@zigrivers/scaffold 3.28.0 → 3.30.0

package/dist/guides/mermaid.test.js

@@ -0,0 +1,105 @@
+import { describe, it, expect, vi } from 'vitest';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { sanitizeSvg, resolveDiagram, computeFingerprint, pruneDiagrams, remarkMermaid } from './mermaid.js';
+import { renderGuideBody } from './render.js';
+describe('sanitizeSvg', () => {
+    it('strips script, foreignObject, on* and javascript hrefs', () => {
+        const dirty = '<svg><script>x()</script><foreignObject></foreignObject>' +
+            '<a xlink:href="javascript:x()" onclick="y()"><rect/></a></svg>';
+        const clean = sanitizeSvg(dirty);
+        expect(clean).not.toContain('<script');
+        expect(clean).not.toContain('foreignObject');
+        expect(clean).not.toContain('onclick');
+        expect(clean).not.toContain('javascript:');
+        expect(clean).toContain('<rect');
+    });
+});
+describe('resolveDiagram', () => {
+    it('renders on a cache miss and writes the SVG + manifest', async () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'mmd-'));
+        const render = vi.fn(async () => '<svg><rect/></svg>');
+        const svg = await resolveDiagram({ guideDir: dir, diagramId: 'd0', source: 'flowchart LR\nA-->B', render });
+        expect(render).toHaveBeenCalledTimes(1);
+        expect(svg).toContain('<rect');
+        expect(fs.existsSync(path.join(dir, '.diagrams', 'd0.svg'))).toBe(true);
+        const manifest = JSON.parse(fs.readFileSync(path.join(dir, '.diagrams', 'manifest.json'), 'utf8'));
+        expect(manifest.d0).toBe(computeFingerprint('flowchart LR\nA-->B'));
+    });
+    it('uses cache on a hit (no render call)', async () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'mmd-'));
+        const render = vi.fn(async () => '<svg><rect/></svg>');
+        await resolveDiagram({ guideDir: dir, diagramId: 'd0', source: 'X', render });
+        render.mockClear();
+        const svg = await resolveDiagram({ guideDir: dir, diagramId: 'd0', source: 'X', render });
+        expect(render).not.toHaveBeenCalled();
+        expect(svg).toContain('<rect');
+    });
+});
+describe('pruneDiagrams', () => {
+    it('removes unlisted SVGs and drops their manifest entries, keeping listed ones', () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'mmd-prune-'));
+        const cacheDir = path.join(dir, '.diagrams');
+        fs.mkdirSync(cacheDir);
+        fs.writeFileSync(path.join(cacheDir, 'keep.svg'), '<svg/>');
+        fs.writeFileSync(path.join(cacheDir, 'drop.svg'), '<svg/>');
+        fs.writeFileSync(path.join(cacheDir, 'manifest.json'), JSON.stringify({ keep: 'fp-keep', drop: 'fp-drop' }, null, 2) + '\n');
+        pruneDiagrams(dir, ['keep']);
+        expect(fs.existsSync(path.join(cacheDir, 'keep.svg'))).toBe(true);
+        expect(fs.existsSync(path.join(cacheDir, 'drop.svg'))).toBe(false);
+        const manifest = JSON.parse(fs.readFileSync(path.join(cacheDir, 'manifest.json'), 'utf8'));
+        expect(manifest).toEqual({ keep: 'fp-keep' });
+    });
+    it('self-heals a corrupt manifest (writes a pruned-empty manifest)', () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'mmd-prune-corrupt-'));
+        const cacheDir = path.join(dir, '.diagrams');
+        fs.mkdirSync(cacheDir);
+        fs.writeFileSync(path.join(cacheDir, 'drop.svg'), '<svg/>');
+        fs.writeFileSync(path.join(cacheDir, 'manifest.json'), '{bad json}');
+        // Should not throw; drop.svg removed; manifest rewritten as {}
+        expect(() => pruneDiagrams(dir, [])).not.toThrow();
+        expect(fs.existsSync(path.join(cacheDir, 'drop.svg'))).toBe(false);
+        const manifest = JSON.parse(fs.readFileSync(path.join(cacheDir, 'manifest.json'), 'utf8'));
+        expect(manifest).toEqual({});
+    });
+});
+describe('remarkMermaid — sequential manifest writes', () => {
+    it('resolves two mermaid blocks and writes both entries to the manifest', async () => {
+        const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'mmd-seq-'));
+        let callCount = 0;
+        const render = vi.fn(async () => {
+            callCount++;
+            return `<svg><rect id="r${callCount}"/></svg>`;
+        });
+        const md = [
+            '```mermaid',
+            'flowchart LR\nA-->B',
+            '```',
+            '',
+            '```mermaid',
+            'flowchart LR\nC-->D',
+            '```',
+        ].join('\n') + '\n';
+        const collected = [];
+        const plugin = remarkMermaid({ guideDir: dir, render, collect: collected });
+        const { body } = await renderGuideBody(md, { plugins: [plugin] });
+        // Both diagrams rendered and inlined
+        expect(body).toContain('class="mermaid"');
+        expect(render).toHaveBeenCalledTimes(2);
+        // collect receives the exact ids the plugin assigned, in order
+        expect(collected).toEqual(['diagram-0', 'diagram-1']);
+        // Both entries written to the manifest (no clobber from race)
+        const manifestPath = path.join(dir, '.diagrams', 'manifest.json');
+        expect(fs.existsSync(manifestPath)).toBe(true);
+        const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+        expect(Object.keys(manifest)).toContain('diagram-0');
+        expect(Object.keys(manifest)).toContain('diagram-1');
+        // pruneDiagrams with the collected ids keeps both SVGs (no accidental deletion)
+        const { pruneDiagrams: prune } = await import('./mermaid.js');
+        prune(dir, collected);
+        expect(fs.existsSync(path.join(dir, '.diagrams', 'diagram-0.svg'))).toBe(true);
+        expect(fs.existsSync(path.join(dir, '.diagrams', 'diagram-1.svg'))).toBe(true);
+    });
+});
+//# sourceMappingURL=mermaid.test.js.map

