@open-agreements/open-agreements 0.2.0

package/dist/core/validation/template.js

@@ -0,0 +1,248 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import AdmZip from 'adm-zip';
+import { loadMetadata } from '../metadata.js';
+import { extractSearchText } from '../recipe/replacement-keys.js';
+/**
+ * Extract text content from a DOCX file by unzipping and reading word/document.xml.
+ * Concatenates <w:t> text within each <w:p> paragraph, then joins paragraphs with
+ * newlines to prevent false {tag} matches across element boundaries.
+ */
+function extractDocxText(docxPath) {
+    const zip = new AdmZip(docxPath);
+    const documentXml = zip.getEntry('word/document.xml');
+    if (!documentXml)
+        return '';
+    const xml = documentXml.getData().toString('utf-8');
+    const paragraphs = [];
+    const paraRegex = /<w:p[\s>][\s\S]*?<\/w:p>/g;
+    let paraMatch;
+    while ((paraMatch = paraRegex.exec(xml)) !== null) {
+        const paraXml = paraMatch[0];
+        const textParts = [];
+        const tRegex = /<w:t[^>]*>([^<]*)<\/w:t>/g;
+        let tMatch;
+        while ((tMatch = tRegex.exec(paraXml)) !== null) {
+            textParts.push(tMatch[1]);
+        }
+        if (textParts.length > 0) {
+            paragraphs.push(textParts.join(''));
+        }
+    }
+    return paragraphs.join('\n');
+}
+/**
+ * Validate that a template's metadata fields match the placeholders in its DOCX file.
+ */
+export function validateTemplate(templateDir, templateId) {
+    const errors = [];
+    const warnings = [];
+    let metadata;
+    try {
+        metadata = loadMetadata(templateDir);
+    }
+    catch (err) {
+        return {
+            templateId,
+            valid: false,
+            errors: [`Failed to load metadata: ${err.message}`],
+            warnings: [],
+        };
+    }
+    const templatePath = join(templateDir, 'template.docx');
+    if (!existsSync(templatePath)) {
+        return {
+            templateId,
+            valid: false,
+            errors: ['template.docx not found in template directory'],
+            warnings: [],
+        };
+    }
+    const metadataFieldNames = new Set(metadata.fields.map((f) => f.name));
+    const requiredFieldNames = new Set(metadata.required_fields);
+    // Check if this template uses declarative replacements
+    const replacementsPath = join(templateDir, 'replacements.json');
+    const hasReplacements = existsSync(replacementsPath);
+    if (hasReplacements) {
+        // Declarative pipeline: tags are in replacement values, not DOCX text.
+        // Validate replacement keys exist in DOCX, and replacement value tags match metadata.
+        let replacements;
+        try {
+            replacements = JSON.parse(readFileSync(replacementsPath, 'utf-8'));
+        }
+        catch (err) {
+            return {
+                templateId,
+                valid: false,
+                errors: [`Failed to parse replacements.json: ${err.message}`],
+                warnings,
+            };
+        }
+        const docxText = extractDocxText(templatePath);
+        // Validate replacement keys exist in the original DOCX text
+        for (const key of Object.keys(replacements)) {
+            const searchText = extractSearchText(key);
+            if (!docxText.includes(searchText)) {
+                errors.push(`Replacement key "${searchText}" not found in template.docx`);
+            }
+        }
+        // Collect {tags} from replacement values and the DOCX text
+        const foundTags = new Set();
+        const foundConditionalFields = new Set();
+        // Tags from replacement values (these will exist after patching)
+        for (const value of Object.values(replacements)) {
+            const placeholderRegex = /\{(\w+)\}/g;
+            let match;
+            while ((match = placeholderRegex.exec(value)) !== null) {
+                foundTags.add(match[1]);
+            }
+            const conditionalRegex = /\{IF !?(\w+)\}/g;
+            let condMatch;
+            while ((condMatch = conditionalRegex.exec(value)) !== null) {
