@ozzylabs/feedradar 0.1.4 → 0.1.5

package/dist/cli/workflow/generate-watch.js

@@ -0,0 +1,338 @@
+import { access, mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, join, normalize, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+/**
+ * Agents supported by `--agent`. The literal list mirrors ADR-0014 D5's
+ * auth-policy table: each agent maps to a single repo secret name and the
+ * generator writes that name into the rendered workflow's `env:` block.
+ *
+ * `copilot` is included for completeness, but uses the auto-provisioned
+ * `GITHUB_TOKEN` rather than a user-managed secret — see `agentEnvKey` below.
+ */
+export const SUPPORTED_AGENTS = ["claude-code", "codex-cli", "gemini-cli", "copilot"];
+/**
+ * Resolve the directory holding the bundled workflow templates.
+ *
+ * Mirrors `resolveTemplatesRoot` in `src/cli/init.ts`: the compiled CLI
+ * lives at `dist/cli/workflow/generate-watch.js`, so the bundled templates
+ * sit at `../../templates` relative to this module. During tests we may be
+ * running from source (`src/cli/workflow/generate-watch.ts`), in which case
+ * the same relative path lands at `src/templates/`.
+ */
+async function resolveTemplatesRoot() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    // Compiled: dist/cli/workflow/generate-watch.js -> dist/templates
+    // Source: src/cli/workflow/generate-watch.ts -> src/templates
+    const candidate = resolve(here, "..", "..", "templates");
+    return candidate;
+}
+async function pathExists(p) {
+    try {
+        await access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Map an agent identifier to its required workflow secret name (ADR-0014 D5).
+ *
+ * The generator writes the result into the rendered workflow as both the
+ * `env:` key and the `${{ secrets.<NAME> }}` reference, so the user only
+ * needs to register a single secret named after the table below.
+ *
+ * `copilot` uses the auto-provisioned `GITHUB_TOKEN`; no user action needed.
+ * The completion message still surfaces this so the user can confirm
+ * `permissions: contents: write` is enough (which it is — Copilot CLI rides
+ * the `GITHUB_TOKEN` granted to the job).
+ */
+export function agentEnvKey(agent) {
+    switch (agent) {
+        case "claude-code":
+            return "ANTHROPIC_API_KEY";
+        case "codex-cli":
+            return "OPENAI_API_KEY";
+        case "gemini-cli":
+            return "GEMINI_API_KEY";
+        case "copilot":
+            return "GITHUB_TOKEN";
+    }
+}
+/**
+ * Validate a 5-field POSIX cron expression.
+ *
+ * GitHub Actions accepts the standard 5-field crontab format (minute, hour,
+ * day-of-month, month, day-of-week). We do not aim for byte-perfect parity
+ * with the upstream cron parser (e.g. `@daily` aliases) — those are
+ * actively documented as unsupported by GitHub Actions, so rejecting them
+ * here protects the user from generating a workflow that silently never
+ * fires.
+ *
+ * The validator accepts each field as one of:
+ *   - `*`
+ *   - `<n>` or `<n>-<m>` (with optional `/<step>`)
+ *   - `<a>,<b>,...` (comma list, each token validated independently)
+ *   - star slash step (every N units, e.g. `0 *_/6 * * *` reading the
+ *     underscore as a placeholder for the slash that would close this comment)
+ *
+ * Range bounds (e.g. month 1-12) are NOT enforced here; GitHub Actions
+ * rejects out-of-range expressions on workflow load. Keeping our check
+ * structural keeps the dep surface zero (no cron-parser library) without
+ * generating workflows that pass our check but fail GitHub's.
+ */
+export function isValidCron(expr) {
+    const trimmed = expr.trim();
+    if (trimmed.length === 0)
+        return false;
+    const fields = trimmed.split(/\s+/);
+    if (fields.length !== 5)
+        return false;
+    // Structural per-field check: accepts *, n, n-m, with optional /step.
+    // Each comma-separated token must independently satisfy the per-token
+    // grammar; an empty token (e.g. trailing comma) fails.
+    const tokenPattern = /^(?:\*|\d+(?:-\d+)?)(?:\/\d+)?$/;
+    for (const field of fields) {
+        if (field.length === 0)
+            return false;
+        const tokens = field.split(",");
+        for (const token of tokens) {
+            if (token.length === 0)
+                return false;
+            if (!tokenPattern.test(token))
+                return false;
+        }
+    }
+    return true;
+}
+/**
+ * Validate that the requested `--output` path lands under
+ * `.github/workflows/` relative to the workspace root.
+ *
+ * Two attack/footgun classes are blocked:
+ *
+ *   1. **Traversal:** `../../etc/passwd` or `.github/workflows/../../foo`
+ *      — `..` segments anywhere in the relative path push the file out of
+ *      the allowed directory.
+ *   2. **Absolute paths:** `/etc/foo` — the workflow is meant to live in
+ *      the workspace; an absolute path is almost certainly user error or
