canopycms 0.0.62 → 0.0.63

package/dist/ai/index.d.ts

@@ -7,6 +7,15 @@
 export { defineAIContentConfig } from './types';
 export { createAIContentHandler } from './handler';
 export { generateAIContent } from './generate';
+/**
+ * Convert MDX/Markdown body content to plain prose text (for a search index
+ * or any other "just the words" consumer). Distinct from the AI-content
+ * pipeline above: this strips markup down to human-readable text rather
+ * than preparing MDX for model consumption. See the source JSDoc for the
+ * full pipeline and why paired custom components keep their inner text
+ * while losing their tags.
+ */
+export { toPlainText } from './to-plain-text';
 export type { AIContentConfig, ExcludeConfig, BundleConfig, BundleFilter, FieldTransformFn, FieldTransforms, ComponentProps, ComponentTransformFn, ComponentTransforms, BodyTransformFn, BodyTransforms, EntryTransformFn, EntryTransforms, EntryTransformContext, AIManifest, AIManifestCollection, AIManifestEntry, AIManifestBundle, AIEntry, AIEntryMeta, } from './types';
 export type { AIContentHandlerOptions } from './handler';
 export type { GenerateOptions, GenerateResult } from './generate';

package/dist/ai/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,YAAY,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,OAAO,EACP,WAAW,GACZ,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,YAAY,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,OAAO,EACP,WAAW,GACZ,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA"}

package/dist/ai/index.js

@@ -7,4 +7,13 @@
 export { defineAIContentConfig } from './types.js';
 export { createAIContentHandler } from './handler.js';
 export { generateAIContent } from './generate.js';
+/**
+ * Convert MDX/Markdown body content to plain prose text (for a search index
+ * or any other "just the words" consumer). Distinct from the AI-content
+ * pipeline above: this strips markup down to human-readable text rather
+ * than preparing MDX for model consumption. See the source JSDoc for the
+ * full pipeline and why paired custom components keep their inner text
+ * while losing their tags.
+ */
+export { toPlainText } from './to-plain-text.js';
 //# sourceMappingURL=index.js.map

package/dist/ai/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/ai/to-plain-text.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Convert MDX/Markdown body content to plain prose text, suitable for a
+ * search index or any other consumer that wants "just the words".
+ *
+ * This is deliberately a *different* transform from `stripMdxImports`
+ * (strip-mdx.ts): that one is tuned for AI/RAG consumption and intentionally
+ * leaves JSX components intact, because their props often carry semantic
+ * data a model can use. `toPlainText` has the opposite goal — it removes ALL
+ * markup (JSX tags, JSX expressions, markdown syntax) and keeps only the
+ * prose, so **paired custom components lose their tags but keep their
+ * children's text**. That distinction is the whole reason this function
+ * exists: a hand-rolled plaintext stripper that treats a paired component
+ * like `<Callout>...</Callout>` as one opaque unit and deletes it wholesale
+ * silently drops every word inside it from the search index. `toPlainText`
+ * strips the `<Callout>`/`</Callout>` delimiters but keeps the sentence
+ * between them.
+ *
+ * Pipeline (each step operates on the previous step's output):
+ * 1. Strip YAML frontmatter (via `gray-matter`, the same parser
+ *    `content-store.ts` uses for `.md`/`.mdx` bodies).
+ * 2. Strip `import`/`export` statements (via `stripMdxImports`), which also
+ *    protects fenced code blocks from every later step.
+ * 3. Mask fenced code blocks and inline code spans, capturing their content
+ *    (fence markers / backticks are discarded, the code text is kept).
+ * 4. Strip JSX/HTML tags — opening, closing, and self-closing — leaving
+ *    whatever text sits between them in place. This is a single global
+ *    replace, not a matched-pair walk: because we never need the tag name or
+ *    the children as a unit (unlike `applyComponentTransforms`, which calls
+ *    an adopter transform per component), deleting every tag occurrence and
+ *    leaving the surrounding text untouched handles nesting for free.
+ * 5. Strip JSX expressions (`{...}`, including nested braces) — these are
+ *    code, not prose.
+ * 6. Strip common Markdown syntax: headings, emphasis/strikethrough, links
+ *    (keep the link text, drop the URL), images (keep alt text), blockquote
+ *    markers, list markers, and thematic breaks.
+ * 7. Restore the masked code from step 3 as plain text.
+ * 8. Collapse whitespace: trim each line, collapse runs of blank lines,
+ *    trim the result. Paragraph breaks (single blank lines) are preserved —
+ *    this does not flatten the output to one line.
+ */
+/**
+ * Convert MDX/Markdown body content to plain prose text.
+ *
+ * See the module doc above for the full pipeline and why this exists as a
+ * distinct transform from `stripMdxImports`. In short: frontmatter, code
+ * fences, inline code, JSX tags/expressions, and Markdown syntax are all
+ * stripped down to their human-readable text — code content and link/image
+ * text are kept, everything else is discarded. Paired custom components
+ * lose only their tags; the prose between them survives.
+ *
+ * Output preserves paragraph breaks (blank lines) but is not further
+ * chunked, weighted, or field-selected — composing that into a search
+ * document is left to the caller, since that logic is where adopter search
+ * indexes genuinely diverge (see docs/adopter-migration.md).
+ */
+export declare function toPlainText(markdown: string): string;
+//# sourceMappingURL=to-plain-text.d.ts.map

