@valkyrianlabs/payload-markdown-docs 0.1.0-canary.0

package/dist/cli/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/cli/commands/install.ts"],"sourcesContent":["import { access, mkdir, readdir, readFile, writeFile } from 'node:fs/promises'\nimport path from 'node:path'\n\nimport type { CliResult, ParsedCliArgs } from '../types.js'\n\nimport { getFlagBoolean, getFlagString } from '../parseArgs.js'\n\ntype AgentTarget = 'codex'\n\ntype PackageManager = 'bun' | 'npm' | 'pnpm' | 'yarn'\n\ntype SkillTemplateFile = {\n  content: string\n  relativePath: string\n}\n\ntype PlannedSkillFile = {\n  content: string\n  path: string\n  relativePath: string\n}\n\ntype InstallSkillOptions = {\n  agent: AgentTarget\n  docsRoot: string\n  dryRun: boolean\n  force: boolean\n  outDir: string\n  packageManager: PackageManager\n}\n\nconst packageManagers = new Set<PackageManager>(['bun', 'npm', 'pnpm', 'yarn'])\nconst supportedInstallTargets = new Set(['ai-skill', 'skill'])\nconst defaultSkillOutputPath = '.agents/skills/payload-markdown-docs'\n\nconst skillTemplateRoot = new URL('../../skills/codex/', import.meta.url)\n\nconst fileExists = async (filePath: string): Promise<boolean> => {\n  try {\n    await access(filePath)\n\n    return true\n  } catch {\n    return false\n  }\n}\n\nconst detectPackageManager = async (cwd = process.cwd()): Promise<PackageManager> => {\n  const lockfiles: [file: string, packageManager: PackageManager][] = [\n    ['pnpm-lock.yaml', 'pnpm'],\n    ['package-lock.json', 'npm'],\n    ['yarn.lock', 'yarn'],\n    ['bun.lockb', 'bun'],\n  ]\n\n  for (const [file, packageManager] of lockfiles) {\n    if (await fileExists(path.join(cwd, file))) {\n      return packageManager\n    }\n  }\n\n  return 'pnpm'\n}\n\nconst readTemplateFiles = async (\n  directoryUrl = skillTemplateRoot,\n  basePath = '',\n): Promise<SkillTemplateFile[]> => {\n  const entries = await readdir(directoryUrl, {\n    withFileTypes: true,\n  })\n  const files: SkillTemplateFile[] = []\n\n  for (const entry of entries) {\n    if (entry.isSymbolicLink()) {\n      continue\n    }\n\n    const relativePath = path.posix.join(basePath, entry.name)\n    const entryUrl = new URL(`${entry.name}${entry.isDirectory() ? '/' : ''}`, directoryUrl)\n\n    if (entry.isDirectory()) {\n      files.push(...(await readTemplateFiles(entryUrl, relativePath)))\n      continue\n    }\n\n    if (!entry.isFile()) {\n      continue\n    }\n\n    files.push({\n      content: await readFile(entryUrl, 'utf8'),\n      relativePath,\n    })\n  }\n\n  return files.sort((left, right) => left.relativePath.localeCompare(right.relativePath))\n}\n\nconst applyTemplateValues = ({\n  content,\n  docsRoot,\n  packageManager,\n}: {\n  content: string\n  docsRoot: string\n  packageManager: PackageManager\n}): string =>\n  content\n    .replaceAll('{{docsRoot}}', docsRoot)\n    .replaceAll('{{packageManager}}', packageManager)\n\nconst assertSafeRelativePath = (relativePath: string): CliResult | undefined => {\n  const normalized = path.posix.normalize(relativePath)\n\n  if (\n    normalized.startsWith('../') ||\n    normalized === '..' ||\n    path.isAbsolute(relativePath) ||\n    relativePath.includes('\\\\')\n  ) {\n    return {\n      exitCode: 1,\n      stderr: `Unsafe bundled skill path \"${relativePath}\".\\n`,\n    }\n  }\n\n  return undefined\n}\n\nconst createPlannedFiles = async ({\n  docsRoot,\n  outDir,\n  packageManager,\n}: Pick<InstallSkillOptions, 'docsRoot' | 'outDir' | 'packageManager'>): Promise<\n  CliResult | PlannedSkillFile[]\n> => {\n  const absoluteOutDir = path.resolve(outDir)\n  const templates = await readTemplateFiles()\n  const plannedFiles: PlannedSkillFile[] = []\n\n  for (const template of templates) {\n    const unsafe = assertSafeRelativePath(template.relativePath)\n\n    if (unsafe) {\n      return unsafe\n    }\n\n    const outputPath = path.resolve(absoluteOutDir, template.relativePath)\n\n    if (\n      outputPath !== absoluteOutDir &&\n      !outputPath.startsWith(`${absoluteOutDir}${path.sep}`)\n    ) {\n      return {\n        exitCode: 1,\n        stderr: `Refusing to write outside target directory: ${template.relativePath}\\n`,\n      }\n    }\n\n    plannedFiles.push({\n      content: applyTemplateValues({\n        content: template.content,\n        docsRoot,\n        packageManager,\n      }),\n      path: outputPath,\n      relativePath: template.relativePath,\n    })\n  }\n\n  return plannedFiles\n}\n\nconst getInstallSkillOptions = async (\n  args: ParsedCliArgs,\n): Promise<CliResult | InstallSkillOptions> => {\n  const [target] = args.positionals\n\n  if (!target || !supportedInstallTargets.has(target)) {\n    return {\n      exitCode: 1,\n      stderr: 'Install requires target \"skill\" or \"ai-skill\".\\n',\n    }\n  }\n\n  const agentFlag = getFlagString(args, 'agent')\n  const codex = getFlagBoolean(args, 'codex')\n\n  if (agentFlag && agentFlag !== 'codex') {\n    return {\n      exitCode: 1,\n      stderr: '--agent currently supports only \"codex\".\\n',\n    }\n  }\n\n  if (!codex && agentFlag !== 'codex') {\n    return {\n      exitCode: 1,\n      stderr: 'Install skill requires --codex or --agent codex.\\n',\n    }\n  }\n\n  const packageManagerFlag = getFlagString(args, 'package-manager')\n\n  if (\n    packageManagerFlag !== undefined &&\n    !packageManagers.has(packageManagerFlag as PackageManager)\n  ) {\n    return {\n      exitCode: 1,\n      stderr: '--package-manager must be pnpm, npm, yarn, or bun.\\n',\n    }\n  }\n\n  return {\n    agent: 'codex',\n    docsRoot: getFlagString(args, 'docs-root') ?? './docs',\n    dryRun: getFlagBoolean(args, 'dry-run'),\n    force: getFlagBoolean(args, 'force'),\n    outDir: getFlagString(args, 'out') ?? defaultSkillOutputPath,\n    packageManager:\n      (packageManagerFlag as PackageManager | undefined) ?? (await detectPackageManager()),\n  }\n}\n\nconst formatPlannedFiles = ({\n  dryRun,\n  files,\n  outDir,\n}: {\n  dryRun: boolean\n  files: PlannedSkillFile[]\n  outDir: string\n}): string => {\n  const lines = [\n    dryRun\n      ? 