@zigrivers/scaffold 3.28.0 → 3.29.0

package/dist/guides/sanitize.js

@@ -0,0 +1,76 @@
+import { defaultSchema } from 'rehype-sanitize';
+// Cloned default schema; directive tasks extend this object's allowances.
+export const guideSanitizeSchema = {
+    ...defaultSchema,
+    // Disable id-rewriting (defaultSchema sets clobberPrefix:'user-content-', which
+    // rewrites heading ids to 'user-content-<slug>' and breaks scrollspy/TOC anchor
+    // links). Safe here because guide content is in-repo and passes code review —
+    // DOM-clobber protection on our own generated heading ids is unnecessary.
+    clobberPrefix: '',
+    tagNames: [
+        ...(defaultSchema.tagNames ?? []),
+        'button',
+        'input',
+        // mermaid inline SVG support
+        'figure',
+        'svg',
+        'g',
+        'path',
+        'rect',
+        'circle',
+        'ellipse',
+        'line',
+        'polygon',
+        'polyline',
+        'text',
+        'tspan',
+        'marker',
+        'defs',
+        'use',
+    ],
+    attributes: {
+        ...defaultSchema.attributes,
+        // Global: add directive attrs + SVG geometry/presentation attrs.
+        // hast-util-sanitize only supports '*' as a wildcard key (no '*svg' etc.).
+        // Geometry and presentation attrs (d, fill, stroke, transform, etc.) are
+        // harmless — they carry no script execution risk.
+        '*': [
+            ...(defaultSchema.attributes?.['*'] ?? []),
+            'id',
+            'className',
+            'role',
+            'dataTab',
+            'ariaLabel',
+            'style',
+            // SVG geometry & presentation (safe; no execution risk)
+            'd',
+            'x',
+            'y',
+            'x1',
+            'y1',
+            'x2',
+            'y2',
+            'cx',
+            'cy',
+            'r',
+            'rx',
+            'ry',
+            'points',
+            'transform',
+            'fill',
+            'stroke',
+            'strokeWidth',
+            'markerEnd',
+            'markerStart',
+            'markerMid',
+            'textAnchor',
+        ],
+        input: ['type', 'placeholder', 'className', 'ariaLabel'],
+        // SVG root element attributes
+        svg: ['viewBox', 'width', 'height', 'xmlns', 'preserveAspectRatio', 'role', 'ariaLabel'],
+        // mermaid arrowhead structure
+        marker: ['id', 'markerWidth', 'markerHeight', 'markerUnits', 'orient', 'refX', 'refY', 'viewBox', 'className'],
+        use: ['href', 'xlinkHref', 'x', 'y', 'width', 'height', 'className'],
+    },
+};
+//# sourceMappingURL=sanitize.js.map

package/dist/guides/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/guides/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAG/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAW;IACzC,GAAG,aAAa;IAChB,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,0EAA0E;IAC1E,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE;QACR,GAAG,CAAC,aAAa,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjC,QAAQ;QACR,OAAO;QACP,6BAA6B;QAC7B,QAAQ;QACR,KAAK;QACL,GAAG;QACH,MAAM;QACN,MAAM;QACN,QAAQ;QACR,SAAS;QACT,MAAM;QACN,SAAS;QACT,UAAU;QACV,MAAM;QACN,OAAO;QACP,QAAQ;QACR,MAAM;QACN,KAAK;KACN;IACD,UAAU,EAAE;QACV,GAAG,aAAa,CAAC,UAAU;QAC3B,iEAAiE;QACjE,2EAA2E;QAC3E,yEAAyE;QACzE,kDAAkD;QAClD,GAAG,EAAE;YACH,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI;YACJ,WAAW;YACX,MAAM;YACN,SAAS;YACT,WAAW;YACX,OAAO;YACP,wDAAwD;YACxD,GAAG;YACH,GAAG;YACH,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,WAAW;YACX,MAAM;YACN,QAAQ;YACR,aAAa;YACb,WAAW;YACX,aAAa;YACb,WAAW;YACX,YAAY;SACb;QACD,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC;QACxD,8BAA8B;QAC9B,GAAG,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,WAAW,CAAC;QACxF,8BAA8B;QAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;QAC9G,GAAG,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;KACrE;CACF,CAAA"}

package/dist/guides/sanitize.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sanitize.test.d.ts.map