package/dist/ai/to-plain-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-plain-text.d.ts","sourceRoot":"","sources":["../../src/ai/to-plain-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAkNH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAapD"}

package/dist/ai/to-plain-text.js

@@ -0,0 +1,255 @@
+/**
+ * Convert MDX/Markdown body content to plain prose text, suitable for a
+ * search index or any other consumer that wants "just the words".
+ *
+ * This is deliberately a *different* transform from `stripMdxImports`
+ * (strip-mdx.ts): that one is tuned for AI/RAG consumption and intentionally
+ * leaves JSX components intact, because their props often carry semantic
+ * data a model can use. `toPlainText` has the opposite goal — it removes ALL
+ * markup (JSX tags, JSX expressions, markdown syntax) and keeps only the
+ * prose, so **paired custom components lose their tags but keep their
+ * children's text**. That distinction is the whole reason this function
+ * exists: a hand-rolled plaintext stripper that treats a paired component
+ * like `<Callout>...</Callout>` as one opaque unit and deletes it wholesale
+ * silently drops every word inside it from the search index. `toPlainText`
+ * strips the `<Callout>`/`</Callout>` delimiters but keeps the sentence
+ * between them.
+ *
+ * Pipeline (each step operates on the previous step's output):
+ * 1. Strip YAML frontmatter (via `gray-matter`, the same parser
+ *    `content-store.ts` uses for `.md`/`.mdx` bodies).
+ * 2. Strip `import`/`export` statements (via `stripMdxImports`), which also
+ *    protects fenced code blocks from every later step.
+ * 3. Mask fenced code blocks and inline code spans, capturing their content
+ *    (fence markers / backticks are discarded, the code text is kept).
+ * 4. Strip JSX/HTML tags — opening, closing, and self-closing — leaving
+ *    whatever text sits between them in place. This is a single global
+ *    replace, not a matched-pair walk: because we never need the tag name or
+ *    the children as a unit (unlike `applyComponentTransforms`, which calls
+ *    an adopter transform per component), deleting every tag occurrence and
+ *    leaving the surrounding text untouched handles nesting for free.
+ * 5. Strip JSX expressions (`{...}`, including nested braces) — these are
+ *    code, not prose.
+ * 6. Strip common Markdown syntax: headings, emphasis/strikethrough, links
+ *    (keep the link text, drop the URL), images (keep alt text), blockquote
+ *    markers, list markers, and thematic breaks.
+ * 7. Restore the masked code from step 3 as plain text.
+ * 8. Collapse whitespace: trim each line, collapse runs of blank lines,
+ *    trim the result. Paragraph breaks (single blank lines) are preserved —
+ *    this does not flatten the output to one line.
+ */
+import matter from 'gray-matter';
+import { stripMdxImports } from './strip-mdx.js';
+/**
+ * Masking markers use `@` right after `<` (and before the closing `>`),
+ * e.g. `<@B0@>`. `@` is not a valid JSX tag-name start (`[A-Za-z]` only), so
+ * TAG_RE below can never mistake the marker for a real tag — unlike
+ * transform-components.ts's `<<CODEBLOCK0>>` convention, which is safe
+ * there only because that module never runs a *generic* tag-stripping regex
+ * over its masked text (this one does: `<CODEBLOCK0>` inside `<<...>>`
+ * reads as a valid tag name to a naive tag matcher, which is exactly the
+ * bug this format avoids). `@` also doesn't participate in any of the
+ * Markdown-syntax regexes below, so a marker surviving to that stage is
+ * inert there too.
+ */
+const BLOCK_PREFIX = '<@B';
+const BLOCK_SUFFIX = '@>';
+const BLOCK_RESTORE_RE = /<@B(\d+)@>/g;
+const INLINE_PREFIX = '<@I';
+const INLINE_SUFFIX = '@>';
+const INLINE_RESTORE_RE = /<@I(\d+)@>/g;
+/** JSX attribute content: skips quoted strings so a `>` inside `title="a > b"` doesn't end the tag early. */
+const ATTR_CONTENT = `(?:[^<>"']|"[^"]*"|'[^']*')*`;
+/**
+ * Matches an opening, closing, or self-closing JSX/HTML tag, or a fragment (`<>`/`</>`).
+ *
+ * No trailing `\s*` before the final `\/?>`: `ATTR_CONTENT`'s `[^<>"']` alternative already
+ * matches whitespace, so a trailing `\s*` on top of it lets the engine split any whitespace run
+ * between the two in every possible proportion. On an unterminated tag (no closing `>` in the
+ * input) followed by a long whitespace run, that ambiguity is polynomial-ReDoS shaped (CodeQL