+ *      malicious input.
+ *
+ * The check operates on the relative form of the resolved path so that
+ * `cwd` differences (test temp dirs vs `process.cwd()`) do not affect the
+ * verdict. We also require the file to end with `.yaml` or `.yml` so the
+ * GitHub Actions loader picks it up.
+ */
+export function isSafeWorkflowPath(outputPath, cwd) {
+    if (isAbsolute(outputPath)) {
+        // Allow absolute paths only if they're inside the workspace's
+        // .github/workflows/ directory. This keeps the test seam (mkdtemp
+        // workdirs are absolute) usable while still rejecting paths that
+        // escape the workspace.
+        const allowedDir = resolve(cwd, ".github", "workflows");
+        const resolved = resolve(outputPath);
+        const rel = relative(allowedDir, resolved);
+        if (rel.startsWith("..") || isAbsolute(rel))
+            return false;
+        return /\.(ya?ml)$/i.test(resolved);
+    }
+    // Reject any `..` segment in the relative path (after normalize, a
+    // traversal that escapes the prefix surfaces as `..` at the start).
+    const normalized = normalize(outputPath);
+    if (normalized.split(/[\\/]/).includes(".."))
+        return false;
+    // Must start with `.github/workflows/`.
+    const required = `${join(".github", "workflows")}/`;
+    // Normalize separator (Windows users may pass backslashes via tests).
+    const unixified = normalized.replace(/\\/g, "/");
+    if (!unixified.startsWith(required.replace(/\\/g, "/")))
+        return false;
+    return /\.(ya?ml)$/i.test(unixified);
+}
+/**
+ * Render the bundled template by substituting `{{cron}}` / `{{output}}` /
+ * `{{agentEnvKey}}` placeholders with the user-supplied values.
+ *
+ * Substitution is intentionally a literal `replace`, not a templating
+ * engine: the placeholders are simple tokens, and we don't want to expand
+ * arbitrary GitHub Actions expressions (`${{ ... }}`) that already live in
+ * the template body.
+ *
+ * Exported for unit testing — tests can drive the renderer in isolation
+ * without touching the file system.
+ */
+export function renderWatchTemplate(template, values) {
+    return template
+        .replace(/\{\{cron\}\}/g, values.cron)
+        .replace(/\{\{agentEnvKey\}\}/g, values.agentEnvKey);
+}
+/**
+ * Core implementation of `radar workflow generate watch`.
+ *
+ * Validates the cron + output path, renders the template with the
+ * agent-appropriate secret name, and writes the result. The completion
+ * stdout lines (printed via `io.log`) tell the user exactly which secrets
+ * to register so they don't have to hunt through ADR-0014 D5 by hand.
+ */
+export async function generateWatch(options) {
+    const { cwd, cron, output, agent, force } = options;
+    const log = options.io?.log ?? ((m) => console.log(m));
+    const warn = options.io?.warn ?? ((m) => console.warn(m));
+    if (!isValidCron(cron)) {
+        throw new Error(`invalid --cron expression '${cron}' (expected 5-field POSIX cron, e.g. "0 0 * * *")`);
+    }
+    if (!isSafeWorkflowPath(output, cwd)) {
+        throw new Error(`invalid --output '${output}' (must be a relative path under .github/workflows/ ending in .yaml or .yml)`);
+    }
+    const templatesRoot = options.templatesRoot ?? (await resolveTemplatesRoot());
+    // The bundled template is stored with a `.yaml.tmpl` extension so that
+    // repo-wide yamlfmt (`lefthook-base.yaml` -> `pre-commit.yaml`) does not
+    // run on it. yamlfmt parses `{{agentEnvKey}}` as a flow-style YAML mapping
+    // key and rewrites it into syntactically valid but semantically broken
+    // YAML, destroying the placeholder. `.tmpl` keeps the file out of the
+    // **/*.{yaml,yml} glob while still being browseable on GitHub.
+    const templatePath = join(templatesRoot, "workflows", "watch.template.yaml.tmpl");
+    if (!(await pathExists(templatePath))) {
+        throw new Error(`bundled template not found: ${templatePath}`);
+    }
+    const template = await readFile(templatePath, "utf8");
+    const envKey = agentEnvKey(agent);
+    const rendered = renderWatchTemplate(template, { cron, agentEnvKey: envKey });
+    const destAbs = isAbsolute(output) ? output : join(cwd, output);
+    const destRel = isAbsolute(output) ? relative(cwd, output) : output;
+    if ((await pathExists(destAbs)) && !force) {
+        throw new Error(`output file already exists: ${destRel} (use --force to overwrite)`);
+    }
+    if ((await pathExists(destAbs)) && force) {
+        warn(`workflow generate watch: overwriting existing file ${destRel}`);
+    }
+    await mkdir(dirname(destAbs), { recursive: true });
+    await writeFile(destAbs, rendered, "utf8");
+    log(`workflow generate watch: wrote ${destRel}`);
+    log(`workflow generate watch: cron='${cron}', agent='${agent}'`);
+    log("");
+    log("Required GitHub Actions secrets (Settings → Secrets and variables → Actions):");