package/dist/guides/mermaid.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mermaid.test.js","sourceRoot":"","sources":["../../src/guides/mermaid.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5G,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,KAAK,GACT,0DAA0D;YAC1D,gEAAgE,CAAA;QAClE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,oBAAoB,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3G,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAClG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,oBAAoB,CAAC,CAAA;QACtD,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,SAAS,EAAE,CAAA;QAClB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QACzF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QAC5C,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACtB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC3D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC3D,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACrE,CAAA;QAED,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAE5B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAElE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAC1F,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QAC5C,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACtB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC3D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,YAAY,CAAC,CAAA;QAEpE,+DAA+D;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QAClD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAC1F,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;QAC9D,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC9B,SAAS,EAAE,CAAA;YACX,OAAO,mBAAmB,SAAS,WAAW,CAAA;QAChD,CAAC,CAAC,CAAA;QAEF,MAAM,EAAE,GAAG;YACT,YAAY;YACZ,qBAAqB;YACrB,KAAK;YACL,EAAE;YACF,YAAY;YACZ,qBAAqB;YACrB,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;QAEnB,MAAM,SAAS,GAAa,EAAE,CAAA;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAEjE,qCAAqC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAEvC,+DAA+D;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAErD,8DAA8D;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;QACjE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACpD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAEpD,gFAAgF;QAChF,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;QAC7D,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QACrB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9E,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/guides/render.d.ts