+                foundConditionalFields.add(condMatch[1]);
+            }
+        }
+        // Tags already in the DOCX (may exist alongside replacements)
+        const docxPlaceholderRegex = /\{(\w+)\}/g;
+        let docxMatch;
+        while ((docxMatch = docxPlaceholderRegex.exec(docxText)) !== null) {
+            foundTags.add(docxMatch[1]);
+        }
+        const docxConditionalRegex = /\{IF !?(\w+)\}/g;
+        let docxCondMatch;
+        while ((docxCondMatch = docxConditionalRegex.exec(docxText)) !== null) {
+            foundConditionalFields.add(docxCondMatch[1]);
+        }
+        // Check metadata fields are covered by tags
+        for (const fieldName of metadataFieldNames) {
+            const inTags = foundTags.has(fieldName) || foundConditionalFields.has(fieldName);
+            if (!inTags) {
+                if (requiredFieldNames.has(fieldName)) {
+                    errors.push(`Required field "${fieldName}" defined in metadata but not found in replacement values or template.docx`);
+                }
+                else {
+                    warnings.push(`Optional field "${fieldName}" defined in metadata but not found in replacement values or template.docx`);
+                }
+            }
+        }
+        // Check for tags not in metadata
+        const controlTokens = new Set(['IF', 'END']);
+        for (const tag of foundTags) {
+            if (controlTokens.has(tag))
+                continue;
+            if (!metadataFieldNames.has(tag)) {
+                warnings.push(`Placeholder {${tag}} found in replacements/template but not defined in metadata fields`);
+            }
+        }
+    }
+    else {
+        // Original behavior: scan DOCX text directly for {tags}
+        const text = extractDocxText(templatePath);
+        const placeholderRegex = /\{(\w+)\}/g;
+        const foundTags = new Set();
+        let match;
+        while ((match = placeholderRegex.exec(text)) !== null) {
+            foundTags.add(match[1]);
+        }
+        const conditionalRegex = /\{IF !?(\w+)\}/g;
+        const foundConditionalFields = new Set();
+        let condMatch;
+        while ((condMatch = conditionalRegex.exec(text)) !== null) {
+            foundConditionalFields.add(condMatch[1]);
+        }
+        // Extract array field names from FOR loop constructs
+        const forLoopRegex = /\{FOR \w+ IN (\w+)\}/g;
+        let forMatch;
+        while ((forMatch = forLoopRegex.exec(text)) !== null) {
+            foundTags.add(forMatch[1]);
+        }
+        // Security: scan for docx-templates control/code tags that should not exist
+        // in open-source templates. Only simple {identifier} tags are allowed.
+        const rawXml = extractRawDocumentXml(templatePath);
+        if (rawXml) {
+            scanForUnsafeTemplateTags(rawXml, errors);
+        }
+        // Check for fields in metadata but not in DOCX
+        for (const fieldName of metadataFieldNames) {
+            const inDocx = foundTags.has(fieldName) || foundConditionalFields.has(fieldName);
+            if (!inDocx) {
+                if (requiredFieldNames.has(fieldName)) {
+                    errors.push(`Required field "${fieldName}" defined in metadata but not found as {${fieldName}} in template.docx`);
+                }
+                else {
+                    warnings.push(`Optional field "${fieldName}" defined in metadata but not found as {${fieldName}} in template.docx`);
+                }
+            }
+        }
+        // Check for placeholders in DOCX but not in metadata
+        const controlTokens = new Set(['IF', 'END']);
+        for (const tag of foundTags) {
+            if (controlTokens.has(tag))
+                continue;
+            if (!metadataFieldNames.has(tag)) {
+                warnings.push(`Placeholder {${tag}} found in template.docx but not defined in metadata fields`);
+            }
+        }
+    }
+    return { templateId, valid: errors.length === 0, errors, warnings };
+}
+/**
+ * Extract raw word/document.xml string from a DOCX file.