+    if (agent === "copilot") {
+        // Copilot CLI rides the auto-provisioned GITHUB_TOKEN — no user action
+        // beyond confirming the workflow's `permissions: contents: write`.
+        log("  GITHUB_TOKEN — auto-provisioned by GitHub Actions (no manual setup needed)");
+    }
+    else {
+        log(`  ${envKey} — required for the '${agent}' agent (ADR-0014 D5)`);
+        log("  GITHUB_TOKEN — auto-provisioned by GitHub Actions (no manual setup needed)");
+    }
+    return { outputPath: destRel, requiredSecret: envKey };
+}
+/**
+ * Parse `workflow generate watch` flags.
+ *
+ * Throws on flags that require a value but receive none, unknown flags, or
+ * unsupported `--agent` choices. Returning a structured object keeps `run`
+ * free of argument-parsing branches.
+ */
+export function parseGenerateWatchArgs(args) {
+    let cron = "0 0 * * *";
+    let output = join(".github", "workflows", "feedradar-watch.yaml");
+    let agent = "claude-code";
+    let force = false;
+    let help = false;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === "-h" || a === "--help") {
+            help = true;
+            continue;
+        }
+        if (a === "--cron") {
+            const value = args[++i];
+            if (value === undefined)
+                throw new Error(`option ${a} requires a value`);
+            cron = value;
+            continue;
+        }
+        if (a === "--output") {
+            const value = args[++i];
+            if (value === undefined)
+                throw new Error(`option ${a} requires a value`);
+            output = value;
+            continue;
+        }
+        if (a === "--agent") {
+            const value = args[++i];
+            if (value === undefined)
+                throw new Error(`option ${a} requires a value`);
+            if (!SUPPORTED_AGENTS.includes(value)) {
+                throw new Error(`option --agent expects one of: ${SUPPORTED_AGENTS.join(" | ")}, got '${value}'`);
+            }
+            agent = value;
+            continue;
+        }
+        if (a === "--force" || a === "-f") {
+            force = true;
+            continue;
+        }
+        if (a?.startsWith("--") || a?.startsWith("-")) {
+            throw new Error(`unknown option: ${a}`);
+        }
+        throw new Error(`unexpected positional argument: ${a}`);
+    }
+    return { cron, output, agent, force, help };
+}
+export function printGenerateWatchHelp(log) {
+    log("Usage: radar workflow generate watch [options]");
+    log("");
+    log("Generates a GitHub Actions workflow that runs `radar watch run` on a cron schedule.");
+    log("The generated workflow includes git pull --rebase retry logic to mitigate push");
+    log("conflicts with other concurrent workflows (ADR-0014 D4).");
+    log("");
+    log("Options:");
+    log('  --cron <expression>   5-field cron expression (default: "0 0 * * *")');
+    log("  --output <path>       Output file under .github/workflows/");
+    log("                        (default: .github/workflows/feedradar-watch.yaml)");
+    log("  --agent <name>        claude-code | codex-cli | gemini-cli | copilot (default: claude-code)");
+    log("                        Determines which secret name the workflow references.");
+    log("  --force, -f           Overwrite existing output file");
+    log("");
+    log("Required secrets (Settings → Secrets and variables → Actions):");
+    log("  ANTHROPIC_API_KEY    when --agent claude-code (default)");
+    log("  OPENAI_API_KEY       when --agent codex-cli");
+    log("  GEMINI_API_KEY       when --agent gemini-cli");
+    log("  GITHUB_TOKEN         auto-provisioned for --agent copilot (no setup needed)");
+}
+/**
+ * Entry point invoked by `runWorkflow` (in `src/cli/workflow.ts`) when the
+ * user types `radar workflow generate watch`. Translates parsed flags into
+ * `generateWatch` arguments and surfaces validation errors with the
+ * `workflow generate watch:` prefix to match the rest of the CLI.
+ */
+export async function runGenerateWatch(args, io = {}, cwd = process.cwd()) {
+    const log = io.log ?? ((m) => console.log(m));
+    const error = io.error ?? ((m) => console.error(m));
+    let parsed;
+    try {
+        parsed = parseGenerateWatchArgs(args);
+    }
+    catch (e) {
+        error(`workflow generate watch: ${e instanceof Error ? e.message : String(e)}`);
+        return 2;
+    }
+    if (parsed.help) {
+        printGenerateWatchHelp(log);
+        return 0;
+    }
+    try {
+        await generateWatch({
+            cwd,
+            cron: parsed.cron,
+            output: parsed.output,
+            agent: parsed.agent,
+            force: parsed.force,
+            io,
+        });
+        return 0;
+    }
+    catch (e) {
+        error(`workflow generate watch: ${e instanceof Error ? e.message : String(e)}`);
+        return 1;
+    }
+}
+//# sourceMappingURL=generate-watch.js.map

