blume 2.0.0 → 2.0.2

package/dist/cli/{chunk-2q1dwty4.js.map → chunk-mqc662a6.js.map}

@@ -2,10 +2,10 @@
   "version": 3,
   "sources": ["../src/core/server-features.ts", "../src/cli/required-secrets.ts"],
   "sourcesContent": [
-    "import { needsPlaygroundProxy } from \"../openapi/references.ts\";\nimport type { ResolvedConfig } from \"./schema.ts\";\n\n/**\n * List the enabled features that require Astro server output. Static builds\n * fail clearly when any of these are enabled.\n */\nexport const serverFeatures = (config: ResolvedConfig): string[] => {\n  const features: string[] = [];\n  if (config.ai.ask?.enabled && !config.ai.ask.endpoint) {\n    features.push(\"Ask AI\");\n  }\n  // The hosted MCP server is a live JSON-RPC endpoint, so it needs a runtime.\n  if (config.agents.mcp.enabled) {\n    features.push(\"MCP server\");\n  }\n  // The built-in playground proxy (`playground.proxy: true` on an `openapi()`\n  // or `graphql()` adapter) is a live fetch endpoint at `/_api-proxy`; an\n  // external proxy URL (string) or a proxy-less playground stays fully static.\n  if (needsPlaygroundProxy(config)) {\n    features.push(\"API playground proxy\");\n  }\n  // A `server` adapter (Mixedbread) proxies queries through a secret server\n  // endpoint, so it can't run on a static build.\n  if (config.search.provider.mode === \"server\") {\n    features.push(`Search (${config.search.provider.kind})`);\n  }\n  return features;\n};\n",
-    "import { resolveAskBackend } from \"../ai/ask.ts\";\nimport type { ResolvedConfig } from \"../core/schema.ts\";\nimport type { Diagnostic } from \"../core/types.ts\";\n\n/**\n * Warn early when an enabled feature needs a secret env var that isn't set, so\n * the failure surfaces at `blume dev`/`build` instead of at the first request in\n * production. These are runtime secrets (the endpoint reads them on the server),\n * so this warns rather than hard-fails — the value may live only in the deploy\n * environment. Build-time secrets (search-index sync) already warn during sync.\n */\nexport const checkRequiredSecrets = (config: ResolvedConfig): Diagnostic[] => {\n  const diagnostics: Diagnostic[] = [];\n  const requireSecret = (feature: string, env: string, note?: string): void => {\n    if (process.env[env]) {\n      return;\n    }\n    const noteSuffix = note ? ` (${note})` : \"\";\n    diagnostics.push({\n      code: \"BLUME_MISSING_SECRET\",\n      message: `${feature} is enabled but ${env} is not set${noteSuffix}.`,\n      severity: \"warning\",\n      suggestion: `Set ${env} in .env.local for local dev, or in your host's environment for production.`,\n    });\n  };\n\n  if (config.ai.ask?.enabled && !config.ai.ask.endpoint) {\n    // The adapter descriptor names the env vars its route reads.\n    const { provider } = config.ai.ask;\n    const backend = resolveAskBackend(provider);\n    for (const env of provider.requiredSecrets) {\n      requireSecret(`Ask AI (${backend.label})`, env, backend.secretNote);\n    }\n  }\n\n  // Each search adapter declares the secrets its generated runtime reads.\n  const { provider } = config.search;\n  for (const env of provider.requiredSecrets) {\n    requireSecret(`Search (${provider.kind})`, env);\n  }\n\n  // Adapters name their own secrets; the built-in analytics adapters ship\n  // public tokens in the page and declare none.\n  for (const adapter of config.analytics) {\n    for (const env of adapter.requiredSecrets) {\n      requireSecret(`Analytics (${adapter.kind})`, env);\n    }\n  }\n\n  // Each content source adapter declares the env vars its fetch reads.\n  for (const source of config.content.sources) {\n    for (const env of source.requiredSecrets) {\n      requireSecret(`Content source (${source.kind})`, env);\n    }\n  }\n\n  // Adapters name their own secrets; the built-in reference adapters read\n  // public specs and declare none.\n  for (const adapter of config.reference) {\n    for (const env of adapter.requiredSecrets) {\n      requireSecret(`API reference (${adapter.kind})`, env);\n    }\n  }\n\n  // The deployment adapter names its own secrets; the built-in host adapters\n  // read platform-injected env and declare none.\n  for (const env of config.deployment.requiredSecrets) {\n    requireSecret(`Deployment (${config.deployment.kind})`, env);\n  }\n\n  return diagnostics;\n};\n"