@@ -0,0 +1,13 @@
+import type { Plugin } from 'unified';
+import type { TocHeading } from './types.js';
+export type AnyPlugin = Plugin<any[], any, any>;
+export interface RenderOptions {
+    /** remark-phase plugins only; injected after remark-directive and before remark-rehype */
+    plugins?: AnyPlugin[];
+}
+export declare function stripFrontmatter(md: string): string;
+export declare function renderGuideBody(markdown: string, opts?: RenderOptions): Promise<{
+    body: string;
+    headings: TocHeading[];
+}>;
+//# sourceMappingURL=render.d.ts.map

package/dist/guides/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/guides/render.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAWrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI5C,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAE/C,MAAM,WAAW,aAAa;IAC5B,0FAA0F;IAC1F,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAMD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAMnD;AAmBD,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAgBnD"}

package/dist/guides/render.js

@@ -0,0 +1,58 @@
+import { unified } from 'unified';
+import remarkParse from 'remark-parse';
+import remarkGfm from 'remark-gfm';
+import remarkDirective from 'remark-directive';
+import remarkRehype from 'remark-rehype';
+import rehypeRaw from 'rehype-raw';
+import rehypeSanitize from 'rehype-sanitize';
+import rehypeStringify from 'rehype-stringify';
+import { visit } from 'unist-util-visit';
+import { toString as mdToString } from 'mdast-util-to-string';
+import { guideSanitizeSchema } from './sanitize.js';
+function slug(text) {
+    return text.toLowerCase().trim().replace(/[^\w\s-]/g, '').replace(/[_\s]+/g, '-');
+}
+export function stripFrontmatter(md) {
+    const lines = md.split(/\r?\n/);
+    if (lines[0]?.trim() !== '---')
+        return md;
+    const close = lines.findIndex((l, i) => i > 0 && l.trim() === '---');
+    if (close === -1)
+        return md;
+    return lines.slice(close + 1).join('\n');
+}
+function collectHeadings(out) {
+    return () => (tree) => {
+        visit(tree, 'heading', (node) => {
+            const h = node;
+            if (h.depth !== 2 && h.depth !== 3)
+                return;
+            const text = mdToString(h);
+            const id = slug(text);
+            h.data = h.data ?? {};
+            h.data.hProperties = {
+                ...(h.data.hProperties ?? {}),
+                id,
+            };
+            out.push({ depth: h.depth, text, id });
+        });
+    };
+}
+export async function renderGuideBody(markdown, opts = {}) {
+    const headings = [];
+    const src = stripFrontmatter(markdown);
+    // Build processor with loose typing to avoid unified's complex generics
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    let proc = unified().use(remarkParse).use(remarkGfm).use(remarkDirective);
+    for (const p of opts.plugins ?? [])
+        proc = proc.use(p);
+    proc = proc.use(collectHeadings(headings));
+    const file = await proc
+        .use(remarkRehype, { allowDangerousHtml: true })
+        .use(rehypeRaw)
+        .use(rehypeSanitize, guideSanitizeSchema)
+        .use(rehypeStringify)
+        .process(src);
+    return { body: String(file), headings };
+}
+//# sourceMappingURL=render.js.map

package/dist/guides/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../src/guides/render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,WAAW,MAAM,cAAc,CAAA;AACtC,OAAO,SAAS,MAAM,YAAY,CAAA;AAClC,OAAO,eAAe,MAAM,kBAAkB,CAAA;AAC9C,OAAO,YAAY,MAAM,eAAe,CAAA;AACxC,OAAO,SAAS,MAAM,YAAY,CAAA;AAClC,OAAO,cAAc,MAAM,iBAAiB,CAAA;AAC5C,OAAO,eAAe,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAG7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAUnD,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;AACnF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,CAAA;IACpE,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC3B,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,GAAiB;IACxC,OAAO,GAAG,EAAE,CAAC,CAAC,IAAiC,EAAE,EAAE;QACjD,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,CAAC,GAAG,IAAe,CAAA;YACzB,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;gBAAE,OAAM;YAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CACpB;YAAC,CAAC,CAAC,IAAgC,CAAC,WAAW,GAAG;gBACjD,GAAG,CAAE,CAAC,CAAC,IAAgC,CAAC,WAAsC,IAAI,EAAE,CAAC;gBACrF,EAAE;aACH,CAAA;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,OAAsB,EAAE;IAExB,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAEtC,wEAAwE;IACxE,8DAA8D;IAC9D,IAAI,IAAI,GAAQ,OAAO,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC9E,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE;QAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACtD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,MAAM,IAAI;SACpB,GAAG,CAAC,YAAY,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;SAC/C,GAAG,CAAC,SAAS,CAAC;SACd,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC;SACxC,GAAG,CAAC,eAAe,CAAC;SACpB,OAAO,CAAC,GAAG,CAAC,CAAA;IACf,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAA;AACzC,CAAC"}

