@mokly/mokly 0.8.0

package/dist/export/ignored.js

@@ -0,0 +1,69 @@
+import fs from "node:fs";
+import path from "node:path";
+import { isInside, isSafeRepositoryPath, projectRealPath, toPosixPath, } from "../config/paths.js";
+import { EXPORT_MARKER, parseExportOwnership } from "./ownership.js";
+import { exportReservation, TRANSACTION_MARKER } from "./transaction.js";
+import { isReservationDirectory } from "./reservation.js";
+/** Recognize proven output/reservations, not unrelated similarly named files. */
+export function isExportIgnoredPath(candidate, repoRoot, mode = "event") {
+    for (let directory = candidate; isInside(repoRoot, directory) && directory !== repoRoot; directory = path.dirname(directory)) {
+        const content = readMarker(directory, EXPORT_MARKER);
+        const ownership = content ? parseExportOwnership(content) : undefined;
+        if (ownership) {
+            const relative = toPosixPath(path.relative(directory, candidate));
+            if (relative === EXPORT_MARKER || ownership.files.includes(relative))
+                return true;
+            if (mode === "event" &&
+                (relative === "" ||
+                    ownership.files.some((file) => file.startsWith(`${relative}/`))))
+                return true;
+            return false;
+        }
+        if (isReservationDirectory(directory))
+            return true;
+        if (validReservation(directory))
+            return true;
+        try {
+            if (validReservation(exportReservation(directory)))
+                return true;
+        }
+        catch {
+            // A disappearing unowned path is not proof of export ownership.
+        }
+    }
+    return false;
+}
+function validReservation(directory) {
+    const content = readMarker(directory, TRANSACTION_MARKER);
+    if (!content)
+        return false;
+    try {
+        const value = JSON.parse(content);
+        if (!value ||
+            typeof value !== "object" ||
+            !("schemaVersion" in value) ||
+            value.schemaVersion !== 2 ||
+            !("output" in value) ||
+            typeof value.output !== "string" ||
+            !isSafeRepositoryPath(value.output) ||
+            value.output.includes("/"))
+            return false;
+        return (projectRealPath(exportReservation(path.join(path.dirname(path.dirname(path.dirname(directory))), value.output))) === projectRealPath(directory));
+    }
+    catch {
+        return false;
+    }
+}
+function readMarker(directory, marker) {
+    try {
+        const candidate = path.join(directory, marker);
+        const stat = fs.lstatSync(candidate);
+        return stat.isFile() && stat.size <= 8 * 1024 * 1024
+            ? fs.readFileSync(candidate, "utf8")
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=ignored.js.map

package/dist/export/ignored.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignored.js","sourceRoot":"","sources":["../../src/export/ignored.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,eAAe,EACf,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,QAAgB,EAChB,OAA6B,OAAO;IAEpC,KACE,IAAI,SAAS,GAAG,SAAS,EACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,SAAS,KAAK,QAAQ,EACvD,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EACnC,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAClE,IAAI,QAAQ,KAAK,aAAa,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAClE,OAAO,IAAI,CAAC;YACd,IACE,IAAI,KAAK,OAAO;gBAChB,CAAC,QAAQ,KAAK,EAAE;oBACd,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAElE,OAAO,IAAI,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,sBAAsB,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IACE,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,eAAe,IAAI,KAAK,CAAC;YAC3B,KAAK,CAAC,aAAa,KAAK,CAAC;YACzB,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;YACpB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAE1B,OAAO,KAAK,CAAC;QACf,OAAO,CACL,eAAe,CACb,iBAAiB,CACf,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EACnD,KAAK,CAAC,MAAM,CACb,CACF,CACF,KAAK,eAAe,CAAC,SAAS,CAAC,CACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,MAAc;IACnD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;YAClD,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/export/inputs.d.ts

