@se-studio/contentful-cms 0.0.0-next16-20260822103555

package/dist/project/load.js

@@ -0,0 +1,66 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { CmsEditProjectSchema } from './types.js';
+import { assertNoSecrets } from './validate-secrets.js';
+export function loadProjectConfig(configPath) {
+    const resolved = path.resolve(configPath);
+    if (!fs.existsSync(resolved)) {
+        throw new Error(`Project config not found: ${resolved}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(resolved, 'utf8'));
+    }
+    catch {
+        throw new Error(`Invalid JSON in project config: ${resolved}`);
+    }
+    assertNoSecrets(parsed);
+    const result = CmsEditProjectSchema.safeParse(parsed);
+    if (!result.success) {
+        const issues = result.error.issues
+            .map((issue) => `  - ${issue.path.join('.')}: ${issue.message}`)
+            .join('\n');
+        throw new Error(`Invalid project.json:\n${issues}`);
+    }
+    const mcpUrl = result.data.hosted.mcpUrl;
+    try {
+        const url = new URL(mcpUrl);
+        if (!url.pathname.endsWith('/api/mcp')) {
+            throw new Error('hosted.mcpUrl must end with /api/mcp');
+        }
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.includes('/api/mcp')) {
+            throw err;
+        }
+        throw new Error(`hosted.mcpUrl is not a valid URL: ${mcpUrl}`);
+    }
+    return result.data;
+}
+function isSingleAppRepoRoot(dir) {
+    return fs.existsSync(path.join(dir, 'package.json')) && fs.existsSync(path.join(dir, 'src'));
+}
+export function resolveRepoRoot(configPath, appDir) {
+    let dir = path.dirname(path.resolve(configPath));
+    const isRepoRoot = appDir === '.' || appDir === '';
+    while (dir !== path.dirname(dir)) {
+        if (isRepoRoot) {
+            if (isSingleAppRepoRoot(dir)) {
+                return dir;
+            }
+        }
+        else if (fs.existsSync(path.join(dir, appDir))) {
+            return dir;
+        }
+        dir = path.dirname(dir);
+    }
+    throw new Error(`Could not find repo root containing "${appDir}" above ${configPath}`);
+}
+export function resolveWebsiteAppDir(configPath, appDir) {
+    const repoRoot = resolveRepoRoot(configPath, appDir);
+    if (appDir === '.' || appDir === '') {
+        return repoRoot;
+    }
+    return path.join(repoRoot, appDir);
+}
+//# sourceMappingURL=load.js.map

package/dist/project/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/project/load.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAuB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,eAAe,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,MAAc;IAChE,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,EAAE,CAAC;IAEnD,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,WAAW,UAAU,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/project/types.d.ts