package/dist/guides/render.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=render.test.d.ts.map

package/dist/guides/render.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.test.d.ts","sourceRoot":"","sources":["../../src/guides/render.test.ts"],"names":[],"mappings":""}

package/dist/guides/render.test.js

@@ -0,0 +1,46 @@
+import { describe, it, expect } from 'vitest';
+import { renderGuideBody } from './render.js';
+describe('renderGuideBody', () => {
+    it('renders headings, paragraphs, and a GFM table; strips frontmatter', async () => {
+        const md = `---
+title: T
+topic: t
+description: d
+category: c
+order: 1
+---
+
+## Section One
+
+Hello **world**.
+
+| A | B |
+|---|---|
+| 1 | 2 |
+`;
+        const { body, headings } = await renderGuideBody(md);
+        expect(body).toContain('<h2');
+        expect(body).toContain('Section One');
+        expect(body).toContain('<table>');
+        expect(body).not.toContain('title: T');
+        expect(headings).toEqual([{ depth: 2, text: 'Section One', id: 'section-one' }]);
+    });
+    it('strips a raw <script> tag in prose', async () => {
+        const { body } = await renderGuideBody('Hi\n\n<script>alert(1)</script>\n');
+        expect(body).not.toContain('<script>');
+    });
+    it('gives h2/h3 stable slug ids', async () => {
+        const { headings } = await renderGuideBody('## Foo Bar\n\n### Baz Qux\n');
+        expect(headings).toEqual([
+            { depth: 2, text: 'Foo Bar', id: 'foo-bar' },
+            { depth: 3, text: 'Baz Qux', id: 'baz-qux' },
+        ]);
+    });
+    it('strips frontmatter whose closing delimiter has trailing whitespace', async () => {
+        const md = '---\ntitle: Leaky\n---  \n\n## Body\n';
+        const { body } = await renderGuideBody(md);
+        expect(body).not.toContain('title:');
+        expect(body).toContain('Body');
+    });
+});
+//# sourceMappingURL=render.test.js.map

package/dist/guides/render.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.test.js","sourceRoot":"","sources":["../../src/guides/render.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG;;;;;;;;;;;;;;;CAed,CAAA;QACG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAA;QACpD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,mCAAmC,CAAC,CAAA;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,6BAA6B,CAAC,CAAA;QACzE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE;YAC5C,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE;SAC7C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,uCAAuC,CAAA;QAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/guides/sanitize.d.ts

@@ -0,0 +1,3 @@
+import type { Schema } from 'hast-util-sanitize';
+export declare const guideSanitizeSchema: Schema;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/guides/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/guides/sanitize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAGhD,eAAO,MAAM,mBAAmB,EAAE,MAyEjC,CAAA"}