'payload-markdown-docs install skill dry-run'\n      : 'payload-markdown-docs install skill',\n    '',\n    `Target: ${path.resolve(outDir)}`,\n    'Files:',\n    ...files.map((file) => `- ${file.relativePath}`),\n  ]\n\n  return `${lines.join('\\n')}\\n`\n}\n\nexport const runInstallCommand = async (\n  args: ParsedCliArgs,\n): Promise<CliResult> => {\n  const options = await getInstallSkillOptions(args)\n\n  if ('exitCode' in options) {\n    return options\n  }\n\n  const plannedFiles = await createPlannedFiles(options)\n\n  if ('exitCode' in plannedFiles) {\n    return plannedFiles\n  }\n\n  if (!options.force) {\n    const existingFiles: string[] = []\n\n    for (const file of plannedFiles) {\n      if (await fileExists(file.path)) {\n        existingFiles.push(file.relativePath)\n      }\n    }\n\n    if (existingFiles.length > 0) {\n      return {\n        exitCode: 1,\n        stderr: `Skill files already exist. Use --force to overwrite:\\n${existingFiles\n          .map((file) => `- ${file}`)\n          .join('\\n')}\\n`,\n      }\n    }\n  }\n\n  if (options.dryRun) {\n    return {\n      exitCode: 0,\n      stdout: formatPlannedFiles({\n        dryRun: true,\n        files: plannedFiles,\n        outDir: options.outDir,\n      }),\n    }\n  }\n\n  for (const file of plannedFiles) {\n    await mkdir(path.dirname(file.path), {\n      recursive: true,\n    })\n    await writeFile(file.path, file.content, 'utf8')\n  }\n\n  return {\n    exitCode: 0,\n    stdout: formatPlannedFiles({\n      dryRun: false,\n      files: plannedFiles,\n      outDir: options.outDir,\n    }),\n  }\n}\n"],"names":["access","mkdir","readdir","readFile","writeFile","path","getFlagBoolean","getFlagString","packageManagers","Set","supportedInstallTargets","defaultSkillOutputPath","skillTemplateRoot","URL","url","fileExists","filePath","detectPackageManager","cwd","process","lockfiles","file","packageManager","join","readTemplateFiles","directoryUrl","basePath","entries","withFileTypes","files","entry","isSymbolicLink","relativePath","posix","name","entryUrl","isDirectory","push","isFile","content","sort","left","right","localeCompare","applyTemplateValues","docsRoot","replaceAll","assertSafeRelativePath","normalized","normalize","startsWith","isAbsolute","includes","exitCode","stderr","undefined","createPlannedFiles","outDir","absoluteOutDir","resolve","templates","plannedFiles","template","unsafe","outputPath","sep","getInstallSkillOptions","args","target","positionals","has","agentFlag","codex","packageManagerFlag","agent","dryRun","force","formatPlannedFiles","lines","map","runInstallCommand","options","existingFiles","length","stdout","dirname","recursive"],"mappings":"AAAA,SAASA,MAAM,EAAEC,KAAK,EAAEC,OAAO,EAAEC,QAAQ,EAAEC,SAAS,QAAQ,mBAAkB;AAC9E,OAAOC,UAAU,YAAW;AAI5B,SAASC,cAAc,EAAEC,aAAa,QAAQ,kBAAiB;AA0B/D,MAAMC,kBAAkB,IAAIC,IAAoB;IAAC;IAAO;IAAO;IAAQ;CAAO;AAC9E,MAAMC,0BAA0B,IAAID,IAAI;IAAC;IAAY;CAAQ;AAC7D,MAAME,yBAAyB;AAE/B,MAAMC,oBAAoB,IAAIC,IAAI,uBAAuB,YAAYC,GAAG;AAExE,MAAMC,aAAa,OAAOC;IACxB,IAAI;QACF,MAAMhB,OAAOgB;QAEb,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,MAAMC,uBAAuB,OAAOC,MAAMC,QAAQD,GAAG,EAAE;IACrD,MAAME,YAA8D;QAClE;YAAC;YAAkB;SAAO;QAC1B;YAAC;YAAqB;SAAM;QAC5B;YAAC;YAAa;SAAO;QACrB;YAAC;YAAa;SAAM;KACrB;IAED,KAAK,MAAM,CAACC,MAAMC,eAAe,IAAIF,UAAW;QAC9C,IAAI,MAAML,WAAWV,KAAKkB,IAAI,CAACL,KAAKG,QAAQ;YAC1C,OAAOC;QACT;IACF;IAEA,OAAO;AACT;AAEA,MAAME,oBAAoB,OACxBC,eAAeb,iBAAiB,EAChCc,WAAW,EAAE;IAEb,MAAMC,UAAU,MAAMzB,QAAQuB,cAAc;QAC1CG,eAAe;IACjB;IACA,MAAMC,QAA6B,EAAE;IAErC,KAAK,MAAMC,SAASH,QAAS;QAC3B,IAAIG,MAAMC,cAAc,IAAI;YAC1B;QACF;QAEA,MAAMC,eAAe3B,KAAK4B,KAAK,CAACV,IAAI,CAACG,UAAUI,MAAMI,IAAI;QACzD,MAAMC,WAAW,IAAItB,IAAI,GAAGiB,MAAMI,IAAI,GAAGJ,MAAMM,WAAW,KAAK,MAAM,IAAI,EAAEX;QAE3E,IAAIK,MAAMM,WAAW,IAAI;YACvBP,MAAMQ,IAAI,IAAK,MAAMb,kBAAkBW,UAAUH;YACjD;QACF;QAEA,IAAI,CAACF,MAAMQ,MAAM,IAAI;YACnB;QACF;QAEAT,MAAMQ,IAAI,CAAC;YACTE,SAAS,MAAMpC,SAASgC,UAAU;YAClCH;QACF;IACF;IAEA,OAAOH,MAAMW,IAAI,CAAC,CAACC,MAAMC,QAAUD,KAAKT,YAAY,CAACW,aAAa,CAACD,MAAMV,YAAY;AACvF;AAEA,MAAMY,sBAAsB,CAAC,EAC3BL,OAAO,EACPM,QAAQ,EACRvB,cAAc,EAKf,GACCiB,QACGO,UAAU,CAAC,gBAAgBD,UAC3BC,UAAU,CAAC,sBAAsBxB;AAEtC,MAAMyB,yBAAyB,CAACf;IAC9B,MAAMgB,aAAa3C,KAAK4B,KAAK,CAACgB,SAAS,CAACjB;IAExC,IACEgB,WAAWE,UAAU,CAAC,UACtBF,eAAe,QACf3C,KAAK8C,UAAU,CAACnB,iBAChBA,aAAaoB,QAAQ,CAAC,OACtB;QACA,OAAO;YACLC,UAAU;YACVC,QAAQ,CAAC,2BAA2B,EAAEtB,aAAa,IAAI,CAAC;QAC1D;IACF;IAEA,OAAOuB;AACT;AAEA,MAAMC,qBAAqB,OAAO,EAChCX,QAAQ,EACRY,MAAM,EACNnC,cAAc,EACsD;IAGpE,MAAMoC,iBAAiBrD,KAAKsD,OAAO,CAACF;IACpC,MAAMG,YAAY,MAAMpC;IACxB,MAAMqC,eAAmC,EAAE;IAE3C,KAAK,MAAMC,YAAYF,UAAW;QAChC,MAAMG,SAAShB,uBAAuBe,SAAS9B,YAAY;QAE3D,IAAI+B,QAAQ;YACV,OAAOA;QACT;QAEA,MAAMC,aAAa3D,KAAKsD,OAAO,CAACD,gBAAgBI,SAAS9B,YAAY;QAErE,IACEgC,eAAeN,kBACf,CAACM,WAAWd,UAAU,CAAC,GAAGQ,iBAAiBrD,KAAK4D,GAAG,EAAE,GACrD;YACA,OAAO;gBACLZ,UAAU;gBACVC,QAAQ,CAAC,4CAA4C,EAAEQ,SAAS9B,YAAY,CAAC,EAAE,CAAC;YAClF;QACF;QAEA6B,aAAaxB,IAAI,CAAC;YAChBE,SAASK,oBAAoB;gBAC3BL,SAASuB,SAASvB,OAAO;gBACzBM;gBACAvB;YACF;YACAjB,MAAM2D;YACNhC,cAAc8B,SAAS9B,YAAY;QACrC;IACF;IAEA,OAAO6B;AACT;AAEA,MAAMK,yBAAyB,OAC7BC;IAEA,MAAM,CAACC,OAAO,GAAGD,KAAKE,WAAW;IAEjC,IAAI,CAACD,UAAU,CAAC1D,wBAAwB4D,GAAG,CAACF,SAAS;QACnD,OAAO;YACLf,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,MAAMiB,YAAYhE,cAAc4D,MAAM;IACtC,MAAMK,QAAQlE,eAAe6D,MAAM;IAEnC,IAAII,aAAaA,cAAc,SAAS;QACtC,OAAO;YACLlB,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,IAAI,CAACkB,SAASD,cAAc,SAAS;QACnC,OAAO;YACLlB,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,MAAMmB,qBAAqBlE,cAAc4D,MAAM;IAE/C,IACEM,uBAAuBlB,aACvB,CAAC/C,gBAAgB8D,GAAG,CAACG,qBACrB;QACA,OAAO;YACLpB,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,OAAO;QACLoB,OAAO;QACP7B,UAAUtC,cAAc4D,MAAM,gBAAgB;QAC9CQ,QAAQrE,eAAe6D,MAAM;QAC7BS,OAAOtE,eAAe6D,MAAM;QAC5BV,QAAQlD,cAAc4D,MAAM,UAAUxD;QACtCW,gBACE,AAACmD,sBAAsD,MAAMxD;IACjE;AACF;AAEA,MAAM4D,qBAAqB,CAAC,EAC1BF,MAAM,EACN9C,KAAK,EACL4B,MAAM,EAKP;IACC,MAAMqB,QAAQ;QACZH,SACI,gDACA;QACJ;QACA,CAAC,QAAQ,EAAEtE,KAAKsD,OAAO,CAACF,SAAS;QACjC;WACG5B,MAAMkD,GAAG,CAAC,CAAC1D,OAAS,CAAC,EAAE,EAAEA,KAAKW,YAAY,EAAE;KAChD;IAED,OAAO,GAAG8C,MAAMvD,IAAI,CAAC,MAAM,EAAE,CAAC;AAChC;AAEA,OAAO,MAAMyD,oBAAoB,OAC/Bb;IAEA,MAAMc,UAAU,MAAMf,uBAAuBC;IAE7C,IAAI,cAAcc,SAAS;QACzB,OAAOA;IACT;IAEA,MAAMpB,eAAe,MAAML,mBAAmByB;IAE9C,IAAI,cAAcpB,cAAc;QAC9B,OAAOA;IACT;IAEA,IAAI,CAACoB,QAAQL,KAAK,EAAE;QAClB,MAAMM,gBAA0B,EAAE;QAElC,KAAK,MAAM7D,QAAQwC,aAAc;YAC/B,IAAI,MAAM9C,WAAWM,KAAKhB,IAAI,GAAG;gBAC/B6E,cAAc7C,IAAI,CAAChB,KAAKW,YAAY;YACtC;QACF;QAEA,IAAIkD,cAAcC,MAAM,GAAG,GAAG;YAC5B,OAAO;gBACL9B,UAAU;gBACVC,QAAQ,CAAC,sDAAsD,EAAE4B,cAC9DH,GAAG,CAAC,CAAC1D,OAAS,CAAC,EAAE,EAAEA,MAAM,EACzBE,IAAI,CAAC,MAAM,EAAE,CAAC;YACnB;QACF;IACF;IAEA,IAAI0D,QAAQN,MAAM,EAAE;QAClB,OAAO;YACLtB,UAAU;YACV+B,QAAQP,mBAAmB;gBACzBF,QAAQ;gBACR9C,OAAOgC;gBACPJ,QAAQwB,QAAQxB,MAAM;YACxB;QACF;IACF;IAEA,KAAK,MAAMpC,QAAQwC,aAAc;QAC/B,MAAM5D,MAAMI,KAAKgF,OAAO,CAAChE,KAAKhB,IAAI,GAAG;YACnCiF,WAAW;QACb;QACA,MAAMlF,UAAUiB,KAAKhB,IAAI,EAAEgB,KAAKkB,OAAO,EAAE;IAC3C;IAEA,OAAO;QACLc,UAAU;QACV+B,QAAQP,mBAAmB;YACzBF,QAAQ;YACR9C,OAAOgC;YACPJ,QAAQwB,QAAQxB,MAAM;QACxB;IACF;AACF,EAAC"}