+    "import { needsPlaygroundProxy } from \"../openapi/references.ts\";\nimport type { ResolvedConfig } from \"./schema.ts\";\n\n/**\n * List the enabled features that require Astro server output. Static builds\n * fail clearly when any of these are enabled.\n */\nexport const serverFeatures = (config: ResolvedConfig): string[] => {\n  const features: string[] = [];\n  if (config.ai.assistant?.enabled && !config.ai.assistant.endpoint) {\n    features.push(\"Assistant\");\n  }\n  // The hosted MCP server is a live JSON-RPC endpoint, so it needs a runtime.\n  if (config.agents.mcp.enabled) {\n    features.push(\"MCP server\");\n  }\n  // The built-in playground proxy (`playground.proxy: true` on an `openapi()`\n  // or `graphql()` adapter) is a live fetch endpoint at `/_api-proxy`; an\n  // external proxy URL (string) or a proxy-less playground stays fully static.\n  if (needsPlaygroundProxy(config)) {\n    features.push(\"API playground proxy\");\n  }\n  // A `server` adapter (Mixedbread) proxies queries through a secret server\n  // endpoint, so it can't run on a static build.\n  if (config.search.provider.mode === \"server\") {\n    features.push(`Search (${config.search.provider.kind})`);\n  }\n  return features;\n};\n",
+    "import { resolveAskBackend } from \"../ai/ask.ts\";\nimport type { ResolvedConfig } from \"../core/schema.ts\";\nimport type { Diagnostic } from \"../core/types.ts\";\n\n/**\n * Warn early when an enabled feature needs a secret env var that isn't set, so\n * the failure surfaces at `blume dev`/`build` instead of at the first request in\n * production. These are runtime secrets (the endpoint reads them on the server),\n * so this warns rather than hard-fails — the value may live only in the deploy\n * environment. Build-time secrets (search-index sync) already warn during sync.\n */\nexport const checkRequiredSecrets = (config: ResolvedConfig): Diagnostic[] => {\n  const diagnostics: Diagnostic[] = [];\n  const requireSecret = (feature: string, env: string, note?: string): void => {\n    if (process.env[env]) {\n      return;\n    }\n    const noteSuffix = note ? ` (${note})` : \"\";\n    diagnostics.push({\n      code: \"BLUME_MISSING_SECRET\",\n      message: `${feature} is enabled but ${env} is not set${noteSuffix}.`,\n      severity: \"warning\",\n      suggestion: `Set ${env} in .env.local for local dev, or in your host's environment for production.`,\n    });\n  };\n\n  if (config.ai.assistant?.enabled && !config.ai.assistant.endpoint) {\n    // The adapter descriptor names the env vars its route reads.\n    const { provider } = config.ai.assistant;\n    const backend = resolveAskBackend(provider);\n    for (const env of provider.requiredSecrets) {\n      requireSecret(`Assistant (${backend.label})`, env, backend.secretNote);\n    }\n  }\n\n  // Each search adapter declares the secrets its generated runtime reads.\n  const { provider } = config.search;\n  for (const env of provider.requiredSecrets) {\n    requireSecret(`Search (${provider.kind})`, env);\n  }\n\n  // Adapters name their own secrets; the built-in analytics adapters ship\n  // public tokens in the page and declare none.\n  for (const adapter of config.analytics) {\n    for (const env of adapter.requiredSecrets) {\n      requireSecret(`Analytics (${adapter.kind})`, env);\n    }\n  }\n\n  // Each content source adapter declares the env vars its fetch reads.