package/dist/guides/sanitize.js

@@ -0,0 +1,77 @@
+import { defaultSchema } from 'rehype-sanitize';
+// Cloned default schema; directive tasks extend this object's allowances.
+export const guideSanitizeSchema = {
+    ...defaultSchema,
+    // Disable id-rewriting (defaultSchema sets clobberPrefix:'user-content-', which
+    // rewrites heading ids to 'user-content-<slug>' and breaks scrollspy/TOC anchor
+    // links). Safe here because guide content is in-repo and passes code review —
+    // DOM-clobber protection on our own generated heading ids is unnecessary.
+    clobberPrefix: '',
+    tagNames: [
+        ...(defaultSchema.tagNames ?? []),
+        'button',
+        'input',
+        // mermaid inline SVG support
+        'figure',
+        'svg',
+        'g',
+        'path',
+        'rect',
+        'circle',
+        'ellipse',
+        'line',
+        'polygon',
+        'polyline',
+        'text',
+        'tspan',
+        'marker',
+        'defs',
+        'use',
+    ],
+    attributes: {
+        ...defaultSchema.attributes,
+        // Global: add directive attrs + SVG geometry/presentation attrs.
+        // hast-util-sanitize only supports '*' as a wildcard key (no '*svg' etc.).
+        // Geometry and presentation attrs (d, fill, stroke, transform, etc.) are
+        // harmless — they carry no script execution risk.
+        '*': [
+            ...(defaultSchema.attributes?.['*'] ?? []),
+            'id',
+            'className',
+            'role',
+            'dataTab',
+            'dataPath',
+            'ariaLabel',
+            'style',
+            // SVG geometry & presentation (safe; no execution risk)
+            'd',
+            'x',
+            'y',
+            'x1',
+            'y1',
+            'x2',
+            'y2',
+            'cx',
+            'cy',
+            'r',
+            'rx',
+            'ry',
+            'points',
+            'transform',
+            'fill',
+            'stroke',
+            'strokeWidth',
+            'markerEnd',
+            'markerStart',
+            'markerMid',
+            'textAnchor',
+        ],
+        input: ['type', 'placeholder', 'className', 'ariaLabel'],
+        // SVG root element attributes
+        svg: ['viewBox', 'width', 'height', 'xmlns', 'preserveAspectRatio', 'role', 'ariaLabel'],
+        // mermaid arrowhead structure
+        marker: ['id', 'markerWidth', 'markerHeight', 'markerUnits', 'orient', 'refX', 'refY', 'viewBox', 'className'],
+        use: ['href', 'xlinkHref', 'x', 'y', 'width', 'height', 'className'],
+    },
+};
+//# sourceMappingURL=sanitize.js.map

package/dist/guides/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/guides/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAG/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAW;IACzC,GAAG,aAAa;IAChB,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,0EAA0E;IAC1E,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE;QACR,GAAG,CAAC,aAAa,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjC,QAAQ;QACR,OAAO;QACP,6BAA6B;QAC7B,QAAQ;QACR,KAAK;QACL,GAAG;QACH,MAAM;QACN,MAAM;QACN,QAAQ;QACR,SAAS;QACT,MAAM;QACN,SAAS;QACT,UAAU;QACV,MAAM;QACN,OAAO;QACP,QAAQ;QACR,MAAM;QACN,KAAK;KACN;IACD,UAAU,EAAE;QACV,GAAG,aAAa,CAAC,UAAU;QAC3B,iEAAiE;QACjE,2EAA2E;QAC3E,yEAAyE;QACzE,kDAAkD;QAClD,GAAG,EAAE;YACH,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI;YACJ,WAAW;YACX,MAAM;YACN,SAAS;YACT,UAAU;YACV,WAAW;YACX,OAAO;YACP,wDAAwD;YACxD,GAAG;YACH,GAAG;YACH,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,GAAG;YACH,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,WAAW;YACX,MAAM;YACN,QAAQ;YACR,aAAa;YACb,WAAW;YACX,aAAa;YACb,WAAW;YACX,YAAY;SACb;QACD,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC;QACxD,8BAA8B;QAC9B,GAAG,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,WAAW,CAAC;QACxF,8BAA8B;QAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;QAC9G,GAAG,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;KACrE;CACF,CAAA"}

package/dist/guides/sanitize.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sanitize.test.d.ts.map

package/dist/guides/sanitize.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.d.ts","sourceRoot":"","sources":["../../src/guides/sanitize.test.ts"],"names":[],"mappings":""}