package/dist/cli/commands/keygen.d.ts

@@ -0,0 +1,2 @@
+import type { CliResult, ParsedCliArgs } from '../types.js';
+export declare const runKeygenCommand: (args: ParsedCliArgs) => Promise<CliResult>;

package/dist/cli/commands/keygen.js

@@ -0,0 +1,89 @@
+import { generateKeyPairSync } from 'node:crypto';
+import { access, mkdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { getFlagBoolean, getFlagString } from '../parseArgs.js';
+const keyFormats = new Set([
+    'base64',
+    'pem'
+]);
+const fileExists = async (filePath)=>{
+    try {
+        await access(filePath);
+        return true;
+    } catch  {
+        return false;
+    }
+};
+const generatePemKeys = ()=>{
+    const { privateKey, publicKey } = generateKeyPairSync('ed25519', {
+        privateKeyEncoding: {
+            type: 'pkcs8',
+            format: 'pem'
+        },
+        publicKeyEncoding: {
+            type: 'spki',
+            format: 'pem'
+        }
+    });
+    return {
+        privateKey: privateKey.toString(),
+        publicKey: publicKey.toString()
+    };
+};
+const generateBase64Keys = ()=>{
+    const { privateKey, publicKey } = generateKeyPairSync('ed25519', {
+        privateKeyEncoding: {
+            type: 'pkcs8',
+            format: 'der'
+        },
+        publicKeyEncoding: {
+            type: 'spki',
+            format: 'der'
+        }
+    });
+    return {
+        privateKey: Buffer.from(privateKey).toString('base64'),
+        publicKey: Buffer.from(publicKey).toString('base64')
+    };
+};
+const formatKeysForStdout = ({ privateKey, publicKey })=>`Public key:\n\n${publicKey.trim()}\n\nPrivate key:\n\n${privateKey.trim()}\n`;
+export const runKeygenCommand = async (args)=>{
+    const format = getFlagString(args, 'format') ?? 'pem';
+    if (!keyFormats.has(format)) {
+        return {
+            exitCode: 1,
+            stderr: '--format must be pem or base64.\n'
+        };
+    }
+    const keys = format === 'pem' ? generatePemKeys() : generateBase64Keys();
+    const outDir = getFlagString(args, 'out');
+    if (!outDir) {
+        return {
+            exitCode: 0,
+            stdout: formatKeysForStdout(keys)
+        };
+    }
+    const absoluteOutDir = path.resolve(outDir);
+    const publicKeyPath = path.join(absoluteOutDir, 'docs-sync-public.pem');
+    const privateKeyPath = path.join(absoluteOutDir, 'docs-sync-private.pem');
+    const force = getFlagBoolean(args, 'force');
+    const publicExists = await fileExists(publicKeyPath);
+    const privateExists = await fileExists(privateKeyPath);
+    if (!force && (publicExists || privateExists)) {
+        return {
+            exitCode: 1,
+            stderr: 'Key files already exist. Use --force to overwrite docs-sync-public.pem and docs-sync-private.pem.\n'
+        };
+    }
+    await mkdir(absoluteOutDir, {
+        recursive: true
+    });
+    await writeFile(publicKeyPath, `${keys.publicKey.trim()}\n`, 'utf8');
+    await writeFile(privateKeyPath, `${keys.privateKey.trim()}\n`, 'utf8');
+    return {
+        exitCode: 0,
+        stdout: `Wrote public key: ${publicKeyPath}\nWrote private key: ${privateKeyPath}\n`
+    };
+};
+
+//# sourceMappingURL=keygen.js.map