+ * `js/polynomial-redos`): matching cost is quadratic in the run length before the engine gives up
+ * and backtracks to try the next start position. Measured on a 128 KB whitespace tail: ~26s with
+ * the redundant `\s*`, ~1ms without it. `ATTR_CONTENT` already absorbs the trailing whitespace on
+ * its own, so removing the `\s*` changes no matched output.
+ */
+const TAG_RE = new RegExp(`<\\/?([A-Za-z][\\w.-]*)?(?:\\s${ATTR_CONTENT})?\\/?>`, 'g');
+/** True if `line` is a valid closing fence line for `marker` ("```" or "~~~"): the marker
+ * followed by nothing but whitespace through end of line — matching what `\1\s*$` required in
+ * the regex this replaced. */
+function isFenceCloseLine(line, marker) {
+    return line.startsWith(marker) && /^\s*$/.test(line.slice(marker.length));
+}
+/**
+ * Mask fenced code blocks (` ``` `/`~~~`), capturing each block's *content* so `restore`
+ * re-inserts plain text — no fence markers, no language tag.
+ *
+ * A hand-rolled line scan, not `/^(```|~~~).*\n([\s\S]*?)\n\1\s*$/gm`: that regex is a second
+ * polynomial-ReDoS shape (measured ~9s on ~530KB of body text with many unclosed fence openers,
+ * a plausible authoring accident — the same trigger class as `TAG_RE` above, in the same
+ * function). The lazy `[\s\S]*?` has no bound on how far it must scan looking for a closing
+ * `\1` that, for an unclosed fence, never arrives — it exhausts to the end of the string before
+ * giving up on that starting line, and `/gm` retries the same exhaustive scan at every
+ * subsequent fence-opener line, which is quadratic in the number of unclosed openers.
+ *
+ * This scans each line once. `nextCloseLine` is precomputed per marker type via a single
+ * backward pass, so any opener's nearest closer (or "none exists") is an O(1) lookup rather than
+ * a fresh forward scan — the change that makes the whole function O(n) regardless of how many
+ * fences are opened and never closed.
+ */
+function maskFencedCodeBlocks(body, blocks) {
+    const lines = body.split('\n');
+    const lineCount = lines.length;
+    // nextCloseLine[marker][i] = the nearest index >= i that closes `marker`, or -1 if none exists
+    // at or after i. Built right-to-left so each entry is O(1) given the next one.
+    const nextCloseLine = {
+        '```': new Array(lineCount + 1).fill(-1),
+        '~~~': new Array(lineCount + 1).fill(-1),
+    };
+    for (let i = lineCount - 1; i >= 0; i--) {
+        nextCloseLine['```'][i] = isFenceCloseLine(lines[i], '```') ? i : nextCloseLine['```'][i + 1];
+        nextCloseLine['~~~'][i] = isFenceCloseLine(lines[i], '~~~') ? i : nextCloseLine['~~~'][i + 1];
+    }
+    const outLines = [];
+    let i = 0;
+    while (i < lineCount) {
+        const line = lines[i];
+        const marker = line.startsWith('```') ? '```' : line.startsWith('~~~') ? '~~~' : null;
+        // A closer can never be the very next line: the original pattern requires TWO separate `\n`
+        // matches between the opener and `\1` (one ending the opener's line, one immediately before
+        // the closer), so even zero-width content needs a line of its own between them.
+        const searchFrom = i + 2;
+        const closeIndex = marker && searchFrom < lineCount ? nextCloseLine[marker][searchFrom] : -1;
+        if (!marker || closeIndex === -1) {
+            outLines.push(line);
+            i++;
+            continue;
+        }
+        const content = lines.slice(i + 1, closeIndex).join('\n');
+        const idx = blocks.length;
+        blocks.push(content);
+        // Matches the replaced regex's `\n${...}\n` callback wrapping: the placeholder becomes its
+        // own blank-line-delimited chunk. (Any resulting difference in surrounding blank-line COUNT
+        // is immaterial -- collapseWhitespace normalizes runs of 3+ newlines down to one blank line
+        // before this ever reaches a caller.)
+        outLines.push('', `${BLOCK_PREFIX}${idx}${BLOCK_SUFFIX}`, '');
+        i = closeIndex + 1;
+    }
+    return outLines.join('\n');
+}
+/**
+ * Mask fenced code blocks and inline code spans, capturing their *content*
+ * (not the raw fenced/backticked text) so `restore` re-inserts plain text —
+ * no fence markers, no language tag, no backticks.
+ */
+function maskCode(body) {
+    const blocks = [];
+    const inlines = [];
+    let masked = maskFencedCodeBlocks(body, blocks);