+ */
+function extractRawDocumentXml(docxPath) {
+    const zip = new AdmZip(docxPath);
+    const entry = zip.getEntry('word/document.xml');
+    if (!entry)
+        return null;
+    return entry.getData().toString('utf-8');
+}
+/**
+ * Allowed tag patterns:
+ *   {identifier}                  — simple placeholder
+ *   {IF [!]identifier}            — conditional start
+ *   {END-IF}                      — conditional end
+ *   {FOR var IN identifier}       — loop start (docx-templates)
+ *   {END-FOR var}                 — loop end
+ *   {$var.field} / {$var.a.b}     — loop variable access
+ */
+const SAFE_TAG_RE = /^\{(?:[a-zA-Z_][a-zA-Z0-9_]*|IF !?[a-zA-Z_][a-zA-Z0-9_]*|END-IF|FOR [a-zA-Z_]\w* IN [a-zA-Z_]\w*|END-FOR [a-zA-Z_]\w*|\$[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)+)\}$/;
+/**
+ * Scan the raw OOXML text content for any {…} tokens and reject ones that
+ * are not simple identifiers. This blocks docx-templates control tags
+ * ({#if}, {/if}, {>partial}, {= expression}, etc.) that could execute
+ * arbitrary code in the Node VM sandbox.
+ *
+ * We extract text from <w:t> elements and scan for curly-brace tokens,
+ * then also check across run boundaries within paragraphs.
+ */
+function scanForUnsafeTemplateTags(xml, errors) {
+    // Extract all text content from <w:t> elements and reassemble per-paragraph
+    const paragraphs = [];
+    const paraRegex = /<w:p[\s>][\s\S]*?<\/w:p>/g;
+    let paraMatch;
+    while ((paraMatch = paraRegex.exec(xml)) !== null) {
+        const paraXml = paraMatch[0];
+        const textParts = [];
+        const tRegex = /<w:t[^>]*>([^<]*)<\/w:t>/g;
+        let tMatch;
+        while ((tMatch = tRegex.exec(paraXml)) !== null) {
+            textParts.push(tMatch[1]);
+        }
+        if (textParts.length > 0) {
+            paragraphs.push(textParts.join(''));
+        }
+    }
+    const fullText = paragraphs.join('\n');
+    // Find all {…} tokens in the reassembled text
+    const tokenRegex = /\{[^}]+\}/g;
+    let tokenMatch;
+    while ((tokenMatch = tokenRegex.exec(fullText)) !== null) {
+        const token = tokenMatch[0];
+        if (!SAFE_TAG_RE.test(token)) {
+            errors.push(`Unsafe template tag "${token}" found in template.docx. ` +
+                `Only simple {identifier}, {IF [!]identifier}, and {END-IF} tags are allowed. ` +
+                `Control tags ({#...}, {/...}, {>...}, {=...}) are not permitted in open-source templates.`);
+        }
+    }
+}
+//# sourceMappingURL=template.js.map

package/dist/core/validation/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../../src/core/validation/template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AASlE;;;;GAIG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACtD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,2BAA2B,CAAC;IAC9C,IAAI,SAAS,CAAC;IACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,IAAI,MAAM,CAAC;QACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,UAAkB;IACtE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,UAAU;YACV,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC;YAC9D,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,UAAU;YACV,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,+CAA+C,CAAC;YACzD,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE7D,uDAAuD;IACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAErD,IAAI,eAAe,EAAE,CAAC;QACpB,uEAAuE;QACvE,sFAAsF;QACtF,IAAI,YAAoC,CAAC;QACzC,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,UAAU;gBACV,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,CAAC,sCAAuC,GAAa,CAAC,OAAO,EAAE,CAAC;gBACxE,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAE/C,4DAA4D;QAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CACT,oBAAoB,UAAU,8BAA8B,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;QAEjD,iEAAiE;QACjE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,MAAM,gBAAgB,GAAG,YAAY,CAAC;YACtC,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;YAC3C,IAAI,SAAS,CAAC;YACd,OAAO,CAAC,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3D,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,oBAAoB,GAAG,YAAY,CAAC;QAC1C,IAAI,SAAS,CAAC;QACd,OAAO,CAAC,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClE,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;QAC/C,IAAI,aAAa,CAAC;QAClB,OAAO,CAAC,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtE,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CACT,mBAAmB,SAAS,4EAA4E,CACzG,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CACX,mBAAmB,SAAS,4EAA4E,CACzG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,QAAQ,CAAC,IAAI,CACX,gBAAgB,GAAG,qEAAqE,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,gBAAgB,GAAG,YAAY,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;QAC3C,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;QACjD,IAAI,SAAS,CAAC;QACd,OAAO,CAAC,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,qDAAqD;QACrD,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC7C,IAAI,QAAQ,CAAC;QACb,OAAO,CAAC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,+CAA+C;QAC/C,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CACT,mBAAmB,SAAS,2CAA2C,SAAS,oBAAoB,CACrG,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CACX,mBAAmB,SAAS,2CAA2C,SAAS,oBAAoB,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,QAAQ,CAAC,IAAI,CACX,gBAAgB,GAAG,6DAA6D,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG,6JAA6J,CAAC;AAElL;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAAC,GAAW,EAAE,MAAgB;IAC9D,4EAA4E;IAC5E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,2BAA2B,CAAC;IAC9C,IAAI,SAAS,CAAC;IACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,IAAI,MAAM,CAAC;QACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvC,8CAA8C;IAC9C,MAAM,UAAU,GAAG,YAAY,CAAC;IAChC,IAAI,UAAU,CAAC;IACf,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CACT,wBAAwB,KAAK,4BAA4B;gBACzD,+EAA+E;gBAC/E,2FAA2F,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export { fillTemplate, type FillOptions, type FillResult } from './core/engine.js';
+export { loadMetadata, validateMetadata, loadRecipeMetadata, validateRecipeMetadata, loadCleanConfig, TemplateMetadataSchema, RecipeMetadataSchema, CleanConfigSchema, LicenseEnum, FieldDefinitionSchema, type TemplateMetadata, type RecipeMetadata, type CleanConfig, type FieldDefinition, type License, } from './core/metadata.js';
+export { runExternalFill, type ExternalFillOptions, type ExternalFillResult, } from './core/external/index.js';
+export { loadExternalMetadata, validateExternalMetadata, ExternalMetadataSchema, type ExternalMetadata, } from './core/metadata.js';
+export { validateTemplate, type TemplateValidationResult } from './core/validation/template.js';
+export { validateLicense, type LicenseValidationResult } from './core/validation/license.js';
+export { validateOutput, type OutputValidationResult } from './core/validation/output.js';
+export { validateRecipe, type RecipeValidationResult } from './core/validation/recipe.js';
+export { validateExternal, type ExternalValidationResult } from './core/validation/external.js';
+export { assessScanMetadataCoverage, type ScanMetadataCoverageInput, type ScanMetadataCoverageReport, } from './core/validation/scan-metadata.js';
+export { runRecipe, cleanDocument, patchDocument, verifyOutput, ensureSourceDocx, checkRecipeSourceDrift, computeSourceStructureSignature, type RecipeRunOptions, type RecipeRunResult, type VerifyResult, type VerifyCheck, } from './core/recipe/index.js';
+export { buildChecklistTemplateContext, ClosingChecklistSchema, ChecklistPatchEnvelopeSchema, ChecklistPatchApplyRequestSchema, ChecklistPatchOperationSchema, PatchCitationSchema, ChecklistPatchModeEnum, JsonPointerSchema, CHECKLIST_PATCH_VALIDATION_TTL_MS, applyChecklistPatchOperations, computeChecklistPatchHash, validateChecklistPatch, getChecklistPatchValidationArtifact, setChecklistPatchValidationStore, getChecklistPatchValidationStore, applyChecklistPatch, setChecklistAppliedPatchStore, getChecklistAppliedPatchStore, setChecklistProposedPatchStore, getChecklistProposedPatchStore, type ClosingChecklist, type ChecklistPatchEnvelope, type ChecklistPatchApplyRequest, type ChecklistPatchOperation, type PatchCitation, type ChecklistPatchMode, type JsonPointer, type ChecklistPatchValidationErrorCode, type ChecklistPatchValidationDiagnostic, type ResolvedChecklistPatchOperation, type ChecklistPatchValidationArtifact, type ChecklistPatchValidationStore, type ValidateChecklistPatchInput, type ChecklistPatchValidationSuccess, type ChecklistPatchValidationFailure, type ChecklistPatchValidationResult, type ChecklistAppliedPatchRecord, type ChecklistAppliedPatchStore, type ChecklistProposedPatchRecord, type ChecklistProposedPatchStore, type ChecklistPatchApplyErrorCode, type ChecklistPatchApplyFailure, type ChecklistPatchApplySuccess, type ChecklistPatchApplyResult, type ApplyChecklistPatchInput, } from './core/checklist/index.js';
