canopycms 0.0.63 → 0.0.65

package/dist/worker/cms-worker.js

@@ -14,7 +14,7 @@ import { GITHUB_TRACKING_REF_PREFIX, gitChildEnv, gitNetworkChildEnv } from '../
 import { resolveDeploymentName } from '../operating-mode/deployment-name.js';
 import { tryAcquireContentWriteLock } from '../utils/content-write-lock.js';
 import { getErrorMessage, isNodeError, redactCredentials } from '../utils/error.js';
-import { isNonFastForwardRejection, isStaleLeaseRejection } from '../utils/git.js';
+import { isNonFastForwardRejection, isRebaseInProgress, isStaleLeaseRejection } from '../utils/git.js';
 import { writeWorkerStatus } from './worker-status.js';
 import { workerLog, workerLogWarn, workerLogError } from './log.js';
 // Re-exported so the AWS entrypoint (packages/canopycms-cdk/worker/index.ts)
@@ -440,6 +440,87 @@ export class CmsWorker {
             `refs/heads/${this.baseBranch}`,
         ]);
     }
+    /**
+     * Guarantee a bare repo's config carries NO `remote.origin.url`, and so no
+     * embedded bot token.
+     *
+     * `git clone https://x-access-token:<token>@github.com/...` records that URL
+     * verbatim as `remote.origin.url`, and for `remote.git` that config lives on
+     * shared EFS. The security model in docs/deploying-to-aws.md -- "If Lambda is
+     * compromised, an attacker can read/write content on EFS but cannot push to
+     * GitHub", "Secrets stay on the worker" -- is false while that string is
+     * there: a compromised Lambda could read the token off EFS and, despite
+     * having no egress of its own, exfiltrate it by writing it into branch
+     * content the worker then pushes to GitHub.
+     *
+     * Nothing needs the remote: every push passes the URL explicitly as an
+     * argument (see the `git.push(this.buildGitHubUrl(), ...)` call sites), and
+     * `verifyBaseBranchExists` reads local refs.
+     *
+     * VERIFIES rather than assuming: it re-reads the config and throws if the URL
+     * survives, because the previous code's `.catch(() => {})` meant a failed
+     * scrub was indistinguishable from a successful one.
+     */
+    async scrubPersistedRemote(gitDir) {
+        const git = simpleGit({ baseDir: gitDir });
+        // `git config --get` exits 1 with no output when the key is absent.
+        // simple-git does NOT reliably throw on that -- verified against
+        // simple-git 3.36: it resolves with an empty string -- so an empty result
+        // must be read as "absent" too. Treating "" as a surviving URL is what
+        // made the first version of this reject every clean scrub.
+        //
+        // 'unreadable' is deliberately distinct from 'absent'. A read that fails
+        // for any OTHER reason must not be mistaken for "no token here": that
+        // would let the pre-check below short-circuit and skip the scrub entirely,
+        // silently leaving a token-bearing config on shared EFS -- the exact
+        // outcome this function exists to prevent. Fail closed and attempt the
+        // removal instead.
+        const readOriginUrl = async () => {
+            try {
+                const url = (await git.raw(['config', '--get', 'remote.origin.url'])).trim();
+                return url === '' ? null : url;
+            }
+            catch {
+                // ANY throw is 'unreadable', never 'absent'. The genuinely-absent case
+                // does not reach here at all -- simple-git resolves with '' (verified
+                // against 3.36: it only treats a task as failed when stderr is
+                // non-empty, and a missing key writes nothing to stderr). So a throw
+                // means something actually went wrong, and mapping that to "no token
+                // here" would be the one fail-OPEN reading available.
+                //
+                // An earlier version tried to classify git's exit-1 "key not found"
+                // from the message text. That was dead code -- simple-git's GitError
+                // message is raw stdout+stderr with no exit-code text -- and its
+                // empty-message fallback mapped a hypothetical throw to 'absent',
+                // which is exactly the direction this must not fail.
+                return 'unreadable';
+            }
+        };
+        const before = await readOriginUrl();
+        if (before === null)
+            return;
+        if (before === 'unreadable') {
+            workerLogWarn(`  Could not read remote.origin.url in ${gitDir}; attempting the scrub anyway rather than assuming it is absent`);
+        }
+        try {
+            await git.removeRemote('origin');
+        }
+        catch (err) {
+            // Reached only from the 'unreadable' path, where the remote may in fact
+            // not exist. Let the verification below decide rather than failing here:
+            // it is the authoritative check, and it fails closed.
+            workerLogWarn(`  removeRemote('origin') failed in ${gitDir}: ${getErrorMessage(err)} -- verifying directly`);
+        }
+        // Fails closed on BOTH a surviving URL and an unverifiable read: if we
+        // cannot prove the token is gone from shared storage, we do not proceed.
+        const remaining = await readOriginUrl();
+        if (remaining !== null) {
+            throw new Error(`Could not confirm the 'origin' remote is gone from ${gitDir} (${remaining === 'unreadable'
+                ? 'its config was unreadable'
+                : 'its config still records a URL'}). For a token-bearing clone URL that means the GitHub bot token may be persisted on ` +
+                `shared storage. Refusing to continue.`);
+        }
+    }
     /**
      * Ensure remote.git bare repo exists.
      * On first run, clone from GitHub as a bare repo.
@@ -465,6 +546,14 @@ export class CmsWorker {
             exists = false;
         }
         if (exists) {
+            // SELF-HEAL, before anything else touches this repo. The previous
+            // already-exists path fast-returned without ever re-checking the config,
+            // so a token that survived one scrub survived forever -- and a clone
+            // interrupted by SIGKILL/power-off between `git clone` and the scrub left
+            // a repo whose config already held the token, which additionally hit the
+            // "delete remote.git and restart" refusal below and so sat on EFS until
+            // an operator acted.
+            await this.scrubPersistedRemote(this.remoteGitPath);
             try {
                 await this.verifyBaseBranchExists(this.remoteGitPath);
             }
@@ -479,21 +568,30 @@ export class CmsWorker {
         }
         workerLog('Initializing remote.git from GitHub...');
         const git = simpleGit();
-        await git.clone(this.buildGitHubUrl(), this.remoteGitPath, ['--bare']);
+        // Clone under a TEMP name and rename into place only once the token has
+        // been scrubbed and the repo verified, so `remote.git` never exists on EFS
+        // in a token-bearing state. A crash mid-clone now leaves only this staging
+        // directory, which the next boot deletes -- rather than a poisoned
+        // `remote.git` that fs.stat cannot distinguish from a healthy one.
