission bits below are read as Unix ones.
+        central.writeUInt16LE(0x0314, 4);
+        central.writeUInt16LE(20, 6);
+        central.writeUInt16LE(0x0800, 8);
+        central.writeUInt16LE(compress ? 8 : 0, 10);
+        central.writeUInt16LE(time, 12);
+        central.writeUInt16LE(date, 14);
+        central.writeUInt32LE(crc, 16);
+        central.writeUInt32LE(body.length, 20);
+        central.writeUInt32LE(raw.length, 24);
+        central.writeUInt16LE(name.length, 28);
+        central.writeUInt16LE(0, 30);
+        central.writeUInt16LE(0, 32);
+        central.writeUInt16LE(0, 34);
+        central.writeUInt16LE(0, 36);
+        // 0o100644 in the high half: a regular file somebody owns and everyone may read.
+        // Multiplied rather than shifted — `<<` is a 32-bit *signed* operator, so `0o100644 << 16` is
+        // negative and `writeUInt32LE` throws on it. The whole archive fails to build, at the last entry.
+        central.writeUInt32LE(0o100644 * 0x1_0000, 38);
+        central.writeUInt32LE(offset, 42);
+        centrals.push(central, name);
+        offset += local.length + name.length + body.length;
+    }
+    const directory = Buffer.concat(centrals);
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(0x0605_4b50, 0);
+    end.writeUInt16LE(0, 4);
+    end.writeUInt16LE(0, 6);
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(directory.length, 12);
+    end.writeUInt32LE(offset, 16);
+    end.writeUInt16LE(0, 20);
+    return Buffer.concat([...locals, directory, end]);
+}
+//# sourceMappingURL=zip.js.map

package/dist/server/export/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../../../src/server/export/zip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE1C,+FAA+F;AAC/F,MAAM,MAAM,GAAG,WAAW,CAAA;AAC1B,yEAAyE;AACzE,MAAM,WAAW,GAAG,MAAM,CAAA;AAE1B,kGAAkG;AAClG,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;IACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACzE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,EAAE,CAAA;AAEJ,MAAM,UAAU,KAAK,CAAC,IAAgB;IACpC,IAAI,CAAC,GAAG,WAAW,CAAA;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,GAAG,IAAI,CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IACvF,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,EAAQ;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAA;IAChD,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE;KAC7E,CAAA;AACH,CAAC;AAQD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;AAEnG;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAI;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO;SACJ,SAAS,CAAC,KAAK,CAAC;QACjB,yHAAyH;SACxH,OAAO,CAAC,kCAAkC,EAAE,GAAG,CAAC;SAChD,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACjB;SACA,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAmB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAC9B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,8BAA8B,WAAW,EAAE,CAAC,CAAA;IAE/F,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxF,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,+CAA+C,CAAC,CAAA;QACtG,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACrF,+FAA+F;QAC/F,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QAEtB,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE;YAClD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;QAE1F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9B,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QACnC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1B,8FAA8F;QAC9F,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAC9B,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACxC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7B,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC7B,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC5B,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACpC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACnC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACpC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QACrC,yFAAyF;QACzF,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAChC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAChC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3C,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC/B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC/B,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC9B,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5B,iFAAiF;QACjF,8FAA8F;QAC9F,kGAAkG;QAClG,OAAO,CAAC,aAAa,CAAC,QAAQ,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC9C,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACjC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAE5B,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5B,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACjC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACpC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;AACnD,CAAC"}

package/dist/server/import/csv.d.ts

@@ -0,0 +1,77 @@
+/**
+ * A CSV as a Quire database: columns with guessed types, and rows carrying values of those types.
+ *
+ * A Notion export writes one `.csv` per database — the same file you would get from a spreadsheet —
+ * and a CSV has no types at all. Importing every column as text is the safe answer and the useless
+ * one: a date column you cannot sort by date and a number column that sorts 10 before 9 are the two
+ * complaints a database import gets, and both are the same complaint.