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+export declare const EditorDefaultsSchema: z.ZodObject<{
+    featuredImageAssetFilename: z.ZodOptional<z.ZodString>;
+    featuredImageAssetId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EditorDefaultsConfig = z.infer<typeof EditorDefaultsSchema>;
+/** Public-path patterns for production markdown URLs (paths appended to productionSiteUrl). */
+export declare const MarkdownAccessSchema: z.ZodObject<{
+    homepage: z.ZodDefault<z.ZodString>;
+    pages: z.ZodDefault<z.ZodString>;
+    articles: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodString>;
+    people: z.ZodOptional<z.ZodString>;
+    notes: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type MarkdownAccessConfig = z.infer<typeof MarkdownAccessSchema>;
+export declare const CmsEditProjectSchema: z.ZodObject<{
+    projectKey: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodString;
+    contentful: z.ZodObject<{
+        spaceId: z.ZodString;
+        environment: z.ZodDefault<z.ZodString>;
+        defaultLocale: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>;
+    website: z.ZodObject<{
+        appDir: z.ZodString;
+        devBaseUrl: z.ZodOptional<z.ZodString>;
+        vercelBypassEnvVar: z.ZodOptional<z.ZodString>;
+        homepageSlug: z.ZodOptional<z.ZodString>;
+        customerName: z.ZodOptional<z.ZodString>;
+        siteTitle: z.ZodOptional<z.ZodString>;
+        productionSiteUrl: z.ZodOptional<z.ZodString>;
+        markdownAccess: z.ZodOptional<z.ZodObject<{
+            homepage: z.ZodDefault<z.ZodString>;
+            pages: z.ZodDefault<z.ZodString>;
+            articles: z.ZodOptional<z.ZodString>;
+            tags: z.ZodOptional<z.ZodString>;
+            people: z.ZodOptional<z.ZodString>;
+            notes: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    hosted: z.ZodObject<{
+        mcpUrl: z.ZodString;
+    }, z.core.$strip>;
+    editor: z.ZodOptional<z.ZodObject<{
+        defaults: z.ZodOptional<z.ZodObject<{
+            featuredImageAssetFilename: z.ZodOptional<z.ZodString>;
+            featuredImageAssetId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type CmsEditProject = z.infer<typeof CmsEditProjectSchema>;
+//# sourceMappingURL=types.d.ts.map

package/dist/project/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/project/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,+FAA+F;AAC/F,eAAO,MAAM,oBAAoB;;;;;;;iBAS/B,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmC/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/project/types.js

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+export const EditorDefaultsSchema = z.object({
+    featuredImageAssetFilename: z.string().min(1).optional(),
+    featuredImageAssetId: z.string().min(1).optional(),
+});
+/** Public-path patterns for production markdown URLs (paths appended to productionSiteUrl). */
+export const MarkdownAccessSchema = z.object({
+    /** Default: /index.md */
+    homepage: z.string().min(1).default('/index.md'),
+    /** Default: /{public-path}.md */
+    pages: z.string().min(1).default('/{public-path}.md'),
+    articles: z.string().min(1).optional(),
+    tags: z.string().min(1).optional(),
+    people: z.string().min(1).optional(),
+    notes: z.string().optional(),
+});
+export const CmsEditProjectSchema = z.object({
+    projectKey: z
+        .string()
+        .min(1)
+        .regex(/^[a-z0-9-]+$/, 'projectKey must be lowercase alphanumeric with hyphens'),
+    displayName: z.string().min(1),
+    description: z.string().min(1),
+    contentful: z.object({
+        spaceId: z.string().min(1),
+        environment: z.string().min(1).default('master'),
+        defaultLocale: z.string().min(1).default('en-US'),
+    }),
+    website: z.object({
+        appDir: z.string().min(1),
+        devBaseUrl: z.string().url().optional(),
+        vercelBypassEnvVar: z.string().min(1).optional(),
+        /** Contentful page slug for the marketing homepage (SE Studio default: index). */
+        homepageSlug: z.string().min(1).optional(),
+        /** Shown in editor-pack overview.md (site identity for marketers). */
+        customerName: z.string().min(1).optional(),
+        /** Shown in editor-pack overview.md (browser title / brand name). */
+        siteTitle: z.string().min(1).optional(),
+        /** Canonical production URL (no trailing slash). Used in production-site.md and media-review. */
+        productionSiteUrl: z.string().url().optional(),
+        /** How agents fetch published page markdown — see editor-pack production-site.md. */
+        markdownAccess: MarkdownAccessSchema.optional(),
+    }),
+    hosted: z.object({
+        mcpUrl: z.string().url(),
+    }),
+    editor: z
+        .object({
+        defaults: EditorDefaultsSchema.optional(),
+    })
+        .optional(),
+});
+//# sourceMappingURL=types.js.map

package/dist/project/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/project/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAIH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,yBAAyB;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAChD,iCAAiC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,cAAc,EAAE,wDAAwD,CAAC;IAClF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;KAClD,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD,kFAAkF;QAClF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,sEAAsE;QACtE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,qEAAqE;QACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvC,iGAAiG;QACjG,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC9C,qFAAqF;QACrF,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;KAChD,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KACzB,CAAC;IACF,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC"}