+export { ChecklistStageEnum, ChecklistEntryStatusEnum, SignatoryStatusEnum, ChecklistItemStatusEnum, IssueStatusEnum, ResponsibilitySchema, CitationSchema, SignatureArtifactSchema, SignatorySchema, ChecklistDocumentSchema, ChecklistEntrySchema, ActionItemSchema, IssueSchema, type ChecklistStage, type ChecklistEntryStatus, type SignatoryStatus, type ChecklistItemStatus, type IssueStatus, type Responsibility, type Citation, type SignatureArtifact, type Signatory, type ChecklistDocument, type ChecklistEntry, type ActionItem, type Issue, } from './core/checklist/schemas.js';
+export type { ToolCommandAdapter } from './core/command-generation/types.js';
+export { ClaudeCodeAdapter } from './core/command-generation/adapters/claude.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnF,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,OAAO,GACb,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,gBAAgB,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EACL,0BAA0B,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EACL,SAAS,EACT,aAAa,EACb,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,6BAA6B,EAC7B,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,iCAAiC,EACjC,6BAA6B,EAC7B,yBAAyB,EACzB,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,gCAAgC,EAChC,mBAAmB,EACnB,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,uBAAuB,EACvB,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,KAAK,GACX,MAAM,6BAA6B,CAAC;AAGrC,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC"}

package/dist/index.js

@@ -0,0 +1,23 @@
+// Public API exports
+// Template engine
+export { fillTemplate } from './core/engine.js';
+// Metadata schemas and loaders
+export { loadMetadata, validateMetadata, loadRecipeMetadata, validateRecipeMetadata, loadCleanConfig, TemplateMetadataSchema, RecipeMetadataSchema, CleanConfigSchema, LicenseEnum, FieldDefinitionSchema, } from './core/metadata.js';
+// External template engine
+export { runExternalFill, } from './core/external/index.js';
+// Metadata schemas and loaders (external)
+export { loadExternalMetadata, validateExternalMetadata, ExternalMetadataSchema, } from './core/metadata.js';
+// Template validation
+export { validateTemplate } from './core/validation/template.js';
+export { validateLicense } from './core/validation/license.js';
+export { validateOutput } from './core/validation/output.js';
+export { validateRecipe } from './core/validation/recipe.js';
+export { validateExternal } from './core/validation/external.js';
+export { assessScanMetadataCoverage, } from './core/validation/scan-metadata.js';
+// Recipe engine
+export { runRecipe, cleanDocument, patchDocument, verifyOutput, ensureSourceDocx, checkRecipeSourceDrift, computeSourceStructureSignature, } from './core/recipe/index.js';
+// Closing checklist
+export { buildChecklistTemplateContext, ClosingChecklistSchema, ChecklistPatchEnvelopeSchema, ChecklistPatchApplyRequestSchema, ChecklistPatchOperationSchema, PatchCitationSchema, ChecklistPatchModeEnum, JsonPointerSchema, CHECKLIST_PATCH_VALIDATION_TTL_MS, applyChecklistPatchOperations, computeChecklistPatchHash, validateChecklistPatch, getChecklistPatchValidationArtifact, setChecklistPatchValidationStore, getChecklistPatchValidationStore, applyChecklistPatch, setChecklistAppliedPatchStore, getChecklistAppliedPatchStore, setChecklistProposedPatchStore, getChecklistProposedPatchStore, } from './core/checklist/index.js';
+export { ChecklistStageEnum, ChecklistEntryStatusEnum, SignatoryStatusEnum, ChecklistItemStatusEnum, IssueStatusEnum, ResponsibilitySchema, CitationSchema, SignatureArtifactSchema, SignatorySchema, ChecklistDocumentSchema, ChecklistEntrySchema, ActionItemSchema, IssueSchema, } from './core/checklist/schemas.js';