@@ -0,0 +1,11 @@
+import { type Compilation } from "../build/compile.js";
+import type { ResolvedConfig } from "../config/types.js";
+import type { OptionalReviewAssetReader } from "../review/assets.js";
+import type { GitClient } from "../review/git.js";
+/** Share captured public bytes between comparison and Changes calculations. */
+export declare function capturedAssetReader(files: ReadonlyMap<string, Buffer>, config: ResolvedConfig): OptionalReviewAssetReader;
+/** Pin branch identity and changed-path evidence for every comparison consumer. */
+export declare function pinnedGit(git: GitClient, commit: string, changed: readonly string[]): GitClient;
+/** Recheck effective source/config, public bytes, and evidence before installation. */
+export declare function assertInputsUnchanged(config: ResolvedConfig, compilation: Compilation, publicFiles: ReadonlyMap<string, Buffer>, git: GitClient, commit: string, changed: readonly string[], exclusions: readonly string[]): Promise<void>;
+//# sourceMappingURL=inputs.d.ts.map

package/dist/export/inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputs.d.ts","sourceRoot":"","sources":["../../src/export/inputs.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAKlD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,MAAM,EAAE,cAAc,GACrB,yBAAyB,CAmB3B;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CACvB,GAAG,EAAE,SAAS,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,SAAS,CAeX;AAED,uFAAuF;AACvF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACxC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAqBf"}

package/dist/export/inputs.js

@@ -0,0 +1,60 @@
+import path from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { compileCatalogue } from "../build/compile.js";
+import { publicPathLocation } from "../config/public_files.js";
+import { isSafeRepositoryPath } from "../config/paths.js";
+import { loadConfig } from "../config/load.js";
+import { reviewChangedPaths } from "../review/changed_paths.js";
+import { exportError } from "./error.js";
+import { capturePublicFiles } from "./public_files.js";
+/** Share captured public bytes between comparison and Changes calculations. */
+export function capturedAssetReader(files, config) {
+    return {
+        read: async (name) => {
+            const bytes = files.get(name);
+            if (!bytes)
+                throw exportError(`Comparison resource is not exportable: ${name}`);
+            return bytes;
+        },
+        readIfExists: async (name) => files.get(name),
+        readLocated: async (name) => {
+            const location = isSafeRepositoryPath(name)
+                ? publicPathLocation(path.resolve(config.mockupsDir, name), config)
+                : undefined;
+            if (!location)
+                throw exportError(`Comparison resource is not exportable: ${name}`);
+            const content = files.get(name);
+            return { location, ...(content ? { content } : {}) };
+        },
+    };
+}
+/** Pin branch identity and changed-path evidence for every comparison consumer. */
+export function pinnedGit(git, commit, changed) {
+    return {
+        mergeBase: async () => commit,
+        changedPaths: async () => changed,
+        fileExists: (base, name) => git.fileExists(base, name),
+        fileKind: (base, name) => git.fileKind(base, name),
+        readFile: (base, name) => git.readFile(base, name),
+        readFileBytes: (base, name) => git.readFileBytes(base, name),
+        ...(git.readFiles
+            ? {
+                readFiles: (base, names) => git.readFiles(base, names),
+            }
+            : {}),
+    };
+}
+/** Recheck effective source/config, public bytes, and evidence before installation. */
+export async function assertInputsUnchanged(config, compilation, publicFiles, git, commit, changed, exclusions) {
+    const freshConfig = await loadConfig(config.repoRoot, config.configPath);
+    const fresh = await compileCatalogue(freshConfig);
+    freshConfig.sourceFiles = fresh.manifest.sourceFiles;
+    const publicNow = await capturePublicFiles(freshConfig);
+    const changedNow = await reviewChangedPaths(git, commit, config, config.review.outDir, exclusions);
+    if (!isDeepStrictEqual(config, freshConfig) ||
+        !isDeepStrictEqual(compilation, fresh) ||
+        !isDeepStrictEqual(publicFiles, publicNow) ||
+        !isDeepStrictEqual(changed, changedNow))
+        throw exportError("Export inputs changed during generation; retry the export.");
+}
+//# sourceMappingURL=inputs.js.map