package/dist/cli/commands/keygen.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/cli/commands/keygen.ts"],"sourcesContent":["import { generateKeyPairSync } from 'node:crypto'\nimport { access, mkdir, writeFile } from 'node:fs/promises'\nimport path from 'node:path'\n\nimport type { CliResult, ParsedCliArgs } from '../types.js'\n\nimport { getFlagBoolean, getFlagString } from '../parseArgs.js'\n\ntype KeyFormat = 'base64' | 'pem'\n\ntype GeneratedKeys = {\n  privateKey: string\n  publicKey: string\n}\n\nconst keyFormats = new Set<KeyFormat>(['base64', 'pem'])\n\nconst fileExists = async (filePath: string): Promise<boolean> => {\n  try {\n    await access(filePath)\n\n    return true\n  } catch {\n    return false\n  }\n}\n\nconst generatePemKeys = (): GeneratedKeys => {\n  const { privateKey, publicKey } = generateKeyPairSync('ed25519', {\n    privateKeyEncoding: {\n      type: 'pkcs8',\n      format: 'pem',\n    },\n    publicKeyEncoding: {\n      type: 'spki',\n      format: 'pem',\n    },\n  })\n\n  return {\n    privateKey: privateKey.toString(),\n    publicKey: publicKey.toString(),\n  }\n}\n\nconst generateBase64Keys = (): GeneratedKeys => {\n  const { privateKey, publicKey } = generateKeyPairSync('ed25519', {\n    privateKeyEncoding: {\n      type: 'pkcs8',\n      format: 'der',\n    },\n    publicKeyEncoding: {\n      type: 'spki',\n      format: 'der',\n    },\n  })\n\n  return {\n    privateKey: Buffer.from(privateKey).toString('base64'),\n    publicKey: Buffer.from(publicKey).toString('base64'),\n  }\n}\n\nconst formatKeysForStdout = ({ privateKey, publicKey }: GeneratedKeys): string =>\n  `Public key:\\n\\n${publicKey.trim()}\\n\\nPrivate key:\\n\\n${privateKey.trim()}\\n`\n\nexport const runKeygenCommand = async (\n  args: ParsedCliArgs,\n): Promise<CliResult> => {\n  const format = (getFlagString(args, 'format') ?? 'pem') as KeyFormat\n\n  if (!keyFormats.has(format)) {\n    return {\n      exitCode: 1,\n      stderr: '--format must be pem or base64.\\n',\n    }\n  }\n\n  const keys = format === 'pem' ? generatePemKeys() : generateBase64Keys()\n  const outDir = getFlagString(args, 'out')\n\n  if (!outDir) {\n    return {\n      exitCode: 0,\n      stdout: formatKeysForStdout(keys),\n    }\n  }\n\n  const absoluteOutDir = path.resolve(outDir)\n  const publicKeyPath = path.join(absoluteOutDir, 'docs-sync-public.pem')\n  const privateKeyPath = path.join(absoluteOutDir, 'docs-sync-private.pem')\n  const force = getFlagBoolean(args, 'force')\n  const publicExists = await fileExists(publicKeyPath)\n  const privateExists = await fileExists(privateKeyPath)\n\n  if (!force && (publicExists || privateExists)) {\n    return {\n      exitCode: 1,\n      stderr:\n        'Key files already exist. Use --force to overwrite docs-sync-public.pem and docs-sync-private.pem.\\n',\n    }\n  }\n\n  await mkdir(absoluteOutDir, {\n    recursive: true,\n  })\n  await writeFile(publicKeyPath, `${keys.publicKey.trim()}\\n`, 'utf8')\n  await writeFile(privateKeyPath, `${keys.privateKey.trim()}\\n`, 'utf8')\n\n  return {\n    exitCode: 0,\n    stdout: `Wrote public key: ${publicKeyPath}\\nWrote private key: ${privateKeyPath}\\n`,\n  }\n}\n\n"],"names":["generateKeyPairSync","access","mkdir","writeFile","path","getFlagBoolean","getFlagString","keyFormats","Set","fileExists","filePath","generatePemKeys","privateKey","publicKey","privateKeyEncoding","type","format","publicKeyEncoding","toString","generateBase64Keys","Buffer","from","formatKeysForStdout","trim","runKeygenCommand","args","has","exitCode","stderr","keys","outDir","stdout","absoluteOutDir","resolve","publicKeyPath","join","privateKeyPath","force","publicExists","privateExists","recursive"],"mappings":"AAAA,SAASA,mBAAmB,QAAQ,cAAa;AACjD,SAASC,MAAM,EAAEC,KAAK,EAAEC,SAAS,QAAQ,mBAAkB;AAC3D,OAAOC,UAAU,YAAW;AAI5B,SAASC,cAAc,EAAEC,aAAa,QAAQ,kBAAiB;AAS/D,MAAMC,aAAa,IAAIC,IAAe;IAAC;IAAU;CAAM;AAEvD,MAAMC,aAAa,OAAOC;IACxB,IAAI;QACF,MAAMT,OAAOS;QAEb,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,MAAMC,kBAAkB;IACtB,MAAM,EAAEC,UAAU,EAAEC,SAAS,EAAE,GAAGb,oBAAoB,WAAW;QAC/Dc,oBAAoB;YAClBC,MAAM;YACNC,QAAQ;QACV;QACAC,mBAAmB;YACjBF,MAAM;YACNC,QAAQ;QACV;IACF;IAEA,OAAO;QACLJ,YAAYA,WAAWM,QAAQ;QAC/BL,WAAWA,UAAUK,QAAQ;IAC/B;AACF;AAEA,MAAMC,qBAAqB;IACzB,MAAM,EAAEP,UAAU,EAAEC,SAAS,EAAE,GAAGb,oBAAoB,WAAW;QAC/Dc,oBAAoB;YAClBC,MAAM;YACNC,QAAQ;QACV;QACAC,mBAAmB;YACjBF,MAAM;YACNC,QAAQ;QACV;IACF;IAEA,OAAO;QACLJ,YAAYQ,OAAOC,IAAI,CAACT,YAAYM,QAAQ,CAAC;QAC7CL,WAAWO,OAAOC,IAAI,CAACR,WAAWK,QAAQ,CAAC;IAC7C;AACF;AAEA,MAAMI,sBAAsB,CAAC,EAAEV,UAAU,EAAEC,SAAS,EAAiB,GACnE,CAAC,eAAe,EAAEA,UAAUU,IAAI,GAAG,oBAAoB,EAAEX,WAAWW,IAAI,GAAG,EAAE,CAAC;AAEhF,OAAO,MAAMC,mBAAmB,OAC9BC;IAEA,MAAMT,SAAUV,cAAcmB,MAAM,aAAa;IAEjD,IAAI,CAAClB,WAAWmB,GAAG,CAACV,SAAS;QAC3B,OAAO;YACLW,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,MAAMC,OAAOb,WAAW,QAAQL,oBAAoBQ;IACpD,MAAMW,SAASxB,cAAcmB,MAAM;IAEnC,IAAI,CAACK,QAAQ;QACX,OAAO;YACLH,UAAU;YACVI,QAAQT,oBAAoBO;QAC9B;IACF;IAEA,MAAMG,iBAAiB5B,KAAK6B,OAAO,CAACH;IACpC,MAAMI,gBAAgB9B,KAAK+B,IAAI,CAACH,gBAAgB;IAChD,MAAMI,iBAAiBhC,KAAK+B,IAAI,CAACH,gBAAgB;IACjD,MAAMK,QAAQhC,eAAeoB,MAAM;IACnC,MAAMa,eAAe,MAAM7B,WAAWyB;IACtC,MAAMK,gBAAgB,MAAM9B,WAAW2B;IAEvC,IAAI,CAACC,SAAUC,CAAAA,gBAAgBC,aAAY,GAAI;QAC7C,OAAO;YACLZ,UAAU;YACVC,QACE;QACJ;IACF;IAEA,MAAM1B,MAAM8B,gBAAgB;QAC1BQ,WAAW;IACb;IACA,MAAMrC,UAAU+B,eAAe,GAAGL,KAAKhB,SAAS,CAACU,IAAI,GAAG,EAAE,CAAC,EAAE;IAC7D,MAAMpB,UAAUiC,gBAAgB,GAAGP,KAAKjB,UAAU,CAACW,IAAI,GAAG,EAAE,CAAC,EAAE;IAE/D,OAAO;QACLI,UAAU;QACVI,QAAQ,CAAC,kBAAkB,EAAEG,cAAc,qBAAqB,EAAEE,eAAe,EAAE,CAAC;IACtF;AACF,EAAC"}

package/dist/cli/commands/manifest.d.ts

@@ -0,0 +1,2 @@
+import type { CliResult, ParsedCliArgs } from '../types.js';
+export declare const runManifestCommand: (args: ParsedCliArgs) => Promise<CliResult>;