\n  for (const source of config.content.sources) {\n    for (const env of source.requiredSecrets) {\n      requireSecret(`Content source (${source.kind})`, env);\n    }\n  }\n\n  // Adapters name their own secrets; the built-in reference adapters read\n  // public specs and declare none.\n  for (const adapter of config.reference) {\n    for (const env of adapter.requiredSecrets) {\n      requireSecret(`API reference (${adapter.kind})`, env);\n    }\n  }\n\n  // The deployment adapter names its own secrets; the built-in host adapters\n  // read platform-injected env and declare none.\n  for (const env of config.deployment.requiredSecrets) {\n    requireSecret(`Deployment (${config.deployment.kind})`, env);\n  }\n\n  return diagnostics;\n};\n"
   ],
-  "mappings": ";;;;;;;AAOO,IAAM,iBAAiB,CAAC,WAAqC;AAAA,EAClE,MAAM,WAAqB,CAAC;AAAA,EAC5B,IAAI,OAAO,GAAG,KAAK,WAAW,CAAC,OAAO,GAAG,IAAI,UAAU;AAAA,IACrD,SAAS,KAAK,QAAQ;AAAA,EACxB;AAAA,EAEA,IAAI,OAAO,OAAO,IAAI,SAAS;AAAA,IAC7B,SAAS,KAAK,YAAY;AAAA,EAC5B;AAAA,EAIA,IAAI,qBAAqB,MAAM,GAAG;AAAA,IAChC,SAAS,KAAK,sBAAsB;AAAA,EACtC;AAAA,EAGA,IAAI,OAAO,OAAO,SAAS,SAAS,UAAU;AAAA,IAC5C,SAAS,KAAK,WAAW,OAAO,OAAO,SAAS,OAAO;AAAA,EACzD;AAAA,EACA,OAAO;AAAA;;;AChBF,IAAM,uBAAuB,CAAC,WAAyC;AAAA,EAC5E,MAAM,cAA4B,CAAC;AAAA,EACnC,MAAM,gBAAgB,CAAC,SAAiB,KAAa,SAAwB;AAAA,IAC3E,IAAI,QAAQ,IAAI,MAAM;AAAA,MACpB;AAAA,IACF;AAAA,IACA,MAAM,aAAa,OAAO,KAAK,UAAU;AAAA,IACzC,YAAY,KAAK;AAAA,MACf,MAAM;AAAA,MACN,SAAS,GAAG,0BAA0B,iBAAiB;AAAA,MACvD,UAAU;AAAA,MACV,YAAY,OAAO;AAAA,IACrB,CAAC;AAAA;AAAA,EAGH,IAAI,OAAO,GAAG,KAAK,WAAW,CAAC,OAAO,GAAG,IAAI,UAAU;AAAA,IAErD,QAAQ,aAAa,OAAO,GAAG;AAAA,IAC/B,MAAM,UAAU,kBAAkB,QAAQ;AAAA,IAC1C,WAAW,OAAO,SAAS,iBAAiB;AAAA,MAC1C,cAAc,WAAW,QAAQ,UAAU,KAAK,QAAQ,UAAU;AAAA,IACpE;AAAA,EACF;AAAA,EAGA,QAAQ,aAAa,OAAO;AAAA,EAC5B,WAAW,OAAO,SAAS,iBAAiB;AAAA,IAC1C,cAAc,WAAW,SAAS,SAAS,GAAG;AAAA,EAChD;AAAA,EAIA,WAAW,WAAW,OAAO,WAAW;AAAA,IACtC,WAAW,OAAO,QAAQ,iBAAiB;AAAA,MACzC,cAAc,cAAc,QAAQ,SAAS,GAAG;AAAA,IAClD;AAAA,EACF;AAAA,EAGA,WAAW,UAAU,OAAO,QAAQ,SAAS;AAAA,IAC3C,WAAW,OAAO,OAAO,iBAAiB;AAAA,MACxC,cAAc,mBAAmB,OAAO,SAAS,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EAIA,WAAW,WAAW,OAAO,WAAW;AAAA,IACtC,WAAW,OAAO,QAAQ,iBAAiB;AAAA,MACzC,cAAc,kBAAkB,QAAQ,SAAS,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EAIA,WAAW,OAAO,OAAO,WAAW,iBAAiB;AAAA,IACnD,cAAc,eAAe,OAAO,WAAW,SAAS,GAAG;AAAA,EAC7D;AAAA,EAEA,OAAO;AAAA;",
-  "debugId": "FF74BC88ADA489ED64756E2164756E21",
+  "mappings": ";;;;;;;AAOO,IAAM,iBAAiB,CAAC,WAAqC;AAAA,EAClE,MAAM,WAAqB,CAAC;AAAA,EAC5B,IAAI,OAAO,GAAG,WAAW,WAAW,CAAC,OAAO,GAAG,UAAU,UAAU;AAAA,IACjE,SAAS,KAAK,WAAW;AAAA,EAC3B;AAAA,EAEA,IAAI,OAAO,OAAO,IAAI,SAAS;AAAA,IAC7B,SAAS,KAAK,YAAY;AAAA,EAC5B;AAAA,EAIA,IAAI,qBAAqB,MAAM,GAAG;AAAA,IAChC,SAAS,KAAK,sBAAsB;AAAA,EACtC;AAAA,EAGA,IAAI,OAAO,OAAO,SAAS,SAAS,UAAU;AAAA,IAC5C,SAAS,KAAK,WAAW,OAAO,OAAO,SAAS,OAAO;AAAA,EACzD;AAAA,EACA,OAAO;AAAA;;;AChBF,IAAM,uBAAuB,CAAC,WAAyC;AAAA,EAC5E,MAAM,cAA4B,CAAC;AAAA,EACnC,MAAM,gBAAgB,CAAC,SAAiB,KAAa,SAAwB;AAAA,IAC3E,IAAI,QAAQ,IAAI,MAAM;AAAA,MACpB;AAAA,IACF;AAAA,IACA,MAAM,aAAa,OAAO,KAAK,UAAU;AAAA,IACzC,YAAY,KAAK;AAAA,MACf,MAAM;AAAA,MACN,SAAS,GAAG,0BAA0B,iBAAiB;AAAA,MACvD,UAAU;AAAA,MACV,YAAY,OAAO;AAAA,IACrB,CAAC;AAAA;AAAA,EAGH,IAAI,OAAO,GAAG,WAAW,WAAW,CAAC,OAAO,GAAG,UAAU,UAAU;AAAA,IAEjE,QAAQ,aAAa,OAAO,GAAG;AAAA,IAC/B,MAAM,UAAU,kBAAkB,QAAQ;AAAA,IAC1C,WAAW,OAAO,SAAS,iBAAiB;AAAA,MAC1C,cAAc,cAAc,QAAQ,UAAU,KAAK,QAAQ,UAAU;AAAA,IACvE;AAAA,EACF;AAAA,EAGA,QAAQ,aAAa,OAAO;AAAA,EAC5B,WAAW,OAAO,SAAS,iBAAiB;AAAA,IAC1C,cAAc,WAAW,SAAS,SAAS,GAAG;AAAA,EAChD;AAAA,EAIA,WAAW,WAAW,OAAO,WAAW;AAAA,IACtC,WAAW,OAAO,QAAQ,iBAAiB;AAAA,MACzC,cAAc,cAAc,QAAQ,SAAS,GAAG;AAAA,IAClD;AAAA,EACF;AAAA,EAGA,WAAW,UAAU,OAAO,QAAQ,SAAS;AAAA,IAC3C,WAAW,OAAO,OAAO,iBAAiB;AAAA,MACxC,cAAc,mBAAmB,OAAO,SAAS,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EAIA,WAAW,WAAW,OAAO,WAAW;AAAA,IACtC,WAAW,OAAO,QAAQ,iBAAiB;AAAA,MACzC,cAAc,kBAAkB,QAAQ,SAAS,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EAIA,WAAW,OAAO,OAAO,WAAW,iBAAiB;AAAA,IACnD,cAAc,eAAe,OAAO,WAAW,SAAS,GAAG;AAAA,EAC7D;AAAA,EAEA,OAAO;AAAA;",
+  "debugId": "26CFBC953FC234CC64756E2164756E21",
   "names": []
 }

package/dist/cli/{chunk-y3e45rc8.js → chunk-n1yg3tj3.js}

@@ -4,7 +4,7 @@ import {
   customStaticRoutes,
   hasGeneratedChangelog,
   validateLinks
-} from "./chunk-xaz13gwg.js";
+} from "./chunk-v6ya5kcb.js";
 import {
   commandMeta,
   reportInternalError,
@@ -14,11 +14,11 @@ import {
   reportDiagnosticsJson,
   reportDiagnostics
 } from "./index.js";
-import"./chunk-jts8mvcz.js";
+import"./chunk-gs7r695n.js";
 import {
   buildManifest,
   scanProject
-} from "./chunk-zg2gtj10.js";
+} from "./chunk-5r8g91qn.js";
 
 // src/cli/commands/validate.ts
 import { existsSync } from "node:fs";
@@ -99,4 +99,4 @@ export {
 };
 
 //# debugId=1EEBE4960D9C18F364756E2164756E21
-//# sourceMappingURL=chunk-y3e45rc8.js.map
+//# sourceMappingURL=chunk-n1yg3tj3.js.map

package/dist/cli/{chunk-bctazmbk.js → chunk-nfcyttvj.js}

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import {
+  deployPlatform,
   resolveProjectContext,
   loadConfig
-} from "./chunk-xaz13gwg.js";
-import"./chunk-jts8mvcz.js";
+} from "./chunk-v6ya5kcb.js";
+import"./chunk-gs7r695n.js";
 import {
   commandMeta,
   normalizeHost,
@@ -11,10 +12,13 @@ import {
 } from "./index.js";
 import {
   deployOutputDir
-} from "./chunk-nk3ts2xk.js";
+} from "./chunk-hr8ne106.js";
+import {
+  refuseIfEjected
+} from "./chunk-4e9b9ra6.js";
 import {
   parsePort
-} from "./chunk-zxccj738.js";
+} from "./chunk-esh98wmb.js";
 