+        const stagingPath = `${this.remoteGitPath}.cloning`;
+        await fs.rm(stagingPath, { recursive: true, force: true });
         try {
-            await this.verifyBaseBranchExists(this.remoteGitPath);
+            await git.clone(this.buildGitHubUrl(), stagingPath, ['--bare']);
+            // Before the rename, so the token is gone from the config the moment the
+            // repo becomes reachable under its real name. Throws (rather than
+            // swallowing) if the scrub does not take.
+            await this.scrubPersistedRemote(stagingPath);
+            await this.verifyBaseBranchExists(stagingPath);
         }
         catch (err) {
-            workerLogError(`remote.git base branch verification failed after clone: ${getErrorMessage(err)}`);
+            workerLogError(`remote.git clone failed: ${redactCredentials(getErrorMessage(err))}`);
             // Deleting before throwing is what makes this recoverable: the next
             // start() sees no remote.git and re-clones, instead of being stuck
             // forever behind a poisoned bare repo that fs.stat alone can't detect.
-            await fs.rm(this.remoteGitPath, { recursive: true, force: true });
-            throw new Error(`remote.git clone of ${this.config.githubOwner}/${this.config.githubRepo} has no branch '${this.baseBranch}' - the GitHub repository is empty or the base branch does not exist. Push an initial commit to '${this.baseBranch}' and restart the worker (systemd will retry automatically).`);
+            await fs.rm(stagingPath, { recursive: true, force: true });
+            throw new Error(`remote.git clone of ${this.config.githubOwner}/${this.config.githubRepo} failed or has no branch '${this.baseBranch}' - the GitHub repository may be empty, or the base branch may not exist. Push an initial commit to '${this.baseBranch}' and restart the worker (systemd will retry automatically).`);
         }
-        // Remove the origin remote so the token doesn't persist in config
-        const bareGit = simpleGit({ baseDir: this.remoteGitPath });
-        await bareGit.removeRemote('origin').catch(() => { });
+        await fs.rename(stagingPath, this.remoteGitPath);
         workerLog('remote.git initialized');
     }
     /**
@@ -1780,6 +1878,14 @@ export class CmsWorker {
      * same idiom on the write side.
      */
     async afterConflictDetectedForTesting() { }
+    /**
+     * Test seam, sibling of {@link afterConflictDetectedForTesting}: runs at the
+     * instant a rebase round has succeeded, before the completion path (cache
+     * invalidation, conflict metadata, [SYNC-H1] marker) executes. Exists so a
+     * test can lose the content-write lock at exactly the point where bailing out
+     * would strand a rewritten history.
+     */
+    async afterRebaseCompletedForTesting() { }
     async rebaseActiveBranches() {
         // PR-W1: collected across the loop below and returned as a summary
         // (folded into worker-status.json by syncGit()). Purely additive
@@ -1878,8 +1984,16 @@ export class CmsWorker {
                 // below is an awaited subprocess, never a synchronous block, so the
                 // refresh keeps firing for the whole hold.
                 let releaseContentLock;
+                // [SYNC-C1] If the lock is lost mid-hold, a writer may now be live
+                // against this same tree. Every git step below is destructive, so
+                // record it and bail before the next one rather than replaying over
+                // an editor's concurrent save.
+                let contentLockCompromised = false;
                 try {
-                    releaseContentLock = await tryAcquireContentWriteLock(branchPath);
+                    releaseContentLock = await tryAcquireContentWriteLock(branchPath, (lockErr) => {
+                        contentLockCompromised = true;
+                        workerLogWarn(`  Content-write lock compromised mid-rebase for ${branchDir}: ${getErrorMessage(lockErr)}`);
+                    });
                 }
                 catch (lockErr) {
                     if (isNodeError(lockErr) && lockErr.code === 'ELOCKED') {
@@ -1892,6 +2006,83 @@ export class CmsWorker {
                     throw lockErr;
                 }
                 try {
+                    // Recover an INTERRUPTED rebase before anything else looks at this
+                    // tree. A clone left with .git/rebase-merge (or rebase-apply) reports
+                    // uncommitted changes, so without this the dirty check below would
+                    // classify it `skippedDirty` on every cycle FOREVER while
+                    // branch-health scanned it as healthy -- and editors would meanwhile
+                    // read, and be able to save over, conflict-marker content.
+                    //
+                    // An in-progress rebase is always this worker's own abandoned work:
+                    // it is the only thing that ever rebases these clones, and it got
+                    // here via a crash, an OOM, a spot interruption, or the ASG rolling
+                    // the instance (which happens on EVERY `cdk deploy`, while `stop()`
+                    // drains for at most taskTimeoutMs).
+                    //
+                    // NOT LOSSLESS, and it is important not to claim otherwise. `git
+                    // rebase --abort` hard-resets tracked files to the pre-rebase head.
+                    // While the worker was DOWN nothing held the [SYNC-C1] content-write
+                    // lock, so an editor could have saved into this wedged clone and
+                    // received a 200; that save is a working-tree modification, and the
+                    // abort reverts it. (New, untracked entry files survive; edits to
+                    // existing ones do not.) Taking the lock here stops any FURTHER save
+                    // racing the abort, but cannot recover one that already landed.
+                    //
+                    // Aborting anyway is still the right call: the alternative is a
+                    // branch wedged forever whose tree serves conflict-marker content to
+                    // editors. What must not happen is doing it SILENTLY -- so anything
+                    // modified beyond the rebase's own conflict state is logged by path
+                    // first, which is the only record an operator would have.
+                    if (await isRebaseInProgress(branchPath)) {
+                        const preAbort = await branchGit.status().catch(() => null);
+                        // Keyed on the WORKING-TREE column only. The two porcelain columns
+                        // mean different things here, and conflating them produces a false
+                        // data-loss report on essentially every conflict-wedged recovery
+                        // (verified against real git, mid-rebase):
+                        //
+                        //   `M ` index=M, wd=' '  -- the interrupted replay's own cleanly
+                        //                            merged files, already STAGED. These
+                        //                            are committed history and survive the