+ *
+ * **So the type is guessed, and the guess is reported.** Every column contributes a sentence to the
+ * import report saying what it was read as and on what evidence — "Due: read as a date, from 12 of 12
+ * values" — because a guess nobody is told about is indistinguishable from a mistake. The rules are
+ * ordered from most specific to least and every one of them demands *every* non-empty value in the
+ * column agree; one stray `n/a` in a date column makes it text, which is the right way round. A
+ * column that is text is not a failure and does not say "failed": it is a column whose values did not
+ * all look like anything narrower.
+ *
+ * What this file does **not** do is guess a relation, a rollup, a formula or a person. Each of those
+ * names something outside the file — another database, another column, a member of this workspace —
+ * and inventing one from a string of text is how an import produces a database that looks right and
+ * computes nothing. They stay text, and the report says so.
+ */
+import type { PropertyConfig, PropertyType } from '../../contract/index.js';
+/**
+ * RFC 4180, with the two departures every real file needs.
+ *
+ * A quoted field may hold newlines and `""` for a literal quote — that part is the specification. The
+ * departures are that a lone `\r` or a `\r\n` both end a record (Excel writes one, Notion the other)
+ * and that a stray quote inside an unquoted field is a character rather than an error, because the
+ * alternative is refusing a file every other reader opens.
+ */
+export declare function parseCsv(source: string): string[][];
+/** `2026-01-05`, `January 5, 2026`, `05/01/2026` — as the ISO string a date cell stores. */
+export declare function parseDateValue(raw: string): string | null;
+/** `1,234.50`, `$99`, `12%` — as the number a numeric sort and a rollup can use. */
+export declare function parseNumberValue(raw: string): {
+    value: number;
+    percent: boolean;
+    currency: string | null;
+} | null;
+export interface GuessedColumn {
+    name: string;
+    type: PropertyType;
+    config: PropertyConfig;
+    /**
+     * What the guess was and what it was made from, in one sentence for the report.
+     *
+     * Written here rather than at the call site because only this function knows the evidence — how
+     * many values agreed, how many distinct choices there were — and a reason assembled later would
+     * either repeat the rules or say less than it could.
+     */
+    note: string;
+}
+/**
+ * One column's type, from its values.
+ *
+ * The order is the whole algorithm: checkbox before number (`1` and `0` are both), number before
+ * date (a bare year is a number), url and email before select (a column of six addresses is not six
+ * choices), multi-select before select (a comma is the only thing that separates them), and select
+ * before text (the fallback that is always true).
+ */
+export declare function guessColumn(name: string, rawValues: string[]): GuessedColumn;
+/** `Design, Urgent` → `['Design', 'Urgent']`, which is how every exporter writes a multi-select. */
+export declare const splitChoices: (value: string) => string[];
+/**
+ * One cell, as the value the column's type stores.
+ *
+ * Null means "leave the key out of `props`" rather than "write null": an absent key is what every
+ * other writer in this module produces for an empty cell, and a null would make a `not_contains`
+ * filter behave differently for an imported row than for one somebody typed.
+ *
+ * `select` stores a **scalar** option id and `multi_select` an **array** of them, and the difference
+ * is load-bearing rather than cosmetic: `query.ts` compares a select as text through `props->>'key'`,
+ * so an array there stringifies to `["done"]` and matches no filter anybody can write. The cell
+ * component reads either shape, which is exactly why this is easy to get wrong and invisible on screen.
+ */
+export declare function coerceValue(column: GuessedColumn, raw: string): unknown;
+//# sourceMappingURL=csv.d.ts.map

package/dist/server/import/csv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.d.ts","sourceRoot":"","sources":["../../../src/server/import/csv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAgB,MAAM,yBAAyB,CAAA;AAWzF;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CA4DnD;AAeD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAazD;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,GACV;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CASrE;AAyBD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,YAAY,CAAA;IAClB,MAAM,EAAE,cAAc,CAAA;IACtB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,aAAa,CAmF5E;AAED,oGAAoG;AACpG,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAAM,EAIb,CAAA;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAwBvE"}

package/dist/server/import/csv.js

@@ -0,0 +1,263 @@
+/** Enough rows for the guess to mean something without reading a whole spreadsheet twice. */
+const SAMPLE = 500;
+/** Above this a column of distinct strings is prose, not a set of choices. */
+const MAX_OPTIONS = 40;
+/** A choice longer than this is a sentence somebody typed, not a label. */
+const MAX_OPTION_LENGTH = 60;
+/**
+ * RFC 4180, with the two departures every real file needs.
