@micacms/runtime 0.4.1 → 0.5.0-rc.2

package/dist/db/driver.js

@@ -1,95 +0,0 @@
-/**
- * SQLite driver.
- *
- * Everything above this file talks to `SqlDatabase`, never to `node:sqlite`
- * directly, so the driver can be swapped (better-sqlite3, libsql, a Postgres
- * adapter) without touching the repositories.
- *
- * `node:sqlite` is the default because it ships with Node — no native build
- * step, no prebuilt-binary mismatch inside the container.
- */
-import { DatabaseSync } from "node:sqlite";
-export function openSqlite(filename, options = {}) {
-    const db = new DatabaseSync(filename);
-    const cache = new Map();
-    let depth = 0;
-    db.exec("PRAGMA foreign_keys = ON");
-    db.exec(`PRAGMA busy_timeout = ${options.busyTimeoutMs ?? 5000}`);
-    if (options.wal !== false) {
-        // WAL lets the Astro build read while an editor writes.
-        db.exec("PRAGMA journal_mode = WAL");
-        // NORMAL is durable across process crashes; only an OS-level crash can lose
-        // the last transactions. The right trade-off for a content database.
-        db.exec("PRAGMA synchronous = NORMAL");
-    }
-    const prepare = (sql) => {
-        let statement = cache.get(sql);
-        if (!statement) {
-            statement = db.prepare(sql);
-            cache.set(sql, statement);
-        }
-        return statement;
-    };
-    // Rows arrive as null-prototype objects; callers expect ordinary ones.
-    const plain = (row) => ({ ...row });
-    return {
-        all(sql, params = []) {
-            return prepare(sql)
-                .all(...params)
-                .map((row) => plain(row));
-        },
-        get(sql, params = []) {
-            const row = prepare(sql).get(...params);
-            return row === undefined ? undefined : plain(row);
-        },
-        run(sql, params = []) {
-            const result = prepare(sql).run(...params);
-            return {
-                changes: Number(result.changes),
-                lastInsertRowid: result.lastInsertRowid,
-            };
-        },
-        exec(sql) {
-            db.exec(sql);
-        },
-        transaction(fn) {
-            // Nested calls use savepoints so an inner rollback does not discard the
-            // outer transaction's work.
-            const name = `sp_${depth}`;
-            const begin = depth === 0 ? "BEGIN IMMEDIATE" : `SAVEPOINT ${name}`;
-            const commit = depth === 0 ? "COMMIT" : `RELEASE ${name}`;
-            const rollback = depth === 0 ? "ROLLBACK" : `ROLLBACK TO ${name}`;
-            db.exec(begin);
-            depth++;
-            try {
-                const result = fn();
-                depth--;
-                db.exec(commit);
-                return result;
-            }
-            catch (error) {
-                depth--;
-                try {
-                    db.exec(rollback);
-                    if (depth > 0)
-                        db.exec(`RELEASE ${name}`);
-                }
-                catch {
-                    // The rollback itself failing means the connection is unusable;
-                    // surface the original error rather than masking it.
-                }
-                throw error;
-            }
-        },
-        snapshot(destination) {
-            // VACUUM INTO takes a read lock only, so editors are not blocked and the
-            // resulting file is a defragmented, fully consistent database.
-            db.exec(`VACUUM INTO '${destination.replace(/'/g, "''")}'`);
-        },
-        close() {
-            cache.clear();
-            db.close();
-        },
-    };
-}
-//# sourceMappingURL=driver.js.map