+                        //                            abort untouched. Not collateral.
+                        //   ` M` index=' ', wd=M  -- a working-tree modification nothing
+                        //                            staged: an editor's save landing while
+                        //                            the worker was down. The abort
+                        //                            discards exactly these.
+                        //   `??`                  -- untracked; the abort leaves them.
+                        //
+                        // KNOWN GAP, stated rather than hidden: a save onto one of the
+                        // rebase's own conflicted paths (the "saved over conflict-marker
+                        // content" case) is excluded below, because the file reads `UU`
+                        // whether or not an editor touched it -- status alone cannot tell
+                        // the two apart. Those discards go unlogged.
+                        const collateral = (preAbort?.files ?? [])
+                            .filter((f) => !preAbort?.conflicted.includes(f.path))
+                            .filter((f) => f.working_dir !== ' ' && f.working_dir !== '?')
+                            .map((f) => f.path);
+                        if (collateral.length > 0) {
+                            workerLogWarn(`  ${branchDir}: aborting the interrupted rebase will DISCARD working-tree changes to ` +
+                                `${collateral.length} file(s) saved while the worker was down: ${collateral.join(', ')}`);
+                        }
+                        workerLogWarn(`  ${branchDir}: found an interrupted rebase (this worker's own abandoned work) -- aborting it to recover the branch`);
+                        try {
+                            await branchGit.rebase(['--abort']);
+                        }
+                        catch (abortErr) {
+                            // Leave it for the next cycle rather than pressing on: every step
+                            // below assumes a clean tree.
+                            const reason = redactCredentials(`could not abort interrupted rebase: ${getErrorMessage(abortErr)}`);
+                            workerLogWarn(`  Skipping ${branchDir}: ${reason}`);
+                            failed.push({ branch: branchDir, error: reason });
+                            // Record on branch metadata too, like the other two failure exits
+                            // (`!completed` and the outer catch). Without this a persistently
+                            // un-abortable wedge appeared in worker-status.json but never set
+                            // a `syncFailureReason`, so the admin branch panel showed nothing
+                            // -- and this is precisely the state that needs an operator,
+                            // since it is the one the next cycle cannot fix by itself.
+                            await this.recordRebaseFailure(branchPath, branchDir, reason);
+                            continue;
+                        }
+                    }
                     // Skip dirty branches — editor has unsaved changes that can't be rebased.
                     // Now inside the lock, so no write can land between this check and the
                     // rebase below.
@@ -1988,6 +2179,12 @@ export class CmsWorker {
                     let failureReason;
                     const MAX_ROUNDS = 50; // safety limit against infinite loops
                     for (let round = 0; round < MAX_ROUNDS && !completed; round++) {
+                        // Re-checked every round: the compromise can land between rounds,
+                        // and `--continue`/`--skip` are as destructive as the initial
+                        // rebase. Handled after the loop so it cannot be mistaken for the
+                        // `!completed` rebase-FAILURE path below.
+                        if (contentLockCompromised)
+                            break;
                         try {
                             if (nextAction === 'start') {
                                 // The pinned base tip fetched above (single-branch clones have
@@ -2009,11 +2206,59 @@ export class CmsWorker {
                                 await this.afterConflictDetectedForTesting();
                                 // During rebase, --theirs = the branch being replayed (editor's work).
                                 // (git rebase reverses ours/theirs: "ours" is the rebase target, "theirs" is the branch.)
+                                //
+                                // MODIFY/DELETE conflicts have no "their version" to check out
+                                // and must be resolved by staging a delete or an add instead.
+                                // `git checkout --theirs` on one exits non-zero ("path ... does
+                                // not have their version") and simple-git throws -- and because
+                                // this loop body IS the round loop's catch, that throw escapes
+                                // the round loop entirely, skipping BOTH `rebase --abort` sites
+                                // below and leaving the clone wedged mid-rebase forever. The
+                                // index/working-tree code pair identifies which side deleted
+                                // (verified against real git, not inferred):
+                                //
+                                //   U/D  "deleted by them"  -- the BRANCH deleted it, base
+                                //        modified it. Git leaves base's version in the tree.
+                                //        Keep-branch-version means honouring the delete: git rm.
+                                //   D/U  "deleted by us"    -- base deleted it, the BRANCH
+                                //        modified it. Git leaves the branch's version in the
+                                //        tree. Keep-branch-version means keeping it: git add.
+                                //
+                                // Any per-file resolution that STILL fails routes into the
+                                // `!completed` path below (which aborts and records) instead of
+                                // escaping -- deliberately NOT a rethrow, since a throw from
+                                // here is exactly the bug being fixed.
+                                const conflictKind = new Map(st.files.map((f) => [f.path, `${f.index}${f.working_dir}`]));
+                                let resolutionFailure;
                                 for (const file of st.conflicted) {
-                                    await branchGit.raw(['checkout', '--theirs', file]);
-                                    await branchGit.add(file);
+                                    const kind = conflictKind.get(file);
+                                    try {
+                                        if (kind === 'UD') {
+                                            await branchGit.raw(['rm', '-f', '--', file]);
+                                        }
+                                        else if (kind === 'DU') {