+    masked = masked.replace(/``(.+?)``|`([^`]+)`/g, (_match, double, single) => {
+        const idx = inlines.length;
+        inlines.push((double ?? single ?? '').trim());
+        return `${INLINE_PREFIX}${idx}${INLINE_SUFFIX}`;
+    });
+    return {
+        masked,
+        restore: (s) => {
+            s = s.replace(INLINE_RESTORE_RE, (_match, i) => inlines[Number(i)]);
+            s = s.replace(BLOCK_RESTORE_RE, (_match, i) => blocks[Number(i)]);
+            return s;
+        },
+    };
+}
+/**
+ * Remove balanced `{...}` groups (JSX expressions), including nested braces,
+ * in a single pass. Each removed top-level group collapses to one space so
+ * surrounding words don't merge.
+ */
+function stripBraceExpressions(text) {
+    let result = '';
+    let depth = 0;
+    for (const ch of text) {
+        if (ch === '{') {
+            if (depth === 0)
+                result += ' ';
+            depth++;
+            continue;
+        }
+        if (ch === '}') {
+            if (depth > 0)
+                depth--;
+            continue;
+        }
+        if (depth === 0)
+            result += ch;
+    }
+    return result;
+}
+/** Strip common Markdown syntax, keeping the human-readable text. */
+function stripMarkdownSyntax(text) {
+    return (text
+        // Headings: leading `#` markers
+        .replace(/^ {0,3}#{1,6}\s+/gm, '')
+        // Blockquotes: leading `>` markers (possibly nested). Each repetition
+        // of the outer `+` consumes a mandatory `>` first, so it can't loop on
+        // an empty match — linear, despite the nested-quantifier shape the
+        // linter's heuristic flags.
+        // eslint-disable-next-line security/detect-unsafe-regex
+        .replace(/^ {0,3}(?:>\s?)+/gm, '')
+        // Thematic breaks: a line of 3+ `-`, `*`, or `_` (optionally
+        // space-separated). The backreference (`\1`) pins every repetition to
+        // the same captured character, which the linter's heuristic doesn't
+        // model — same false-positive shape as above.
+        // eslint-disable-next-line security/detect-unsafe-regex
+        .replace(/^ {0,3}([-*_])(?:\s*\1){2,}\s*$/gm, '')
+        // List markers: bullet or ordered
+        .replace(/^(\s*)[-*+]\s+/gm, '$1')
+        .replace(/^(\s*)\d+[.)]\s+/gm, '$1')
+        // Images: keep alt text, drop the URL entirely
+        .replace(/!\[([^\]]*)\]\([^)]*\)/g, '$1')
+        // Links: keep the link text, drop the URL
+        .replace(/\[([^\]]*)\]\([^)]*\)/g, '$1')
+        // Strikethrough / bold / italic — longest markers first so `**` isn't
+        // consumed as two `*` matches
+        .replace(/~~([^~]+)~~/g, '$1')
+        .replace(/\*\*([^*]+)\*\*/g, '$1')
+        .replace(/__([^_]+)__/g, '$1')
+        .replace(/\*([^*]+)\*/g, '$1')
+        .replace(/\b_([^_]+)_\b/g, '$1'));
+}
+/** Trim each line, collapse runs of blank lines, and trim the whole result. Preserves paragraph breaks. */
+function collapseWhitespace(text) {
+    return text
+        .split('\n')
+        .map((line) => line.replace(/[ \t]+/g, ' ').trim())
+        .join('\n')
+        .replace(/\n{3,}/g, '\n\n')
+        .trim();
+}
+/**
+ * Convert MDX/Markdown body content to plain prose text.
+ *
+ * See the module doc above for the full pipeline and why this exists as a
+ * distinct transform from `stripMdxImports`. In short: frontmatter, code
+ * fences, inline code, JSX tags/expressions, and Markdown syntax are all
+ * stripped down to their human-readable text — code content and link/image
+ * text are kept, everything else is discarded. Paired custom components
+ * lose only their tags; the prose between them survives.
+ *
+ * Output preserves paragraph breaks (blank lines) but is not further
+ * chunked, weighted, or field-selected — composing that into a search
+ * document is left to the caller, since that logic is where adopter search
+ * indexes genuinely diverge (see docs/adopter-migration.md).
+ */
+export function toPlainText(markdown) {
+    const { content } = matter(markdown);
+    const withoutImports = stripMdxImports(content);
+    const { masked, restore } = maskCode(withoutImports);
+    let result = masked;
+    result = result.replace(TAG_RE, ' ');
+    result = stripBraceExpressions(result);
+    result = stripMarkdownSyntax(result);
+    result = restore(result);
+    result = collapseWhitespace(result);
+    return result;
+}
+//# sourceMappingURL=to-plain-text.js.map

