@mossbear/projections 0.1.0-alpha.65 → 0.1.0-alpha.66

package/dist/bundle-mirror-path.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Where a document's declared path lands in a repo that is **not** its home:
+ * mirrored under the bundle's own folder, `<bundleDir>/<declared path>`.
+ *
+ * A declared path is placement — where the document sits in its home repo's
+ * layout. Honoured literally everywhere, a bundle carrying `README.md` drops that
+ * README at the root of every subscribed repo lacking one, with nothing saying
+ * the file is foreign. Mirroring keeps the layout and moves the whole delivery
+ * inside a directory Mossbear owns outright, which is also what makes a
+ * recursive orphan sweep there sound.
+ *
+ * The same shape as `evalShadowPath` — a prefix plus the scope-relative path —
+ * because it is the same idea: a shadow tree that mirrors a path without landing
+ * on it. It has no inverse yet because nothing reads a mirrored path back into a
+ * declared one; add it beside its first caller.
+ */
+/**
+ * True when a declared path is already inside `.mossbear/` — Mossbear's own
+ * tree, which a document may land in literally anywhere, and which
+ * `bundleMirrorPath` therefore refuses to mirror. Exported so the caller choosing
+ * between the two asks the same question this module does.
+ */
+export declare function isMossbearTreePath(path: string): boolean;
+/**
+ * The mirrored path for a document declaring `declaredPath`, relative to the
+ * same root `bundleDir` is (the repo). `null` when the declared path could not
+ * have been declared in the first place (absolute, escaping, control
+ * characters, over-long, or already inside `.mossbear/`), when `bundleDir` is
+ * not a safe relative path, or when the two together pass the 512-char bound.
+ */
+export declare function bundleMirrorPath(bundleDir: string, declaredPath: string): string | null;
+//# sourceMappingURL=bundle-mirror-path.d.ts.map

package/dist/bundle-mirror-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-mirror-path.d.ts","sourceRoot":"","sources":["../src/bundle-mirror-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYvF"}

package/dist/bundle-mirror-path.js

@@ -0,0 +1,52 @@
+/**
+ * Where a document's declared path lands in a repo that is **not** its home:
+ * mirrored under the bundle's own folder, `<bundleDir>/<declared path>`.
+ *
+ * A declared path is placement — where the document sits in its home repo's
+ * layout. Honoured literally everywhere, a bundle carrying `README.md` drops that
+ * README at the root of every subscribed repo lacking one, with nothing saying
+ * the file is foreign. Mirroring keeps the layout and moves the whole delivery
+ * inside a directory Mossbear owns outright, which is also what makes a
+ * recursive orphan sweep there sound.
+ *
+ * The same shape as `evalShadowPath` — a prefix plus the scope-relative path —
+ * because it is the same idea: a shadow tree that mirrors a path without landing
+ * on it. It has no inverse yet because nothing reads a mirrored path back into a
+ * declared one; add it beside its first caller.
+ */
+import { isSafeRelativePath, isUnderMossbearDir, toPosix } from './path-rules.js';
+/**
+ * True when a declared path is already inside `.mossbear/` — Mossbear's own
+ * tree, which a document may land in literally anywhere, and which
+ * `bundleMirrorPath` therefore refuses to mirror. Exported so the caller choosing
+ * between the two asks the same question this module does.
+ */
+export function isMossbearTreePath(path) {
+    return isUnderMossbearDir(toPosix(path));
+}
+/**
+ * The mirrored path for a document declaring `declaredPath`, relative to the
+ * same root `bundleDir` is (the repo). `null` when the declared path could not
+ * have been declared in the first place (absolute, escaping, control
+ * characters, over-long, or already inside `.mossbear/`), when `bundleDir` is
+ * not a safe relative path, or when the two together pass the 512-char bound.
+ */
+export function bundleMirrorPath(bundleDir, declaredPath) {
+    const dir = trimTrailingSlashes(toPosix(bundleDir));
+    const normalized = toPosix(declaredPath);
+    if (!isSafeRelativePath(dir))
+        return null;
+    if (!isSafeRelativePath(normalized))
+        return null;
+    // A document declaring a place inside Mossbear's own state has no layout of
+    // its own to mirror, and mirroring it would nest one bundle's folder inside
+    // another's.
+    if (isUnderMossbearDir(normalized))
+        return null;
+    const mirrored = `${dir}/${normalized}`;
+    return isSafeRelativePath(mirrored) ? mirrored : null;
+}
+function trimTrailingSlashes(path) {
+    return path.replace(/\/+$/, '');
+}
+//# sourceMappingURL=bundle-mirror-path.js.map

package/dist/bundle-mirror-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-mirror-path.js","sourceRoot":"","sources":["../src/bundle-mirror-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,YAAoB;IACtE,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACxC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACzC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IAChD,4EAA4E;IAC5E,4EAA4E;IAC5E,aAAa;IACb,IAAI,kBAAkB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/C,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,UAAU,EAAE,CAAA;IACvC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;AACvD,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC"}