package/dist/project/validate-hosted.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEditProject } from './types.js';
+/**
+ * Hosted cms-edit deploy gate: every customer must declare a site default featured image
+ * in project.json before editor-pack can be staged or the host published.
+ */
+export declare function assertHostedDeployReady(project: CmsEditProject): void;
+//# sourceMappingURL=validate-hosted.d.ts.map

package/dist/project/validate-hosted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-hosted.d.ts","sourceRoot":"","sources":["../../src/project/validate-hosted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAQrE"}

package/dist/project/validate-hosted.js

@@ -0,0 +1,12 @@
+/**
+ * Hosted cms-edit deploy gate: every customer must declare a site default featured image
+ * in project.json before editor-pack can be staged or the host published.
+ */
+export function assertHostedDeployReady(project) {
+    const defaults = project.editor?.defaults;
+    if (!defaults?.featuredImageAssetFilename && !defaults?.featuredImageAssetId) {
+        throw new Error('Hosted cms-edit deploy requires editor.defaults with featuredImageAssetFilename or featuredImageAssetId. ' +
+            'Upload the site default OG image to Contentful, record the filename or asset ID in project.json, regenerate editor-pack, then deploy.');
+    }
+}
+//# sourceMappingURL=validate-hosted.js.map

package/dist/project/validate-hosted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-hosted.js","sourceRoot":"","sources":["../../src/project/validate-hosted.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAuB;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,0BAA0B,IAAI,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,2GAA2G;YACzG,uIAAuI,CAC1I,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/project/validate-secrets.d.ts

@@ -0,0 +1,7 @@
+export interface SecretValidationIssue {
+    path: string;
+    message: string;
+}
+export declare function validateNoSecrets(raw: unknown): SecretValidationIssue[];
+export declare function assertNoSecrets(raw: unknown): void;
+//# sourceMappingURL=validate-secrets.d.ts.map

package/dist/project/validate-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-secrets.d.ts","sourceRoot":"","sources":["../../src/project/validate-secrets.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AA8CD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAIvE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAOlD"}

package/dist/project/validate-secrets.js

@@ -0,0 +1,61 @@
+const ENV_PLACEHOLDER = /^\$\{[A-Z][A-Z0-9_]*\}$/;
+const SECRET_KEY_PATTERN = /token|secret|password|apikey|api_key|credential/i;
+const EMBEDDED_SECRET_PATTERNS = [
+    /^CFPAT-/,
+    /^Bearer\s+/i,
+    /^sk-[a-zA-Z0-9]{20,}/,
+    /^[A-Za-z0-9+/]{40,}={0,2}$/,
+];
+function isPlaceholder(value) {
+    return ENV_PLACEHOLDER.test(value.trim());
+}
+function looksLikeEmbeddedSecret(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0 || isPlaceholder(trimmed)) {
+        return false;
+    }
+    return EMBEDDED_SECRET_PATTERNS.some((pattern) => pattern.test(trimmed));
+}
+function collectIssues(value, path, issues) {
+    if (typeof value === 'string') {
+        if (looksLikeEmbeddedSecret(value)) {
+            issues.push({
+                path,
+                message: 'Value looks like an embedded secret. Use env vars or Vercel dashboard instead.',
+            });
+        }
+        if (SECRET_KEY_PATTERN.test(path) && !isPlaceholder(value) && value.trim() !== '') {
+            issues.push({
+                path,
+                message: `Secret-like key must use \${ENV_VAR} placeholder or be omitted from project.json.`,
+            });
+        }
+        return;
+    }
+    if (Array.isArray(value)) {
+        for (const [index, item] of value.entries()) {
+            collectIssues(item, `${path}[${index}]`, issues);
+        }
+        return;
+    }
+    if (value !== null && typeof value === 'object') {
+        for (const [key, nested] of Object.entries(value)) {
+            const nestedPath = path ? `${path}.${key}` : key;
+            collectIssues(nested, nestedPath, issues);
+        }
+    }
+}
+export function validateNoSecrets(raw) {
+    const issues = [];
+    collectIssues(raw, '', issues);
+    return issues;
+}
+export function assertNoSecrets(raw) {
+    const issues = validateNoSecrets(raw);
+    if (issues.length === 0) {
+        return;
+    }
+    const lines = issues.map((issue) => `  - ${issue.path}: ${issue.message}`).join('\n');
+    throw new Error(`project.json contains values that must not be committed:\n${lines}`);
+}
+//# sourceMappingURL=validate-secrets.js.map