+ *
+ * A quoted field may hold newlines and `""` for a literal quote — that part is the specification. The
+ * departures are that a lone `\r` or a `\r\n` both end a record (Excel writes one, Notion the other)
+ * and that a stray quote inside an unquoted field is a character rather than an error, because the
+ * alternative is refusing a file every other reader opens.
+ */
+export function parseCsv(source) {
+    const rows = [];
+    let row = [];
+    let field = '';
+    let quoted = false;
+    let sawField = false;
+    const endField = () => {
+        row.push(field);
+        field = '';
+        sawField = false;
+    };
+    const endRow = () => {
+        endField();
+        rows.push(row);
+        row = [];
+    };
+    for (let i = 0; i < source.length; i++) {
+        const ch = source[i];
+        if (quoted) {
+            if (ch !== '"') {
+                field += ch;
+                continue;
+            }
+            if (source[i + 1] === '"') {
+                field += '"';
+                i++;
+                continue;
+            }
+            quoted = false;
+            continue;
+        }
+        if (ch === '"' && !sawField) {
+            quoted = true;
+            sawField = true;
+            continue;
+        }
+        if (ch === ',') {
+            endField();
+            continue;
+        }
+        if (ch === '\r') {
+            if (source[i + 1] === '\n')
+                i++;
+            endRow();
+            continue;
+        }
+        if (ch === '\n') {
+            endRow();
+            continue;
+        }
+        field += ch;
+        sawField = true;
+    }
+    // A file ending in a newline has already closed its last row; anything else is still open.
+    if (field.length > 0 || row.length > 0)
+        endRow();
+    // A trailing empty record is what a file ending in a newline leaves behind, and it is not a row.
+    while (rows.length > 0 && rows.at(-1).every((value) => value.trim() === ''))
+        rows.pop();
+    return rows;
+}
+const TRUE_WORDS = new Set(['yes', 'true', 'checked', 'done', 'y', '✓', '✔']);
+const FALSE_WORDS = new Set(['no', 'false', 'unchecked', 'n', '✗', '✘']);
+const RE_NUMBER = /^-?\d{1,3}(?:,\d{3})*(?:\.\d+)?$|^-?\d*\.?\d+$/;
+const RE_CURRENCY = /^\s*([$£€¥₹﷼])\s*/;
+const RE_EMAIL = /^[^\s@]+@[^\s@.]+\.[^\s@]+$/;
+const RE_ISO_DATE = /^\d{4}-\d{2}-\d{2}(?:[T ]\d{2}:\d{2}(?::\d{2})?(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})?)?$/;
+const RE_LONG_DATE = /^[A-Za-z]{3,9}\s+\d{1,2},?\s+\d{4}(?:\s+\d{1,2}:\d{2}\s*(?:[AaPp][Mm])?)?$/;
+const RE_SLASH_DATE = /^\d{1,2}\/\d{1,2}\/\d{4}$/;
+/** A value nobody filled in. Notion writes an empty cell; a spreadsheet sometimes writes a dash. */
+const isEmpty = (value) => value.trim() === '' || value.trim() === '-';
+/** `2026-01-05`, `January 5, 2026`, `05/01/2026` — as the ISO string a date cell stores. */
+export function parseDateValue(raw) {
+    const value = raw.trim();
+    if (RE_ISO_DATE.test(value)) {
+        const at = new Date(value.length === 10 ? `${value}T00:00:00Z` : value.replace(' ', 'T'));
+        return Number.isNaN(at.getTime()) ? null : value.length === 10 ? value : at.toISOString();
+    }
+    if (RE_LONG_DATE.test(value) || RE_SLASH_DATE.test(value)) {
+        const at = new Date(value);
+        if (Number.isNaN(at.getTime()))
+            return null;
+        // Date-only input has no time to keep, and a `date` cell draws the first ten characters.