package/dist/db/driver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../src/db/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AA6B/D,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,UAAyB,EAAE;IACtE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACpC,EAAE,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC1B,wDAAwD;QACxD,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACrC,4EAA4E;QAC5E,qEAAqE;QACrE,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAW,EAAiB,EAAE;QAC7C,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAI,GAAY,EAAK,EAAE,CAAC,CAAC,EAAE,GAAI,GAAc,EAAE,CAAM,CAAC;IAEpE,OAAO;QACL,GAAG,CAAI,GAAW,EAAE,SAAoB,EAAE;YACxC,OAAO,OAAO,CAAC,GAAG,CAAC;iBAChB,GAAG,CAAC,GAAI,MAAqB,CAAC;iBAC9B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,GAAG,CAAI,GAAW,EAAE,SAAoB,EAAE;YACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAI,MAAqB,CAAC,CAAC;YACxD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,GAAG,CAAC,GAAW,EAAE,SAAoB,EAAE;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAI,MAAqB,CAAC,CAAC;YAC3D,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAW;YACd,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QAED,WAAW,CAAI,EAAW;YACxB,wEAAwE;YACxE,4BAA4B;YAC5B,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC;YAElE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACf,KAAK,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;gBACpB,KAAK,EAAE,CAAC;gBACR,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,EAAE,CAAC;gBACR,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAClB,IAAI,KAAK,GAAG,CAAC;wBAAE,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;oBAChE,qDAAqD;gBACvD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,WAAmB;YAC1B,yEAAyE;YACzE,+DAA+D;YAC/D,EAAE,CAAC,IAAI,CAAC,gBAAgB,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,KAAK;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/git.d.ts

@@ -1,29 +0,0 @@
-/**
- * Spawning the developer's own `git`.
- *
- * Deliberately the binary, not a JavaScript Git implementation. The reason is
- * credentials: a developer's push already works because of their SSH agent,
- * credential helper and remote configuration, and the spawned binary inherits
- * all three. A library would have to reimplement them, and would do it worse
- * — see decisions.md, "Local publishing spawns the `git` binary".
- *
- * `GIT_TERMINAL_PROMPT=0` because there is no terminal to answer: a push that
- * would ask for credentials must fail with Git's own message rather than hang
- * the request that triggered it.
- */
-export declare class GitError extends Error {
-    readonly stderr: string;
-    readonly exitCode: number | null;
-    name: string;
-    constructor(message: string, stderr: string, exitCode: number | null);
-}
-export interface GitRunner {
-    /** Runs `git` in the runner's directory. Trimmed stdout, or a `GitError`. */
-    run(args: string[]): Promise<string>;
-    /** Like `run`, but null instead of a throw — for questions Git may say no to. */
-    tryRun(args: string[]): Promise<string | null>;
-}
-export declare function gitRunner(cwd: string): GitRunner;
-/** The line a person should see first — Git puts its verdict there. */
-export declare function firstLine(text: string): string;
-//# sourceMappingURL=git.d.ts.map

package/dist/lib/git.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/lib/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,qBAAa,QAAS,SAAQ,KAAK;IAI/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAJzB,IAAI,SAAc;gBAEzB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,IAAI;CAInC;AAED,MAAM,WAAW,SAAS;IACxB,6EAA6E;IAC7E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,iFAAiF;IACjF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChD;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAyChD;AAED,uEAAuE;AACvE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO9C"}

package/dist/lib/git.js

@@ -1,62 +0,0 @@
-/**
- * Spawning the developer's own `git`.
- *
- * Deliberately the binary, not a JavaScript Git implementation. The reason is
- * credentials: a developer's push already works because of their SSH agent,
- * credential helper and remote configuration, and the spawned binary inherits
- * all three. A library would have to reimplement them, and would do it worse
- * — see decisions.md, "Local publishing spawns the `git` binary".
- *
- * `GIT_TERMINAL_PROMPT=0` because there is no terminal to answer: a push that
- * would ask for credentials must fail with Git's own message rather than hang
- * the request that triggered it.
- */
-import { execFile } from "node:child_process";
-export class GitError extends Error {
-    stderr;
-    exitCode;
-    name = "GitError";
-    constructor(message, stderr, exitCode) {
-        super(message);
-        this.stderr = stderr;
-        this.exitCode = exitCode;
-    }
-}
-export function gitRunner(cwd) {
-    const run = (args) => new Promise((resolve, reject) => {
-        execFile("git", args, {
-            cwd,
-            env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
-            timeout: 60_000,
-            maxBuffer: 10 * 1024 * 1024,
-        }, (error, stdout, stderr) => {
-            if (error) {
-                const missing = error.code === "ENOENT";
-                reject(new GitError(missing
-                    ? "Git is not installed, or not on the PATH."
-                    : firstLine(stderr) || error.message, stderr, missing ? null : (error.code ?? null)));
-                return;
-            }
-            resolve(stdout.replace(/\n$/, ""));
-        });
-    });
-    return {
-        run,
-        async tryRun(args) {
-            try {
-                return await run(args);
-            }
-            catch {
-                return null;
-            }
-        },
-    };
-}
-/** The line a person should see first — Git puts its verdict there. */
-export function firstLine(text) {
-    return (text
-        .split("\n")
-        .map((line) => line.trim())
-        .find((line) => line !== "") ?? "");
-}
-//# sourceMappingURL=git.js.map