package/dist/ai/to-plain-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-plain-text.js","sourceRoot":"","sources":["../../src/ai/to-plain-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C;;;;;;;;;;;GAWG;AACH,MAAM,YAAY,GAAG,KAAK,CAAA;AAC1B,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,gBAAgB,GAAG,aAAa,CAAA;AAEtC,MAAM,aAAa,GAAG,KAAK,CAAA;AAC3B,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,iBAAiB,GAAG,aAAa,CAAA;AAEvC,6GAA6G;AAC7G,MAAM,YAAY,GAAG,8BAA8B,CAAA;AAEnD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,iCAAiC,YAAY,SAAS,EAAE,GAAG,CAAC,CAAA;AAEtF;;8BAE8B;AAC9B,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc;IACpD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,MAAgB;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAA;IAE9B,+FAA+F;IAC/F,+EAA+E;IAC/E,MAAM,aAAa,GAAG;QACpB,KAAK,EAAE,IAAI,KAAK,CAAS,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,EAAE,IAAI,KAAK,CAAS,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjD,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7F,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QAErF,4FAA4F;QAC5F,4FAA4F;QAC5F,gFAAgF;QAChF,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAA;QACxB,MAAM,UAAU,GAAG,MAAM,IAAI,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5F,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAA;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpB,2FAA2F;QAC3F,4FAA4F;QAC5F,4FAA4F;QAC5F,sCAAsC;QACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,YAAY,GAAG,GAAG,GAAG,YAAY,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7D,CAAC,GAAG,UAAU,GAAG,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,IAAI,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAE/C,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,sBAAsB,EACtB,CAAC,MAAM,EAAE,MAA0B,EAAE,MAA0B,EAAE,EAAE;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7C,OAAO,GAAG,aAAa,GAAG,GAAG,GAAG,aAAa,EAAE,CAAA;IACjD,CAAC,CACF,CAAA;IAED,OAAO;QACL,MAAM;QACN,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE;YACrB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3E,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACzE,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,GAAG,CAAA;YAC9B,KAAK,EAAE,CAAA;YACP,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,EAAE,CAAA;YACtB,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,EAAE,CAAA;IAC/B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,CACL,IAAI;QACF,gCAAgC;SAC/B,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAClC,sEAAsE;QACtE,uEAAuE;QACvE,mEAAmE;QACnE,4BAA4B;QAC5B,wDAAwD;SACvD,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAClC,6DAA6D;QAC7D,sEAAsE;QACtE,oEAAoE;QACpE,8CAA8C;QAC9C,wDAAwD;SACvD,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;QACjD,kCAAkC;SACjC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACjC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC;QACpC,+CAA+C;SAC9C,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC;QACzC,0CAA0C;SACzC,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC;QACxC,sEAAsE;QACtE,8BAA8B;SAC7B,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACjC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CACnC,CAAA;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;SAClD,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;IAEpD,IAAI,MAAM,GAAG,MAAM,CAAA;IACnB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACpC,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACxB,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEnC,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/ai/transform-components.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transform-components.d.ts","sourceRoot":"","sources":["../../src/ai/transform-components.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAElE;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,CAiBtE;AAkDD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAiE9F"}
+{"version":3,"file":"transform-components.d.ts","sourceRoot":"","sources":["../../src/ai/transform-components.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAElE;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,CAiBtE;AA0HD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,mBAAmB,GAAG,MAAM,CAiE9F"}