+        return /\d{1,2}:\d{2}/.test(value) ? at.toISOString() : at.toISOString().slice(0, 10);
+    }
+    return null;
+}
+/** `1,234.50`, `$99`, `12%` — as the number a numeric sort and a rollup can use. */
+export function parseNumberValue(raw) {
+    let value = raw.trim();
+    const currency = RE_CURRENCY.exec(value)?.[1] ?? null;
+    if (currency)
+        value = value.replace(RE_CURRENCY, '');
+    const percent = value.endsWith('%');
+    if (percent)
+        value = value.slice(0, -1).trim();
+    if (!RE_NUMBER.test(value))
+        return null;
+    const parsed = Number(value.replaceAll(',', ''));
+    return Number.isFinite(parsed) ? { value: parsed, percent, currency } : null;
+}
+/** An option id derived from its label, so the same choice keeps the same id across two imports. */
+function optionId(label, taken) {
+    const base = label
+        .toLowerCase()
+        .normalize('NFKD')
+        .replace(/[^\p{Letter}\p{Number}]+/gu, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 48) || 'option';
+    let id = base;
+    for (let n = 2; taken.has(id); n++)
+        id = `${base}-${n}`;
+    taken.add(id);
+    return id;
+}
+/**
+ * The palette a select column's choices are coloured from.
+ *
+ * Cycled rather than random: two imports of the same file produce the same colours, and a person
+ * re-running an import after fixing one row does not find their board repainted.
+ */
+const OPTION_COLOURS = ['slate', 'accent', 'success', 'warning', 'danger', 'info'];
+/**
+ * One column's type, from its values.
+ *
+ * The order is the whole algorithm: checkbox before number (`1` and `0` are both), number before
+ * date (a bare year is a number), url and email before select (a column of six addresses is not six
+ * choices), multi-select before select (a comma is the only thing that separates them), and select
+ * before text (the fallback that is always true).
+ */
+export function guessColumn(name, rawValues) {
+    const values = rawValues.slice(0, SAMPLE).filter((value) => !isEmpty(value));
+    const total = values.length;
+    const from = `from ${total} of ${rawValues.length} value${rawValues.length === 1 ? '' : 's'}`;
+    const plain = (type, what, config = {}) => ({
+        name,
+        type,
+        config,
+        note: `${name}: read as ${what}, ${from}`,
+    });
+    if (total === 0)
+        return {
+            name,
+            type: 'text',
+            config: {},
+            note: `${name}: read as text — the column has no values to judge`,
+        };
+    const lower = values.map((value) => value.trim().toLowerCase());
+    if (lower.every((value) => TRUE_WORDS.has(value) || FALSE_WORDS.has(value)))
+        return plain('checkbox', 'a checkbox');
+    const numbers = values.map(parseNumberValue);
+    if (numbers.every((n) => n !== null)) {
+        const percent = numbers.every((n) => n.percent);
+        const currency = numbers.find((n) => n.currency)?.currency ?? null;
+        const decimals = values.map((value) => (value.split('.')[1] ?? '').replace(/[^\d]/g, '').length);
+        const config = {
+            format: percent ? 'percent' : currency ? 'currency' : 'plain',
+            precision: Math.min(8, Math.max(...decimals, 0)),
+        };
+        return plain('number', percent ? 'a percentage' : currency ? 'an amount of money' : 'a number', config);
+    }
+    if (values.every((value) => parseDateValue(value) !== null)) {
+        const withTime = values.some((value) => /\d{1,2}:\d{2}/.test(value));
+        return plain('date', withTime ? 'a date and time' : 'a date', { includeTime: withTime });
+    }
+    if (values.every((value) => /^https?:\/\/\S+$/i.test(value.trim())))
+        return plain('url', 'a link');
+    if (values.every((value) => RE_EMAIL.test(value.trim())))
+        return plain('email', 'an email address');
+    const options = (labels) => {
+        const taken = new Set();
+        const ids = new Map();
+        const out = [];
+        labels.forEach((label, index) => {
+            const id = optionId(label, taken);
+            ids.set(label, id);
+            out.push({ id, label, colour: OPTION_COLOURS[index % OPTION_COLOURS.length] });
+        });
+        return { options: out, ids };
+    };
+    // A multi-select is a select whose cells hold more than one choice, so it is only worth guessing
+    // when at least one cell actually does — otherwise every select with a comma in one label becomes
+    // one, and the column silently stops matching an `equals` filter.
