@scribe-platform/cli 0.7.0 → 0.9.0

package/dist/lib/proof-folder.d.ts

@@ -0,0 +1,86 @@
+/**
+ * RFC 0029 — a Proof folder on Ashley's machine: `proofs/<name>/` inside the
+ * client folder, holding the current version's files plus `.scribe-proof.json`,
+ * which says which Proof the folder belongs to so commands run inside it need
+ * no argument.
+ *
+ * The rules below mirror the server's (`@scribe-cms/core/proofs`'s
+ * `validateManifest`), so `scribe proof check` can say what a push would
+ * refuse before anything is uploaded. **The server is the authority**: if the
+ * two ever disagree, the push fails with the server's reason, which is the
+ * safe direction to drift.
+ */
+export declare const PROOF_CONFIG_FILE = ".scribe-proof.json";
+export declare const ENTRY_PATH = "index.html";
+export declare const MAX_FILE_BYTES: number;
+export declare const MAX_VERSION_BYTES: number;
+/** File types a Proof may contain, by lowercase extension — the server's table. */
+export declare const PROOF_CONTENT_TYPES: Readonly<Record<string, string>>;
+export declare const PROOF_EXTENSIONS: readonly string[];
+/** Same rule as the server and the runtime: ids appear in URLs, event rows and CLI output. */
+export declare const OPTION_ID: RegExp;
+export interface ProofRef {
+    client: string;
+    proof: string;
+}
+export interface ProofFile {
+    /** Relative, `/`-separated — the path the server and the Proof's own links use. */
+    path: string;
+    absolute: string;
+    bytes: number;
+    sha256: string;
+}
+/** `acme-bakery/logo-concepts` → `{ client, proof }`, or null if it isn't one. */
+export declare function parseProofRef(value: string): ProofRef | null;
+export declare function readProofConfig(dir: string): ProofRef | null;
+export declare function writeProofConfig(dir: string, ref: ProofRef): void;
+export type ResolvedRef = {
+    ok: true;
+    ref: ProofRef;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Which Proof a command means: the `<client>/<proof>` argument if given,
+ * otherwise the folder's `.scribe-proof.json`.
+ */
+export declare function resolveProofRef(arg: string | undefined, dir: string): ResolvedRef;
+/** Every file a push would send, sorted by path so manifests are stable. */
+export declare function scanFolder(dir: string): ProofFile[];
+export declare function extensionOf(path: string): string | null;
+export interface ProofOptionFound {
+    id: string;
+    label: string | null;
+}
+/** `data-proof-option` elements in one HTML file — a lighter read than the server's, for warnings only. */
+export declare function findOptions(html: string): {
+    options: ProofOptionFound[];
+    duplicates: string[];
+    invalid: string[];
+};
+/**
+ * Links that start with `/`. A Proof is served under `/c/<token>/`, so a
+ * root-absolute `/images/logo.png` points outside it and 404s for the Client —
+ * while working fine in a local dev server, which is what makes it worth
+ * catching before a push. Protocol-relative `//cdn…` links are fine.
+ */
+export declare function findRootAbsoluteLinks(text: string): {
+    line: number;
+    link: string;
+}[];
+export interface CheckResult {
+    files: ProofFile[];
+    totalBytes: number;
+    /** The push would be refused. */
+    errors: string[];
+    /** Root-absolute links: the push refuses these unless forced, because they'd 404 for the Client. */
+    brokenLinks: string[];
+    /** Worth knowing; nothing is refused for them. */
+    warnings: string[];
+    options: ProofOptionFound[];
+    /** No page of its own: the server will build one and name an Option per file. */
+    gallery: boolean;
+}
+export declare function checkFolder(dir: string, previousOptions?: string[]): CheckResult;
+//# sourceMappingURL=proof-folder.d.ts.map

package/dist/lib/proof-folder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-folder.d.ts","sourceRoot":"","sources":["../../src/lib/proof-folder.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,cAAc,QAAmB,CAAC;AAC/C,eAAO,MAAM,iBAAiB,QAAoB,CAAC;AAGnD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuBhE,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAqC,CAAC;AAEpF,8FAA8F;AAC9F,eAAO,MAAM,SAAS,QAAqC,CAAC;AAE5D,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAG5D;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAS5D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAEjE;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,CAWjF;AAOD,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,CAoBnD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIvD;AAMD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,2GAA2G;AAC3G,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAqBlH;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CASpF;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oGAAoG;IACpG,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;CAClB;AAYD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,GAAE,MAAM,EAAO,GAAG,WAAW,CAoDpF"}