package/dist/lib/git.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/lib/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,OAAO,QAAS,SAAQ,KAAK;IAItB;IACA;IAJF,IAAI,GAAG,UAAU,CAAC;IAC3B,YACE,OAAe,EACN,MAAc,EACd,QAAuB;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAe;IAGlC,CAAC;CACF;AASD,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,CAAC,IAAc,EAAmB,EAAE,CAC9C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9B,QAAQ,CACN,KAAK,EACL,IAAI,EACJ;YACE,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;YACjD,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAI,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;gBACnE,MAAM,CACJ,IAAI,QAAQ,CACV,OAAO;oBACL,CAAC,CAAC,2CAA2C;oBAC7C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EACtC,MAAM,EACN,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,KAA2B,CAAC,IAAI,IAAI,IAAI,CAAC,CAC7D,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,GAAG;QACH,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,CACL,IAAI;SACD,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,EAAE,CACrC,CAAC;AACJ,CAAC"}

package/dist/services/staging-local.d.ts

@@ -1,58 +0,0 @@
-/**
- * Working-tree staging: local mode's half of the staging service.
- *
- * The checked-out working tree *is* the draft workspace. Autosave has already
- * written the files — that is what lets the Astro dev server hot-reload them,
- * which is the whole value of local mode — so this service's job is reading
- * what Git thinks of the tree and, on Publish, turning exactly the reviewed
- * paths into one commit and one push.
- *
- * Three rules keep it safe in a repository that belongs to a developer:
- *
- *   - Only Mica-managed paths. Every Git operation is limited to an explicit
- *     path set derived from the change list — never `git add -A` over the
- *     repository, so unrelated work in the same checkout is never swept in.
- *   - HEAD is verified against the base the editor reviewed. A repository
- *     that moved refuses, like a provider branch that moved.
- *   - A commit and a push are two operations. When the push fails the commit
- *     is retained and reported as `committed-pending-push`; a retry pushes
- *     again and never creates a second commit.
- */
-import type { RepositoryConnector } from "@micacms/connectors";
-import { type ContentChange, type Site } from "@micacms/core";
-import type { Logger } from "../lib/logger.js";
-import { type ContentStagingService } from "./staging.js";
-export interface WorkingTreeStagingDeps {
-    model: Site;
-    /** Reads the working tree — the same local connector autosave writes through. */
-    connector: RepositoryConnector;
-    /** Absolute path of the content root. */
-    contentRoot: string;
-    /** Revision of `.mica/schema.json` when the model was loaded. */
-    schemaRevision: string | null;
-    /** `MICA_LOCAL_PUBLISH`. False reduces this to a read-only changes view. */
-    publishEnabled: boolean;
-    logger: Logger;
-}
-/** A changed file plus what only Git status knows about it. */
-export interface TreeChange extends ContentChange {
-    /** Not yet known to Git — discarding means deleting, not restoring. */
-    untracked: boolean;
-    /** Mid-merge conflict markers. Unpublishable until resolved with Git tools. */
-    conflicted: boolean;
-}
-export declare function createWorkingTreeStagingService(deps: WorkingTreeStagingDeps): ContentStagingService;
-/**
- * Parses `git status --porcelain=v1 -z` into content-root-relative changes.
- *
- * The `-z` format is the one that never munges a path: entries are
- * NUL-terminated, and a rename is two fields — the new path, then the one it
- * came from. A rename becomes a create and a delete, which is how the rest of
- * Mica already thinks about moves.
- *
- * `.mica/` is excluded. The manifest there is build output a developer
- * commits with their own tools; the editor neither shows nor publishes it,
- * and model changes are guarded separately, by the drift check.
- */
-export declare function parseStatus(raw: string, prefix: string): TreeChange[];
-//# sourceMappingURL=staging-local.d.ts.map