+                                            await branchGit.add(file);
+                                        }
+                                        else {
+                                            await branchGit.raw(['checkout', '--theirs', file]);
+                                            await branchGit.add(file);
+                                        }
+                                    }
+                                    catch (resolveErr) {
+                                        resolutionFailure =
+                                            `failed to resolve conflicted file '${file}' (status ${kind ?? '??'}): ` +
+                                                getErrorMessage(resolveErr);
+                                        break;
+                                    }
                                     conflictedFiles.push(file);
                                 }
+                                if (resolutionFailure !== undefined) {
+                                    // Same exit shape as the "unexpected error" branch below: set
+                                    // failureReason and break, letting the `!completed` block do
+                                    // the single `rebase --abort` and record the failure once.
+                                    failureReason = resolutionFailure;
+                                    break;
+                                }
                                 // nextAction stays 'continue'
                             }
                             else {
@@ -2037,6 +2282,42 @@ export class CmsWorker {
                             }
                         }
                     }
+                    // Outside the round loop's try/catch, so a throwing test hook can
+                    // never be misread as a rebase error.
+                    if (completed)
+                        await this.afterRebaseCompletedForTesting();
+                    // [SYNC-C1] A lost lock is a RETRY, not a rebase failure: nothing is
+                    // wrong with the branch, we simply can no longer prove we were the
+                    // only writer. Handled ahead of the `!completed` block so it never
+                    // records a user-visible rebaseFailure or lands in `failed[]`.
+                    //
+                    // ONLY when the rebase did not complete. Bailing out of a COMPLETED
+                    // rebase would be worse than useless: the history is already
+                    // rewritten (so `--abort` is a no-op), and skipping the completion
+                    // path below strands three things the next cycle will never redo,
+                    // because a caught-up branch short-circuits at the `behindCount === 0`
+                    // check above -- the [SYNC-H1] `markHistoryRewritten` marker (without
+                    // which the editor's next submit is rejected non-fast-forward and
+                    // mis-diagnosed as another deployment), the content-cache
+                    // invalidation for a tree that DID change, and the conflictStatus
+                    // save. That converts a transient lock compromise into a permanently
+                    // wedged published branch.
+                    //
+                    // Nor does bailing protect a racing save: a rebase replays COMMITTED
+                    // history, while a concurrent save is uncommitted working-tree state,
+                    // and that writer is already told to retry via
+                    // ContentWriteLockBusyError. So when the rebase completed, log the
+                    // lost exclusivity loudly and finish the job.
+                    if (contentLockCompromised && !completed) {
+                        workerLogWarn(`  Skipping ${branchDir}: content-write lock was compromised mid-rebase (retrying next cycle)`);
+                        // No-op when no rebase is in progress; failure is expected there.
+                        await branchGit.rebase(['--abort']).catch(() => { });
+                        skippedLocked.push(branchDir);
+                        continue;
+                    }
+                    if (contentLockCompromised) {
+                        workerLogWarn(`  Content-write lock for ${branchDir} was compromised, but its rebase had already completed -- finishing the sync (history is rewritten; skipping now would strand the history-rewrite marker and wedge the branch)`);
+                    }
                     if (!completed) {
                         // PR-W2 (M1 rider): failureReason is only set on the "unexpected
                         // error" break above -- MAX_ROUNDS exhaustion is a distinct exit
@@ -2174,6 +2455,34 @@ export class CmsWorker {
                     }
                 }
                 finally {
+                    // Last-resort guarantee that NO exit path leaves this clone
+                    // mid-rebase -- including an unexpected throw from any git step
+                    // above, which lands in the outer catch and previously only logged.
+                    //
+                    // It must live HERE rather than in that outer catch: the catch runs
+                    // AFTER this finally has released the content-write lock, so aborting
+                    // there would hard-reset a working tree an editor's save could
+                    // already be racing -- precisely the [SYNC-C1] hazard the lock
+                    // exists to prevent. Inside the finally the lock is still held --
+                    // EXCEPT on the narrow path where it was compromised mid-hold, in
+                    // which case a newly-admitted writer may already be live and this
+                    // abort carries the same exposure as the compromise path's own abort
+                    // above. Not special-cased: leaving a clone wedged mid-rebase is the
+                    // worse outcome, and the writer in that window is already being told
+                    // to retry.
+                    //
+                    // Guarded on actual rebase state so the happy path and the `continue`
+                    // exits cost one stat and do nothing.
+                    try {
+                        if (await isRebaseInProgress(branchPath)) {
+                            workerLogWarn(`  ${branchDir}: rebase still in progress on exit -- aborting so the clone is not left wedged`);
+                            await branchGit.rebase(['--abort']);
+                        }
+                    }
+                    catch (abortErr) {
+                        // Best effort: the next cycle's recovery check retries this.
+                        workerLogWarn(`  Failed to abort in-progress rebase for ${branchDir}: ${getErrorMessage(abortErr)}`);
+                    }
                     // [SYNC-C1] Released on EVERY exit -- the `continue`s above, a throw
                     // into the outer catch, and the happy path alike. A stranded lock
                     // would wedge every write to this branch until it went stale.
@@ -2212,4 +2521,3 @@ export class CmsWorker {
         }
     }
 }
-//# sourceMappingURL=cms-worker.js.map