+export { ClaudeCodeAdapter } from './core/command-generation/adapters/claude.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qBAAqB;AAErB,kBAAkB;AAClB,OAAO,EAAE,YAAY,EAAqC,MAAM,kBAAkB,CAAC;AAEnF,+BAA+B;AAC/B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,qBAAqB,GAMtB,MAAM,oBAAoB,CAAC;AAE5B,2BAA2B;AAC3B,OAAO,EACL,eAAe,GAGhB,MAAM,0BAA0B,CAAC;AAElC,0CAA0C;AAC1C,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC;AAE5B,sBAAsB;AACtB,OAAO,EAAE,gBAAgB,EAAiC,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,eAAe,EAAgC,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAA+B,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,cAAc,EAA+B,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAiC,MAAM,+BAA+B,CAAC;AAChG,OAAO,EACL,0BAA0B,GAG3B,MAAM,oCAAoC,CAAC;AAE5C,gBAAgB;AAChB,OAAO,EACL,SAAS,EACT,aAAa,EACb,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,GAKhC,MAAM,wBAAwB,CAAC;AAEhC,oBAAoB;AACpB,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,EAC5B,gCAAgC,EAChC,6BAA6B,EAC7B,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,iCAAiC,EACjC,6BAA6B,EAC7B,yBAAyB,EACzB,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,gCAAgC,EAChC,mBAAmB,EACnB,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,GA0B/B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,uBAAuB,EACvB,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GAcZ,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC"}

package/dist/utils/paths.d.ts

@@ -0,0 +1,43 @@
+export interface ContentEntry {
+    id: string;
+    dir: string;
+    baseDir: string;
+}
+/** Root of the open-agreements package */
+export declare function getPackageRoot(): string;
+/** Optional additional content roots. Format is path-delimited, e.g. /a:/b on macOS/Linux. */
+export declare function getContentRoots(): string[];
+/** Templates directory */
+export declare function getTemplatesDir(): string;
+/** All template directories in precedence order (env roots first, package root last). */
+export declare function getAllTemplatesDirs(): string[];
+/** Resolve a specific template directory by ID */
+export declare function resolveTemplateDir(templateId: string): string;
+/** Find a specific template directory by ID across all configured content roots. */
+export declare function findTemplateDir(templateId: string): string | undefined;
+/** List template IDs across all content roots (first match wins for duplicates). */
+export declare function listTemplateEntries(): ContentEntry[];
+export declare function listTemplateIds(): string[];
+/** External templates directory */
+export declare function getExternalDir(): string;
+/** All external template directories in precedence order (env roots first, package root last). */
+export declare function getAllExternalDirs(): string[];
+/** Resolve a specific external template directory by ID */
+export declare function resolveExternalDir(externalId: string): string;
+/** Find a specific external directory by ID across all configured content roots. */
+export declare function findExternalDir(externalId: string): string | undefined;
+/** List external template IDs across all content roots (first match wins for duplicates). */
+export declare function listExternalEntries(): ContentEntry[];
+export declare function listExternalIds(): string[];
+/** Recipes directory */
+export declare function getRecipesDir(): string;
+/** All recipe directories in precedence order (env roots first, package root last). */
+export declare function getAllRecipesDirs(): string[];
+/** Resolve a specific recipe directory by ID */
+export declare function resolveRecipeDir(recipeId: string): string;
+/** Find a specific recipe directory by ID across all configured content roots. */
+export declare function findRecipeDir(recipeId: string): string | undefined;
+/** List recipe IDs across all content roots (first match wins for duplicates). */
+export declare function listRecipeEntries(): ContentEntry[];
+export declare function listRecipeIds(): string[];
+//# sourceMappingURL=paths.d.ts.map