package/dist/lib/proof-folder.js

@@ -0,0 +1,226 @@
+import { createHash } from 'node:crypto';
+import { existsSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+/**
+ * RFC 0029 — a Proof folder on Ashley's machine: `proofs/<name>/` inside the
+ * client folder, holding the current version's files plus `.scribe-proof.json`,
+ * which says which Proof the folder belongs to so commands run inside it need
+ * no argument.
+ *
+ * The rules below mirror the server's (`@scribe-cms/core/proofs`'s
+ * `validateManifest`), so `scribe proof check` can say what a push would
+ * refuse before anything is uploaded. **The server is the authority**: if the
+ * two ever disagree, the push fails with the server's reason, which is the
+ * safe direction to drift.
+ */
+export const PROOF_CONFIG_FILE = '.scribe-proof.json';
+export const ENTRY_PATH = 'index.html';
+export const MAX_FILE_BYTES = 25 * 1024 * 1024;
+export const MAX_VERSION_BYTES = 100 * 1024 * 1024;
+const RESERVED_PREFIX = '_scribe/';
+/** File types a Proof may contain, by lowercase extension — the server's table. */
+export const PROOF_CONTENT_TYPES = {
+    html: 'text/html; charset=utf-8',
+    htm: 'text/html; charset=utf-8',
+    css: 'text/css; charset=utf-8',
+    js: 'text/javascript; charset=utf-8',
+    mjs: 'text/javascript; charset=utf-8',
+    json: 'application/json; charset=utf-8',
+    txt: 'text/plain; charset=utf-8',
+    svg: 'image/svg+xml',
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    avif: 'image/avif',
+    ico: 'image/x-icon',
+    woff: 'font/woff',
+    woff2: 'font/woff2',
+    ttf: 'font/ttf',
+    otf: 'font/otf',
+    mp4: 'video/mp4',
+    webm: 'video/webm',
+    pdf: 'application/pdf',
+};
+export const PROOF_EXTENSIONS = Object.keys(PROOF_CONTENT_TYPES);
+/** Same rule as the server and the runtime: ids appear in URLs, event rows and CLI output. */
+export const OPTION_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
+/** `acme-bakery/logo-concepts` → `{ client, proof }`, or null if it isn't one. */
+export function parseProofRef(value) {
+    const match = /^([a-z0-9][a-z0-9-]*)\/([a-z0-9][a-z0-9-]*)$/.exec(value.trim());
+    return match ? { client: match[1], proof: match[2] } : null;
+}
+export function readProofConfig(dir) {
+    const file = join(dir, PROOF_CONFIG_FILE);
+    if (!existsSync(file))
+        return null;
+    try {
+        const data = JSON.parse(readFileSync(file, 'utf8'));
+        return typeof data.client === 'string' && typeof data.proof === 'string' ? { client: data.client, proof: data.proof } : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeProofConfig(dir, ref) {
+    writeFileSync(join(dir, PROOF_CONFIG_FILE), `${JSON.stringify(ref, null, 2)}\n`);
+}
+/**
+ * Which Proof a command means: the `<client>/<proof>` argument if given,
+ * otherwise the folder's `.scribe-proof.json`.
+ */
+export function resolveProofRef(arg, dir) {
+    if (arg) {
+        const ref = parseProofRef(arg);
+        return ref ? { ok: true, ref } : { ok: false, error: `"${arg}" isn't a Proof — expected <client>/<proof>, e.g. acme-bakery/logo-concepts` };
+    }
+    const ref = readProofConfig(dir);
+    if (ref)
+        return { ok: true, ref };
+    return {
+        ok: false,
+        error: `No ${PROOF_CONFIG_FILE} in ${dir}. Run this inside a Proof folder, or name the Proof as <client>/<proof>.`,
+    };
+}
+/** Hidden files and folders never ship: `.scribe-proof.json`, `.DS_Store`, `.git`. */
+function isHidden(name) {
+    return name.startsWith('.');
+}
+/** Every file a push would send, sorted by path so manifests are stable. */
+export function scanFolder(dir) {
+    const files = [];
+    const walk = (current) => {
+        for (const entry of readdirSync(current, { withFileTypes: true })) {
+            if (isHidden(entry.name) || entry.name === 'node_modules')
+                continue;
+            const absolute = join(current, entry.name);
+            if (entry.isDirectory())
+                walk(absolute);
+            else if (entry.isFile()) {
+                const content = readFileSync(absolute);
+                files.push({
+                    path: relative(dir, absolute).split(sep).join('/'),
+                    absolute,
+                    bytes: statSync(absolute).size,
+                    sha256: createHash('sha256').update(content).digest('hex'),
+                });
+            }
+        }
+    };
+    walk(dir);
+    return files.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+}
+export function extensionOf(path) {
+    const name = path.slice(path.lastIndexOf('/') + 1);
+    const dot = name.lastIndexOf('.');
+    return dot > 0 ? name.slice(dot + 1).toLowerCase() : null;
+}
+function mb(bytes) {
+    return `${Math.round((bytes / (1024 * 1024)) * 10) / 10} MB`;
+}
+/** `data-proof-option` elements in one HTML file — a lighter read than the server's, for warnings only. */
+export function findOptions(html) {
+    const visible = html.replace(/<!--[\s\S]*?-->/g, '').replace(/<script\b[\s\S]*?<\/script\s*>/gi, '');