package/dist/ai/transform-components.js

@@ -42,6 +42,75 @@ const BLOCK_RESTORE_RE = /<<CODEBLOCK(\d+)>>/g;
 const INLINE_PREFIX = '<<INLINECODE';
 const INLINE_SUFFIX = '>>';
 const INLINE_RESTORE_RE = /<<INLINECODE(\d+)>>/g;
+/** True if `line` is a valid closing fence line for `marker` ("```" or "~~~"): the marker
+ * followed by nothing but whitespace through end of line — matching what `\1\s*$` required in
+ * the regex this replaced. */
+function isFenceCloseLine(line, marker) {
+    return line.startsWith(marker) && /^\s*$/.test(line.slice(marker.length));
+}
+/**
+ * Mask fenced code blocks (` ``` `/`~~~`), capturing each block's raw text (fence lines
+ * included) exactly as `maskCodeBlocks` used to via `/^(```|~~~).*\n[\s\S]*?\n\1\s*$/gm`.
+ *
+ * A hand-rolled line scan, not that regex: it is a polynomial-ReDoS shape (measured ~9s on
+ * ~530KB of body text with many unclosed fence openers — an ordinary authoring accident, not a
+ * crafted payload) that CodeQL and three review rounds both missed elsewhere in this package
+ * (see `ai/to-plain-text.ts`'s identical fix). The lazy `[\s\S]*?` has no bound on how far it
+ * must scan looking for a closing `\1` that, for an unclosed fence, never arrives — it exhausts
+ * to the end of the string before giving up on that starting line, and `/gm` retries the same
+ * exhaustive scan at every subsequent fence-opener line.
+ *
+ * This scans each line once. `nextCloseLine` is precomputed per marker type via a single
+ * backward pass, so any opener's nearest closer (or "none exists") is an O(1) lookup instead of
+ * a fresh forward scan — the change that keeps the whole function O(n) regardless of how many
+ * fences are opened and never closed.
+ *
+ * One documented, harmless divergence from the replaced regex: `\s*` there is greedy over `\s`
+ * (which includes `\n`), so on a closer immediately followed by blank lines it could consume
+ * some of them into the match. This scan never does. Verified by fuzzing 8,000 random
+ * fence/marker combinations through this module's actual `applyComponentTransforms` pipeline:
+ * final output was byte-identical in 7,999/8,000 cases, and the one divergence was an extra
+ * blank line in a maximally adversarial nested-tag-plus-fence input, never a content change —
+ * `\s` is never itself matched by any component-tag pattern, so which side of a placeholder a
+ * run of blank lines lands on cannot affect what a transform sees or produces.
+ */
+function maskFencedCodeBlocks(body, blocks) {
+    const lines = body.split('\n');
+    const lineCount = lines.length;
+    // nextCloseLine[marker][i] = the nearest index >= i that closes `marker`, or -1 if none exists
+    // at or after i. Built right-to-left so each entry is O(1) given the next one.
+    const nextCloseLine = {
+        '```': new Array(lineCount + 1).fill(-1),
+        '~~~': new Array(lineCount + 1).fill(-1),
+    };
+    for (let i = lineCount - 1; i >= 0; i--) {
+        nextCloseLine['```'][i] = isFenceCloseLine(lines[i], '```') ? i : nextCloseLine['```'][i + 1];
+        nextCloseLine['~~~'][i] = isFenceCloseLine(lines[i], '~~~') ? i : nextCloseLine['~~~'][i + 1];
+    }
+    const outLines = [];
+    let i = 0;
+    while (i < lineCount) {
+        const line = lines[i];
+        const marker = line.startsWith('```') ? '```' : line.startsWith('~~~') ? '~~~' : null;
+        // A closer can never be the very next line: the original pattern requires TWO separate `\n`
+        // matches between the opener and `\1` (one ending the opener's line, one immediately before
+        // the closer), so even zero-width content needs a line of its own between them.
+        const searchFrom = i + 2;
+        const closeIndex = marker && searchFrom < lineCount ? nextCloseLine[marker][searchFrom] : -1;
+        if (!marker || closeIndex === -1) {
+            outLines.push(line);
+            i++;
+            continue;
+        }
+        // Whole matched span (fence lines included), matching the replaced regex's own capture.
+        const block = lines.slice(i, closeIndex + 1).join('\n');
+        const idx = blocks.length;
+        blocks.push(block);
+        outLines.push(`${BLOCK_PREFIX}${idx}${BLOCK_SUFFIX}`);
+        i = closeIndex + 1;
+    }
+    return outLines.join('\n');
+}
 /**
  * Mask fenced code blocks and inline code spans so component transforms
  * don't touch them. Returns the masked string and a restore function.
@@ -50,11 +119,7 @@ function maskCodeBlocks(body) {
     const blocks = [];
     const inlines = [];
     // 1. Mask fenced code blocks
-    let masked = body.replace(/^(```|~~~).*\n[\s\S]*?\n\1\s*$/gm, (block) => {
-        const idx = blocks.length;
-        blocks.push(block);
-        return `${BLOCK_PREFIX}${idx}${BLOCK_SUFFIX}`;
-    });
+    let masked = maskFencedCodeBlocks(body, blocks);
     // 2. Mask inline code spans (double-backtick first, then single-backtick)
     masked = masked.replace(/``[^`]+``|`[^`]+`/g, (span) => {
         const idx = inlines.length;