package/dist/cli/commands/manifest.js

@@ -0,0 +1,50 @@
+import { buildDocsManifest, validateDocsManifest } from '../../sync/index.js';
+import { readDocsAiExportManifest, walkDocsFiles } from '../filesystem.js';
+import { formatIssues, printJson } from '../format.js';
+import { getFlagBoolean } from '../parseArgs.js';
+import { getDocsCommandOptions } from './validate.js';
+export const runManifestCommand = async (args)=>{
+    const options = getDocsCommandOptions(args);
+    if ('exitCode' in options) {
+        return options;
+    }
+    const files = await walkDocsFiles({
+        root: options.docsRoot
+    });
+    const aiExport = await readDocsAiExportManifest({
+        root: options.docsRoot
+    });
+    if (!aiExport.ok) {
+        return {
+            exitCode: 1,
+            stderr: `AI export manifest is invalid.\n\nErrors:\n${formatIssues(aiExport.issues)}\n`
+        };
+    }
+    const manifest = buildDocsManifest({
+        aiExport: aiExport.manifest,
+        branch: options.branch,
+        commit: options.commit,
+        files,
+        repository: options.repository,
+        root: options.sourceRoot,
+        sourceId: options.sourceId
+    });
+    const validation = validateDocsManifest(manifest, {
+        maxFileBytes: options.maxFileBytes,
+        maxFiles: options.maxFiles,
+        maxTotalBytes: options.maxTotalBytes,
+        routeBase: options.routeBase
+    });
+    if (!validation.ok) {
+        return {
+            exitCode: 1,
+            stderr: `Manifest is invalid.\n\nErrors:\n${formatIssues(validation.issues)}\n`
+        };
+    }
+    return {
+        exitCode: 0,
+        stdout: printJson(manifest, getFlagBoolean(args, 'pretty'))
+    };
+};
+
+//# sourceMappingURL=manifest.js.map

package/dist/cli/commands/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/cli/commands/manifest.ts"],"sourcesContent":["import type { CliResult, ParsedCliArgs } from '../types.js'\n\nimport {\n  buildDocsManifest,\n  validateDocsManifest,\n} from '../../sync/index.js'\nimport {\n  readDocsAiExportManifest,\n  walkDocsFiles,\n} from '../filesystem.js'\nimport { formatIssues, printJson } from '../format.js'\nimport { getFlagBoolean } from '../parseArgs.js'\nimport { getDocsCommandOptions } from './validate.js'\n\nexport const runManifestCommand = async (\n  args: ParsedCliArgs,\n): Promise<CliResult> => {\n  const options = getDocsCommandOptions(args)\n\n  if ('exitCode' in options) {\n    return options\n  }\n\n  const files = await walkDocsFiles({\n    root: options.docsRoot,\n  })\n  const aiExport = await readDocsAiExportManifest({\n    root: options.docsRoot,\n  })\n\n  if (!aiExport.ok) {\n    return {\n      exitCode: 1,\n      stderr: `AI export manifest is invalid.\\n\\nErrors:\\n${formatIssues(aiExport.issues)}\\n`,\n    }\n  }\n\n  const manifest = buildDocsManifest({\n    aiExport: aiExport.manifest,\n    branch: options.branch,\n    commit: options.commit,\n    files,\n    repository: options.repository,\n    root: options.sourceRoot,\n    sourceId: options.sourceId,\n  })\n  const validation = validateDocsManifest(manifest, {\n    maxFileBytes: options.maxFileBytes,\n    maxFiles: options.maxFiles,\n    maxTotalBytes: options.maxTotalBytes,\n    routeBase: options.routeBase,\n  })\n\n  if (!validation.ok) {\n    return {\n      exitCode: 1,\n      stderr: `Manifest is invalid.\\n\\nErrors:\\n${formatIssues(validation.issues)}\\n`,\n    }\n  }\n\n  return {\n    exitCode: 0,\n    stdout: printJson(manifest, getFlagBoolean(args, 'pretty')),\n  }\n}\n"],"names":["buildDocsManifest","validateDocsManifest","readDocsAiExportManifest","walkDocsFiles","formatIssues","printJson","getFlagBoolean","getDocsCommandOptions","runManifestCommand","args","options","files","root","docsRoot","aiExport","ok","exitCode","stderr","issues","manifest","branch","commit","repository","sourceRoot","sourceId","validation","maxFileBytes","maxFiles","maxTotalBytes","routeBase","stdout"],"mappings":"AAEA,SACEA,iBAAiB,EACjBC,oBAAoB,QACf,sBAAqB;AAC5B,SACEC,wBAAwB,EACxBC,aAAa,QACR,mBAAkB;AACzB,SAASC,YAAY,EAAEC,SAAS,QAAQ,eAAc;AACtD,SAASC,cAAc,QAAQ,kBAAiB;AAChD,SAASC,qBAAqB,QAAQ,gBAAe;AAErD,OAAO,MAAMC,qBAAqB,OAChCC;IAEA,MAAMC,UAAUH,sBAAsBE;IAEtC,IAAI,cAAcC,SAAS;QACzB,OAAOA;IACT;IAEA,MAAMC,QAAQ,MAAMR,cAAc;QAChCS,MAAMF,QAAQG,QAAQ;IACxB;IACA,MAAMC,WAAW,MAAMZ,yBAAyB;QAC9CU,MAAMF,QAAQG,QAAQ;IACxB;IAEA,IAAI,CAACC,SAASC,EAAE,EAAE;QAChB,OAAO;YACLC,UAAU;YACVC,QAAQ,CAAC,2CAA2C,EAAEb,aAAaU,SAASI,MAAM,EAAE,EAAE,CAAC;QACzF;IACF;IAEA,MAAMC,WAAWnB,kBAAkB;QACjCc,UAAUA,SAASK,QAAQ;QAC3BC,QAAQV,QAAQU,MAAM;QACtBC,QAAQX,QAAQW,MAAM;QACtBV;QACAW,YAAYZ,QAAQY,UAAU;QAC9BV,MAAMF,QAAQa,UAAU;QACxBC,UAAUd,QAAQc,QAAQ;IAC5B;IACA,MAAMC,aAAaxB,qBAAqBkB,UAAU;QAChDO,cAAchB,QAAQgB,YAAY;QAClCC,UAAUjB,QAAQiB,QAAQ;QAC1BC,eAAelB,QAAQkB,aAAa;QACpCC,WAAWnB,QAAQmB,SAAS;IAC9B;IAEA,IAAI,CAACJ,WAAWV,EAAE,EAAE;QAClB,OAAO;YACLC,UAAU;YACVC,QAAQ,CAAC,iCAAiC,EAAEb,aAAaqB,WAAWP,MAAM,EAAE,EAAE,CAAC;QACjF;IACF;IAEA,OAAO;QACLF,UAAU;QACVc,QAAQzB,UAAUc,UAAUb,eAAeG,MAAM;IACnD;AACF,EAAC"}

package/dist/cli/commands/plan.d.ts

@@ -0,0 +1,2 @@
+import type { CliResult, ParsedCliArgs } from '../types.js';
+export declare const runPlanCommand: (args: ParsedCliArgs) => Promise<CliResult>;