package/dist/guides/sanitize.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.d.ts","sourceRoot":"","sources":["../../src/guides/sanitize.test.ts"],"names":[],"mappings":""}

package/dist/guides/sanitize.test.js

@@ -0,0 +1,45 @@
+import { describe, it, expect } from 'vitest';
+import { renderGuideBody } from './render.js';
+import { remarkCallout, remarkTabs, remarkFilterTable, remarkChart, remarkSev } from './directives.js';
+const ALL = [remarkCallout, remarkTabs, remarkFilterTable, remarkChart, remarkSev];
+describe('guideSanitizeSchema', () => {
+    it('passes legitimate directive output', async () => {
+        const md = ':::callout{type=tip}\nok :sev[P1]{level=p1}\n:::\n';
+        const { body } = await renderGuideBody(md, { plugins: ALL });
+        expect(body).toContain('callout-tip');
+        expect(body).toContain('sev-p1');
+    });
+    it('strips script, event handlers, and iframes from prose', async () => {
+        const md = `text
+
+<script>alert(1)</script>
+
+<a href="javascript:alert(1)" onclick="x()">x</a>
+
+<iframe src="http://evil"></iframe>
+`;
+        const { body } = await renderGuideBody(md, { plugins: ALL });
+        expect(body).not.toContain('<script');
+        expect(body).not.toContain('onclick');
+        expect(body).not.toContain('javascript:');
+        expect(body).not.toContain('<iframe');
+    });
+    it('strips an author-injected style other than chart bars (defense; CI scan is the real backstop)', async () => {
+        // NOTE: the sanitize schema allows `style` globally (for chart bars). This test documents
+        // that an arbitrary style DOES currently pass sanitize, so the Task 15 CI scan is required.
+        // Assert the CURRENT behavior so a future schema tightening is a deliberate, test-visible change.
+        const md = '<div style="color:red">x</div>\n';
+        const { body } = await renderGuideBody(md, { plugins: ALL });
+        // Document current reality: style survives sanitize (CI scan catches non-width styles).
+        expect(body).toContain('style="color:red"');
+    });
+    it('preserves heading id attributes through sanitize (scrollspy depends on it)', async () => {
+        const { body } = await renderGuideBody('## My Section\n');
+        expect(body).toMatch(/<h2[^>]*id="my-section"/);
+    });
+    it('callout falls back to callout-note for an unknown type', async () => {
+        const { body } = await renderGuideBody(':::callout{type=bogus}\ntext\n:::\n', { plugins: ALL });
+        expect(body).toContain('class="callout callout-note"');
+    });
+});
+//# sourceMappingURL=sanitize.test.js.map

package/dist/guides/sanitize.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.js","sourceRoot":"","sources":["../../src/guides/sanitize.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEtG,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;AAElF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,GAAG,oDAAoD,CAAA;QAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG;;;;;;;CAOd,CAAA;QACG,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,0FAA0F;QAC1F,4FAA4F;QAC5F,kGAAkG;QAClG,MAAM,EAAE,GAAG,kCAAkC,CAAA;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,wFAAwF;QACxF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/guides/template.d.ts

@@ -0,0 +1,11 @@
+import type { TocHeading } from './types.js';
+export declare const CHROME_VERSION = 1;
+export interface WrapArgs {
+    title: string;
+    body: string;
+    headings: TocHeading[];
+    css: string;
+}
+export declare function esc(s: string): string;
+export declare function wrapInChrome({ title, body, headings, css }: WrapArgs): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/guides/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/guides/template.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAG5C,eAAO,MAAM,cAAc,IAAI,CAAA;AAE/B,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,UAAU,EAAE,CAAA;IACtB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAErC;AASD,wBAAgB,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,GAAG,MAAM,CAyB7E"}