package/dist/worker/log.d.ts

@@ -58,4 +58,3 @@ export declare function workerLogError(...args: unknown[]): void;
  * legitimately plain `console` under Lambda. This is the half that covers them.
  */
 export declare function installWorkerLogger(): void;
-//# sourceMappingURL=log.d.ts.map

package/dist/worker/log.js

@@ -71,4 +71,3 @@ export function workerLogError(...args) {
 export function installWorkerLogger() {
     setCanopyLogger({ log: workerLog, warn: workerLogWarn, error: workerLogError });
 }
-//# sourceMappingURL=log.js.map

package/dist/worker/task-queue-config.d.ts

@@ -1,4 +1,4 @@
-import type { CanopyConfig } from '../config';
+import type { CanopyConfig } from '../config/index.js';
 /**
  * Get the task queue directory for async worker operations.
  *
@@ -6,4 +6,3 @@ import type { CanopyConfig } from '../config';
  * In dev mode: {cwd}/.canopy-dev/.tasks
  */
 export declare function getTaskQueueDir(config: Pick<CanopyConfig, 'mode'>): string;
-//# sourceMappingURL=task-queue-config.d.ts.map

package/dist/worker/task-queue-config.js

@@ -17,4 +17,3 @@ export function getTaskQueueDir(config) {
         }
     }
 }
-//# sourceMappingURL=task-queue-config.js.map

package/dist/worker/task-queue.d.ts

@@ -2,7 +2,7 @@
  * CanopyCMS task queue — re-exports from the generic task-queue module
  * with CMS-specific action types and a WorkerTask alias.
  */
-import type { Task, TaskQueueLogger } from '../task-queue';
+import type { Task, TaskQueueLogger } from '../task-queue/index.js';
 /**
  * Actions the EC2 worker can execute on behalf of Lambda.
  */
@@ -13,6 +13,5 @@ export type WorkerTask = Task & {
 };
 export declare const cmsTaskQueueLogger: TaskQueueLogger;
 export { enqueueTask, dequeueTask, completeTask, failTask, retryTask, requeueFailedTask, recoverOrphanedTasks, cleanupOldTasks, getTask, getTask as getTaskResult, // backward-compatible alias
-listTasks, getQueueStats, listCorruptTaskFiles, } from '../task-queue';
-export type { Task, TaskStatus, QueueStats, TaskQueueLogger, CorruptTaskFile } from '../task-queue';
-//# sourceMappingURL=task-queue.d.ts.map
+listTasks, getQueueStats, listCorruptTaskFiles, } from '../task-queue/index.js';
+export type { Task, TaskStatus, QueueStats, TaskQueueLogger, CorruptTaskFile } from '../task-queue/index.js';