package/dist/export/inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputs.js","sourceRoot":"","sources":["../../src/export/inputs.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAoB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CACjC,KAAkC,EAClC,MAAsB;IAEtB,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK;gBACR,MAAM,WAAW,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7C,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC1B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC;gBACzC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBACnE,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,CAAC,QAAQ;gBACX,MAAM,WAAW,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CACvB,GAAc,EACd,MAAc,EACd,OAA0B;IAE1B,OAAO;QACL,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;QAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;QACjC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC;QACtD,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QAClD,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QAClD,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,SAAS;YACf,CAAC,CAAC;gBACE,SAAS,EAAE,CAAC,IAAY,EAAE,KAAwB,EAAE,EAAE,CACpD,GAAG,CAAC,SAAU,CAAC,IAAI,EAAE,KAAK,CAAC;aAC9B;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAsB,EACtB,WAAwB,EACxB,WAAwC,EACxC,GAAc,EACd,MAAc,EACd,OAA0B,EAC1B,UAA6B;IAE7B,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,WAAW,CAAC,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,kBAAkB,CACzC,GAAG,EACH,MAAM,EACN,MAAM,EACN,MAAM,CAAC,MAAM,CAAC,MAAM,EACpB,UAAU,CACX,CAAC;IACF,IACE,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC;QACvC,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC;QACtC,CAAC,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC;QAC1C,CAAC,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC;QAEvC,MAAM,WAAW,CACf,4DAA4D,CAC7D,CAAC;AACN,CAAC"}

package/dist/export/inventory.d.ts

@@ -0,0 +1,9 @@
+import type { ReviewArtifactContent } from "../review/types.js";
+/** A single collision-checked namespace for every deployed file. */
+export declare class ExportInventory {
+    #private;
+    readonly files: Map<string, ReviewArtifactContent>;
+    /** Add a safe file, permitting only byte-identical exact-path duplicates. */
+    add(name: string, content: ReviewArtifactContent): void;
+}
+//# sourceMappingURL=inventory.d.ts.map

package/dist/export/inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../src/export/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGhE,oEAAoE;AACpE,qBAAa,eAAe;;IAC1B,QAAQ,CAAC,KAAK,qCAA4C;IAG1D,6EAA6E;IAC7E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI;CAUxD"}

package/dist/export/inventory.js

@@ -0,0 +1,16 @@
+import { ExportPathIndex } from "./path_index.js";
+/** A single collision-checked namespace for every deployed file. */
+export class ExportInventory {
+    files = new Map();
+    #paths = new ExportPathIndex();
+    /** Add a safe file, permitting only byte-identical exact-path duplicates. */
+    add(name, content) {
+        const previous = this.files.get(name);
+        if (previous !== undefined &&
+            Buffer.from(previous).equals(Buffer.from(content)))
+            return;
+        this.#paths.add(name);
+        this.files.set(name, content);
+    }
+}
+//# sourceMappingURL=inventory.js.map

package/dist/export/inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/export/inventory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,oEAAoE;AACpE,MAAM,OAAO,eAAe;IACjB,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAC;IACjD,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAExC,6EAA6E;IAC7E,GAAG,CAAC,IAAY,EAAE,OAA8B;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IACE,QAAQ,KAAK,SAAS;YACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAElD,OAAO;QACT,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/export/operations.d.ts

@@ -0,0 +1,13 @@
+import fs from "node:fs";
+/** Filesystem mutation boundary; recursive removal is only for private stages. */
+export interface ExportOperations {
+    lstat(candidate: string): Promise<fs.BigIntStats | undefined>;
+    /** Atomic no-replace move; must fail if any destination entry exists. */
+    rename(from: string, to: string): Promise<void>;
+    remove(candidate: string): Promise<void>;
+    unlink(candidate: string): Promise<void>;
+    rmdir(candidate: string): Promise<void>;
+}
+/** Exclusive native moves and non-recursive backup cleanup operations. */
+export declare const fileExportOperations: ExportOperations;
+//# sourceMappingURL=operations.d.ts.map

package/dist/export/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/export/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAIzB,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAC9D,yEAAyE;IACzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,EAAE,gBAclC,CAAC"}

package/dist/export/operations.js

@@ -0,0 +1,20 @@
+import fs from "node:fs";
+import { renameExclusive } from "./rename.js";
+/** Exclusive native moves and non-recursive backup cleanup operations. */
+export const fileExportOperations = {
+    lstat: async (candidate) => {
+        try {
+            return await fs.promises.lstat(candidate, { bigint: true });
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return undefined;
+            throw error;
+        }
+    },
+    rename: renameExclusive,
+    remove: (candidate) => fs.promises.rm(candidate, { recursive: true, force: true }),
+    unlink: (candidate) => fs.promises.unlink(candidate),
+    rmdir: (candidate) => fs.promises.rmdir(candidate),
+};
+//# sourceMappingURL=operations.js.map