+    if (values.some((value) => value.includes(','))) {
+        const parts = [...new Set(values.flatMap((value) => splitChoices(value)))];
+        if (parts.length > 0 && parts.length <= MAX_OPTIONS && parts.every((p) => p.length <= MAX_OPTION_LENGTH))
+            return {
+                name,
+                type: 'multi_select',
+                config: { options: options(parts).options },
+                note: `${name}: read as a multi-select with ${parts.length} choices, ${from}`,
+            };
+    }
+    const distinct = [...new Set(values.map((value) => value.trim()))];
+    if (distinct.length <= MAX_OPTIONS &&
+        distinct.length < total &&
+        distinct.every((value) => value.length <= MAX_OPTION_LENGTH))
+        return {
+            name,
+            type: 'select',
+            config: { options: options(distinct).options },
+            note: `${name}: read as a select with ${distinct.length} choices, ${from}`,
+        };
+    return plain('text', 'text');
+}
+/** `Design, Urgent` → `['Design', 'Urgent']`, which is how every exporter writes a multi-select. */
+export const splitChoices = (value) => value
+    .split(',')
+    .map((part) => part.trim())
+    .filter((part) => part.length > 0);
+/**
+ * One cell, as the value the column's type stores.
+ *
+ * Null means "leave the key out of `props`" rather than "write null": an absent key is what every
+ * other writer in this module produces for an empty cell, and a null would make a `not_contains`
+ * filter behave differently for an imported row than for one somebody typed.
+ *
+ * `select` stores a **scalar** option id and `multi_select` an **array** of them, and the difference
+ * is load-bearing rather than cosmetic: `query.ts` compares a select as text through `props->>'key'`,
+ * so an array there stringifies to `["done"]` and matches no filter anybody can write. The cell
+ * component reads either shape, which is exactly why this is easy to get wrong and invisible on screen.
+ */
+export function coerceValue(column, raw) {
+    if (isEmpty(raw))
+        return null;
+    const value = raw.trim();
+    switch (column.type) {
+        case 'checkbox':
+            return TRUE_WORDS.has(value.toLowerCase());
+        case 'number':
+            return parseNumberValue(value)?.value ?? null;
+        case 'date':
+            return parseDateValue(value);
+        case 'select': {
+            const option = (column.config.options ?? []).find((o) => o.label === value);
+            return option ? option.id : null;
+        }
+        case 'multi_select': {
+            const wanted = splitChoices(value);
+            const ids = wanted
+                .map((label) => (column.config.options ?? []).find((o) => o.label === label)?.id)
+                .filter((id) => id !== undefined);
+            return ids.length > 0 ? ids : null;
+        }
+        default:
+            return value;
+    }
+}
+//# sourceMappingURL=csv.js.map

package/dist/server/import/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../../src/server/import/csv.ts"],"names":[],"mappings":"AAuBA,6FAA6F;AAC7F,MAAM,MAAM,GAAG,GAAG,CAAA;AAElB,8EAA8E;AAC9E,MAAM,WAAW,GAAG,EAAE,CAAA;AAEtB,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,MAAM,IAAI,GAAe,EAAE,CAAA;IAC3B,IAAI,GAAG,GAAa,EAAE,CAAA;IACtB,IAAI,KAAK,GAAG,EAAE,CAAA;IACd,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACf,KAAK,GAAG,EAAE,CAAA;QACV,QAAQ,GAAG,KAAK,CAAA;IAClB,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,QAAQ,EAAE,CAAA;QACV,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACd,GAAG,GAAG,EAAE,CAAA;IACV,CAAC,CAAA;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAA;QACrB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,KAAK,IAAI,EAAE,CAAA;gBACX,SAAQ;YACV,CAAC;YACD,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1B,KAAK,IAAI,GAAG,CAAA;gBACZ,CAAC,EAAE,CAAA;gBACH,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,KAAK,CAAA;YACd,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAA;YACb,QAAQ,GAAG,IAAI,CAAA;YACf,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,EAAE,CAAA;YACV,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAA;YAC/B,MAAM,EAAE,CAAA;YACR,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,EAAE,CAAA;YACR,SAAQ;QACV,CAAC;QACD,KAAK,IAAI,EAAE,CAAA;QACX,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,2FAA2F;IAC3F,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,EAAE,CAAA;IAEhD,iGAAiG;IACjG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,CAAA;IACxF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AAC7E