package/dist/worker/task-queue.js

@@ -17,4 +17,3 @@ export const cmsTaskQueueLogger = {
 // ============================================================================
 export { enqueueTask, dequeueTask, completeTask, failTask, retryTask, requeueFailedTask, recoverOrphanedTasks, cleanupOldTasks, getTask, getTask as getTaskResult, // backward-compatible alias
 listTasks, getQueueStats, listCorruptTaskFiles, } from '../task-queue/index.js';
-//# sourceMappingURL=task-queue.js.map

package/dist/worker/worker-status.d.ts

@@ -27,7 +27,7 @@
  * snapshot -- whichever lands last -- never a corrupt or interleaved mix of
  * both writers' data.
  */
-import type { WorkerStatusReport } from '../types';
+import type { WorkerStatusReport } from '../types.js';
 export declare const WORKER_STATUS_FILE = "worker-status.json";
 /**
  * Write the worker's status report to `{taskDir}/worker-status.json`.
@@ -45,4 +45,3 @@ export declare const WORKER_STATUS_FILE = "worker-status.json";
  * catch, which logs and continues.
  */
 export declare function writeWorkerStatus(taskDir: string, report: WorkerStatusReport): Promise<void>;
-//# sourceMappingURL=worker-status.d.ts.map

package/dist/worker/worker-status.js

@@ -50,4 +50,3 @@ export async function writeWorkerStatus(taskDir, report) {
     const stamped = { ...report, updatedAt: new Date().toISOString() };
     await atomicWriteFile(filePath, JSON.stringify(stamped, null, 2));
 }
-//# sourceMappingURL=worker-status.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "@codemirror/language, @lezer/highlight: workaround — @mdxeditor/editor uses cm6-theme-basic-light which peer-requires these but mdxeditor doesn't declare them as dependencies",
   "name": "canopycms",
-  "version": "0.0.63",
+  "version": "0.0.65",
   "description": "CanopyCMS core package: schema-driven content, branch-aware editing, and editor UI for Next.js.",
   "license": "MIT",
   "repository": {
@@ -64,10 +64,6 @@
     "./utils/error": {
       "import": "./dist/utils/error.js",
       "types": "./dist/utils/error.d.ts"
-    },
-    "./test-utils": {
-      "import": "./dist/test-utils/index.js",
-      "types": "./dist/test-utils/index.d.ts"
     }
   },
   "files": [
@@ -107,6 +103,7 @@
     "minimatch": "^9.0.7",
     "minimist": "^1.2.8",
     "pathe": "^1.1.2",
+    "picocolors": "^1.1.1",
     "proper-lockfile": "^4.1.2",
     "react-easy-crop": "^6.2.2",
     "react-split-pane": "^0.1.92",
@@ -152,7 +149,7 @@
   },
   "scripts": {
     "prebuild": "npx tsx scripts/generate-client.ts",
-    "build": "tsc -p tsconfig.build.json",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "postbuild": "node scripts/postbuild.mjs",
     "lint": "eslint src/",
     "test": "vitest run",

package/dist/ai/generate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/ai/generate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAqC,MAAM,kBAAkB,CAAA;AACvF,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,WAAW,CAAA;AAUhE,OAAO,EAA2B,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,KAAK,EACV,eAAe,EAGf,UAAU,EAKX,MAAM,SAAS,CAAA;AAMhB,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAA;IACnB,UAAU,EAAE,cAAc,EAAE,CAAA;IAC5B,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,oBAAoB,CAAA;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,UAAU,CAAA;IACpB,6EAA6E;IAC7E,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAwGzF"}