 // src/cli/commands/preview.ts
 import { existsSync } from "node:fs";
@@ -29,8 +33,15 @@ var previewCommand = defineCommand({
   meta: commandMeta.preview,
   async run({ args }) {
     const root = process.cwd();
+    await refuseIfEjected(root, "preview");
     const { config } = await loadConfig(root);
     const context = resolveProjectContext(root, config);
+    const { deployment } = config;
+    const platform = deployPlatform(deployment);
+    if (deployment.options.output === "server" && platform.previewDeploy) {
+      logger.error(`\`blume preview\` can't serve a ${deployment.kind}() server build: ${platform.astro?.package} has no local preview server. Run \`blume dev\` to try the site locally, or deploy a preview with \`${platform.previewDeploy}\`.`);
+      process.exit(1);
+    }
     if (!existsSync(join(context.outDir, "astro.config.mjs")) || !existsSync(deployOutputDir(config, context))) {
       logger.error("No build found. Run `blume build` first.");
       process.exit(1);
@@ -49,5 +60,5 @@ export {
   previewCommand
 };
 
-//# debugId=7FC21538FC698FBD64756E2164756E21
-//# sourceMappingURL=chunk-bctazmbk.js.map
+//# debugId=C7A2F5CE34388C8C64756E2164756E21
+//# sourceMappingURL=chunk-nfcyttvj.js.map

package/dist/cli/chunk-nfcyttvj.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/commands/preview.ts"],
+  "sourcesContent": [
+    "import { existsSync } from \"node:fs\";\n\nimport { preview } from \"astro\";\nimport { defineCommand } from \"citty\";\nimport { join } from \"pathe\";\n\nimport { loadConfig } from \"../../core/config.ts\";\nimport { resolveProjectContext } from \"../../core/project.ts\";\nimport { deployOutputDir } from \"../../deploy/adapter-output.ts\";\nimport { deployPlatform } from \"../../deploy/platforms/index.ts\";\nimport { parsePort } from \"../args.ts\";\nimport { commandMeta } from \"../command-meta.ts\";\nimport { refuseIfEjected } from \"../eject-scripts.ts\";\nimport { normalizeHost } from \"../host-args.ts\";\nimport { logger } from \"../log.ts\";\n\nexport const previewCommand = defineCommand({\n  args: {\n    host: { description: \"Network host to bind.\", type: \"string\" },\n    port: { description: \"Port to listen on.\", type: \"string\" },\n  },\n  meta: commandMeta.preview,\n  async run({ args }) {\n    const root = process.cwd();\n    await refuseIfEjected(root, \"preview\");\n    const { config } = await loadConfig(root);\n    const context = resolveProjectContext(root, config);\n\n    // Astro previews a server build through its adapter's preview entrypoint,\n    // and the Vercel and Netlify adapters declare none, so Astro would throw\n    // mid-command. Say so up front, with what to run instead.\n    const { deployment } = config;\n    const platform = deployPlatform(deployment);\n    if (deployment.options.output === \"server\" && platform.previewDeploy) {\n      logger.error(\n        `\\`blume preview\\` can't serve a ${deployment.kind}() server build: ${platform.astro?.package} has no local preview server. Run \\`blume dev\\` to try the site locally, or deploy a preview with \\`${platform.previewDeploy}\\`.`\n      );\n      process.exit(1);\n    }\n\n    // `blume dev` writes `.blume/astro.config.mjs` too, so the runtime alone\n    // doesn't mean there's anything to serve: the build output must exist.\n    if (\n      !existsSync(join(context.outDir, \"astro.config.mjs\")) ||\n      !existsSync(deployOutputDir(config, context))\n    ) {\n      logger.error(\"No build found. Run `blume build` first.\");\n      process.exit(1);\n    }\n\n    await preview({\n      logLevel: \"info\",\n      root: context.outDir,\n      server: {\n        // `normalizeHost` maps a bare `--host` (citty parses it as \"\") to\n        // `true` so Vite binds all interfaces instead of the hostname \"\".\n        host: normalizeHost(args.host),\n        port: parsePort(args.port),\n      },\n    });\n  },\n});\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAAA;AAEA;AACA;AACA;AAYO,IAAM,iBAAiB,cAAc;AAAA,EAC1C,MAAM;AAAA,IACJ,MAAM,EAAE,aAAa,yBAAyB,MAAM,SAAS;AAAA,IAC7D,MAAM,EAAE,aAAa,sBAAsB,MAAM,SAAS;AAAA,EAC5D;AAAA,EACA,MAAM,YAAY;AAAA,OACZ,IAAG,GAAG,QAAQ;AAAA,IAClB,MAAM,OAAO,QAAQ,IAAI;AAAA,IACzB,MAAM,gBAAgB,MAAM,SAAS;AAAA,IACrC,QAAQ,WAAW,MAAM,WAAW,IAAI;AAAA,IACxC,MAAM,UAAU,sBAAsB,MAAM,MAAM;AAAA,IAKlD,QAAQ,eAAe;AAAA,IACvB,MAAM,WAAW,eAAe,UAAU;AAAA,IAC1C,IAAI,WAAW,QAAQ,WAAW,YAAY,SAAS,eAAe;AAAA,MACpE,OAAO,MACL,mCAAmC,WAAW,wBAAwB,SAAS,OAAO,8GAA8G,SAAS,kBAC/M;AAAA,MACA,QAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,IAIA,IACE,CAAC,WAAW,KAAK,QAAQ,QAAQ,kBAAkB,CAAC,KACpD,CAAC,WAAW,gBAAgB,QAAQ,OAAO,CAAC,GAC5C;AAAA,MACA,OAAO,MAAM,0CAA0C;AAAA,MACvD,QAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,IAEA,MAAM,QAAQ;AAAA,MACZ,UAAU;AAAA,MACV,MAAM,QAAQ;AAAA,MACd,QAAQ;AAAA,QAGN,MAAM,cAAc,KAAK,IAAI;AAAA,QAC7B,MAAM,UAAU,KAAK,IAAI;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA;AAEL,CAAC;",
+  "debugId": "C7A2F5CE34388C8C64756E2164756E21",
+  "names": []
+}