package/dist/bundle-mirror-path.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bundle-mirror-path.test.d.ts.map

package/dist/bundle-mirror-path.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-mirror-path.test.d.ts","sourceRoot":"","sources":["../src/bundle-mirror-path.test.ts"],"names":[],"mappings":""}

package/dist/bundle-mirror-path.test.js

@@ -0,0 +1,46 @@
+import { describe, expect, it } from 'vitest';
+import { bundleMirrorPath, isMossbearTreePath } from './bundle-mirror-path.js';
+const DIR = '.mossbear/context/team-docs';
+describe('bundleMirrorPath', () => {
+    it('keeps a foreign document inside the bundle folder, layout intact', () => {
+        expect(bundleMirrorPath(DIR, 'README.md')).toBe(`${DIR}/README.md`);
+        expect(bundleMirrorPath(DIR, 'docs/architecture.md')).toBe(`${DIR}/docs/architecture.md`);
+        expect(bundleMirrorPath(`${DIR}/`, 'docs/a.md')).toBe(`${DIR}/docs/a.md`);
+        expect(bundleMirrorPath('.mossbear\\context\\team-docs', 'docs\\a.md')).toBe(`${DIR}/docs/a.md`);
+    });
+    it('refuses a declared path no repo could hold', () => {
+        for (const bad of [
+            '',
+            '/etc/passwd',
+            'C:/x.md',
+            '../escape.md',
+            'a/../b.md',
+            'a//b.md',
+            'a\u0000.md',
+        ]) {
+            expect(bundleMirrorPath(DIR, bad)).toBeNull();
+        }
+    });
+    it('refuses a declared path inside Mossbear state rather than nesting a bundle in a bundle', () => {
+        expect(bundleMirrorPath(DIR, '.mossbear/context/other/a.md')).toBeNull();
+        expect(bundleMirrorPath(DIR, '.Mossbear/config.json')).toBeNull();
+    });
+    it('refuses when the mirror would pass the 512-char bound the declared path alone fits', () => {
+        const declared = `${'d/'.repeat(252)}x.md`;
+        expect(declared.length).toBeLessThanOrEqual(512);
+        expect(bundleMirrorPath(DIR, declared)).toBeNull();
+    });
+    it('refuses an unsafe bundle folder', () => {
+        expect(bundleMirrorPath('../elsewhere', 'a.md')).toBeNull();
+        expect(bundleMirrorPath('/abs', 'a.md')).toBeNull();
+    });
+});
+describe('isMossbearTreePath', () => {
+    it('recognises Mossbear’s own tree whatever the case or separator', () => {
+        expect(isMossbearTreePath('.mossbear/context/a.md')).toBe(true);
+        expect(isMossbearTreePath('.Mossbear\\evals\\AGENTS.md')).toBe(true);
+        expect(isMossbearTreePath('docs/.mossbear/a.md')).toBe(false);
+        expect(isMossbearTreePath('README.md')).toBe(false);
+    });
+});
+//# sourceMappingURL=bundle-mirror-path.test.js.map

package/dist/bundle-mirror-path.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-mirror-path.test.js","sourceRoot":"","sources":["../src/bundle-mirror-path.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE9E,MAAM,GAAG,GAAG,6BAA6B,CAAA;AAEzC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,CAAA;QACnE,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CACxD,GAAG,GAAG,uBAAuB,CAC9B,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,GAAG,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,CAAA;QACzE,MAAM,CAAC,gBAAgB,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAC1E,GAAG,GAAG,YAAY,CACnB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,MAAM,GAAG,IAAI;YAChB,EAAE;YACF,aAAa;YACb,SAAS;YACT,cAAc;YACd,WAAW;YACX,SAAS;YACT,YAAY;SACb,EAAE,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACxE,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAA;QAChD,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3D,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/D,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpE,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,MAAM,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -12,6 +12,7 @@
  * second writer until it stopped scaffolding a starter template; the docs
  * phase is the only one now.)
  */
+export * from './bundle-mirror-path.js';
 export * from './eval-path.js';
 export * from './agents-dir.js';
 export * from './claude-md.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA"}

package/dist/index.js

@@ -12,6 +12,7 @@
  * second writer until it stopped scaffolding a starter template; the docs
  * phase is the only one now.)
  */
+export * from './bundle-mirror-path.js';
 export * from './eval-path.js';
 export * from './agents-dir.js';
 export * from './claude-md.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mossbear/projections",
-  "version": "0.1.0-alpha.65",
+  "version": "0.1.0-alpha.66",
   "private": false,
   "description": "Guide file format detection and compatibility renderers for Mossbear — AGENTS.md, .agents/, CLAUDE.md, .claude/rules/, .cursorrules.",
   "license": "MIT",
@@ -38,7 +38,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@mossbear/protocol": "0.1.0-alpha.65",
+    "@mossbear/protocol": "0.1.0-alpha.66",
     "valibot": "^1.4.2"
   },
   "devDependencies": {