package/dist/ai/transform-components.js.map

@@ -1 +1 @@
-{"version":3,"file":"transform-components.js","sourceRoot":"","sources":["../../src/ai/transform-components.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,KAAK,GAAmB,EAAE,CAAA;IAChC,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAE7B,kFAAkF;IAClF,wDAAwD;IACxD,MAAM,SAAS,GAAG,uDAAuD,CAAA;IACzE,IAAI,KAA6B,CAAA;IAEjC,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,uDAAuD;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAA;QACxD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,6FAA6F;AAC7F,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAElD,MAAM,YAAY,GAAG,aAAa,CAAA;AAClC,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,gBAAgB,GAAG,qBAAqB,CAAA;AAE9C,MAAM,aAAa,GAAG,cAAc,CAAA;AACpC,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,iBAAiB,GAAG,sBAAsB,CAAA;AAEhD;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,6BAA6B;IAC7B,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,kCAAkC,EAAE,CAAC,KAAK,EAAE,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAA;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,OAAO,GAAG,YAAY,GAAG,GAAG,GAAG,YAAY,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAC1E,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA;QAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,GAAG,aAAa,GAAG,GAAG,GAAG,aAAa,EAAE,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE;YACrB,sDAAsD;YACtD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9D,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5D,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,UAA+B;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnC,uDAAuD;IACvD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,GAAG,MAAM,CAAA;IAEnB,MAAM,UAAU,GAAG,EAAE,CAAA;IAErB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAA;QAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;YAElC,wCAAwC;YACxC,8DAA8D;YAC9D,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,YAAY,WAAW,EAAE,GAAG,CAAC,CAAA;YAC7F,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;gBACxD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;gBACxC,IAAI,WAAW,KAAK,SAAS;oBAAE,OAAO,GAAG,CAAA;gBACzC,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,WAAW,CAAA;YACpB,CAAC,CAAC,CAAA;YAEF,+DAA+D;YAC/D,4EAA4E;YAC5E,8DAA8D;YAC9D,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,YAAY,KAAK,EAAE,GAAG,CAAC,CAAA;YAChF,IAAI,SAAiC,CAAA;YAErC,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAA;gBACjC,MAAM,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;gBAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;gBAE1C,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,KAAK,IAAI,GAAG,CAAA;gBAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;gBACnE,IAAI,QAAQ,KAAK,CAAC,CAAC;oBAAE,MAAK,CAAC,6CAA6C;gBAExE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBAChD,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAE1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;gBAC1C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBAC9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,4DAA4D;oBAC5D,SAAS,CAAC,SAAS,GAAG,OAAO,CAAA;oBAC7B,SAAQ;gBACV,CAAC;gBAED,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACzE,OAAO,GAAG,IAAI,CAAA;gBACd,6EAA6E;gBAC7E,SAAS,CAAC,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC,MAAM,CAAA;YACtD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,MAAK;IACrB,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,IAAY,EACZ,SAAiB,EACjB,IAAY,EACZ,QAAgB;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,GAAG,GAAG,SAAS,CAAA;IAErB,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,YAAY,QAAQ,WAAW,CAAC,IAAI,CAAC,SAAS,YAAY,YAAY,WAAW,CAAC,QAAQ,CAAC,EAAE,EAC3H,GAAG,CACJ,CAAA;IACD,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAA;IAExB,IAAI,KAA6B,CAAA;IACjC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACpB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,KAAK,EAAE,CAAA;YACP,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAA;QACrC,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,iCAAiC;YACjC,KAAK,EAAE,CAAA;QACT,CAAC;QACD,uCAAuC;IACzC,CAAC;IAED,OAAO,CAAC,CAAC,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACjD,CAAC"}
+{"version":3,"file":"transform-components.js","sourceRoot":"","sources":["../../src/ai/transform-components.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,KAAK,GAAmB,EAAE,CAAA;IAChC,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAE7B,kFAAkF;IAClF,wDAAwD;IACxD,MAAM,SAAS,GAAG,uDAAuD,CAAA;IACzE,IAAI,KAA6B,CAAA;IAEjC,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,uDAAuD;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAA;QACxD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,6FAA6F;AAC7F,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAElD,MAAM,YAAY,GAAG,aAAa,CAAA;AAClC,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,gBAAgB,GAAG,qBAAqB,CAAA;AAE9C,MAAM,aAAa,GAAG,cAAc,CAAA;AACpC,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,iBAAiB,GAAG,sBAAsB,CAAA;AAEhD;;8BAE8B;AAC9B,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc;IACpD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,MAAgB;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAA;IAE9B,+FAA+F;IAC/F,+EAA+E;IAC/E,MAAM,aAAa,GAAG;QACpB,KAAK,EAAE,IAAI,KAAK,CAAS,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,EAAE,IAAI,KAAK,CAAS,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjD,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7F,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QAErF,4FAA4F;QAC5F,4FAA4F;QAC5F,gFAAgF;QAChF,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAA;QACxB,MAAM,UAAU,GAAG,MAAM,IAAI,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5F,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,wFAAwF;QACxF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAA;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,GAAG,GAAG,GAAG,YAAY,EAAE,CAAC,CAAA;QACrD,CAAC,GAAG,UAAU,GAAG,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,6BAA6B;IAC7B,IAAI,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAE/C,0EAA0E;IAC1E,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAA;QAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,GAAG,aAAa,GAAG,GAAG,GAAG,aAAa,EAAE,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE;YACrB,sDAAsD;YACtD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9D,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5D,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,UAA+B;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnC,uDAAuD;IACvD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,GAAG,MAAM,CAAA;IAEnB,MAAM,UAAU,GAAG,EAAE,CAAA;IAErB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAA;QAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;YAElC,wCAAwC;YACxC,8DAA8D;YAC9D,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,YAAY,WAAW,EAAE,GAAG,CAAC,CAAA;YAC7F,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;gBACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;gBACxD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;gBACxC,IAAI,WAAW,KAAK,SAAS;oBAAE,OAAO,GAAG,CAAA;gBACzC,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,WAAW,CAAA;YACpB,CAAC,CAAC,CAAA;YAEF,+DAA+D;YAC/D,4EAA4E;YAC5E,8DAA8D;YAC9D,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,YAAY,KAAK,EAAE,GAAG,CAAC,CAAA;YAChF,IAAI,SAAiC,CAAA;YAErC,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAA;gBACjC,MAAM,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;gBAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;gBAE1C,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,KAAK,IAAI,GAAG,CAAA;gBAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;gBACnE,IAAI,QAAQ,KAAK,CAAC,CAAC;oBAAE,MAAK,CAAC,6CAA6C;gBAExE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBAChD,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAE1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;gBAC1C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBAC9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,4DAA4D;oBAC5D,SAAS,CAAC,SAAS,GAAG,OAAO,CAAA;oBAC7B,SAAQ;gBACV,CAAC;gBAED,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACzE,OAAO,GAAG,IAAI,CAAA;gBACd,6EAA6E;gBAC7E,SAAS,CAAC,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC,MAAM,CAAA;YACtD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,MAAK;IACrB,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,IAAY,EACZ,SAAiB,EACjB,IAAY,EACZ,QAAgB;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,GAAG,GAAG,SAAS,CAAA;IAErB,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,YAAY,QAAQ,WAAW,CAAC,IAAI,CAAC,SAAS,YAAY,YAAY,WAAW,CAAC,QAAQ,CAAC,EAAE,EAC3H,GAAG,CACJ,CAAA;IACD,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAA;IAExB,IAAI,KAA6B,CAAA;IACjC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACpB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,KAAK,EAAE,CAAA;YACP,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAA;QACrC,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,iCAAiC;YACjC,KAAK,EAAE,CAAA;QACT,CAAC;QACD,uCAAuC;IACzC,CAAC;IAED,OAAO,CAAC,CAAC,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACjD,CAAC"}