package/dist/cli/{chunk-6k8vp3ta.js → chunk-pbg5a4s3.js}

@@ -10,7 +10,7 @@ import {
 } from "./index.js";
 import {
   AGENTS
-} from "./chunk-bw22s759.js";
+} from "./chunk-6k4ftwze.js";
 import {
   frontmatter_default,
   i18nEnabled,
@@ -19,22 +19,23 @@ import {
   folderMetaSchema,
   scanBody,
   createModuleLoader
-} from "./chunk-xaz13gwg.js";
-import"./chunk-jts8mvcz.js";
-import {
-  scanProject
-} from "./chunk-zg2gtj10.js";
+} from "./chunk-v6ya5kcb.js";
 import {
   seconds,
   money,
   duration,
   DISALLOWED_TOOLS,
   runAgentHeadless,
+  CODEX_LOCKDOWN,
   readAgentOutput
-} from "./chunk-fa25z98p.js";
+} from "./chunk-273ygyr4.js";
 import {
   writeTextAtomic
 } from "./chunk-jq5n4avg.js";
+import"./chunk-gs7r695n.js";
+import {
+  scanProject
+} from "./chunk-5r8g91qn.js";
 
 // src/cli/commands/translate.ts
 import { defineCommand } from "citty";
@@ -58,6 +59,7 @@ var codexArgs = (lastMessagePath) => [
   "--ephemeral",
   "--sandbox",
   "read-only",
+  ...CODEX_LOCKDOWN,
   "--output-last-message",
   lastMessagePath,
   "-"
@@ -78,11 +80,15 @@ var emptyLedger = () => ({
   files: {},
   version: 1
 });
-var hashSource = (text) => createHash("sha256").update(text).digest("hex").slice(0, 16);
+var hashSource = (text) => createHash("sha256").update(text.replaceAll(`\r
+`, `
+`)).digest("hex").slice(0, 16);
+var CONFLICT_MARKER = /^(?:<{7}|={7}|>{7})(?:[ \r]|$)/mu;
 var readLedger = async (root) => {
+  const path = join(root, LEDGER_FILE);
   let raw;
   try {
-    raw = await readFile(join(root, LEDGER_FILE), "utf-8");
+    raw = await readFile(path, "utf-8");
   } catch {
     return emptyLedger();
   }
@@ -90,6 +96,15 @@ var readLedger = async (root) => {
   try {
     data = JSON.parse(raw);
   } catch {
+    if (CONFLICT_MARKER.test(raw)) {
+      throw new BlumeError({
+        code: "BLUME_TRANSLATE_LEDGER_CONFLICT",
+        file: path,
+        message: `${LEDGER_FILE} has unresolved merge-conflict markers, so it can't say which translations are current.`,
+        severity: "error",
+        suggestion: `Resolve the merge conflict in ${LEDGER_FILE}, then rerun.`
+      });
+    }
     return emptyLedger();
   }
   const parsed = ledgerSchema.safeParse(data);
@@ -215,7 +230,7 @@ var driftDiagnostics = (workList) => driftRows(workList).map((row) => ({
   file: row.file,
   message: row.status === "missing" ? `${row.sourceRel} has no "${row.locale}" translation.` : `The "${row.locale}" translation of ${row.sourceRel} is stale: its source changed since it was translated.`,
   severity: "error",
-  suggestion: "Run `blume translate --claude` (or `--codex`) to bring the translations up to date."
+  suggestion: "Run `blume translate --codex` (or `--claude`) to bring the translations up to date."
 }));
 var checkLines = (workList) => [
   ...driftRows(workList).map((row) => `  ${colors.red("✖")} ${row.sourceRel} → ${row.locale} ${colors.dim(row.status)}`),
@@ -345,7 +360,7 @@ import { mkdtemp, readFile as readFile3 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import pLimit from "p-limit";
 import pMap from "p-map";
-import { join as join3 } from "pathe";
+import { dirname as dirname2, join as join3 } from "pathe";
 