package/dist/project/validate-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-secrets.js","sourceRoot":"","sources":["../../src/project/validate-secrets.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,MAAM,wBAAwB,GAAa;IACzC,SAAS;IACT,aAAa;IACb,sBAAsB;IACtB,4BAA4B;CAC7B,CAAC;AAOF,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY,EAAE,MAA+B;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,OAAO,EAAE,gFAAgF;aAC1F,CAAC,CAAC;QACL,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,OAAO,EAAE,mFAAmF;aAC7F,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACjD,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,IAAI,KAAK,CAAC,6DAA6D,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC"}

package/dist/rtf/convertToRtf.d.ts

@@ -0,0 +1,7 @@
+import type { Document } from '@contentful/rich-text-types';
+import type { RtfInputFormat } from './types.js';
+/**
+ * Converts a string in the given format to a Contentful Rich Text document.
+ */
+export declare function stringToRtfDocument(input: string, format: RtfInputFormat): Document;
+//# sourceMappingURL=convertToRtf.d.ts.map

package/dist/rtf/convertToRtf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convertToRtf.d.ts","sourceRoot":"","sources":["../../src/rtf/convertToRtf.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAK5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,QAAQ,CAenF"}

package/dist/rtf/convertToRtf.js

@@ -0,0 +1,24 @@
+import { htmlToRtf } from './fromHtml.js';
+import { markdownToRtf } from './fromMarkdown.js';
+import { plainTextToRtf } from './fromPlainText.js';
+import { jsonToRtf } from './fromRtfJson.js';
+/**
+ * Converts a string in the given format to a Contentful Rich Text document.
+ */
+export function stringToRtfDocument(input, format) {
+    switch (format) {
+        case 'text':
+            return plainTextToRtf(input);
+        case 'markdown':
+            return markdownToRtf(input);
+        case 'html':
+            return htmlToRtf(input);
+        case 'json':
+            return jsonToRtf(input);
+        default: {
+            const _exhaustive = format;
+            return _exhaustive;
+        }
+    }
+}
+//# sourceMappingURL=convertToRtf.js.map

package/dist/rtf/convertToRtf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convertToRtf.js","sourceRoot":"","sources":["../../src/rtf/convertToRtf.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,MAAsB;IACvE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,UAAU;YACb,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/rtf/fromHtml.d.ts

@@ -0,0 +1,8 @@
+import type { Document } from '@contentful/rich-text-types';
+export { htmlToRtfInlines } from './inlineHtml.js';
+/**
+ * Converts a subset of HTML to a Contentful Rich Text document.
+ * Supported block tags: h1–h6, p, ul, ol, li, blockquote, hr, table (basic), div (flattened).
+ */
+export declare function htmlToRtf(html: string): Document;
+//# sourceMappingURL=fromHtml.d.ts.map

package/dist/rtf/fromHtml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fromHtml.d.ts","sourceRoot":"","sources":["../../src/rtf/fromHtml.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAInE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAoChD"}