package/dist/guides/template.js

@@ -0,0 +1,38 @@
+import { CHROME_JS, THEME_INIT_JS } from './chrome.js';
+export const CHROME_VERSION = 1;
+export function esc(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+function toc(headings) {
+    const items = headings
+        .map((h) => `<li class="toc-${h.depth}"><a href="#${esc(h.id)}">${esc(h.text)}</a></li>`)
+        .join('');
+    return `<nav class="toc" aria-label="Table of contents"><ul>${items}</ul></nav>`;
+}
+export function wrapInChrome({ title, body, headings, css }) {
+    return `<!DOCTYPE html>
+<html lang="en" data-chrome-version="${CHROME_VERSION}">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${esc(title)}</title>
+<!-- scaffold:chrome v${CHROME_VERSION} -->
+<style>${css}</style>
+<script>${THEME_INIT_JS}</script>
+</head>
+<body>
+<header class="topbar">
+  <button data-action="nav" class="nav-toggle" aria-label="Toggle navigation">☰</button>
+  <h1>${esc(title)}</h1>
+  <button data-action="theme" class="theme-toggle" aria-label="Toggle theme">◐</button>
+</header>
+<div class="layout">
+  <aside class="rail">${toc(headings)}</aside>
+  <main class="content">${body}</main>
+</div>
+<script>${CHROME_JS}</script>
+</body>
+</html>
+`;
+}
+//# sourceMappingURL=template.js.map

package/dist/guides/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/guides/template.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAA;AAS/B,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AACrG,CAAC;AAED,SAAS,GAAG,CAAC,QAAsB;IACjC,MAAM,KAAK,GAAG,QAAQ;SACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAK,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;SACxF,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,OAAO,uDAAuD,KAAK,aAAa,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAY;IACnE,OAAO;uCAC8B,cAAc;;;;SAI5C,GAAG,CAAC,KAAK,CAAC;wBACK,cAAc;SAC7B,GAAG;UACF,aAAa;;;;;QAKf,GAAG,CAAC,KAAK,CAAC;;;;wBAIM,GAAG,CAAC,QAAQ,CAAC;0BACX,IAAI;;UAEpB,SAAS;;;CAGlB,CAAA;AACD,CAAC"}

package/dist/guides/template.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=template.test.d.ts.map

package/dist/guides/template.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.test.d.ts","sourceRoot":"","sources":["../../src/guides/template.test.ts"],"names":[],"mappings":""}

package/dist/guides/template.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect } from 'vitest';
+import { wrapInChrome, CHROME_VERSION } from './template.js';
+describe('wrapInChrome', () => {
+    const args = {
+        title: 'MMR Reference',
+        body: '<h2 id="intro">Intro</h2><p>hi</p>',
+        headings: [{ depth: 2, text: 'Intro', id: 'intro' }],
+        css: ':root{--bg:#fff}',
+    };
+    it('produces a full self-contained HTML doc', () => {
+        const html = wrapInChrome(args);
+        expect(html).toMatch(/^<!DOCTYPE html>/);
+        expect(html).toContain('<title>MMR Reference</title>');
+        expect(html).toContain('<style>:root{--bg:#fff}</style>');
+        expect(html).toContain('--bg');
+        expect(html).toContain('data-chrome-version="' + CHROME_VERSION + '"');
+        expect(html).toContain('scaffold:chrome v' + CHROME_VERSION);
+    });
+    it('builds a TOC from headings', () => {
+        const html = wrapInChrome(args);
+        expect(html).toContain('href="#intro"');
+        expect(html).toContain('>Intro<');
+    });
+    it('has no external network references', () => {
+        const html = wrapInChrome(args);
+        expect(html).not.toMatch(/https?:\/\//);
+        expect(html).not.toContain('<link rel="stylesheet"');
+    });
+    it('injects theme-init script in <head> to prevent FOUC', () => {
+        const html = wrapInChrome(args);
+        // Theme-init read-and-apply logic must be present
+        expect(html).toContain('getItem(\'guide-theme\')');
+        // Must appear before </head> (i.e., inside the <head> block)
+        const headEnd = html.indexOf('</head>');
+        expect(headEnd).toBeGreaterThan(-1);
+        const themeInitPos = html.indexOf('getItem(\'guide-theme\')');
+        expect(themeInitPos).toBeGreaterThan(-1);
+        expect(themeInitPos).toBeLessThan(headEnd);
+    });
+});
+//# sourceMappingURL=template.test.js.map

package/dist/guides/template.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.test.js","sourceRoot":"","sources":["../../src/guides/template.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE5D,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;QACpD,GAAG,EAAE,kBAAkB;KACxB,CAAA;IAED,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,GAAG,cAAc,GAAG,GAAG,CAAC,CAAA;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,GAAG,cAAc,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,kDAAkD;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAA;QAClD,6DAA6D;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAC7D,MAAM,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/guides/types.d.ts