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AAExE,MAAM,SAAS,GAAG,gDAAgD,CAAA;AAClE,MAAM,WAAW,GAAG,mBAAmB,CAAA;AACvC,MAAM,QAAQ,GAAG,6BAA6B,CAAA;AAC9C,MAAM,WAAW,GAAG,qFAAqF,CAAA;AACzG,MAAM,YAAY,GAAG,4EAA4E,CAAA;AACjG,MAAM,aAAa,GAAG,2BAA2B,CAAA;AAEjD,oGAAoG;AACpG,MAAM,OAAO,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAA;AAEvF,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACxB,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACzF,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3F,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,yFAAyF;QACzF,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAC9B,GAAW;IAEX,IAAI,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IACrD,IAAI,QAAQ;QAAE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,OAAO;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9E,CAAC;AAED,oGAAoG;AACpG,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAkB;IACjD,MAAM,IAAI,GACR,KAAK;SACF,WAAW,EAAE;SACb,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,4BAA4B,EAAE,GAAG,CAAC;SAC1C,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAA;IAC7B,IAAI,EAAE,GAAG,IAAI,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;QAAE,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAA;IACvD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACb,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;AAgBlF;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,SAAmB;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAA;IAC3B,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,SAAS,CAAC,MAAM,SAAS,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;IAC7F,MAAM,KAAK,GAAG,CAAC,IAAkB,EAAE,IAAY,EAAE,SAAyB,EAAE,EAAiB,EAAE,CAAC,CAAC;QAC/F,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,IAAI,EAAE,GAAG,IAAI,aAAa,IAAI,KAAK,IAAI,EAAE;KAC1C,CAAC,CAAA;IAEF,IAAI,KAAK,KAAK,CAAC;QACb,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,GAAG,IAAI,oDAAoD;SAClE,CAAA;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IAC/D,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IAExC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAAC,OAAO,CAAC,CAAA;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAA;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;QAChG,MAAM,MAAM,GAAmB;YAC7B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YAC7D,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;SACjD,CAAA;QACD,OAAO,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACzG,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACpE,OAAO,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAClG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;IAEnG,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAyD,EAAE;QAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;QACrC,MAAM,GAAG,GAAmB,EAAE,CAAA;QAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACjC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,GAAG,cAAc,CAAC,MAAM,CAAE,EAAE,CAAC,CAAA;QACjF,CAAC,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;IAC9B,CAAC,CAAA;IAED,iGAAiG;IACjG,kGAAkG;IAClG,kEAAkE;IAClE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,iBAAiB,CAAC;YACtG,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;gBAC3C,IAAI,EAAE,GAAG,IAAI,iCAAiC,KAAK,CAAC,MAAM,aAAa,IAAI,EAAE;aAC9E,CAAA;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAClE,IACE,QAAQ,CAAC,MAAM,IAAI,WAAW;QAC9B,QAAQ,CAAC,MAAM,GAAG,KAAK;QACvB,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC;QAE5D,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;YAC9C,IAAI,EAAE,GAAG,IAAI,2BAA2B,QAAQ,CAAC,MAAM,aAAa,IAAI,EAAE;SAC3E,CAAA;IAEH,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAY,EAAE,CACtD,KAAK;KACF,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAEtC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,MAAqB,EAAE,GAAW;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACxB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QAC5C,KAAK,QAAQ;YACX,OAAO,gBAAgB,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;QAC/C,KAAK,MAAM;YACT,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;YAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAClC,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,GAAG,GAAG,MAAM;iBACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;iBAChF,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAA;YACjD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACpC,CAAC;QACD;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC"}

package/dist/server/import/html.d.ts

@@ -0,0 +1,52 @@
+/**
+ * HTML to a page document, for the one source that has no Markdown: a Confluence space export.