package/dist/services/staging-local.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"staging-local.d.ts","sourceRoot":"","sources":["../../src/services/staging-local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAGL,KAAK,aAAa,EAIlB,KAAK,IAAI,EACV,MAAM,eAAe,CAAC;AAKvB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAOL,KAAK,qBAAqB,EAI3B,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,IAAI,CAAC;IACZ,iFAAiF;IACjF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4EAA4E;IAC5E,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAW,SAAQ,aAAa;IAC/C,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC;CACrB;AAQD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,sBAAsB,GAC3B,qBAAqB,CAgRvB;AAmED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAmDrE"}

package/dist/services/staging-local.js

@@ -1,391 +0,0 @@
-/**
- * Working-tree staging: local mode's half of the staging service.
- *
- * The checked-out working tree *is* the draft workspace. Autosave has already
- * written the files — that is what lets the Astro dev server hot-reload them,
- * which is the whole value of local mode — so this service's job is reading
- * what Git thinks of the tree and, on Publish, turning exactly the reviewed
- * paths into one commit and one push.
- *
- * Three rules keep it safe in a repository that belongs to a developer:
- *
- *   - Only Mica-managed paths. Every Git operation is limited to an explicit
- *     path set derived from the change list — never `git add -A` over the
- *     repository, so unrelated work in the same checkout is never swept in.
- *   - HEAD is verified against the base the editor reviewed. A repository
- *     that moved refuses, like a provider branch that moved.
- *   - A commit and a push are two operations. When the push fails the commit
- *     is retained and reported as `committed-pending-push`; a retry pushes
- *     again and never creates a second commit.
- */
-import { realpath, rm } from "node:fs/promises";
-import { join, relative, sep } from "node:path";
-import { MANIFEST_PATH, memorySource, } from "@micacms/core";
-import { within } from "@micacms/core/node";
-import { ApiError, badRequest } from "../lib/errors.js";
-import { firstLine, gitRunner, GitError } from "../lib/git.js";
-import { analyseChanges, compareSources, describeProblems, flattenProblems, } from "./staging.js";
-export function createWorkingTreeStagingService(deps) {
-    const { model, connector, contentRoot, logger } = deps;
-    // One Git mutation at a time. Editing is untouched — autosave writes files,
-    // not Git — this only refuses to interleave two commits or pushes.
-    let running = false;
-    /**
-     * Finds the repository the content root sits in, freshly each time: a
-     * `git init` after startup should start working, not require a restart.
-     */
-    const locate = async () => {
-        const probe = gitRunner(contentRoot);
-        try {
-            const repoRoot = await probe.run(["rev-parse", "--show-toplevel"]);
-            // Git reports the toplevel with symlinks resolved (`/private/var` where
-            // the caller said `/var`, on macOS). Resolve our side the same way, or
-            // the relative prefix walks out of the repository.
-            const resolved = await realpath(contentRoot);
-            return { git: gitRunner(repoRoot), prefix: toPosix(relative(repoRoot, resolved)) };
-        }
-        catch (error) {
-            return {
-                reason: error instanceof GitError && error.exitCode === null
-                    ? error.message
-                    : "The content directory is not inside a Git repository.",
-            };
-        }
-    };
-    const listChanges = async (workspace) => {
-        // `-uall` because Git collapses a fully-untracked directory to one line,
-        // and a brand-new entry is exactly that. The change list must name files.
-        const raw = await workspace.git.run([
-            "status",
-            "--porcelain=v1",
-            "-z",
-            "-uall",
-            "--",
-            workspace.prefix === "" ? "." : workspace.prefix,
-        ]);
-        return parseStatus(raw, workspace.prefix);
-    };
-    const analyse = async (workspace, treeChanges) => {
-        const { changes, validation } = await analyseChanges(model, connector, treeChanges, headSource(workspace));
-        // A merge conflict is a validity problem the field validator cannot see:
-        // the file on disk is Git's conflict format, not content.
-        for (const change of treeChanges) {
-            if (!change.conflicted)
-                continue;
-            validation.problems.push({
-                path: change.path,
-                label: change.path,