@@ -0,0 +1,20 @@
+export interface GuideFrontmatter {
+    title: string;
+    topic: string;
+    description: string;
+    category: string;
+    order: number;
+}
+export interface GuideEntry {
+    topic: string;
+    dir: string;
+    mdPath: string;
+    htmlPath: string;
+    frontmatter: GuideFrontmatter;
+}
+export interface TocHeading {
+    depth: number;
+    text: string;
+    id: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/guides/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guides/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,gBAAgB,CAAA;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;CACX"}

package/dist/guides/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/guides/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/guides/types.ts"],"names":[],"mappings":""}

package/dist/knowledge-freshness/audit-apply-pr.d.ts

@@ -0,0 +1,64 @@
+import type { AuditVerdict } from './audit-runner.js';
+/**
+ * Pure rendering of the PR title/body for a freshness audit. Kept separate
+ * from the git/gh side effects in `openFreshnessPr` so the rendering is
+ * testable without invoking subprocesses (Task 10 acceptance: "The PR
+ * title/body rendering MUST be a pure function").
+ */
+export interface RenderPrOptions {
+    /** Optional MMR job ID to reference in the PR body (Task 11 will gate on it). */
+    mmrJobId?: string;
+}
+export interface RenderedPr {
+    title: string;
+    body: string;
+    /** Branch suffix derived from entry name; caller pairs with a date. */
+    entryName: string;
+}
+export declare function renderFindingsTable(verdict: AuditVerdict): string;
+export declare function renderPrTitle(verdict: AuditVerdict): string;
+export declare function renderPrBody(verdict: AuditVerdict, opts?: RenderPrOptions): string;
+/** UTC YYYY-MM-DD for branch naming. Separate so tests can pin the date. */
+export declare function todayUtcYmd(now?: Date): string;
+/**
+ * Sanitize an entry name for use as a git branch component. We never
+ * interpolate raw user-controlled strings into a shell command, but the
+ * entry name does become a branch ref — disallow whitespace, slashes
+ * (already a path separator in the prefix), and non-ascii. The on-disk
+ * entry names in `content/knowledge/*` are all kebab-case ASCII so this
+ * is a safety net, not a transformation.
+ */
+export declare function sanitizeForBranch(entryName: string): string;
+export declare function branchNameForEntry(entryName: string, ymd: string): string;
+export declare function renderFreshnessPr(verdict: AuditVerdict, opts?: RenderPrOptions): RenderedPr;
+/** Volatility-tier → PR label mapping. Used for triage/filtering. */
+export declare function volatilityLabel(volatility: string | undefined): string | undefined;
+export interface OpenPrOptions {
+    /** Path to the audited entry .md (already updated on disk). */
+    entryPath: string;
+    /** Volatility from the entry frontmatter; used to derive the volatility label. */
+    volatility: string | undefined;
+    /** Optional MMR job ID. */
+    mmrJobId?: string;
+    /** Override the date used for the branch suffix (tests). */
+    now?: Date;
+}
+/**
+ * Open a freshness PR. Pre-conditions:
+ *   - The on-disk entry at `entryPath` already has the verdict applied.
+ *   - The git working tree must show ONLY `entryPath` as modified (no other
+ *     unrelated changes). This is a safety guard so a manual run can't
+ *     accidentally sweep in unrelated work.
+ *   - `gh` CLI is authenticated.
+ */
+export declare function openFreshnessPr(verdict: AuditVerdict, opts: OpenPrOptions): {
+    branch: string;
+    prUrl: string;
+};
+/**
+ * Extract `volatility` from an entry's frontmatter. We can't import the
+ * knowledge-loader here because it pulls in the full assembly stack;
+ * a minimal yaml-only read keeps this surface lean.
+ */
+export declare function readVolatility(entryContent: string): string | undefined;
+//# sourceMappingURL=audit-apply-pr.d.ts.map

package/dist/knowledge-freshness/audit-apply-pr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-apply-pr.d.ts","sourceRoot":"","sources":["../../src/knowledge-freshness/audit-apply-pr.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAA;CAClB;AA6BD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAcjE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAS3D;AAmBD,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,GAAE,eAAoB,GAAG,MAAM,CAsDtF;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAK1D;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,GAAE,eAAoB,GAAG,UAAU,CAM/F;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAOlF;AAOD,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,kFAAkF;IAClF,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4DAA4D;IAC5D,GAAG,CAAC,EAAE,IAAI,CAAA;CACX;AAqBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA+H7G;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYvE"}