package/dist/export/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/export/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAY9C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CACpB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7D,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;IACpD,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;CACnD,CAAC"}

package/dist/export/ownership.d.ts

@@ -0,0 +1,25 @@
+/** Public-safe proof that a directory was installed by the exporter. */
+export declare const EXPORT_MARKER = ".mokly-export-artifact";
+/** Versioned list of files the exporter is allowed to replace. */
+export interface ExportOwnership {
+    schemaVersion: 1;
+    files: readonly string[];
+}
+/** Existing names captured during inspection, never authority for recursive deletion. */
+export interface ExportEntries {
+    files: string[];
+    directories: string[];
+}
+/** Explicit repository-adapter migration; never accepted by the public CLI. */
+export interface LegacyExportOwnership {
+    marker: string;
+    contents: string;
+    accepts(name: string): boolean;
+}
+/** Parse the marker without trusting any path as a deletion target. */
+export declare function parseExportOwnership(content: string): ExportOwnership | undefined;
+/** Enumerate a real directory and reject symlinks or special filesystem entries. */
+export declare function ownedEntries(root: string, prefix?: string): Promise<ExportEntries>;
+/** Validate ownership and return the exact existing names authorized for cleanup. */
+export declare function assertExportOwnership(output: string, legacy?: LegacyExportOwnership): Promise<ExportEntries | undefined>;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/export/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../../src/export/ownership.ts"],"names":[],"mappings":"AAMA,wEAAwE;AACxE,eAAO,MAAM,aAAa,2BAA2B,CAAC;AAEtD,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAChC;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,GACd,eAAe,GAAG,SAAS,CA4B7B;AAED,oFAAoF;AACpF,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,OAAO,CAAC,aAAa,CAAC,CAsBxB;AAED,qFAAqF;AACrF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAqDpC"}

package/dist/export/ownership.js

@@ -0,0 +1,89 @@
+import fs from "node:fs";
+import path from "node:path";
+import { isSafeRepositoryPath } from "../config/paths.js";
+import { exportError } from "./error.js";
+/** Public-safe proof that a directory was installed by the exporter. */
+export const EXPORT_MARKER = ".mokly-export-artifact";
+/** Parse the marker without trusting any path as a deletion target. */
+export function parseExportOwnership(content) {
+    try {
+        const value = JSON.parse(content);
+        if (!value ||
+            typeof value !== "object" ||
+            !("schemaVersion" in value) ||
+            value.schemaVersion !== 1 ||
+            !("files" in value) ||
+            !Array.isArray(value.files))
+            return undefined;
+        const files = value.files;
+        if (!files.every((name) => typeof name === "string" &&
+            isSafeRepositoryPath(name) &&
+            name !== EXPORT_MARKER))
+            return undefined;
+        if (new Set(files.map((name) => name.toLowerCase())).size !== files.length)
+            return undefined;
+        return { schemaVersion: 1, files };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Enumerate a real directory and reject symlinks or special filesystem entries. */
+export async function ownedEntries(root, prefix = "") {
+    const files = [];
+    const directories = [];
+    for (const entry of await fs.promises.readdir(root, {
+        withFileTypes: true,
+    })) {
+        const name = `${prefix}${entry.name}`;
+        if (entry.isDirectory()) {
+            directories.push(name);
+            const nested = await ownedEntries(path.join(root, entry.name), `${name}/`);
+            files.push(...nested.files);
+            directories.push(...nested.directories);
+        }
+        else if (entry.isFile())
+            files.push(name);
+        else
+            throw exportError(`Export ownership contains a symlink or special entry: ${name}`);
+    }
+    return { files: files.sort(), directories: directories.sort() };
+}
+/** Validate ownership and return the exact existing names authorized for cleanup. */
+export async function assertExportOwnership(output, legacy) {
+    const stat = await fs.promises
+        .lstat(output)
+        .catch((error) => {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    });
+    if (!stat)
+        return;
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        throw exportError("Export ownership requires a real directory.");
+    const { files, directories } = await ownedEntries(output);
+    if (files.length === 0 && directories.length === 0)
+        return { files, directories };
+    if (legacy &&
+        !files.includes(EXPORT_MARKER) &&
+        files.includes(legacy.marker)) {
+        const valid = await fs.promises.readFile(path.join(output, legacy.marker), "utf8");
+        if (valid === legacy.contents &&
+            files.every((name) => name === legacy.marker || legacy.accepts(name)) &&
+            directories.every((name) => files.some((file) => file.startsWith(`${name}/`))))
+            return { files, directories };
+        throw exportError("Invalid legacy export ownership or unowned preview contents.");
+    }
+    if (!files.includes(EXPORT_MARKER))
+        throw exportError("Export ownership is missing; choose an empty directory.");
+    const marker = parseExportOwnership(await fs.promises.readFile(path.join(output, EXPORT_MARKER), "utf8"));
+    if (!marker)
+        throw exportError("Invalid export ownership inventory.");
+    const allowed = new Set([...marker.files, EXPORT_MARKER]);
+    if (files.some((name) => !allowed.has(name)) ||
+        directories.some((name) => !marker.files.some((file) => file.startsWith(`${name}/`))))
+        throw exportError("Export output contains unowned files or directories; move them before exporting.");
+    return { files, directories };
+}
+//# sourceMappingURL=ownership.js.map