package/dist/cli/commands/plan.js

@@ -0,0 +1,110 @@
+import { readFile } from 'node:fs/promises';
+import { buildDocsManifest, planDocsSync, validateDocsManifest } from '../../sync/index.js';
+import { readDocsAiExportManifest, walkDocsFiles } from '../filesystem.js';
+import { formatIssues, formatPlanSummary, printJson } from '../format.js';
+import { getFlagBoolean, getFlagString } from '../parseArgs.js';
+import { getDocsCommandOptions } from './validate.js';
+const deleteBehaviors = new Set([
+    'archive',
+    'delete',
+    'draft',
+    'ignore'
+]);
+const isExistingDocsRecord = (value)=>{
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        return false;
+    }
+    const record = value;
+    return typeof record.route === 'string' && typeof record.sourcePath === 'string' && (record.sourceHash === undefined || typeof record.sourceHash === 'string') && (record.title === undefined || typeof record.title === 'string') && (record.archived === undefined || typeof record.archived === 'boolean');
+};
+const loadExistingDocs = async (existingPath)=>{
+    if (!existingPath) {
+        return [];
+    }
+    let parsed;
+    try {
+        const raw = await readFile(existingPath, 'utf8');
+        parsed = JSON.parse(raw);
+    } catch (error) {
+        return {
+            exitCode: 1,
+            stderr: error instanceof Error ? `Could not read --existing file: ${error.message}\n` : 'Could not read --existing file.\n'
+        };
+    }
+    if (!Array.isArray(parsed) || !parsed.every(isExistingDocsRecord)) {
+        return {
+            exitCode: 1,
+            stderr: '--existing must point to a JSON array of existing docs records.\n'
+        };
+    }
+    return parsed;
+};
+export const runPlanCommand = async (args)=>{
+    const options = getDocsCommandOptions(args);
+    if ('exitCode' in options) {
+        return options;
+    }
+    const deleteBehaviorFlag = getFlagString(args, 'delete-behavior');
+    if (deleteBehaviorFlag !== undefined && !deleteBehaviors.has(deleteBehaviorFlag)) {
+        return {
+            exitCode: 1,
+            stderr: '--delete-behavior must be archive, delete, draft, or ignore.\n'
+        };
+    }
+    const existing = await loadExistingDocs(getFlagString(args, 'existing'));
+    if ('exitCode' in existing) {
+        return existing;
+    }
+    const files = await walkDocsFiles({
+        root: options.docsRoot
+    });
+    const aiExport = await readDocsAiExportManifest({
+        root: options.docsRoot
+    });
+    if (!aiExport.ok) {
+        return {
+            exitCode: 1,
+            stderr: `AI export manifest is invalid.\n\nErrors:\n${formatIssues(aiExport.issues)}\n`
+        };
+    }
+    const deleteBehavior = deleteBehaviorFlag;
+    const manifest = buildDocsManifest({
+        aiExport: aiExport.manifest,
+        branch: options.branch,
+        commit: options.commit,
+        deleteBehavior,
+        files,
+        repository: options.repository,
+        root: options.sourceRoot,
+        sourceId: options.sourceId
+    });
+    const validation = validateDocsManifest(manifest, {
+        maxFileBytes: options.maxFileBytes,
+        maxFiles: options.maxFiles,
+        maxTotalBytes: options.maxTotalBytes,
+        routeBase: options.routeBase
+    });
+    if (!validation.ok) {
+        return {
+            exitCode: 1,
+            stderr: `Manifest is invalid.\n\nErrors:\n${formatIssues(validation.issues)}\n`
+        };
+    }
+    const plan = planDocsSync({
+        deleteBehavior,
+        desired: validation.data,
+        existing
+    });
+    if (getFlagBoolean(args, 'json')) {
+        return {
+            exitCode: 0,
+            stdout: printJson(plan, getFlagBoolean(args, 'pretty'))
+        };
+    }
+    return {
+        exitCode: 0,
+        stdout: formatPlanSummary(plan)
+    };
+};
+
+//# sourceMappingURL=plan.js.map

package/dist/cli/commands/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/cli/commands/plan.ts"],"sourcesContent":["import { readFile } from 'node:fs/promises'\n\nimport type {\n  DocsDeleteBehavior,\n  ExistingDocsRecord,\n} from '../../sync/index.js'\nimport type { CliResult, ParsedCliArgs } from '../types.js'\n\nimport {\n  buildDocsManifest,\n  planDocsSync,\n  validateDocsManifest,\n} from '../../sync/index.js'\nimport {\n  readDocsAiExportManifest,\n  walkDocsFiles,\n} from '../filesystem.js'\nimport { formatIssues, formatPlanSummary, printJson } from '../format.js'\nimport { getFlagBoolean, getFlagString } from '../parseArgs.js'\nimport { getDocsCommandOptions } from './validate.js'\n\nconst deleteBehaviors = new Set<DocsDeleteBehavior>([\n  'archive',\n  'delete',\n  'draft',\n  'ignore',\n])\n\nconst isExistingDocsRecord = (value: unknown): value is ExistingDocsRecord => {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    return false\n  }\n\n  const record = value as Record<string, unknown>\n\n  return (\n    typeof record.route === 'string' &&\n    typeof record.sourcePath === 'string' &&\n    (record.sourceHash === undefined || typeof record.sourceHash === 'string') &&\n    (record.title === undefined || typeof record.title === 'string') &&\n    (record.archived === undefined || typeof record.archived === 'boolean')\n  )\n}\n\nconst loadExistingDocs = async (\n  existingPath: string | undefined,\n): Promise<CliResult | ExistingDocsRecord[]> => {\n  if (!existingPath) {\n    return []\n  }\n\n  let parsed: unknown\n\n  try {\n    const raw = await readFile(existingPath, 'utf8')\n    parsed = JSON.parse(raw) as unknown\n  } catch (error) {\n    return {\n      exitCode: 1,\n      stderr:\n        error instanceof Error\n          ? `Could not read --existing file: ${error.message}\\n`\n          : 'Could not read --existing file.