-                issues: [
-                    { path: "", message: "This file has a Git merge conflict. Resolve it with your Git tools." },
-                ],
-            });
-        }
-        validation.ok = validation.problems.length === 0;
-        return { changes, validation };
-    };
-    const guardPublishable = async () => {
-        if (!deps.publishEnabled) {
-            throw badRequest("Publishing from local mode is disabled (MICA_LOCAL_PUBLISH=false).");
-        }
-        const located = await locate();
-        if ("reason" in located)
-            throw badRequest(located.reason);
-        return located;
-    };
-    /** Runs `fn` holding the one-mutation-at-a-time flag. */
-    const exclusive = async (fn) => {
-        if (running) {
-            throw new ApiError("conflict", "A publication is already running. Wait for it to finish.");
-        }
-        running = true;
-        try {
-            return await fn();
-        }
-        finally {
-            running = false;
-        }
-    };
-    const pushOutcome = async (git, revision) => {
-        try {
-            await git.run(["push"]);
-            return { state: "published", revision };
-        }
-        catch (error) {
-            // The commit is real and retained; only the second half failed. This is
-            // a state, not an exception — the editor shows it and offers a retry.
-            const pushError = error instanceof GitError ? error.message : String(error);
-            logger.warn("Publish committed but the push failed", { revision, pushError });
-            return { state: "committed-pending-push", revision, pushError };
-        }
-    };
-    return {
-        async status() {
-            const located = await locate();
-            if ("reason" in located) {
-                return {
-                    workspace: "working-tree",
-                    publish: { enabled: false, reason: located.reason },
-                    baseRevision: null,
-                    branch: null,
-                    ahead: null,
-                    changes: [],
-                    validation: emptyValidation(),
-                    updatedAt: null,
-                };
-            }
-            const treeChanges = await listChanges(located);
-            const { changes, validation } = await analyse(located, treeChanges);
-            return {
-                workspace: "working-tree",
-                publish: deps.publishEnabled
-                    ? { enabled: true }
-                    : { enabled: false, reason: "Disabled with MICA_LOCAL_PUBLISH=false." },
-                baseRevision: await located.git.tryRun(["rev-parse", "HEAD"]),
-                branch: await located.git.tryRun(["rev-parse", "--abbrev-ref", "HEAD"]),
-                ahead: await aheadOfUpstream(located.git),
-                changes,
-                validation,
-                updatedAt: null,
-            };
-        },
-        async publish(input) {
-            const message = input.message.trim();
-            if (!message)
-                throw badRequest("A publication needs a commit message.");
-            const workspace = await guardPublishable();
-            return exclusive(async () => {
-                const treeChanges = await listChanges(workspace);
-                if (treeChanges.length === 0)
-                    throw badRequest("There is nothing to publish.");
-                /**
-                 * The reviewed base. The working tree has no per-path gate the way a
-                 * provider commit does — the tree is already the truth — so the gate
-                 * is HEAD: if the repository moved since the editor reviewed the
-                 * change list, what a commit would be based on is not what they saw.
-                 */
-                const head = await workspace.git.tryRun(["rev-parse", "HEAD"]);
-                if (input.expectedBase !== head) {
-                    throw new ApiError("conflict", "The repository moved while these changes were being reviewed. Refresh the " +
-                        "change list and publish again.");
-                }
-                // The model drift gate — same rule as the draft store: the staged set
-                // was validated against the model this process started with.
-                if ((await connector.revision(MANIFEST_PATH)) !== deps.schemaRevision) {
-                    throw new ApiError("conflict", "The content model changed after this server started. Restart Mica to load " +
-                        "the new model, then review the pending changes and publish again.");
-                }
-                const { validation } = await analyse(workspace, treeChanges);
-                if (!validation.ok) {