package/dist/export/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../src/export/ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAqBtD,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAClC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IACE,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,eAAe,IAAI,KAAK,CAAC;YAC3B,KAAK,CAAC,aAAa,KAAK,CAAC;YACzB,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;YACnB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAE3B,OAAO,SAAS,CAAC;QACnB,MAAM,KAAK,GAAc,KAAK,CAAC,KAAK,CAAC;QACrC,IACE,CAAC,KAAK,CAAC,KAAK,CACV,CAAC,IAAI,EAAkB,EAAE,CACvB,OAAO,IAAI,KAAK,QAAQ;YACxB,oBAAoB,CAAC,IAAI,CAAC;YAC1B,IAAI,KAAK,aAAa,CACzB;YAED,OAAO,SAAS,CAAC;QACnB,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;YACxE,OAAO,SAAS,CAAC;QACnB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAClD,aAAa,EAAE,IAAI;KACpB,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAC3B,GAAG,IAAI,GAAG,CACX,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAE1C,MAAM,WAAW,CACf,yDAAyD,IAAI,EAAE,CAChE,CAAC;IACN,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAA8B;IAE9B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ;SAC3B,KAAK,CAAC,MAAM,CAAC;SACb,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAC9C,MAAM,WAAW,CAAC,6CAA6C,CAAC,CAAC;IACnE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,IACE,MAAM;QACN,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAC7B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAChC,MAAM,CACP,CAAC;QACF,IACE,KAAK,KAAK,MAAM,CAAC,QAAQ;YACzB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACzB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAClD;YAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,MAAM,WAAW,CACf,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChC,MAAM,WAAW,CACf,yDAAyD,CAC1D,CAAC;IACJ,MAAM,MAAM,GAAG,oBAAoB,CACjC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CACrE,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,MAAM,WAAW,CAAC,qCAAqC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1D,IACE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,WAAW,CAAC,IAAI,CACd,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CACpE;QAED,MAAM,WAAW,CACf,kFAAkF,CACnF,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC"}

package/dist/export/path_index.d.ts

@@ -0,0 +1,7 @@
+/** Shared file-like route namespace for deployed files and hosting aliases. */
+export declare class ExportPathIndex {
+    #private;
+    /** Reserve a safe path, rejecting case-folded equality and prefix collisions. */
+    add(name: string): void;
+}
+//# sourceMappingURL=path_index.d.ts.map

package/dist/export/path_index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path_index.d.ts","sourceRoot":"","sources":["../../src/export/path_index.ts"],"names":[],"mappings":"AAGA,+EAA+E;AAC/E,qBAAa,eAAe;;IAG1B,iFAAiF;IACjF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAiBxB"}