package/dist/rtf/fromHtml.js

@@ -0,0 +1,290 @@
+import { BLOCKS } from '@contentful/rich-text-types';
+import { htmlToRtfInlines } from './inlineHtml.js';
+export { htmlToRtfInlines } from './inlineHtml.js';
+/**
+ * Converts a subset of HTML to a Contentful Rich Text document.
+ * Supported block tags: h1–h6, p, ul, ol, li, blockquote, hr, table (basic), div (flattened).
+ */
+export function htmlToRtf(html) {
+    let s = stripComments(html).trim().replace(/\r\n/g, '\n');
+    s = unwrapWrappers(s);
+    const blocks = [];
+    let rest = s;
+    while (rest.trim()) {
+        const next = consumeTopLevelBlock(rest);
+        if (!next) {
+            const implicit = rest.trim();
+            if (implicit) {
+                blocks.push({
+                    nodeType: BLOCKS.PARAGRAPH,
+                    data: {},
+                    content: htmlToRtfInlines(implicit),
+                });
+            }
+            break;
+        }
+        blocks.push(next.block);
+        rest = next.rest.trim();
+    }
+    if (blocks.length === 0) {
+        blocks.push({
+            nodeType: BLOCKS.PARAGRAPH,
+            data: {},
+            content: [{ nodeType: 'text', value: '', marks: [], data: {} }],
+        });
+    }
+    return {
+        nodeType: BLOCKS.DOCUMENT,
+        data: {},
+        content: blocks,
+    };
+}
+function stripComments(html) {
+    return html.replace(/<!--[\s\S]*?-->/g, '');
+}
+function unwrapWrappers(html) {
+    let s = html.replace(/^\s*<!DOCTYPE\b[^>]*>\s*/i, '');
+    for (let depth = 0; depth < 20; depth++) {
+        const htmlWrap = /^\s*<html\b[^>]*>([\s\S]*)<\/html>\s*$/i.exec(s);
+        if (htmlWrap?.[1] !== undefined) {
+            s = htmlWrap[1].trim();
+            continue;
+        }
+        const bodyWrap = /^\s*<body\b[^>]*>([\s\S]*)<\/body>\s*$/i.exec(s);
+        if (bodyWrap?.[1] !== undefined) {
+            s = bodyWrap[1].trim();
+            continue;
+        }
+        const loose = /^\s*<div\b[^>]*>([\s\S]*)<\/div>\s*$/i.exec(s);
+        if (loose?.[1] !== undefined && !/<div\b/i.test(loose[1])) {
+            s = loose[1].trim();
+            continue;
+        }
+        break;
+    }
+    return s;
+}
+function consumeTopLevelBlock(html) {
+    const trimmed = html.trimStart();
+    if (!trimmed)
+        return null;
+    const hr = /^<\s*hr\b[^>]*\/?\s*>/i.exec(trimmed);
+    if (hr) {
+        return {
+            block: { nodeType: BLOCKS.HR, data: {}, content: [] },
+            rest: trimmed.slice(hr[0].length),
+        };
+    }
+    const heading = /^<\s*h([1-6])\b[^>]*>([\s\S]*?)<\/h\1\s*>/i.exec(trimmed);
+    if (heading?.[1] && heading[2] !== undefined) {
+        const level = Number.parseInt(heading[1], 10);
+        const nodeType = [
+            BLOCKS.HEADING_1,
+            BLOCKS.HEADING_2,
+            BLOCKS.HEADING_3,
+            BLOCKS.HEADING_4,
+            BLOCKS.HEADING_5,
+            BLOCKS.HEADING_6,
+        ][level - 1];
+        return {
+            block: {
+                nodeType,
+                data: {},
+                content: htmlToRtfInlines(heading[2].trim()),
+            },
+            rest: trimmed.slice(heading[0].length),
+        };
+    }
+    const p = /^<\s*p\b[^>]*>([\s\S]*?)<\/p\s*>/i.exec(trimmed);
+    if (p?.[1] !== undefined) {
+        return {
+            block: {
+                nodeType: BLOCKS.PARAGRAPH,
+                data: {},