-                    throw new ApiError("validation_failed", describeProblems(validation.problems), {
-                        issues: flattenProblems(validation.problems),
-                    });
-                }
-                const paths = treeChanges.map((change) => inRepo(workspace.prefix, change.path));
-                try {
-                    // Stage and commit exactly the reviewed set. The pathspec limits
-                    // both operations, so anything else in the developer's index or
-                    // tree — staged or not — stays theirs.
-                    for (const batch of chunked(paths, 500)) {
-                        await workspace.git.run(["add", "-A", "--", ...batch]);
-                    }
-                    await workspace.git.run(["commit", "-m", message, "--", ...paths]);
-                }
-                catch (error) {
-                    if (error instanceof GitError) {
-                        // Git's own verdict is the actionable part: no identity
-                        // configured, a hook that refused, an unborn branch mid-rebase.
-                        throw new ApiError("conflict", `Git refused the commit: ${error.message}`);
-                    }
-                    throw error;
-                }
-                const revision = await workspace.git.run(["rev-parse", "HEAD"]);
-                logger.info("Published from the working tree", { revision, files: paths.length });
-                return pushOutcome(workspace.git, revision);
-            });
-        },
-        async push() {
-            const workspace = await guardPublishable();
-            return exclusive(async () => {
-                const revision = await workspace.git.tryRun(["rev-parse", "HEAD"]);
-                if (revision === null)
-                    throw badRequest("There is no commit to push yet.");
-                return pushOutcome(workspace.git, revision);
-            });
-        },
-        async discard(requested) {
-            const located = await locate();
-            if ("reason" in located)
-                throw badRequest(located.reason);
-            return exclusive(async () => {
-                // Only paths the change list actually names. Discard is the one
-                // destructive operation here, and it must not be able to reach
-                // anything the editor was not shown.
-                const current = new Map((await listChanges(located)).map((change) => [change.path, change]));
-                const discarded = [];
-                for (const path of requested) {
-                    const change = current.get(path);
-                    if (!change)
-                        continue;
-                    if (change.kind === "create") {
-                        // Nothing to restore: before this change there was no file. A
-                        // creation the developer had already staged is unstaged first,
-                        // so the index does not keep pointing at a file that is gone.
-                        if (!change.untracked) {
-                            await located.git.tryRun([
-                                "rm",
-                                "--cached",
-                                "--force",
-                                "--",
-                                inRepo(located.prefix, path),
-                            ]);
-                        }
-                        await rm(within(contentRoot, path), { force: true });
-                    }
-                    else {
-                        await located.git.run([
-                            "restore",
-                            "--source=HEAD",
-                            "--staged",
-                            "--worktree",
-                            "--",
-                            inRepo(located.prefix, path),
-                        ]);
-                    }
-                    discarded.push(path);
-                }
-                return { discarded };
-            });
-        },
-        async compare(target) {
-            const located = await locate();
-            // Without a repository (or before the first commit) nothing has ever
-            // been published, so the honest "before" is a source with no files.
-            const published = "reason" in located ? memorySource({}, "unpublished") : headSource(located);
-            return compareSources(model, published, connector, target);
-        },
-    };
-}
-/**
- * The content root as HEAD has it — the published side of a comparison.
- *
- * Reading `HEAD:` rather than the tree is the point: the working tree *is*
- * the draft workspace here, so the repository's own version of a document