package/dist/guides/sanitize.test.js

@@ -0,0 +1,45 @@
+import { describe, it, expect } from 'vitest';
+import { renderGuideBody } from './render.js';
+import { remarkCallout, remarkTabs, remarkFilterTable, remarkChart, remarkSev } from './directives.js';
+const ALL = [remarkCallout, remarkTabs, remarkFilterTable, remarkChart, remarkSev];
+describe('guideSanitizeSchema', () => {
+    it('passes legitimate directive output', async () => {
+        const md = ':::callout{type=tip}\nok :sev[P1]{level=p1}\n:::\n';
+        const { body } = await renderGuideBody(md, { plugins: ALL });
+        expect(body).toContain('callout-tip');
+        expect(body).toContain('sev-p1');
+    });
+    it('strips script, event handlers, and iframes from prose', async () => {
+        const md = `text
+
+<script>alert(1)</script>
+
+<a href="javascript:alert(1)" onclick="x()">x</a>
+
+<iframe src="http://evil"></iframe>
+`;
+        const { body } = await renderGuideBody(md, { plugins: ALL });
+        expect(body).not.toContain('<script');
+        expect(body).not.toContain('onclick');
+        expect(body).not.toContain('javascript:');
+        expect(body).not.toContain('<iframe');
+    });
+    it('strips an author-injected style other than chart bars (defense; CI scan is the real backstop)', async () => {
+        // NOTE: the sanitize schema allows `style` globally (for chart bars). This test documents
+        // that an arbitrary style DOES currently pass sanitize, so the Task 15 CI scan is required.
+        // Assert the CURRENT behavior so a future schema tightening is a deliberate, test-visible change.
+        const md = '<div style="color:red">x</div>\n';
+        const { body } = await renderGuideBody(md, { plugins: ALL });
+        // Document current reality: style survives sanitize (CI scan catches non-width styles).
+        expect(body).toContain('style="color:red"');
+    });
+    it('preserves heading id attributes through sanitize (scrollspy depends on it)', async () => {
+        const { body } = await renderGuideBody('## My Section\n');
+        expect(body).toMatch(/<h2[^>]*id="my-section"/);
+    });
+    it('callout falls back to callout-note for an unknown type', async () => {
+        const { body } = await renderGuideBody(':::callout{type=bogus}\ntext\n:::\n', { plugins: ALL });
+        expect(body).toContain('class="callout callout-note"');
+    });
+});
+//# sourceMappingURL=sanitize.test.js.map

package/dist/guides/sanitize.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.test.js","sourceRoot":"","sources":["../../src/guides/sanitize.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEtG,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;AAElF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,GAAG,oDAAoD,CAAA;QAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG;;;;;;;CAOd,CAAA;QACG,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,0FAA0F;QAC1F,4FAA4F;QAC5F,kGAAkG;QAClG,MAAM,EAAE,GAAG,kCAAkC,CAAA;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5D,wFAAwF;QACxF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/guides/template.d.ts

@@ -0,0 +1,11 @@
+import type { TocHeading } from './types.js';
+export declare const CHROME_VERSION = 1;
+export interface WrapArgs {
+    title: string;
+    body: string;
+    headings: TocHeading[];
+    css: string;
+}
+export declare function esc(s: string): string;
+export declare function wrapInChrome({ title, body, headings, css }: WrapArgs): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/guides/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/guides/template.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAG5C,eAAO,MAAM,cAAc,IAAI,CAAA;AAE/B,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,UAAU,EAAE,CAAA;IACtB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAErC;AASD,wBAAgB,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,GAAG,MAAM,CAyB7E"}

package/dist/guides/template.js

@@ -0,0 +1,38 @@
+import { CHROME_JS, THEME_INIT_JS } from './chrome.js';
+export const CHROME_VERSION = 1;
+export function esc(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+function toc(headings) {
+    const items = headings
+        .map((h) => `<li class="toc-${h.depth}"><a href="#${esc(h.id)}">${esc(h.text)}</a></li>`)
+        .join('');
+    return `<nav class="toc" aria-label="Table of contents"><ul>${items}</ul></nav>`;
+}
+export function wrapInChrome({ title, body, headings, css }) {
+    return `<!DOCTYPE html>
+<html lang="en" data-chrome-version="${CHROME_VERSION}">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${esc(title)}</title>
+<!-- scaffold:chrome v${CHROME_VERSION} -->
+<style>${css}</style>
+<script>${THEME_INIT_JS}</script>
+</head>
+<body>
+<header class="topbar">
+  <button data-action="nav" class="nav-toggle" aria-label="Toggle navigation">☰</button>
+  <h1>${esc(title)}</h1>
+  <button data-action="theme" class="theme-toggle" aria-label="Toggle theme">◐</button>
+</header>
+<div class="layout">
+  <aside class="rail">${toc(headings)}</aside>
+  <main class="content">${body}</main>
+</div>
+<script>${CHROME_JS}</script>
+</body>
+</html>
+`;
+}
+//# sourceMappingURL=template.js.map