+                content: htmlToRtfInlines(p[1].trim()),
+            },
+            rest: trimmed.slice(p[0].length),
+        };
+    }
+    const bq = /^<\s*blockquote\b[^>]*>([\s\S]*?)<\/blockquote\s*>/i.exec(trimmed);
+    if (bq?.[1] !== undefined) {
+        return {
+            block: {
+                nodeType: BLOCKS.QUOTE,
+                data: {},
+                content: [
+                    {
+                        nodeType: BLOCKS.PARAGRAPH,
+                        data: {},
+                        content: htmlToRtfInlines(bq[1].trim()),
+                    },
+                ],
+            },
+            rest: trimmed.slice(bq[0].length),
+        };
+    }
+    const ulOpen = /^<\s*ul\b[^>]*>/i.exec(trimmed);
+    if (ulOpen) {
+        const closeIdx = findMatchingClose(trimmed, ulOpen[0].length, 'ul');
+        if (closeIdx !== -1) {
+            const inner = trimmed.slice(ulOpen[0].length, closeIdx);
+            const closeLen = /^<\/ul\s*>/i.exec(trimmed.slice(closeIdx))?.[0].length ?? 5;
+            return { block: parseListBlock(inner, false), rest: trimmed.slice(closeIdx + closeLen) };
+        }
+    }
+    const olOpen = /^<\s*ol\b[^>]*>/i.exec(trimmed);
+    if (olOpen) {
+        const closeIdx = findMatchingClose(trimmed, olOpen[0].length, 'ol');
+        if (closeIdx !== -1) {
+            const inner = trimmed.slice(olOpen[0].length, closeIdx);
+            const closeLen = /^<\/ol\s*>/i.exec(trimmed.slice(closeIdx))?.[0].length ?? 5;
+            return { block: parseListBlock(inner, true), rest: trimmed.slice(closeIdx + closeLen) };
+        }
+    }
+    const tableOpen = /^<\s*table\b[^>]*>/i.exec(trimmed);
+    if (tableOpen) {
+        const closeIdx = findMatchingClose(trimmed, tableOpen[0].length, 'table');
+        if (closeIdx !== -1) {
+            const inner = trimmed.slice(tableOpen[0].length, closeIdx);
+            const closeLen = /^<\/table\s*>/i.exec(trimmed.slice(closeIdx))?.[0].length ?? 8;
+            return { block: parseTableBlock(inner), rest: trimmed.slice(closeIdx + closeLen) };
+        }
+    }
+    return null;
+}
+function parseListBlock(inner, ordered) {
+    const items = [];
+    for (const body of extractListItemBodies(inner)) {
+        const nestedUl = /<\s*ul\b/i.test(body);
+        const nestedOl = /<\s*ol\b/i.test(body);
+        const content = [];
+        if (nestedUl || nestedOl) {
+            const firstNested = /<\s*(ul|ol)\b[^>]*>([\s\S]*?)<\/\1\s*>/i.exec(body);
+            if (firstNested?.[1] && firstNested[2] !== undefined) {
+                const before = body.slice(0, firstNested.index ?? 0).trim();
+                const after = body.slice((firstNested.index ?? 0) + firstNested[0].length).trim();
+                if (before) {
+                    content.push({
+                        nodeType: BLOCKS.PARAGRAPH,
+                        data: {},
+                        content: htmlToRtfInlines(before),
+                    });
+                }
+                content.push(parseListBlock(firstNested[2], firstNested[1].toLowerCase() === 'ol'));
+                if (after) {
+                    content.push({
+                        nodeType: BLOCKS.PARAGRAPH,
+                        data: {},
+                        content: htmlToRtfInlines(after),
+                    });
+                }
+            }
+            else {
+                content.push({
+                    nodeType: BLOCKS.PARAGRAPH,