package/dist/api/comments.d.ts

@@ -56,14 +56,14 @@ export declare const COMMENT_ROUTES: {
     }, "strip", z.ZodTypeAny, {
         type: "branch" | "entry" | "field";
         text: string;
-        threadId?: string | undefined;
         entryPath?: import("../paths").LogicalPath | undefined;
+        threadId?: string | undefined;
         canopyPath?: string | undefined;
     }, {
         type: "branch" | "entry" | "field";
         text: string;
-        threadId?: string | undefined;
         entryPath?: import("../paths").LogicalPath | undefined;
+        threadId?: string | undefined;
         canopyPath?: string | undefined;
     }>, AddCommentResponse>;
     readonly resolve: import("./route-builder").RouteDefinition<z.ZodObject<{

package/dist/authorization/branch.d.ts

@@ -4,17 +4,58 @@
  * Handles checking if a user can access a branch based on ACLs.
  */
 import type { BranchContext } from '../types';
-import type { DefaultBranchAccess } from '../config';
+import type { CanopyConfig, DefaultBranchAccess } from '../config';
 import type { CanopyUser } from '../user';
 import type { BranchAccessResult } from './types';
+/** Options narrowing {@link checkBranchAccessWithDefault} to a specific branch's nature. */
+export interface BranchAccessOptions {
+    /**
+     * Whether this is the protected base branch -- pass
+     * `getBranchProtection(...).isProtected`. When true, the branch passes this
+     * layer wherever no explicit ACL decided the question, and the PATH layer alone
+     * decides what is readable. Explicit ACL verdicts still win in both directions
+     * (see the comment at the fallback site).
+     *
+     * This grant is load-bearing, not a convenience. The base branch takes no ACL
+     * (`updateBranchAccessHandler` rejects one outright, because an entry there
+     * would feed `allowed_by_acl` and confer Withdraw rights) and its `createdBy`
+     * is `canopycms-system`, so nobody is its creator. Without this, the branch
+     * every user lands on is unreachable under `defaultBranchAccess: 'deny'` with
+     * no way to configure around it -- which is what made 'deny' unusable for any
+     * site with non-admin editors.
+     *
+     * It cannot widen anything dangerous: workflow actions stay blocked because
+     * {@link canPerformWorkflowAction} disables its system-branch grant on the
+     * same flag, prod writes stay blocked by `getBranchWriteProtection().readOnly`,
+     * and the editor API 401s anonymous callers before authorization runs. What it
+     * buys is that a public-read `deployedAs: 'server'` site can run 'deny' with
+     * `defaultPathAccess: { read: 'allow' }` and still keep un-ACL'd work branches
+     * private -- previously that required the blunt `defaultBranchAccess: 'allow'`,
+     * which opened every work branch too.
+     */
+    isProtectedBranch?: boolean;
+}
 /**
  * Check if user has access to a branch with explicit default behavior.
+ *
+ * Precedence, highest first:
+ * 1. Admins and Reviewers
+ * 2. `managerOrAdminAllowed` lockdown
+ * 3. An explicit user/group ACL -- an allowlist omitting the creator still
+ *    denies them, so an admin can lock down a branch someone else created
+ * 4. With no ACL: the branch creator, then `defaultAccess`, and only where that
+ *    would deny, the protected base branch grant
+ *    (see {@link BranchAccessOptions.isProtectedBranch})
  */
-export declare function checkBranchAccessWithDefault(context: BranchContext, user: CanopyUser, defaultAccess?: DefaultBranchAccess): BranchAccessResult;
+export declare function checkBranchAccessWithDefault(context: BranchContext, user: CanopyUser, defaultAccess?: DefaultBranchAccess, options?: BranchAccessOptions): BranchAccessResult;
 /**
  * Create a branch access checker with bound default access.
+ *
+ * `config` is needed to resolve whether a branch is the protected base branch;
+ * it routes through `getBranchProtection`, the single source of truth for that
+ * question, rather than repeating the base-branch test here.
  */
-export declare function createCheckBranchAccess(defaultAccess?: DefaultBranchAccess): (context: BranchContext, user: CanopyUser) => BranchAccessResult;
+export declare function createCheckBranchAccess(defaultAccess?: DefaultBranchAccess, config?: Pick<CanopyConfig, 'mode' | 'defaultBaseBranch'>): (context: BranchContext, user: CanopyUser) => BranchAccessResult;
 /** Options tightening {@link canPerformWorkflowAction} beyond the default hybrid model. */
 export interface WorkflowActionOptions {
     /**
@@ -23,6 +64,13 @@ export interface WorkflowActionOptions {
      * would otherwise let anyone with general branch access submit/withdraw it
      * -- pass `getBranchProtection(...).isProtected` here so only
      * admins/reviewers/explicit-ACL users retain workflow rights on it.
+     *
+     * It is also forwarded to {@link checkBranchAccessWithDefault}, where the same
+     * flag GRANTS access (see {@link BranchAccessOptions.isProtectedBranch}). The
+     * two pull in opposite directions on purpose, and that is exactly the intended
+     * base-branch posture: readable by anyone the path layer permits, submittable
+     * by no one. The access layer says yes, then `isSystemBranch` below is false,
+     * so a non-creator/non-ACL/non-privileged user still gets `false` here.
      */
     isProtectedBranch?: boolean;
 }
@@ -37,6 +85,10 @@ export interface WorkflowActionOptions {
  * - Admins and Reviewers always have access (via checkBranchAccess)
  * - Unless `options.isProtectedBranch` is set, in which case the system-branch
  *   grant above is disabled (see {@link WorkflowActionOptions})
+ *
+ * The creator grant is enforced twice over: `checkBranchAccessWithDefault` now
+ * admits the creator (so the gate below no longer swallows them under
+ * `defaultBranchAccess: 'deny'`), and `userIsCreator` still decides the result.
  */
 export declare function canPerformWorkflowAction(context: BranchContext, user: CanopyUser, defaultAccess?: DefaultBranchAccess, options?: WorkflowActionOptions): boolean;
 //# sourceMappingURL=branch.d.ts.map

package/dist/authorization/branch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch.d.ts","sourceRoot":"","sources":["../../src/authorization/branch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAEjD;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,UAAU,EAChB,aAAa,GAAE,mBAA4B,GAC1C,kBAAkB,CAyBpB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,GAAE,mBAA4B,IACzE,SAAS,aAAa,EAAE,MAAM,UAAU,KAAG,kBAAkB,CAEtE;AAED,2FAA2F;AAC3F,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,UAAU,EAChB,aAAa,GAAE,mBAA4B,EAC3C,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CA0BT"}
+{"version":3,"file":"branch.d.ts","sourceRoot":"","sources":["../../src/authorization/branch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAGlE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAEjD,4FAA4F;AAC5F,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,UAAU,EAChB,aAAa,GAAE,mBAA4B,EAC3C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,kBAAkB,CAgDpB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,GAAE,mBAA4B,EAC3C,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,mBAAmB,CAAC,IAEjD,SAAS,aAAa,EAAE,MAAM,UAAU,KAAG,kBAAkB,CAMtE;AAED,2FAA2F;AAC3F,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,UAAU,EAChB,aAAa,GAAE,mBAA4B,EAC3C,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CA4BT"}