 // src/translate/meta.ts
 import { readFile as readFile2 } from "node:fs/promises";
@@ -360,6 +375,7 @@ var discoverTranslatableMeta = async (project) => {
     return { diagnostics: [], metas: [] };
   }
   const localeDirs = new Set(i18n.locales.flatMap((locale) => locale.code === i18n.defaultLocale ? [] : [locale.code.toLowerCase()]));
+  const versionDirs = new Set(project.config.versions?.archived.map((version) => version.id));
   const load = createModuleLoader();
   const metas = [];
   const diagnostics = [];
@@ -373,8 +389,8 @@ var discoverTranslatableMeta = async (project) => {
     });
     for (const file of files.toSorted()) {
       const dir = relative(contentRoot, dirname(file));
-      const first = dir.split("/")[0]?.toLowerCase();
-      if (first && localeDirs.has(first)) {
+      const [head] = dir.split("/");
+      if (head && (localeDirs.has(head.toLowerCase()) || versionDirs.has(head))) {
         continue;
       }
       const [raw, mod] = await Promise.all([
@@ -549,7 +565,8 @@ var ensureTrailingNewline = (text) => text.endsWith(`
 `) ? text : `${text}
 `;
 var validateTranslation = (sourceText, agentText) => {
-  const candidate = stripOuterFence(agentText);
+  const sourceIsFenced = stripOuterFence(sourceText) !== sourceText.trim();
+  const candidate = sourceIsFenced && countFenceLines(agentText) <= countFenceLines(sourceText) ? agentText.trim() : stripOuterFence(agentText);
   if (candidate === "") {
     return { ok: false, reason: "agent returned empty output" };
   }
@@ -622,7 +639,7 @@ var parseMetaTitles = (agentText, expectedKeys) => {
 };
 
 // src/translate/run.ts
-var metaDirKey = (dir) => dir === "" ? "." : dir;
+var metaKey = (meta) => dirname2(meta.sourceRel);
 var invokeAgent = async (context, prompt, index) => {
   const messagePath = join3(context.dir, `message-${index}.txt`);
   const result = await context.run(context.bin, translateAgentArgs(context.kind, messagePath), { cwd: context.dir, prompt, timeoutMs: context.timeoutMs });
@@ -666,7 +683,7 @@ var runMetaItem = async (item, index, context, ledger) => {
     item,
     status
   });
-  const titles = Object.fromEntries(item.entries.map((entry) => [metaDirKey(entry.meta.dir), entry.meta.title]));
+  const titles = Object.fromEntries(item.entries.map((entry) => [metaKey(entry.meta), entry.meta.title]));
   const target = context.targets.get(item.locale);
   const output = await invokeAgent(context, metaPrompt(titles, target, context.source), index);
   if (output.isError) {
@@ -674,7 +691,7 @@ var runMetaItem = async (item, index, context, ledger) => {
   }
   const parsed = parseMetaTitles(output.text, Object.keys(titles));
   for (const entry of item.entries) {
-    const translated = parsed.titles[metaDirKey(entry.meta.dir)];
+    const translated = parsed.titles[metaKey(entry.meta)];
     if (translated === undefined) {
       continue;
     }
@@ -765,10 +782,23 @@ var runTranslate = async (options) => {
 };
 