package/dist/guides/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/guides/template.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAA;AAS/B,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AACrG,CAAC;AAED,SAAS,GAAG,CAAC,QAAsB;IACjC,MAAM,KAAK,GAAG,QAAQ;SACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAK,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;SACxF,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,OAAO,uDAAuD,KAAK,aAAa,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAY;IACnE,OAAO;uCAC8B,cAAc;;;;SAI5C,GAAG,CAAC,KAAK,CAAC;wBACK,cAAc;SAC7B,GAAG;UACF,aAAa;;;;;QAKf,GAAG,CAAC,KAAK,CAAC;;;;wBAIM,GAAG,CAAC,QAAQ,CAAC;0BACX,IAAI;;UAEpB,SAAS;;;CAGlB,CAAA;AACD,CAAC"}

package/dist/guides/template.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=template.test.d.ts.map

package/dist/guides/template.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.test.d.ts","sourceRoot":"","sources":["../../src/guides/template.test.ts"],"names":[],"mappings":""}

package/dist/guides/template.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect } from 'vitest';
+import { wrapInChrome, CHROME_VERSION } from './template.js';
+describe('wrapInChrome', () => {
+    const args = {
+        title: 'MMR Reference',
+        body: '<h2 id="intro">Intro</h2><p>hi</p>',
+        headings: [{ depth: 2, text: 'Intro', id: 'intro' }],
+        css: ':root{--bg:#fff}',
+    };
+    it('produces a full self-contained HTML doc', () => {
+        const html = wrapInChrome(args);
+        expect(html).toMatch(/^<!DOCTYPE html>/);
+        expect(html).toContain('<title>MMR Reference</title>');
+        expect(html).toContain('<style>:root{--bg:#fff}</style>');
+        expect(html).toContain('--bg');
+        expect(html).toContain('data-chrome-version="' + CHROME_VERSION + '"');
+        expect(html).toContain('scaffold:chrome v' + CHROME_VERSION);
+    });
+    it('builds a TOC from headings', () => {
+        const html = wrapInChrome(args);
+        expect(html).toContain('href="#intro"');
+        expect(html).toContain('>Intro<');
+    });
+    it('has no external network references', () => {
+        const html = wrapInChrome(args);
+        expect(html).not.toMatch(/https?:\/\//);
+        expect(html).not.toContain('<link rel="stylesheet"');
+    });
+    it('injects theme-init script in <head> to prevent FOUC', () => {
+        const html = wrapInChrome(args);
+        // Theme-init read-and-apply logic must be present
+        expect(html).toContain('getItem(\'guide-theme\')');
+        // Must appear before </head> (i.e., inside the <head> block)
+        const headEnd = html.indexOf('</head>');
+        expect(headEnd).toBeGreaterThan(-1);
+        const themeInitPos = html.indexOf('getItem(\'guide-theme\')');
+        expect(themeInitPos).toBeGreaterThan(-1);
+        expect(themeInitPos).toBeLessThan(headEnd);
+    });
+});
+//# sourceMappingURL=template.test.js.map

package/dist/guides/template.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.test.js","sourceRoot":"","sources":["../../src/guides/template.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE5D,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;QACpD,GAAG,EAAE,kBAAkB;KACxB,CAAA;IAED,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,GAAG,cAAc,GAAG,GAAG,CAAC,CAAA;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,GAAG,cAAc,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC/B,kDAAkD;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAA;QAClD,6DAA6D;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAA;QAC7D,MAAM,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/guides/types.d.ts