package/dist/ai/generate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/ai/generate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAIrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,GAEtB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,uBAAuB,EAA6B,MAAM,wBAAwB,CAAA;AAgC3F;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB;IAC9D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEvC,mDAAmD;IACnD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;IAErC,qCAAqC;IACrC,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CACnC,CAAC,IAAI,EAAmD,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CACtF,CAAA;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAc,EAAE,CAAA;IAChC,8CAA8C;IAC9C,MAAM,mBAAmB,GAA2B,EAAE,CAAA;IACtD,iFAAiF;IACjF,MAAM,WAAW,GAAsB,EAAE,CAAA;IAEzC,0BAA0B;IAC1B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,yDAAyD;QACzD,IAAI,UAAU,CAAC,WAAW,KAAK,WAAW;YAAE,SAAQ;QAEpD,kBAAkB;QAClB,IAAI,oBAAoB,CAAC,UAAU,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;YAAE,SAAQ;QAE/E,oEAAoE;QACpE,4DAA4D;QAC5D,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,WAAW;YAAE,SAAQ;QAE5E,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAC9C,KAAK,EACL,UAAU,EACV,UAAU,EACV,WAAW,EACX,MAAM,EACN,OAAO,EACP,YAAY,CACb,CAAA;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC5C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACzD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;IAC/D,CAAC;IAED,iFAAiF;IACjF,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAA;IAC7E,IAAI,cAAc,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,kBAAkB,CACzC,KAAK,EACL,cAAc,EACd,WAAW,EACX,MAAM,EACN,OAAO,EACP,YAAY,CACb,CAAA;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACnD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;IACjD,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAuB,EAAE,CAAA;IAC9C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,iDAAiD;YACjD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,qCAAqC,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAClD,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CACvD,CAAA;YACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,eAAe;qBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;qBACtC,IAAI,CAAC,WAAW,CAAC,CAAA;gBACpB,MAAM,UAAU,GAAG,WAAW,MAAM,CAAC,IAAI,KAAK,CAAA;gBAC9C,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;gBACpC,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,IAAI,EAAE,UAAU;oBAChB,UAAU,EAAE,eAAe,CAAC,MAAM;iBACnC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,QAAQ,GAAe;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,eAAe;KACzB,CAAA;IAED,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAE7D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAC5B,CAAC;AAYD,KAAK,UAAU,iBAAiB,CAC9B,KAAmB,EACnB,UAAmD,EACnD,UAA4B,EAC5B,WAAmB,EACnB,MAAwB,EACxB,OAAwB,EACxB,YAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,MAAM,OAAO,GAAc,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IACvE,MAAM,eAAe,GAAsB,EAAE,CAAA;IAE7C,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IAE1E,uEAAuE;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,WAAW,CAAC,CAAA;IAEnF,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC,aAAa;YAAE,SAAQ;QAE5B,6BAA6B;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAQ;QAElE,kDAAkD;QAClD,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QAChE,IAAI,CAAC,eAAe;YAAE,SAAQ;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE;gBACjE,iBAAiB,EAAE,KAAK;aACzB,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,CAAC,CAAA;YAE5F,yCAAyC;YACzC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;YAC1F,CAAC;YAED,4BAA4B;YAC5B,IAAI,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC;gBAAE,SAAQ;YAE/C,wFAAwF;YACxF,MAAM,iBAAiB,CACrB,OAAO,EACP,GAAG,CAAC,YAAY,EAChB,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAC5D,MAAM,CACP,CAAA;YAED,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAErB,8BAA8B;YAC9B,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,CAAA;YACzD,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtD,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;YAEvC,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClE,IAAI,EAAE,aAAa;aACpB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,+BAA+B,SAAS,CAAC,IAAI,QAAQ,UAAU,CAAC,WAAW,GAAG,EAC9E,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;YACD,SAAQ;QACV,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CACtC,CAAC,IAAI,EAAmD,EAAE,CACxD,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,WAAW,CAC3E,CAAA;IAED,MAAM,sBAAsB,GAA2B,EAAE,CAAA;IACzD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,IAAI,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;YAAE,SAAQ;QAExE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,KAAK,EACL,GAAG,EACH,UAAU,EACV,WAAW,EACX,MAAM,EACN,OAAO,EACP,YAAY,CACb,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YAClD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAC3D,CAAC;IAED,qFAAqF;IACrF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACnF,MAAM,OAAO,GAAG,GAAG,SAAS,SAAS,CAAA;QACrC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAChC,CAAC;IAED,MAAM,kBAAkB,GAAyB;QAC/C,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,SAAS;QAC/D,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,OAAO,EAAE,eAAe;QACxB,cAAc,EAAE,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS;KACvF,CAAA;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;AAC/C,CAAC;AAYD,KAAK,UAAU,kBAAkB,CAC/B,KAAmB,EACnB,cAAuD,EACvD,WAAmB,EACnB,MAAwB,EACxB,OAAwB,EACxB,YAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,MAAM,OAAO,GAAc,EAAE,CAAA;IAC7B,MAAM,eAAe,GAAsB,EAAE,CAAA;IAE7C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,uBAAuB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;IAC9E,sDAAsD;IACtD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,cAAc,CAAC,WAAW,CAAC,CAAA;IAEvF,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC,aAAa;YAAE,SAAQ;QAE5B,IAAI,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAQ;QAElE,MAAM,eAAe,GAAG,aAAa,CAAC,cAAc,EAAE,aAAa,CAAC,CAAA;QACpE,IAAI,CAAC,eAAe;YAAE,SAAQ;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE;gBACjE,iBAAiB,EAAE,KAAK;aACzB,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;YAErF,yCAAyC;YACzC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;YAC1F,CAAC;YAED,IAAI,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC;gBAAE,SAAQ;YAE/C,wFAAwF;YACxF,MAAM,iBAAiB,CACrB,OAAO,EACP,GAAG,CAAC,YAAY,EAChB,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAC5D,MAAM,CACP,CAAA;YAED,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAErB,MAAM,aAAa,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,CAAA;YAC5C,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtD,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;YAEvC,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClE,IAAI,EAAE,aAAa;aACpB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,oCAAoC,SAAS,CAAC,IAAI,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;YAC1F,SAAQ;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAA;AAC5C,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,mDAAmD;AACnD,SAAS,gBAAgB,CAAC,WAAmB,EAAE,WAAmB;IAChE,IAAI,WAAW,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,gDAAgD;AAChD,SAAS,oBAAoB,CAC3B,WAAmB,EACnB,WAAmB,EACnB,MAAwB;IAExB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW;QAAE,OAAO,KAAK,CAAA;IAC/C,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE;IACV,gDAAgD;IAChD,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CACnE,CAAA;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAS,aAAa,CACpB,UAAmD,EACnD,aAAqB;IAErB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAA;AAClE,CAAC;AAED,8CAA8C;AAC9C,SAAS,YAAY,CACnB,GAAoB,EACpB,IAAY,EACZ,aAAqB,EACrB,eAAgC,EAChC,mBAA2B;IAE3B,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,mBAAmB;QAC/B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,GAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAChF,MAAM,EAAE,eAAe,CAAC,MAAM;KAC/B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACrC,OAAO,KAAK,EAAE,IAAY,EAA0B,EAAE;QACpD,IACE,CAAC,IAAI;YACL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACrB,oBAAoB,CAAC,IAAI,CAAC,EAC1B,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;QAC3C,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAA;QAClD,IAAI,CAAC;YACH,qFAAqF;YACrF,0FAA0F;YAC1F,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAA;YAChC,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAA;YACtF,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAc,EACd,YAAoB,EACpB,SAAwB,EACxB,MAAwB;IAExB,MAAM,SAAS,GAAG,MAAM,EAAE,eAAe,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC5D,IAAI,CAAC,SAAS;QAAE,OAAM;IACtB,MAAM,GAAG,GAA0B;QACjC,SAAS,EAAE,SAAS,IAAI,EAAE;QAC1B,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;KACzD,CAAA;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC5C,IAAI,QAAQ;YAAE,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,oCAAoC,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,SAAS,WAAW,EAC9E,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;IACH,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAC1B,KAAkB,EAClB,MAAiE,EACjE,WAAmB;IAEnB,qBAAqB;IACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAClD,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAC3D,OAAO,CACL,KAAK,CAAC,UAAU,KAAK,YAAY;gBACjC,KAAK,CAAC,UAAU,KAAK,OAAO;gBAC5B,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,CAChD,CAAA;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;IAC5B,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAA;IAChE,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;QACrF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7E,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;IAC5B,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;IACxC,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/ai/handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/ai/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAI1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE9C,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,YAAY,CAAA;IACpB,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,cAAc,EAAE,CAAA;CACnC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CA8EnF"}