package/dist/export/path_index.js

@@ -0,0 +1,21 @@
+import { isSafeRepositoryPath } from "../config/paths.js";
+import { exportError } from "./error.js";
+/** Shared file-like route namespace for deployed files and hosting aliases. */
+export class ExportPathIndex {
+    #names = new Map();
+    /** Reserve a safe path, rejecting case-folded equality and prefix collisions. */
+    add(name) {
+        if (!isSafeRepositoryPath(name))
+            throw exportError(`Unsafe export path: ${name}`);
+        const folded = name.toLowerCase();
+        for (const [existing, original] of this.#names) {
+            if (existing === folded)
+                throw exportError(`Export path collision: ${name} and ${original}`);
+            if (existing.startsWith(`${folded}/`) ||
+                folded.startsWith(`${existing}/`))
+                throw exportError(`Export file/directory collision: ${name} and ${original}`);
+        }
+        this.#names.set(folded, name);
+    }
+}
+//# sourceMappingURL=path_index.js.map

package/dist/export/path_index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path_index.js","sourceRoot":"","sources":["../../src/export/path_index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,OAAO,eAAe;IACjB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5C,iFAAiF;IACjF,GAAG,CAAC,IAAY;QACd,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAC7B,MAAM,WAAW,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/C,IAAI,QAAQ,KAAK,MAAM;gBACrB,MAAM,WAAW,CAAC,0BAA0B,IAAI,QAAQ,QAAQ,EAAE,CAAC,CAAC;YACtE,IACE,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;gBACjC,MAAM,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC;gBAEjC,MAAM,WAAW,CACf,oCAAoC,IAAI,QAAQ,QAAQ,EAAE,CAC3D,CAAC;QACN,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/export/paths.d.ts

@@ -0,0 +1,4 @@
+import type { ResolvedConfig } from "../config/types.js";
+/** Resolve and validate an export target without creating any files. */
+export declare function resolveExportOutput(config: ResolvedConfig, value: string, adapterRoot?: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/export/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/export/paths.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD,wEAAwE;AACxE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAmER"}

package/dist/export/paths.js

@@ -0,0 +1,52 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { validateReviewOut } from "../config/path_validation.js";
+import { isInside, projectRealPath } from "../config/paths.js";
+import { exportError } from "./error.js";
+import { RESERVATION_DIRECTORY } from "./reservation.js";
+/** Resolve and validate an export target without creating any files. */
+export function resolveExportOutput(config, value, adapterRoot) {
+    if (value.trim() === "")
+        throw exportError("Export output must not be empty.");
+    const output = path.resolve(path.dirname(config.configPath), value);
+    validateReviewOut(output, config, "Export output", "export-invalid");
+    const real = projectRealPath(output);
+    if (adapterRoot !== undefined) {
+        if (adapterRoot.trim() === "")
+            throw exportError("Adapter output root must not be empty.");
+        const root = path.resolve(path.dirname(config.configPath), adapterRoot);
+        const realRoot = projectRealPath(root);
+        if (output === root ||
+            real === realRoot ||
+            !isInside(root, output) ||
+            !isInside(realRoot, real))
+            throw exportError("Export output must remain inside the configured adapter root.");
+    }
+    const runtime = fileURLToPath(new URL("..", import.meta.url));
+    const protectedDirectories = [config.review.outDir, runtime];
+    const protectedFiles = [
+        config.configPath,
+        ...(config.renderer ? [config.renderer] : []),
+        ...(config.sourceFiles ?? []).map((name) => path.resolve(config.repoRoot, name)),
+        ...config.moduleResolution.packageRoots.map((root) => path.join(root, "package.json")),
+    ];
+    const overlaps = protectedDirectories.some((root) => [root, projectRealPath(root)].some((candidate) => isInside(candidate, real) ||
+        isInside(real, candidate) ||
+        isInside(candidate, output) ||
+        isInside(output, candidate)));
+    const containsInput = protectedFiles.some((candidate) => isInside(output, candidate) || isInside(real, projectRealPath(candidate)));
+    const reserved = [output, real].some((candidate) => path
+        .relative(projectRealPath(config.repoRoot), candidate)
+        .split(path.sep)
+        .some((segment) => segment === ".git" ||
+        segment === "node_modules" ||
+        segment === RESERVATION_DIRECTORY));
+    if (overlaps || containsInput || reserved)
+        throw exportError("Export output overlaps a protected input, runtime, or comparison path.");
+    const stat = fs.lstatSync(output, { throwIfNoEntry: false });
+    if (stat && (!stat.isDirectory() || stat.isSymbolicLink()))
+        throw exportError("Export output must be a real directory, not a file or symlink.");
+    return output;
+}
+//# sourceMappingURL=paths.js.map