package/dist/utils/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,wBAAgB,cAAc,IAAI,MAAM,CAGvC;AAED,8FAA8F;AAC9F,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAS1C;AAmBD,0BAA0B;AAC1B,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAED,kDAAkD;AAClD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CAEpD;AAED,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAE1C;AAED,mCAAmC;AACnC,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C;AAED,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,6FAA6F;AAC7F,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CAEpD;AAED,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAE1C;AAED,wBAAwB;AACxB,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED,gDAAgD;AAChD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAElE;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,IAAI,YAAY,EAAE,CAElD;AAED,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAExC"}

package/dist/utils/paths.js

@@ -0,0 +1,149 @@
+import { join, dirname, resolve, relative, sep, delimiter } from 'node:path';
+import { existsSync, readdirSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const CONTENT_ROOTS_ENV = 'OPEN_AGREEMENTS_CONTENT_ROOTS';
+/** Root of the open-agreements package */
+export function getPackageRoot() {
+    // From dist/utils/paths.js → go up to package root
+    return join(__dirname, '..', '..');
+}
+/** Optional additional content roots. Format is path-delimited, e.g. /a:/b on macOS/Linux. */
+export function getContentRoots() {
+    const envRoots = (process.env[CONTENT_ROOTS_ENV] ?? '')
+        .split(delimiter)
+        .map((value) => value.trim())
+        .filter(Boolean)
+        .map((value) => resolve(value));
+    const roots = [...envRoots, resolve(getPackageRoot())];
+    return uniqueOrdered(roots);
+}
+/** Resolve a child directory, rejecting path traversal (e.g. "../../etc") */
+function resolveChildDir(parentDir, childId, label) {
+    const resolved = resolve(join(parentDir, childId));
+    const rel = relative(resolve(parentDir), resolved);
+    if (rel.startsWith('..') || rel.startsWith(sep + sep)) {
+        throw new Error(`Invalid ${label} ID: ${childId}`);
+    }
+    return resolved;
+}
+/** Resolve a content sub-directory, preferring the nested content/ layout. */
+function resolveContentDir(root, kind) {
+    const nested = join(root, 'content', kind);
+    if (existsSync(nested))
+        return nested;
+    return join(root, kind);
+}
+/** Templates directory */
+export function getTemplatesDir() {
+    return resolveContentDir(getPackageRoot(), 'templates');
+}
+/** All template directories in precedence order (env roots first, package root last). */
+export function getAllTemplatesDirs() {
+    return getContentRoots().map((root) => resolveContentDir(root, 'templates'));
+}
+/** Resolve a specific template directory by ID */
+export function resolveTemplateDir(templateId) {
+    return findTemplateDir(templateId) ?? resolveChildDir(getTemplatesDir(), templateId, 'template');
+}
+/** Find a specific template directory by ID across all configured content roots. */
+export function findTemplateDir(templateId) {
+    return findChildDir(getAllTemplatesDirs(), templateId, 'template');
+}
+/** List template IDs across all content roots (first match wins for duplicates). */
+export function listTemplateEntries() {
+    return listEntries(getAllTemplatesDirs(), 'template');
+}
+export function listTemplateIds() {
+    return listTemplateEntries().map((entry) => entry.id);
+}
+/** External templates directory */
+export function getExternalDir() {
+    return resolveContentDir(getPackageRoot(), 'external');
+}
+/** All external template directories in precedence order (env roots first, package root last). */
+export function getAllExternalDirs() {
+    return getContentRoots().map((root) => resolveContentDir(root, 'external'));
+}
+/** Resolve a specific external template directory by ID */
+export function resolveExternalDir(externalId) {
+    return findExternalDir(externalId) ?? resolveChildDir(getExternalDir(), externalId, 'external');
+}
+/** Find a specific external directory by ID across all configured content roots. */
+export function findExternalDir(externalId) {
+    return findChildDir(getAllExternalDirs(), externalId, 'external');
+}