 // src/translate/work-list.ts
-import { existsSync as existsSync2 } from "node:fs";
+import { existsSync as existsSync2, readdirSync } from "node:fs";
 import { readFile as readFile4 } from "node:fs/promises";
-import { dirname as dirname2, extname, join as join4, relative as relative2 } from "pathe";
+import { dirname as dirname3, extname, join as join4, relative as relative2 } from "pathe";
 var PAGE_EXTENSIONS = new Set([".md", ".mdx"]);
+var rootFolders = () => {
+  const read = new Map;
+  return (contentRoot) => {
+    const cached = read.get(contentRoot);
+    if (cached) {
+      return cached;
+    }
+    const names = readdirSync(contentRoot);
+    read.set(contentRoot, names);
+    return names;
+  };
+};
+var scanForTranslation = (root) => scanProject(root, { mode: "dev" });
 var translatablePages = (project, i18n) => {
   const rootsByName = new Map(project.sources.flatMap((source) => source.staged || !source.contentRoot ? [] : [[source.name, source.contentRoot]]));
   const seen = new Set;
@@ -809,6 +839,7 @@ var partialWorkItems = async (universe, project, i18n, ledger, targetLocales, fo
   }
   const { root } = project.context;
   const pagePaths = new Set(project.graph.pages.flatMap((page) => page.sourcePath ? [page.sourcePath] : []));
+  const folders = rootFolders();
   const partials = new Map;
   for (const { page, contentRoot } of universe) {
     for (const partial of page.includes ?? []) {
@@ -825,7 +856,7 @@ var partialWorkItems = async (universe, project, i18n, ledger, targetLocales, fo
     const verbatim = !PAGE_EXTENSIONS.has(ext.toLowerCase());
     const contentRel = relative2(contentRoot, partialPath);
     for (const locale of targetLocales) {
-      const targetPath = join4(contentRoot, localeTargetPath(contentRel, ext, locale, i18n));
+      const targetPath = join4(contentRoot, localeTargetPath(contentRel, ext, locale, i18n, folders(contentRoot)));
       const item = (status) => {
         const partialItem = {
           kind: "page",
@@ -874,13 +905,14 @@ var computeWorkList = async (project, ledger, options = {}) => {
   const pageItems = [];
   let upToDate = 0;
   const universe = translatablePages(project, i18n);
+  const folders = rootFolders();
   for (const { page, contentRoot, ext, sourcePath } of universe) {
     const sourceRel = relative2(root, sourcePath);
     knownSources.add(sourceRel);
     const hash = hashSource(await readFile4(sourcePath, "utf-8"));
     const contentRel = relative2(contentRoot, sourcePath);
     for (const locale of targetLocales) {
-      const targetPath = join4(contentRoot, localeTargetPath(contentRel, ext, locale, i18n));
+      const targetPath = join4(contentRoot, localeTargetPath(contentRel, ext, locale, i18n, folders(contentRoot)));
       const item = (status) => ({
         kind: "page",
         locale,
@@ -915,7 +947,7 @@ var computeWorkList = async (project, ledger, options = {}) => {
     const entries = [];
     for (const source of meta.metas) {
       knownSources.add(source.sourceRel);
-      const targetDir = dirname2(metaTargetPath(source, locale));
+      const targetDir = dirname3(metaTargetPath(source, locale));
       const exists = ["meta.ts", "meta.js", "meta.mjs"].some((name) => existsSync2(join4(targetDir, name)));
       const hash = hashSource(source.raw);
       const stamp = ledger.files[source.sourceRel]?.[locale];
@@ -961,15 +993,15 @@ var MAX_CONCURRENCY = 16;
 var parseFlags = (args) => {
   const agents = Object.keys(AGENTS).filter((kind) => args[kind]);
   if (agents.length > 1) {
-    logger.error("Pass exactly one of --claude or --codex.");
+    logger.error("Pass exactly one of --codex or --claude.");
     process.exit(1);
   }
   if (args.check && agents.length > 0) {
-    logger.error("--check is read-only and never runs an agent; drop --claude/--codex.");
+    logger.error("--check is read-only and never runs an agent; drop --codex/--claude.");
     process.exit(1);
   }
   if (!args.check && agents.length === 0) {
-    logger.error("Pass --claude or --codex to choose the agent CLI that translates.");
+    logger.error("Pass --codex or --claude to choose the agent CLI that translates.");
     process.exit(1);
   }
   const timeoutS = args.timeout === undefined ? DEFAULT_TIMEOUT_S : Number(args.timeout);
@@ -1049,7 +1081,7 @@ var translateCommand = defineCommand({
     const root = process.cwd();
     const { agent, concurrency, timeoutS } = parseFlags(args);
     try {
-      const project = await scanProject(root, { mode: "build" });
+      const project = await scanForTranslation(root);
       if (!i18nEnabled(project.config)) {
         logger.error("i18n is not configured — add `i18n.locales` to blume.config to use `blume translate`.");
         process.exit(1);
@@ -1142,5 +1174,5 @@ export {
   translateCommand
 };
 
-//# debugId=0C250DC05B03939864756E2164756E21
-//# sourceMappingURL=chunk-6k8vp3ta.js.map
+//# debugId=85D111C5AFB273C164756E2164756E21
+//# sourceMappingURL=chunk-pbg5a4s3.js.map