package/dist/export/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/export/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CACjC,MAAsB,EACtB,KAAa,EACb,WAAoB;IAEpB,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QACrB,MAAM,WAAW,CAAC,kCAAkC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACpE,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;YAC3B,MAAM,WAAW,CAAC,wCAAwC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,IACE,MAAM,KAAK,IAAI;YACf,IAAI,KAAK,QAAQ;YACjB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACvB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;YAEzB,MAAM,WAAW,CACf,+DAA+D,CAChE,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG;QACrB,MAAM,CAAC,UAAU;QACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CACpC;QACD,GAAG,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAChC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAChC,CAAC,SAAS,EAAE,EAAE,CACZ,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAC9B,CACF,CAAC;IACF,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CACvC,CAAC,SAAS,EAAE,EAAE,CACZ,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACjD,IAAI;SACD,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;SACrD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACf,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,KAAK,MAAM;QAClB,OAAO,KAAK,cAAc;QAC1B,OAAO,KAAK,qBAAqB,CACpC,CACJ,CAAC;IACF,IAAI,QAAQ,IAAI,aAAa,IAAI,QAAQ;QACvC,MAAM,WAAW,CACf,wEAAwE,CACzE,CAAC;IACJ,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxD,MAAM,WAAW,CACf,gEAAgE,CACjE,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/export/public_files.d.ts

@@ -0,0 +1,4 @@
+import type { ResolvedConfig } from "../config/types.js";
+/** Capture ordinary public bytes once, rejecting selected symlinks explicitly. */
+export declare function capturePublicFiles(config: ResolvedConfig): Promise<ReadonlyMap<string, Buffer>>;
+//# sourceMappingURL=public_files.d.ts.map

package/dist/export/public_files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public_files.d.ts","sourceRoot":"","sources":["../../src/export/public_files.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD,kFAAkF;AAClF,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAyBtC"}

package/dist/export/public_files.js

@@ -0,0 +1,32 @@
+import fs from "node:fs";
+import path from "node:path";
+import { toPosixPath } from "../config/paths.js";
+import { isPublicStaticFile } from "../config/public_files.js";
+import { exportError } from "./error.js";
+import { exportResourcePolicy } from "./resource_policy.js";
+/** Capture ordinary public bytes once, rejecting selected symlinks explicitly. */
+export async function capturePublicFiles(config) {
+    const files = new Map();
+    const isPublic = exportResourcePolicy(config);
+    const visit = async (directory) => {
+        for (const entry of await fs.promises.readdir(directory, {
+            withFileTypes: true,
+        })) {
+            const candidate = path.join(directory, entry.name);
+            const name = toPosixPath(path.relative(config.mockupsDir, candidate));
+            if (!isPublic(name))
+                continue;
+            if (entry.isSymbolicLink())
+                throw exportError(`Public export resource is a symlink: ${name}`);
+            if (entry.isDirectory())
+                await visit(candidate);
+            else if (entry.isFile() && isPublicStaticFile(candidate, config))
+                files.set(name, await fs.promises.readFile(candidate));
+            else
+                throw exportError(`Public export resource is not a regular file: ${name}`);
+        }
+    };
+    await visit(config.mockupsDir);
+    return new Map([...files].sort(([left], [right]) => left.localeCompare(right)));
+}
+//# sourceMappingURL=public_files.js.map

package/dist/export/public_files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public_files.js","sourceRoot":"","sources":["../../src/export/public_files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;QACvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE;YACvD,aAAa,EAAE,IAAI;SACpB,CAAC,EAAE,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;gBACxB,MAAM,WAAW,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;iBAC3C,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC;gBAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;;gBAEvD,MAAM,WAAW,CACf,iDAAiD,IAAI,EAAE,CACxD,CAAC;QACN,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC"}