\\n',\n    }\n  }\n\n  if (!Array.isArray(parsed) || !parsed.every(isExistingDocsRecord)) {\n    return {\n      exitCode: 1,\n      stderr: '--existing must point to a JSON array of existing docs records.\\n',\n    }\n  }\n\n  return parsed\n}\n\nexport const runPlanCommand = async (args: ParsedCliArgs): Promise<CliResult> => {\n  const options = getDocsCommandOptions(args)\n\n  if ('exitCode' in options) {\n    return options\n  }\n\n  const deleteBehaviorFlag = getFlagString(args, 'delete-behavior')\n\n  if (\n    deleteBehaviorFlag !== undefined &&\n    !deleteBehaviors.has(deleteBehaviorFlag as DocsDeleteBehavior)\n  ) {\n    return {\n      exitCode: 1,\n      stderr: '--delete-behavior must be archive, delete, draft, or ignore.\\n',\n    }\n  }\n\n  const existing = await loadExistingDocs(getFlagString(args, 'existing'))\n\n  if ('exitCode' in existing) {\n    return existing\n  }\n\n  const files = await walkDocsFiles({\n    root: options.docsRoot,\n  })\n  const aiExport = await readDocsAiExportManifest({\n    root: options.docsRoot,\n  })\n\n  if (!aiExport.ok) {\n    return {\n      exitCode: 1,\n      stderr: `AI export manifest is invalid.\\n\\nErrors:\\n${formatIssues(aiExport.issues)}\\n`,\n    }\n  }\n\n  const deleteBehavior = deleteBehaviorFlag as DocsDeleteBehavior | undefined\n  const manifest = buildDocsManifest({\n    aiExport: aiExport.manifest,\n    branch: options.branch,\n    commit: options.commit,\n    deleteBehavior,\n    files,\n    repository: options.repository,\n    root: options.sourceRoot,\n    sourceId: options.sourceId,\n  })\n  const validation = validateDocsManifest(manifest, {\n    maxFileBytes: options.maxFileBytes,\n    maxFiles: options.maxFiles,\n    maxTotalBytes: options.maxTotalBytes,\n    routeBase: options.routeBase,\n  })\n\n  if (!validation.ok) {\n    return {\n      exitCode: 1,\n      stderr: `Manifest is invalid.\\n\\nErrors:\\n${formatIssues(validation.issues)}\\n`,\n    }\n  }\n\n  const plan = planDocsSync({\n    deleteBehavior,\n    desired: validation.data,\n    existing,\n  })\n\n  if (getFlagBoolean(args, 'json')) {\n    return {\n      exitCode: 0,\n      stdout: printJson(plan, getFlagBoolean(args, 'pretty')),\n    }\n  }\n\n  return {\n    exitCode: 0,\n    stdout: formatPlanSummary(plan),\n  }\n}\n"],"names":["readFile","buildDocsManifest","planDocsSync","validateDocsManifest","readDocsAiExportManifest","walkDocsFiles","formatIssues","formatPlanSummary","printJson","getFlagBoolean","getFlagString","getDocsCommandOptions","deleteBehaviors","Set","isExistingDocsRecord","value","Array","isArray","record","route","sourcePath","sourceHash","undefined","title","archived","loadExistingDocs","existingPath","parsed","raw","JSON","parse","error","exitCode","stderr","Error","message","every","runPlanCommand","args","options","deleteBehaviorFlag","has","existing","files","root","docsRoot","aiExport","ok","issues","deleteBehavior","manifest","branch","commit","repository","sourceRoot","sourceId","validation","maxFileBytes","maxFiles","maxTotalBytes","routeBase","plan","desired","data","stdout"],"mappings":"AAAA,SAASA,QAAQ,QAAQ,mBAAkB;AAQ3C,SACEC,iBAAiB,EACjBC,YAAY,EACZC,oBAAoB,QACf,sBAAqB;AAC5B,SACEC,wBAAwB,EACxBC,aAAa,QACR,mBAAkB;AACzB,SAASC,YAAY,EAAEC,iBAAiB,EAAEC,SAAS,QAAQ,eAAc;AACzE,SAASC,cAAc,EAAEC,aAAa,QAAQ,kBAAiB;AAC/D,SAASC,qBAAqB,QAAQ,gBAAe;AAErD,MAAMC,kBAAkB,IAAIC,IAAwB;IAClD;IACA;IACA;IACA;CACD;AAED,MAAMC,uBAAuB,CAACC;IAC5B,IAAI,OAAOA,UAAU,YAAYA,UAAU,QAAQC,MAAMC,OAAO,CAACF,QAAQ;QACvE,OAAO;IACT;IAEA,MAAMG,SAASH;IAEf,OACE,OAAOG,OAAOC,KAAK,KAAK,YACxB,OAAOD,OAAOE,UAAU,KAAK,YAC5BF,CAAAA,OAAOG,UAAU,KAAKC,aAAa,OAAOJ,OAAOG,UAAU,KAAK,QAAO,KACvEH,CAAAA,OAAOK,KAAK,KAAKD,aAAa,OAAOJ,OAAOK,KAAK,KAAK,QAAO,KAC7DL,CAAAA,OAAOM,QAAQ,KAAKF,aAAa,OAAOJ,OAAOM,QAAQ,KAAK,SAAQ;AAEzE;AAEA,MAAMC,mBAAmB,OACvBC;IAEA,IAAI,CAACA,cAAc;QACjB,OAAO,EAAE;IACX;IAEA,IAAIC;IAEJ,IAAI;QACF,MAAMC,MAAM,MAAM5B,SAAS0B,cAAc;QACzCC,SAASE,KAAKC,KAAK,CAACF;IACtB,EAAE,OAAOG,OAAO;QACd,OAAO;YACLC,UAAU;YACVC,QACEF,iBAAiBG,QACb,CAAC,gCAAgC,EAAEH,MAAMI,OAAO,CAAC,EAAE,CAAC,GACpD;QACR;IACF;IAEA,IAAI,CAACnB,MAAMC,OAAO,CAACU,WAAW,CAACA,OAAOS,KAAK,CAACtB,uBAAuB;QACjE,OAAO;YACLkB,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,OAAON;AACT;AAEA,OAAO,MAAMU,iBAAiB,OAAOC;IACnC,MAAMC,UAAU5B,sBAAsB2B;IAEtC,IAAI,cAAcC,SAAS;QACzB,OAAOA;IACT;IAEA,MAAMC,qBAAqB9B,cAAc4B,MAAM;IAE/C,IACEE,uBAAuBlB,aACvB,CAACV,gBAAgB6B,GAAG,CAACD,qBACrB;QACA,OAAO;YACLR,UAAU;YACVC,QAAQ;QACV;IACF;IAEA,MAAMS,WAAW,MAAMjB,iBAAiBf,cAAc4B,MAAM;IAE5D,IAAI,cAAcI,UAAU;QAC1B,OAAOA;IACT;IAEA,MAAMC,QAAQ,MAAMtC,cAAc;QAChCuC,MAAML,QAAQM,QAAQ;IACxB;IACA,MAAMC,WAAW,MAAM1C,yBAAyB;QAC9CwC,MAAML,QAAQM,QAAQ;IACxB;IAEA,IAAI,CAACC,SAASC,EAAE,EAAE;QAChB,OAAO;YACLf,UAAU;YACVC,QAAQ,CAAC,2CAA2C,EAAE3B,aAAawC,SAASE,MAAM,EAAE,EAAE,CAAC;QACzF;IACF;IAEA,MAAMC,iBAAiBT;IACvB,MAAMU,WAAWjD,kBAAkB;QACjC6C,UAAUA,SAASI,QAAQ;QAC3BC,QAAQZ,QAAQY,MAAM;QACtBC,QAAQb,QAAQa,MAAM;QACtBH;QACAN;QACAU,YAAYd,QAAQc,UAAU;QAC9BT,MAAML,QAAQe,UAAU;QACxBC,UAAUhB,QAAQgB,QAAQ;IAC5B;IACA,MAAMC,aAAarD,qBAAqB+C,UAAU;QAChDO,cAAclB,QAAQkB,YAAY;QAClCC,UAAUnB,QAAQmB,QAAQ;QAC1BC,eAAepB,QAAQoB,aAAa;QACpCC,WAAWrB,QAAQqB,SAAS;IAC9B;IAEA,IAAI,CAACJ,WAAWT,EAAE,EAAE;QAClB,OAAO;YACLf,UAAU;YACVC,QAAQ,CAAC,iCAAiC,EAAE3B,aAAakD,WAAWR,MAAM,EAAE,EAAE,CAAC;QACjF;IACF;IAEA,MAAMa,OAAO3D,aAAa;QACxB+C;QACAa,SAASN,WAAWO,IAAI;QACxBrB;IACF;IAEA,IAAIjC,eAAe6B,MAAM,SAAS;QAChC,OAAO;YACLN,UAAU;YACVgC,QAAQxD,UAAUqD,MAAMpD,eAAe6B,MAAM;QAC/C;IACF;IAEA,OAAO;QACLN,UAAU;QACVgC,QAAQzD,kBAAkBsD;IAC5B;AACF,EAAC"}