+ *
+ * Confluence's "Export space → HTML" writes one already-rendered `.html` per page, an `index.html`
+ * listing them, and an `attachments/` tree. There is no storage format to read — the wiki markup and
+ * the `<ac:…>` macros are gone by the time the export is written — so the rendered HTML *is* the
+ * document, and reading it is the only route in that does not ask a customer to install a plugin.
+ *
+ * **A tag soup parser, deliberately, and not a DOM.** No `jsdom`, no `parse5`: this reads one
+ * bounded, machine-written dialect, and the whole job is a tokeniser plus a stack that closes
+ * implied tags. Nothing here is executed, nothing is fetched, and no attribute reaches a page
+ * unfiltered — a `src` and an `href` come out as raw strings for `plan.ts` to resolve and everything
+ * else is dropped, so a `<script>`, an `onclick` or a `javascript:` href has nowhere to land. That is
+ * the property that matters, because the input is a file somebody uploaded.
+ *
+ * Confluence's own furniture is recognised where it maps onto something Quire has — an information
+ * macro is a callout, a `syntaxhighlighter` block is a code block, an inline task list is a task list
+ * — and ignored where it does not. What it cannot map, it keeps as prose rather than dropping, which
+ * is the same rule the Markdown reader follows and for the same reason.
+ */
+import type { PageDoc } from '@kernhq/ui/editor/page-doc';
+export interface HtmlElement {
+    tag: string;
+    attrs: Record<string, string>;
+    children: HtmlNode[];
+}
+export type HtmlNode = HtmlElement | {
+    text: string;
+};
+/** `&amp;`, `&#8212;`, `&#x2014;` — everything else is left exactly as it was written. */
+export declare function decodeEntities(value: string): string;
+/**
+ * A document as a tree.
+ *
+ * Comments, doctypes and processing instructions are skipped rather than kept: none of them can
+ * become a node, and a comment holding `<div>` would otherwise open one.
+ */
+export declare function parseHtml(source: string): HtmlElement;
+/** The first element matching a predicate, depth first. */
+export declare function findElement(node: HtmlNode, match: (el: HtmlElement) => boolean): HtmlElement | null;
+/** Every class on an element, lower-cased — Confluence's markup is identified entirely by class. */
+export declare const classesOf: (el: HtmlElement) => string[];
+/** All the text under a node, with runs of whitespace collapsed. What a title needs and no more. */
+export declare function textContent(node: HtmlNode): string;
+/**
+ * An HTML fragment as a page document.
+ *
+ * Always a `doc`: an element holding nothing is an empty page, which is a correct reading of an empty
+ * page rather than a failure.
+ */
+export declare function htmlToPageDoc(node: HtmlNode): PageDoc;
+//# sourceMappingURL=html.d.ts.map

package/dist/server/import/html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.d.ts","sourceRoot":"","sources":["../../../src/server/import/html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,OAAO,EAA4B,MAAM,4BAA4B,CAAA;AAMnF,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,QAAQ,EAAE,QAAQ,EAAE,CAAA;CACrB;AACD,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AA6ErD,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAapD;AAaD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAyErD;AAED,2DAA2D;AAC3D,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,WAAW,KAAK,OAAO,GAAG,WAAW,GAAG,IAAI,CAQnG;AAED,oGAAoG;AACpG,eAAO,MAAM,SAAS,GAAI,IAAI,WAAW,KAAG,MAAM,EAAuD,CAAA;AAEzG,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAGlD;AAkSD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAErD"}