package/dist/cli/workflow/generate-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-watch.js","sourceRoot":"","sources":["../../../src/cli/workflow/generate-watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAczC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,CAAU,CAAC;AAG/F;;;;;;;;GAQG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,kEAAkE;IAClE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,KAAqB;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC;QAC7B,KAAK,WAAW;YACd,OAAO,gBAAgB,CAAC;QAC1B,KAAK,YAAY;YACf,OAAO,gBAAgB,CAAC;QAC1B,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,sEAAsE;IACtE,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,YAAY,GAAG,iCAAiC,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,GAAW;IAChE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,8DAA8D;QAC9D,kEAAkE;QAClE,iEAAiE;QACjE,wBAAwB;QACxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,mEAAmE;IACnE,oEAAoE;IACpE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,wCAAwC;IACxC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;IACpD,sEAAsE;IACtE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,MAA6C;IAE7C,OAAO,QAAQ;SACZ,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC;SACrC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,mDAAmD,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,8EAA8E,CAC1G,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC;IAC9E,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEpE,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,sDAAsD,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE3C,GAAG,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,kCAAkC,IAAI,aAAa,KAAK,GAAG,CAAC,CAAC;IACjE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,+EAA+E,CAAC,CAAC;IACrF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,uEAAuE;QACvE,mEAAmE;QACnE,GAAG,CAAC,8EAA8E,CAAC,CAAC;IACtF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,MAAM,wBAAwB,KAAK,uBAAuB,CAAC,CAAC;QACrE,GAAG,CAAC,8EAA8E,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAClE,IAAI,KAAK,GAAmB,aAAa,CAAC;IAC1C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACzE,IAAI,GAAG,KAAK,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACzE,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACzE,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,kCAAkC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,CACjF,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,KAAuB,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAwB;IAC7D,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,qFAAqF,CAAC,CAAC;IAC3F,GAAG,CAAC,gFAAgF,CAAC,CAAC;IACtF,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAChE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,UAAU,CAAC,CAAC;IAChB,GAAG,CAAC,wEAAwE,CAAC,CAAC;IAC9E,GAAG,CAAC,8DAA8D,CAAC,CAAC;IACpE,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACjF,GAAG,CACD,+FAA+F,CAChG,CAAC;IACF,GAAG,CAAC,+EAA+E,CAAC,CAAC;IACrF,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAC9D,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,gEAAgE,CAAC,CAAC;IACtE,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACjE,GAAG,CAAC,+CAA+C,CAAC,CAAC;IACrD,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACtD,GAAG,CAAC,+EAA+E,CAAC,CAAC;AACvF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,KAAiB,EAAE,EACnB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,CAAC,4BAA4B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,CAAC;YAClB,GAAG;YACH,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,EAAE;SACH,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,CAAC,4BAA4B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/cli/workflow.d.ts