- * only exists in Git's object store.
- */
-function headSource(workspace) {
-    const at = (path) => `HEAD:${path === "" ? workspace.prefix : inRepo(workspace.prefix, path)}`;
-    return {
-        origin: "HEAD",
-        async read(path) {
-            // tryRun, because "not in HEAD" and "no commits yet" both simply mean
-            // there is no published version. Stdout arrives trimmed, which the
-            // entry parsers already tolerate.
-            return workspace.git.tryRun(["show", at(path)]);
-        },
-        async list(path) {
-            const raw = await workspace.git.tryRun(["ls-tree", "-z", at(path)]);
-            if (raw === null)
-                return [];
-            const entries = [];
-            for (const field of raw.split("\0")) {
-                const tab = field.indexOf("\t");
-                if (tab === -1)
-                    continue;
-                const type = field.slice(0, tab).split(" ")[1];
-                entries.push({ name: field.slice(tab + 1), type: type === "tree" ? "directory" : "file" });
-            }
-            return entries;
-        },
-    };
-}
-/* ------------------------------------------------------------------ */
-function emptyValidation() {
-    return { ok: true, problems: [] };
-}
-function toPosix(path) {
-    return sep === "/" ? path : path.split(sep).join("/");
-}
-/** A content-root-relative path as Git sees it, from the repository root. */
-function inRepo(prefix, path) {
-    return prefix === "" ? path : join(prefix, path).split(sep).join("/");
-}
-function chunked(items, size) {
-    const batches = [];
-    for (let at = 0; at < items.length; at += size)
-        batches.push(items.slice(at, at + size));
-    return batches;
-}
-/** Commits waiting to be pushed, or null when there is no upstream to say. */
-async function aheadOfUpstream(git) {
-    const counted = await git.tryRun(["rev-list", "--count", "@{upstream}..HEAD"]);
-    if (counted === null)
-        return null;
-    const ahead = Number(counted);
-    return Number.isFinite(ahead) ? ahead : null;
-}
-/**
- * Parses `git status --porcelain=v1 -z` into content-root-relative changes.
- *
- * The `-z` format is the one that never munges a path: entries are
- * NUL-terminated, and a rename is two fields — the new path, then the one it
- * came from. A rename becomes a create and a delete, which is how the rest of
- * Mica already thinks about moves.
- *
- * `.mica/` is excluded. The manifest there is build output a developer
- * commits with their own tools; the editor neither shows nor publishes it,
- * and model changes are guarded separately, by the drift check.
- */
-export function parseStatus(raw, prefix) {
-    const fields = raw.split("\0").filter((field) => field !== "");
-    const changes = [];
-    const push = (repoPath, kind, flags = {}) => {
-        const path = relativeToContent(repoPath, prefix);
-        if (path === null || path === ".mica" || path.startsWith(".mica/"))
-            return;
-        changes.push({
-            path,
-            kind,
-            untracked: flags.untracked ?? false,
-            conflicted: flags.conflicted ?? false,
-        });
-    };
-    for (let at = 0; at < fields.length; at += 1) {
-        const field = fields[at];
-        const x = field[0] ?? " ";
-        const y = field[1] ?? " ";
-        const repoPath = field.slice(3);
-        if (x === "?" && y === "?") {
-            push(repoPath, "create", { untracked: true });
-            continue;
-        }
-        // Both sides touched it in a merge, or one side deleted while the other
-        // edited: the file is in Git's conflict state, whatever the tree holds.
-        if (x === "U" || y === "U" || (x === "A" && y === "A") || (x === "D" && y === "D")) {
-            push(repoPath, "update", { conflicted: true });
-            continue;
-        }
-        if (x === "R" || x === "C") {
-            // The next field is the source path. A copy keeps its source; a rename
-            // loses it, which the status letters already said (C keeps both files).
-            const from = fields[++at];
-            push(repoPath, "create");
-            if (x === "R")
-                push(from, "delete");
-            continue;
-        }
-        if (x === "D" || y === "D") {
-            push(repoPath, "delete");
-            continue;
-        }
-        push(repoPath, x === "A" ? "create" : "update");
-    }
-    return changes;
-}
-function relativeToContent(repoPath, prefix) {
-    if (prefix === "")
-        return repoPath;
-    if (repoPath === prefix)
-        return null;
-    return repoPath.startsWith(`${prefix}/`) ? repoPath.slice(prefix.length + 1) : null;
-}
-//# sourceMappingURL=staging-local.js.map