package/dist/cli/commands/push.d.ts

@@ -0,0 +1,3 @@
+import type { HttpGetJson, HttpPostJson } from '../http.js';
+import type { CliResult, ParsedCliArgs } from '../types.js';
+export declare const runPushCommand: (args: ParsedCliArgs, httpPost?: HttpPostJson, httpGet?: HttpGetJson) => Promise<CliResult>;

package/dist/cli/commands/push.js

@@ -0,0 +1,308 @@
+import { readFile } from 'node:fs/promises';
+import { DEFAULT_GITHUB_OIDC_AUDIENCE } from '../../constants.js';
+import { signDocsSyncRequest } from '../../security/index.js';
+import { buildDocsManifest, sha256Hex, validateDocsManifest } from '../../sync/index.js';
+import { readDocsAiExportManifest, walkDocsFiles } from '../filesystem.js';
+import { formatIssues, formatPushSummary, printJson } from '../format.js';
+import { getJson, postJson } from '../http.js';
+import { getFlagBoolean, getFlagString } from '../parseArgs.js';
+import { getDocsCommandOptions } from './validate.js';
+const supportedPushDeleteBehaviors = new Set([
+    'archive',
+    'delete',
+    'draft',
+    'ignore'
+]);
+const isRecord = (value)=>typeof value === 'object' && value !== null && !Array.isArray(value);
+const isServerPushResponse = (value)=>isRecord(value);
+const validateEndpointUrl = (endpoint)=>{
+    try {
+        const parsed = new URL(endpoint);
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+            return {
+                exitCode: 1,
+                stderr: '--endpoint must be a full http:// or https:// URL.\n'
+            };
+        }
+        return parsed.toString();
+    } catch  {
+        return {
+            exitCode: 1,
+            stderr: '--endpoint must be a valid full http:// or https:// URL.\n'
+        };
+    }
+};
+const readPrivateKey = async (args)=>{
+    const privateKeyFile = getFlagString(args, 'private-key-file');
+    const privateKeyEnv = getFlagString(args, 'private-key-env');
+    if (privateKeyFile && privateKeyEnv) {
+        return {
+            exitCode: 1,
+            stderr: 'Use either --private-key-file or --private-key-env, not both.\n'
+        };
+    }
+    if (!privateKeyFile && !privateKeyEnv) {
+        return {
+            exitCode: 1,
+            stderr: 'Push requires --private-key-file or --private-key-env.\n'
+        };
+    }
+    if (privateKeyEnv) {
+        const privateKey = process.env[privateKeyEnv];
+        if (!privateKey) {
+            return {
+                exitCode: 1,
+                stderr: `Environment variable "${privateKeyEnv}" is not set.\n`
+            };
+        }
+        return privateKey;
+    }
+    try {
+        return await readFile(privateKeyFile ?? '', 'utf8');
+    } catch (error) {
+        return {
+            exitCode: 1,
+            stderr: error instanceof Error ? `Could not read private key file: ${error.message}\n` : 'Could not read private key file.\n'
+        };
+    }
+};
+const getGithubOidcTokenRequestUrl = ({ audience, requestUrl })=>{
+    try {
+        const url = new URL(requestUrl);
+        url.searchParams.set('audience', audience);
+        return url.toString();
+    } catch  {
+        return {
+            exitCode: 1,
+            stderr: 'ACTIONS_ID_TOKEN_REQUEST_URL is not a valid URL.\n'
+        };
+    }
+};
+const readGithubOidcToken = async ({ args, audience, httpGet })=>{
+    const tokenEnv = getFlagString(args, 'oidc-token-env');
+    if (tokenEnv) {
+        const token = process.env[tokenEnv];
+        if (!token) {
+            return {
+                exitCode: 1,
+                stderr: `Environment variable "${tokenEnv}" is not set.\n`
+            };
+        }
+        return token;
+    }
+    const requestUrl = process.env.ACTIONS_ID_TOKEN_REQUEST_URL;
+    const requestToken = process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+    if (!requestUrl || !requestToken) {
+        return {
+            exitCode: 1,
+            stderr: 'GitHub OIDC push requires ACTIONS_ID_TOKEN_REQUEST_URL and ACTIONS_ID_TOKEN_REQUEST_TOKEN, or --oidc-token-env.\n'
+        };
+    }
+    const url = getGithubOidcTokenRequestUrl({
+        audience,
+        requestUrl
+    });
+    if (typeof url !== 'string') {
+        return url;
+    }
+    const response = await httpGet({
+        headers: {
+            Authorization: `bearer ${requestToken}`
+        },
+        url
+    });
+    if (!response.ok || !isRecord(response.body) || typeof response.body.value !== 'string') {
+        return {
+            exitCode: 1,
+            stderr: `Could not retrieve GitHub OIDC token. HTTP status ${response.status}.\n`
+        };
+    }
+    return response.body.value;
+};
+const getPushCommandOptions = async (args)=>{
+    const docsOptions = getDocsCommandOptions(args);
+    if ('exitCode' in docsOptions) {
+        return docsOptions;
+    }
+    const endpointFlag = getFlagString(args, 'endpoint');
+    if (!endpointFlag) {
+        return {
+            exitCode: 1,
+            stderr: 'Push requires --endpoint <url>.\n'
+        };
+    }
+    const endpoint = validateEndpointUrl(endpointFlag);
+    if (typeof endpoint !== 'string') {
+        return endpoint;
+    }
+    if (getFlagBoolean(args, 'dry-run') && getFlagBoolean(args, 'sync')) {
+        return {
+            exitCode: 1,
+            stderr: 'Use either --dry-run or --sync, not both.\n'
+        };
+    }
+    const deleteBehaviorFlag = getFlagString(args, 'delete-behavior');
+    if (deleteBehaviorFlag !== undefined && !supportedPushDeleteBehaviors.has(deleteBehaviorFlag)) {
+        return {
+            exitCode: 1,
+            stderr: '--delete-behavior for push must be archive, delete, draft, or ignore.\n'
+        };
+    }
+    const mode = getFlagBoolean(args, 'sync') ? 'sync' : 'dry-run';
+    const baseOptions = {
+        ...docsOptions,
+        deleteBehavior: deleteBehaviorFlag,
+        endpoint,
+        mode,
+        publish: getFlagBoolean(args, 'publish')
+    };
+    if (getFlagBoolean(args, 'github-oidc')) {
+        if (getFlagString(args, 'key-id')) {
+            return {
+                exitCode: 1,
+                stderr: 'Do not use --key-id with --github-oidc.\n'
+            };
+        }
+        if (getFlagString(args, 'private-key-file') || getFlagString(args, 'private-key-env')) {
+            return {
+                exitCode: 1,
+                stderr: 'Do not use Ed25519 private key flags with --github-oidc.\n'
+            };
+        }
+        return {
+            ...baseOptions,
+            authMode: 'github-oidc',
+            oidcAudience: getFlagString(args, 'oidc-audience') ?? DEFAULT_GITHUB_OIDC_AUDIENCE,
+            oidcTokenEnv: getFlagString(args, 'oidc-token-env')
+        };
+    }
+    const keyId = getFlagString(args, 'key-id');
+    if (!keyId) {
+        return {
+            exitCode: 1,
+            stderr: 'Push requires --key-id <id>.\n'
+        };
+    }
+    const privateKey = await readPrivateKey(args);
+    if (typeof privateKey !== 'string') {
+        return privateKey;
+    }
+    return {
+        ...baseOptions,
+        authMode: 'ed25519',
+        keyId,
+        privateKey
+    };
+};
+const formatServerFailure = ({ body, status })=>{
+    if (isServerPushResponse(body) && body.error?.message) {
+        return `${body.error.message}\n`;
+    }
+    return `Sync request failed with HTTP status ${status}.\n`;
+};
+export const runPushCommand = async (args, httpPost = postJson, httpGet = getJson)=>{
+    const options = await getPushCommandOptions(args);
+    if ('exitCode' in options) {
+        return options;
+    }
+    const files = await walkDocsFiles({
+        root: options.docsRoot
+    });
+    const aiExport = await readDocsAiExportManifest({
+        root: options.docsRoot
+    });
+    if (!aiExport.ok) {
+        return {
+            exitCode: 1,
+            stderr: `AI export manifest is invalid.\n\nErrors:\n${formatIssues(aiExport.issues)}\n`
+        };
+    }
+    const manifest = buildDocsManifest({
+        aiExport: aiExport.manifest,
+        branch: options.branch,
+        commit: options.commit,
+        deleteBehavior: options.deleteBehavior ?? 'archive',
+        files,
+        mode: options.mode,
+        publish: options.publish,
+        repository: options.repository,
+        root: options.sourceRoot,
+        sourceId: options.sourceId
+    });
+    const validation = validateDocsManifest(manifest, {
+        maxFileBytes: options.maxFileBytes,
+        maxFiles: options.maxFiles,
+        maxTotalBytes: options.maxTotalBytes,
+        routeBase: options.routeBase
+    });
+    if (!validation.ok) {
+        return {
+            exitCode: 1,
+            stderr: `Manifest is invalid.\n\nErrors:\n${formatIssues(validation.issues)}\n`
+        };
+    }
+    const body = JSON.stringify(manifest);
+    let signedRequest;
+    if (options.authMode === 'github-oidc') {
+        const oidcToken = await readGithubOidcToken({
+            args,
+            audience: options.oidcAudience,
+            httpGet
+        });
+        if (typeof oidcToken !== 'string') {
+            return oidcToken;
+        }
+        signedRequest = {
+            body,
+            headers: {
+                Authorization: `Bearer ${oidcToken}`,
+                'Content-Type': 'application/json',
+                'X-VL-MD-DOCS-Body-SHA256': sha256Hex(body)
+            }
+        };
+    } else {
+        signedRequest = signDocsSyncRequest({
+            body,
+            endpoint: options.endpoint,
+            keyId: options.keyId,
+            privateKey: options.privateKey
+        });
+    }
+    const response = await httpPost({
+        body: signedRequest.body,
+        headers: signedRequest.headers,
+        url: options.endpoint
+    });
+    if (getFlagBoolean(args, 'json')) {
+        return {
+            exitCode: response.ok && isServerPushResponse(response.body) && response.body.ok === true ? 0 : 1,
+            stdout: printJson({
+                endpoint: options.endpoint,
+                mode: options.mode,
+                response: response.body,
+                sourceId: options.sourceId,
+                status: response.status
+            }, getFlagBoolean(args, 'pretty'))
+        };
+    }
+    if (!response.ok || !isServerPushResponse(response.body) || response.body.ok !== true) {
+        return {
+            exitCode: 1,
+            stderr: formatServerFailure({
+                body: response.body,
+                status: response.status
+            })
+        };
+    }
+    return {
+        exitCode: 0,
+        stdout: formatPushSummary({
+            endpoint: options.endpoint,
+            mode: options.mode,
+            response: response.body,
+            sourceId: options.sourceId
+        })
+    };
+};
+
+//# sourceMappingURL=push.js.map