@@ -0,0 +1,29 @@
+import type { Command } from "./index.js";
+/**
+ * Sinks for the `workflow` command family's user-facing output. Each `<type>`
+ * subcommand receives an `IO` object so tests can capture lines without
+ * spawning the full CLI; the real CLI binds these to `console.*`.
+ */
+export interface WorkflowIO {
+    log?: (message: string) => void;
+    warn?: (message: string) => void;
+    error?: (message: string) => void;
+}
+export interface WorkflowCommandOptions {
+    /** Workspace root (defaults to `process.cwd()` for the real CLI). */
+    cwd?: string;
+    io?: WorkflowIO;
+}
+/**
+ * Dispatcher for `radar workflow <subcommand>`.
+ *
+ * Today the supported subcommands are `generate watch` (#188) and
+ * `generate combined` (this issue, #189). Additional `<type>` values
+ * (`research` / `review` per #191) will land as new branches in the
+ * `generate` switch without changing the surface.
+ *
+ * See ADR-0014 (workflow generate sub-command) for the full design rationale.
+ */
+export declare function runWorkflow(args: string[], options?: WorkflowCommandOptions): Promise<number>;
+export declare const workflowCommand: Command;
+//# sourceMappingURL=workflow.d.ts.map

package/dist/cli/workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/cli/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAI1C;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,UAAU,CAAC;CACjB;AAsBD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED,eAAO,MAAM,eAAe,EAAE,OAI7B,CAAC"}