+    const options = [];
+    const duplicates = [];
+    const invalid = [];
+    const seen = new Set();
+    for (const tag of visible.matchAll(/<[A-Za-z][^>]*\sdata-proof-option\s*=\s*("([^"]*)"|'([^']*)'|([^\s>]+))[^>]*>/g)) {
+        const id = (tag[2] ?? tag[3] ?? tag[4] ?? '').trim();
+        if (!OPTION_ID.test(id)) {
+            invalid.push(id);
+            continue;
+        }
+        if (seen.has(id)) {
+            duplicates.push(id);
+            continue;
+        }
+        seen.add(id);
+        const label = /\sdata-proof-label\s*=\s*("([^"]*)"|'([^']*)')/.exec(tag[0]);
+        options.push({ id, label: label ? (label[2] ?? label[3] ?? '').trim() || null : null });
+    }
+    return { options, duplicates, invalid };
+}
+/**
+ * Links that start with `/`. A Proof is served under `/c/<token>/`, so a
+ * root-absolute `/images/logo.png` points outside it and 404s for the Client —
+ * while working fine in a local dev server, which is what makes it worth
+ * catching before a push. Protocol-relative `//cdn…` links are fine.
+ */
+export function findRootAbsoluteLinks(text) {
+    const found = [];
+    const patterns = [/\s(?:src|href|poster|action)\s*=\s*["'](\/(?!\/)[^"']*)["']/gi, /url\(\s*["']?(\/(?!\/)[^"')]*)["']?\s*\)/gi];
+    text.split('\n').forEach((lineText, index) => {
+        for (const pattern of patterns) {
+            for (const match of lineText.matchAll(pattern))
+                found.push({ line: index + 1, link: match[1] });
+        }
+    });
+    return found;
+}
+/**
+ * Everything `scribe proof check` reports. `previousOptions` — the last pushed
+ * version's Option ids — lets it say which Options a revision dropped.
+ */
+/** Mirrors core's `isGalleryManifest`: images and PDFs are what a generated page can be built from. */
+function isGalleryType(path) {
+    const type = PROOF_CONTENT_TYPES[extensionOf(path) ?? ''];
+    return Boolean(type) && (type.startsWith('image/') || type === 'application/pdf');
+}
+export function checkFolder(dir, previousOptions = []) {
+    const files = scanFolder(dir);
+    const errors = [];
+    const brokenLinks = [];
+    const warnings = [];
+    let totalBytes = 0;
+    let options = [];
+    if (files.length === 0)
+        errors.push('The folder is empty.');
+    // A folder of images and nothing else is allowed to arrive with no page:
+    // the server generates one and makes each file an Option, which is what
+    // makes "send them these four PNGs" work with no HTML at all (RFC 0029).
+    const gallery = files.length > 0 && files.every((f) => isGalleryType(f.path));
+    if (files.length > 0 && !gallery && !files.some((f) => f.path === ENTRY_PATH)) {
+        errors.push(`${ENTRY_PATH} is missing — it's the page the Proof opens on.`);
+    }
+    for (const file of files) {
+        totalBytes += file.bytes;
+        const ext = extensionOf(file.path);
+        if (!ext || !PROOF_EXTENSIONS.includes(ext))
+            errors.push(`${file.path}: not a file type a Proof may contain.`);
+        if (file.bytes > MAX_FILE_BYTES)
+            errors.push(`${file.path}: ${mb(file.bytes)} is over the ${mb(MAX_FILE_BYTES)} per-file limit.`);
+        if (file.path.startsWith(RESERVED_PREFIX))
+            errors.push(`${file.path}: ${RESERVED_PREFIX} is reserved for Scribe's own files.`);
+        if (/[?#]/.test(file.path))
+            errors.push(`${file.path}: file names can't contain ? or #.`);
+        if (ext === 'html' || ext === 'htm' || ext === 'css') {
+            const text = readFileSync(file.absolute, 'utf8');
+            for (const { line, link } of findRootAbsoluteLinks(text)) {
+                brokenLinks.push(`${file.path}:${line}: "${link}" starts with / — make it relative ("${link.slice(1)}")`);
+            }
+            if (ext !== 'css') {
+                const found = findOptions(text);
+                if (file.path === ENTRY_PATH)
+                    options = found.options;
+                for (const id of found.duplicates)
+                    warnings.push(`${file.path}: Option "${id}" appears more than once; only the first counts.`);
+                for (const id of found.invalid) {
+                    warnings.push(`${file.path}: "${id}" isn't a usable Option id (letters, numbers, - and _ only, up to 64).`);
+                }
+            }
+        }
+    }
+    if (totalBytes > MAX_VERSION_BYTES)
+        errors.push(`${mb(totalBytes)} in total is over the ${mb(MAX_VERSION_BYTES)} per-version limit.`);
+    // Often deliberate — the revision workflow drops the Options nobody liked —
+    // so it's one line of information, not a warning per Option.
+    const current = new Set(options.map((o) => o.id));
+    const dropped = previousOptions.filter((id) => !current.has(id));
+    if (dropped.length > 0) {
+        warnings.push(`Dropped since the last version: ${dropped.join(', ')}. Feedback on those stays on the older version.`);
+    }
+    return { files, totalBytes, errors, brokenLinks, warnings, options, gallery };
+}
+//# sourceMappingURL=proof-folder.js.map