+                    data: {},
+                    content: htmlToRtfInlines(body),
+                });
+            }
+        }
+        else {
+            content.push({
+                nodeType: BLOCKS.PARAGRAPH,
+                data: {},
+                content: htmlToRtfInlines(body),
+            });
+        }
+        items.push({
+            nodeType: BLOCKS.LIST_ITEM,
+            data: {},
+            content,
+        });
+    }
+    return {
+        nodeType: ordered ? BLOCKS.OL_LIST : BLOCKS.UL_LIST,
+        data: {},
+        content: items.length > 0 ? items : [{ nodeType: BLOCKS.LIST_ITEM, data: {}, content: [] }],
+    };
+}
+/**
+ * Extracts the inner content of each top-level <li> from a list body string.
+ * Uses depth-tracking so nested <li> elements inside sub-lists don't terminate
+ * the outer item prematurely (unlike non-greedy regex).
+ */
+function extractListItemBodies(inner) {
+    const items = [];
+    let pos = 0;
+    while (pos < inner.length) {
+        const rel = inner.slice(pos).search(/<\s*li\b/i);
+        if (rel === -1)
+            break;
+        const liStart = pos + rel;
+        const tagClose = inner.indexOf('>', liStart);
+        if (tagClose === -1)
+            break;
+        const contentStart = tagClose + 1;
+        const closeIdx = findMatchingClose(inner, contentStart, 'li');
+        items.push(closeIdx === -1
+            ? inner.slice(contentStart).trim()
+            : inner.slice(contentStart, closeIdx).trim());
+        pos = closeIdx === -1 ? inner.length : closeIdx + 5;
+    }
+    return items;
+}
+/**
+ * Returns the index of the closing tag `</tag>` that depth-matches the opening tag
+ * whose content starts at `from`. Works for any tag name (ul, ol, table, etc.).
+ */
+function findMatchingClose(html, from, tag) {
+    const re = new RegExp(`<\\s*(\\/?)${tag}\\b[^>]*>`, 'gi');
+    re.lastIndex = from;
+    let depth = 1;
+    for (;;) {
+        const m = re.exec(html);
+        if (!m)
+            break;
+        if (m[1] === '/') {
+            if (--depth === 0)
+                return m.index;
+        }
+        else {
+            depth++;
+        }
+    }
+    return -1;
+}
+function parseTableBlock(inner) {
+    const rows = [];
+    const trRe = /<\s*tr\b[^>]*>([\s\S]*?)<\/tr\s*>/gi;
+    let m;
+    let rowIndex = 0;
+    for (m = trRe.exec(inner); m !== null; m = trRe.exec(inner)) {
+        const trInner = m[1] ?? '';
+        const cells = [];
+        const cellRe = /<\s*(th|td)\b[^>]*>([\s\S]*?)<\/\1\s*>/gi;
+        let cm;
+        for (cm = cellRe.exec(trInner); cm !== null; cm = cellRe.exec(trInner)) {
+            const isHeader = (cm[1] ?? '').toLowerCase() === 'th' || rowIndex === 0;
+            const cellType = isHeader ? BLOCKS.TABLE_HEADER_CELL : BLOCKS.TABLE_CELL;
+            cells.push({
+                nodeType: cellType,
+                data: {},
+                content: [
+                    {
+                        nodeType: BLOCKS.PARAGRAPH,
+                        data: {},
+                        content: htmlToRtfInlines((cm[2] ?? '').trim()),
+                    },
+                ],
+            });
+        }
+        rows.push({ nodeType: BLOCKS.TABLE_ROW, data: {}, content: cells });
+        rowIndex++;
+    }
+    return {
+        nodeType: BLOCKS.TABLE,
+        data: {},
+        content: rows.length > 0 ? rows : [],
+    };
+}
+//# sourceMappingURL=fromHtml.js.map