package/dist/cli/workflow.js

@@ -0,0 +1,66 @@
+import { runGenerateCombined } from "./workflow/generate-combined.js";
+import { runGenerateWatch } from "./workflow/generate-watch.js";
+function printWorkflowHelp(log) {
+    log("Usage: radar workflow <subcommand> [...]");
+    log("");
+    log("Subcommands:");
+    log("  generate <type>  Generate a GitHub Actions workflow YAML");
+    log("                   Types: watch | combined (more types in future sub-issues)");
+    log("");
+    log("Run `radar workflow generate <type> --help` for type-specific options.");
+}
+function printGenerateHelp(log) {
+    log("Usage: radar workflow generate <type> [options]");
+    log("");
+    log("Types:");
+    log("  watch     Periodic `radar watch run` (cron + state commit with rebase retry)");
+    log("  combined  Periodic `radar watch run` -> auto research --batch with hard cap (ADR-0014)");
+    log("");
+    log("Run `radar workflow generate <type> --help` for type-specific options.");
+}
+/**
+ * Dispatcher for `radar workflow <subcommand>`.
+ *
+ * Today the supported subcommands are `generate watch` (#188) and
+ * `generate combined` (this issue, #189). Additional `<type>` values
+ * (`research` / `review` per #191) will land as new branches in the
+ * `generate` switch without changing the surface.
+ *
+ * See ADR-0014 (workflow generate sub-command) for the full design rationale.
+ */
+export async function runWorkflow(args, options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const log = options.io?.log ?? ((m) => console.log(m));
+    const error = options.io?.error ?? ((m) => console.error(m));
+    const [sub, ...rest] = args;
+    if (!sub || sub === "-h" || sub === "--help" || sub === "help") {
+        printWorkflowHelp(log);
+        return sub ? 0 : 2;
+    }
+    if (sub !== "generate") {
+        error(`workflow: unknown subcommand '${sub}'`);
+        printWorkflowHelp(error);
+        return 2;
+    }
+    const [type, ...typeArgs] = rest;
+    if (!type || type === "-h" || type === "--help" || type === "help") {
+        printGenerateHelp(log);
+        return type ? 0 : 2;
+    }
+    switch (type) {
+        case "watch":
+            return runGenerateWatch(typeArgs, options.io ?? {}, cwd);
+        case "combined":
+            return runGenerateCombined(typeArgs, options.io ?? {}, cwd);
+        default:
+            error(`workflow generate: unknown type '${type}'`);
+            printGenerateHelp(error);
+            return 2;
+    }
+}
+export const workflowCommand = {
+    name: "workflow",
+    summary: "Generate GitHub Actions workflows (generate <type>)",
+    run: (args) => runWorkflow(args),
+};
+//# sourceMappingURL=workflow.js.map

package/dist/cli/workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../src/cli/workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAmBhE,SAAS,iBAAiB,CAAC,GAAwB;IACjD,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAChD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,cAAc,CAAC,CAAC;IACpB,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAClE,GAAG,CAAC,8EAA8E,CAAC,CAAC;IACpF,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,wEAAwE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAwB;IACjD,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACvD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,QAAQ,CAAC,CAAC;IACd,GAAG,CAAC,gFAAgF,CAAC,CAAC;IACtF,GAAG,CAAC,0FAA0F,CAAC,CAAC;IAChG,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,wEAAwE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAErE,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC/D,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,KAAK,CAAC,iCAAiC,GAAG,GAAG,CAAC,CAAC;QAC/C,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACnE,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D;YACE,KAAK,CAAC,oCAAoC,IAAI,GAAG,CAAC,CAAC;YACnD,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAY;IACtC,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,qDAAqD;IAC9D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;CACjC,CAAC"}

package/dist/core/feeds/_fetch.d.ts

@@ -58,6 +58,16 @@ export interface FetchWithRetryOptions {
     /** Override env for `RADAR_FETCH_*` parsing. Defaults to `process.env`. */
     env?: NodeJS.ProcessEnv;
 }
+/**
+ * Validate a fetch URL against the SSRF host blocklist (ADR-0009 §D5b).
+ *
+ * Throws a `TypeError` with a user-friendly message when the URL is
+ * rejected. Returns nothing on success.
+ *
+ * Exported so adapters / tests can trigger the check independently of
+ * `fetchWithRetry` (e.g. validate a recipe URL at config-load time).
+ */
+export declare function validateFetchUrl(url: string | URL, env?: NodeJS.ProcessEnv): void;
 /**
  * Build a `FetchConfig` from env vars + explicit overrides.
  *

package/dist/core/feeds/_fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_fetch.d.ts","sourceRoot":"","sources":["../../../src/core/feeds/_fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,sDAAsD;AACtD,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAUD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,qBAA0B,GAAG,WAAW,CAYnF;AAuDD,8EAA8E;AAC9E,KAAK,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAEpD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,EACrE,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,aAAa,CAAC,CA8CxB"}
+{"version":3,"file":"_fetch.d.ts","sourceRoot":"","sources":["../../../src/core/feeds/_fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,sDAAsD;AACtD,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAuID;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CA+C9F;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,qBAA0B,GAAG,WAAW,CAYnF;AAuDD,8EAA8E;AAC9E,KAAK,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAEpD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,EACrE,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,aAAa,CAAC,CAmDxB"}