+/** List external template IDs across all content roots (first match wins for duplicates). */
+export function listExternalEntries() {
+    return listEntries(getAllExternalDirs(), 'external');
+}
+export function listExternalIds() {
+    return listExternalEntries().map((entry) => entry.id);
+}
+/** Recipes directory */
+export function getRecipesDir() {
+    return resolveContentDir(getPackageRoot(), 'recipes');
+}
+/** All recipe directories in precedence order (env roots first, package root last). */
+export function getAllRecipesDirs() {
+    return getContentRoots().map((root) => resolveContentDir(root, 'recipes'));
+}
+/** Resolve a specific recipe directory by ID */
+export function resolveRecipeDir(recipeId) {
+    return findRecipeDir(recipeId) ?? resolveChildDir(getRecipesDir(), recipeId, 'recipe');
+}
+/** Find a specific recipe directory by ID across all configured content roots. */
+export function findRecipeDir(recipeId) {
+    return findChildDir(getAllRecipesDirs(), recipeId, 'recipe');
+}
+/** List recipe IDs across all content roots (first match wins for duplicates). */
+export function listRecipeEntries() {
+    return listEntries(getAllRecipesDirs(), 'recipe');
+}
+export function listRecipeIds() {
+    return listRecipeEntries().map((entry) => entry.id);
+}
+function uniqueOrdered(paths) {
+    const seen = new Set();
+    const unique = [];
+    for (const value of paths) {
+        if (!seen.has(value)) {
+            seen.add(value);
+            unique.push(value);
+        }
+    }
+    return unique;
+}
+function findChildDir(baseDirs, childId, label) {
+    for (const baseDir of baseDirs) {
+        const resolved = resolveChildDir(baseDir, childId, label);
+        if (existsSync(resolved)) {
+            return resolved;
+        }
+    }
+    return undefined;
+}
+function listEntries(baseDirs, label) {
+    const entries = [];
+    const seenIds = new Set();
+    for (const baseDir of baseDirs) {
+        if (!existsSync(baseDir)) {
+            continue;
+        }
+        const ids = readdirSync(baseDir, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory())
+            .map((entry) => entry.name)
+            .sort((a, b) => a.localeCompare(b));
+        for (const id of ids) {
+            if (seenIds.has(id)) {
+                continue;
+            }
+            const dir = resolveChildDir(baseDir, id, label);
+            entries.push({ id, dir, baseDir });
+            seenIds.add(id);
+        }
+    }
+    return entries;
+}
+//# sourceMappingURL=paths.js.map

package/dist/utils/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAQ1D,0CAA0C;AAC1C,MAAM,UAAU,cAAc;IAC5B,mDAAmD;IACnD,OAAO,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;SACpD,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACvD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe,CAAC,SAAiB,EAAE,OAAe,EAAE,KAAa;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAA0C;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,eAAe;IAC7B,OAAO,iBAAiB,CAAC,cAAc,EAAE,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB;IACjC,OAAO,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACnG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,YAAY,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB;IACjC,OAAO,WAAW,CAAC,mBAAmB,EAAE,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,cAAc;IAC5B,OAAO,iBAAiB,CAAC,cAAc,EAAE,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAClG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,YAAY,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACpE,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB;IACjC,OAAO,WAAW,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,aAAa;IAC3B,OAAO,iBAAiB,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;AACxD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACzF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,YAAY,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,iBAAiB,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB,EAAE,OAAe,EAAE,KAAa;IACtE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,QAAkB,EAAE,KAAa;IACpD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACtD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}