package/dist/ai/handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/ai/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAG1D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAuB,MAAM,YAAY,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAWpD;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAgC;IAEhC,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,OAAO,CAAA;IAC1E,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACtD,IAAI,YAAY,GAA0B,IAAI,CAAA;IAE9C,MAAM,QAAQ,GAAG,KAAK,IAA6B,EAAE;QACnD,mEAAmE;QACnE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,YAAY,GAAG,IAAI,CAAA;QACrB,CAAC;QAED,IAAI,YAAY;YAAE,OAAO,YAAY,CAAA;QAErC,sBAAsB;QACtB,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,CAAA;QAEvD,8CAA8C;QAC9C,MAAM,UAAU,GACd,eAAe;YACf,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAA;QAE5F,4BAA4B;QAC5B,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,CAAC,CAAA;QAC3E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK;YACL,UAAU;YACV,WAAW,EAAE,eAAe;YAC5B,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAA;QAEF,YAAY,GAAG,MAAM,CAAA;QACrB,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,IAAa,EAAE,GAA4C,EAAqB,EAAE;QAC9F,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAA;YAC/C,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAA;YAE/B,yCAAyC;YACzC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAE1C,qBAAqB;YACrB,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;gBACpC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;oBACrD,OAAO,EAAE;wBACP,cAAc,EAAE,iCAAiC;wBACjD,eAAe,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB;qBAC5E;iBACF,CAAC,CAAA;YACJ,CAAC;YAED,2BAA2B;YAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE;oBAC3B,OAAO,EAAE;wBACP,cAAc,EAAE,8BAA8B;wBAC9C,eAAe,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB;qBAC5E;iBACF,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE;gBAC1D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kFAAkF;YAClF,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAA;YAClE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE;gBACtE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/ai/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,YAAY,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,OAAO,EACP,WAAW,GACZ,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA"}

package/dist/ai/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/ai/json-to-markdown.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-to-markdown.d.ts","sourceRoot":"","sources":["../../src/ai/json-to-markdown.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAEvD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,MAAM,CAkChF"}