package/dist/export/references.d.ts

@@ -0,0 +1,4 @@
+import type { ReviewArtifactContent } from "../review/types.js";
+/** Prove every local document/resource/module request has an exported target. */
+export declare function validateExportReferences(files: ReadonlyMap<string, ReviewArtifactContent>, aliases?: ReadonlyMap<string, string>): void;
+//# sourceMappingURL=references.d.ts.map

package/dist/export/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../src/export/references.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAIhE,iFAAiF;AACjF,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,EACjD,OAAO,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,GAC/C,IAAI,CAqEN"}

package/dist/export/references.js

@@ -0,0 +1,86 @@
+import path from "node:path";
+import { isSafeRepositoryPath } from "../config/paths.js";
+import { extractCssReferences, extractHtmlReferences, } from "../html_references.js";
+import { fragmentViolation, htmlResource, } from "../html_link_validation.js";
+import { exportError } from "./error.js";
+import { ExportPathIndex } from "./path_index.js";
+/** Prove every local document/resource/module request has an exported target. */
+export function validateExportReferences(files, aliases = new Map()) {
+    const paths = new ExportPathIndex();
+    for (const name of files.keys())
+        paths.add(name);
+    for (const [alias, target] of aliases) {
+        if (!isSafeRepositoryPath(alias) ||
+            !isSafeRepositoryPath(target) ||
+            !files.has(target))
+            throw exportError(`Invalid hosting alias: ${alias} -> ${target}`);
+        paths.add(alias);
+    }
+    const documents = new Map([...files].flatMap(([name, bytes]) => /\.html?$/i.test(name)
+        ? [
+            [
+                name,
+                htmlResource(extractHtmlReferences(Buffer.from(bytes).toString("utf8"))),
+            ],
+        ]
+        : []));
+    for (const [name, bytes] of files) {
+        const content = Buffer.from(bytes).toString("utf8");
+        const extension = path.posix.extname(name).toLowerCase();
+        const references = [];
+        if (extension === ".html" || extension === ".htm") {
+            references.push(...(documents.get(name)?.references ?? []).filter((item) => !item.checkFragment || !name.includes("/snapshots/")));
+        }
+        else if (extension === ".css")
+            references.push(...extractCssReferences(content).map((value) => ({
+                value,
+                checkFragment: false,
+            })));
+        else if (extension === ".js" && name.startsWith("__mokly/")) {
+            for (const match of content.matchAll(/\b(?:from|import)\s*["']([^"']+)["']/g))
+                references.push({ value: match[1] ?? "", checkFragment: false });
+        }
+        for (const reference of references) {
+            const target = referenceTarget(name, reference.value);
+            if (target === undefined)
+                continue;
+            const resolved = files.has(target)
+                ? target
+                : (aliases.get(target) ?? `${target}/index.html`);
+            if (!files.has(resolved))
+                throw exportError(`Export resource is unavailable: ${name} -> ${reference.value}`);
+            const violation = reference.checkFragment
+                ? fragmentViolation(reference.value, documents.get(resolved)?.anchors ?? new Set())
+                : undefined;
+            if (violation)
+                throw exportError(`Export link is invalid: ${name} -> ${violation}`);
+        }
+    }
+}
+function referenceTarget(source, value) {
+    const reference = value.trim();
+    if (reference === "" || /^(?:https?:|mailto:|tel:|data:)/i.test(reference))
+        return undefined;
+    if (reference.startsWith("#") || reference.startsWith("?"))
+        return source;
+    if (reference.startsWith("//") || /^[a-z][a-z0-9+.-]*:/i.test(reference))
+        throw exportError(`Unsupported export URL: ${source} -> ${reference}`);
+    const encoded = reference.split(/[?#]/, 1)[0] ?? "";
+    let decoded;
+    try {
+        decoded = decodeURIComponent(encoded);
+    }
+    catch (error) {
+        throw exportError(`Invalid export URL: ${reference}`, error);
+    }
+    if (decoded === "/")
+        return "index.html";
+    const resolved = path.posix.normalize(decoded.startsWith("/")
+        ? decoded.slice(1)
+        : path.posix.join(path.posix.dirname(source), decoded));
+    const target = resolved.replace(/\/$/, "");
+    if (!isSafeRepositoryPath(target))
+        throw exportError(`Export URL escapes the site: ${reference}`);
+    return target;
+}
+//# sourceMappingURL=references.js.map