package/dist/lib/proof-folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-folder.js","sourceRoot":"","sources":["../../src/lib/proof-folder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AACtD,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,IAAI,EAAE,0BAA0B;IAChC,GAAG,EAAE,0BAA0B;IAC/B,GAAG,EAAE,yBAAyB;IAC9B,EAAE,EAAE,gCAAgC;IACpC,GAAG,EAAE,gCAAgC;IACrC,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE,2BAA2B;IAChC,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,iBAAiB;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAsB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAEpF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAe5D,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsB,CAAC;QACzE,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAa;IACzD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuB,EAAE,GAAW;IAClE,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,6EAA6E,EAAE,CAAC;IAC9I,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,MAAM,iBAAiB,OAAO,GAAG,0EAA0E;KACnH,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACnC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAClD,QAAQ;oBACR,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI;oBAC9B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,EAAE,CAAC,KAAa;IACvB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC;AAC/D,CAAC;AAOD,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,gFAAgF,CAAC,EAAE,CAAC;QACrH,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,+DAA+D,EAAE,4CAA4C,CAAC,CAAC;IACjI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAgBD;;;GAGG;AACH,uGAAuG;AACvG,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,iBAAiB,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,kBAA4B,EAAE;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAuB,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC5D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,iDAAiD,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,wCAAwC,CAAC,CAAC;QAC/G,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAClI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,eAAe,sCAAsC,CAAC,CAAC;QAC/H,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;QAE1F,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,MAAM,IAAI,wCAAwC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBACtD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,EAAE,kDAAkD,CAAC,CAAC;gBAChI,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,EAAE,wEAAwE,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAEtI,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACxH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChF,CAAC"}

package/dist/lib/proof-preview.d.ts

@@ -0,0 +1,39 @@
+/**
+ * RFC 0029 — `scribe proof preview`: a Proof folder served the way a Client
+ * will see it, before anything is pushed.
+ *
+ * Same sandbox CSP, same runtime injected the same way, same iframe sandbox
+ * attribute — so a Proof that works here works for the Client, and one that
+ * breaks under the sandbox (a script reading `localStorage`, say) breaks here
+ * first. The panel around it is a stand-in for the real review page: it keeps
+ * hearts, comments and pins in memory so they show up on the page as they
+ * would, and prints each one to the terminal. Nothing is saved anywhere.
+ */
+/** Mirrors the admin's `PROOF_CONTENT_CSP`. No `allow-same-origin`, ever. */
+export declare const PREVIEW_CSP = "sandbox allow-scripts allow-forms allow-popups allow-modals";
+/**
+ * The runtime bundle, copied in from `@scribe-cms/proof-runtime` at build time
+ * by scripts/bundle-runtime.mjs — the CLI is published to npm and can't depend
+ * on the private workspace package at install time. `../../runtime/` resolves
+ * to the package root from both `src/lib/` (tests) and `dist/lib/` (published).
+ */
+export declare function loadRuntimeSource(): string;
+/** Same placement rule as the admin's `injectRuntime`: first thing in `<head>`, src relative to the file's depth. */
+export declare function injectRuntime(html: string, path: string): string;
+/**
+ * The file a request path names inside the folder, or null. Hidden files and
+ * anything outside the folder are never served — the same files a push would
+ * leave out.
+ */
+export declare function resolvePreviewFile(dir: string, requestPath: string): string | null;
+export interface PreviewServer {
+    url: string;
+    close(): Promise<void>;
+}
+export declare function startPreview(args: {
+    dir: string;
+    port?: number;
+    log?: (line: string) => void;
+    runtimeSource?: string;
+}): Promise<PreviewServer>;
+//# sourceMappingURL=proof-preview.d.ts.map

package/dist/lib/proof-preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-preview.d.ts","sourceRoot":"","sources":["../../src/lib/proof-preview.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,WAAW,gEAAgE,CAAC;AAWzF;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C;AAED,qHAAqH;AACrH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWhE;AAaD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalF;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,aAAa,CAAC,CA6DzB"}