@@ -0,0 +1,20 @@
+export interface GuideFrontmatter {
+    title: string;
+    topic: string;
+    description: string;
+    category: string;
+    order: number;
+}
+export interface GuideEntry {
+    topic: string;
+    dir: string;
+    mdPath: string;
+    htmlPath: string;
+    frontmatter: GuideFrontmatter;
+}
+export interface TocHeading {
+    depth: number;
+    text: string;
+    id: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/guides/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guides/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,gBAAgB,CAAA;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;CACX"}

package/dist/guides/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/guides/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/guides/types.ts"],"names":[],"mappings":""}

package/dist/knowledge-freshness/audit-apply-pr.d.ts

@@ -0,0 +1,64 @@
+import type { AuditVerdict } from './audit-runner.js';
+/**
+ * Pure rendering of the PR title/body for a freshness audit. Kept separate
+ * from the git/gh side effects in `openFreshnessPr` so the rendering is
+ * testable without invoking subprocesses (Task 10 acceptance: "The PR
+ * title/body rendering MUST be a pure function").
+ */
+export interface RenderPrOptions {
+    /** Optional MMR job ID to reference in the PR body (Task 11 will gate on it). */
+    mmrJobId?: string;
+}
+export interface RenderedPr {
+    title: string;
+    body: string;
+    /** Branch suffix derived from entry name; caller pairs with a date. */
+    entryName: string;
+}
+export declare function renderFindingsTable(verdict: AuditVerdict): string;
+export declare function renderPrTitle(verdict: AuditVerdict): string;
+export declare function renderPrBody(verdict: AuditVerdict, opts?: RenderPrOptions): string;
+/** UTC YYYY-MM-DD for branch naming. Separate so tests can pin the date. */
+export declare function todayUtcYmd(now?: Date): string;
+/**
+ * Sanitize an entry name for use as a git branch component. We never
+ * interpolate raw user-controlled strings into a shell command, but the
+ * entry name does become a branch ref — disallow whitespace, slashes
+ * (already a path separator in the prefix), and non-ascii. The on-disk
+ * entry names in `content/knowledge/*` are all kebab-case ASCII so this
+ * is a safety net, not a transformation.
+ */
+export declare function sanitizeForBranch(entryName: string): string;
+export declare function branchNameForEntry(entryName: string, ymd: string): string;
+export declare function renderFreshnessPr(verdict: AuditVerdict, opts?: RenderPrOptions): RenderedPr;
+/** Volatility-tier → PR label mapping. Used for triage/filtering. */
+export declare function volatilityLabel(volatility: string | undefined): string | undefined;
+export interface OpenPrOptions {
+    /** Path to the audited entry .md (already updated on disk). */
+    entryPath: string;
+    /** Volatility from the entry frontmatter; used to derive the volatility label. */
+    volatility: string | undefined;
+    /** Optional MMR job ID. */
+    mmrJobId?: string;
+    /** Override the date used for the branch suffix (tests). */
+    now?: Date;
+}
+/**
+ * Open a freshness PR. Pre-conditions:
+ *   - The on-disk entry at `entryPath` already has the verdict applied.
+ *   - The git working tree must show ONLY `entryPath` as modified (no other
+ *     unrelated changes). This is a safety guard so a manual run can't
+ *     accidentally sweep in unrelated work.
+ *   - `gh` CLI is authenticated.
+ */
+export declare function openFreshnessPr(verdict: AuditVerdict, opts: OpenPrOptions): {
+    branch: string;
+    prUrl: string;
+};
+/**
+ * Extract `volatility` from an entry's frontmatter. We can't import the
+ * knowledge-loader here because it pulls in the full assembly stack;
+ * a minimal yaml-only read keeps this surface lean.
+ */
+export declare function readVolatility(entryContent: string): string | undefined;
+//# sourceMappingURL=audit-apply-pr.d.ts.map