canopycms 0.1.0-int.115 → 0.1.0

package/dist/editor/shell/SidePanelHost.js

@@ -0,0 +1,184 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useId, useRef, useState, } from 'react';
+import { CloseButton, Group, Text, Tooltip } from '@mantine/core';
+import { useWindowEvent } from '@mantine/hooks';
+import { focusIfIdle } from '../utils/focus-return.js';
+const KEY_STEP_PX = 16;
+const RESIZING_ATTR = 'data-canopy-panel-resizing';
+const PANEL_STYLES = `
+body[${RESIZING_ATTR}] { cursor: col-resize; user-select: none; }
+body[${RESIZING_ATTR}] iframe { pointer-events: none; }
+.canopy-side-panel-separator {
+  position: absolute;
+  inset-block: 0;
+  inset-inline-end: -3px;
+  width: 6px;
+  cursor: col-resize;
+  touch-action: none;
+  z-index: 1;
+}
+.canopy-side-panel-separator:hover,
+.canopy-side-panel-separator[data-dragging] {
+  background: var(--canopy-focus-ring);
+}
+.canopy-side-panel-separator:focus-visible {
+  outline: 2px solid var(--canopy-focus-ring);
+  outline-offset: -2px;
+}
+`;
+const clamp = (value, min, max) => Math.min(max, Math.max(min, value));
+/**
+ * A titled side panel, resizable from its inline-end edge. Docked, it is a column of the shell;
+ * as an overlay it covers the form pane only, so the preview stays in view, and Escape closes it.
+ * A `focusRequest` moves focus to its `data-autofocus` element, else to the panel; closing with
+ * focus inside returns focus to `returnFocusTo`.
+ */
+export function SidePanelHost({ title, mode, opened, width, minWidth, maxWidth, onWidthChange, onClose, focusRequest = 0, returnFocusTo, actions, children, id, 'data-testid': testId, }) {
+    const fallbackId = useId();
+    const panelId = id ?? fallbackId;
+    const titleId = `${panelId}-title`;
+    const panelRef = useRef(null);
+    const focusInside = useRef(false);
+    const wasOpened = useRef(opened);
+    const servedFocusRequest = useRef(focusRequest);
+    const drag = useRef(null);
+    const [dragWidth, setDragWidth] = useState(null);
+    if (!opened && dragWidth !== null)
+        setDragWidth(null);
+    const shownWidth = clamp(dragWidth ?? width, minWidth, maxWidth);
+    useEffect(() => {
+        const panel = panelRef.current;
+        const asked = opened && focusRequest !== servedFocusRequest.current;
+        servedFocusRequest.current = focusRequest;
+        if (!asked || !panel)
+            return;
+        const autofocus = () => panel.querySelector('[data-autofocus]');
+        const field = autofocus();
+        if (field) {
+            field.focus({ preventScroll: true });
+            return;
+        }
+        // The field may render with content still loading: it takes focus when it arrives, unless
+        // focus has moved off the panel by then.
+        panel.focus({ preventScroll: true });
+        const observer = new MutationObserver(() => {
+            if (document.activeElement !== panel)
+                return observer.disconnect();
+            const arrived = autofocus();
+            if (!arrived)
+                return;
+            observer.disconnect();
+            arrived.focus({ preventScroll: true });
+        });
+        observer.observe(panel, { childList: true, subtree: true });
+        return () => observer.disconnect();
+    }, [opened, focusRequest]);
+    useEffect(() => {
+        if (!opened && wasOpened.current) {
+            // Its separator is gone, and with it the pointer capture that would have ended a drag.
+            drag.current = null;
+            document.body.removeAttribute(RESIZING_ATTR);
+            if (focusInside.current) {
+                focusInside.current = false;
+                focusIfIdle(returnFocusTo?.() ?? null);
+            }
+        }
+        wasOpened.current = opened;
+    }, [opened, returnFocusTo]);
+    // On the window, not the panel: a dialog portalled from the panel would bubble its Escape here
+    // through React, so only a key from inside the panel's own DOM closes it.
+    useWindowEvent('keydown', (event) => {
+        if (opened &&
+            mode === 'overlay' &&
+            event.key === 'Escape' &&
+            !event.defaultPrevented &&
+            event.target instanceof Node &&
+            panelRef.current?.contains(event.target)) {
+            event.preventDefault();
+            onClose();
+        }
+    });
+    // A drag cut short by unmounting must not leave the page's iframes deaf to the pointer.
+    useEffect(() => () => document.body.removeAttribute(RESIZING_ATTR), []);
+    if (!opened)
+        return null;
+    const endDrag = () => {
+        const state = drag.current;
+        if (!state)
+            return;
+        drag.current = null;
+        document.body.removeAttribute(RESIZING_ATTR);
+        setDragWidth(null);
+        onWidthChange(state.width);
+    };
+    const separatorHandlers = {
+        onPointerDown: (event) => {
+            if (event.button !== 0)
+                return;
+            event.preventDefault();
+            event.currentTarget.setPointerCapture(event.pointerId);
+            const rtl = getComputedStyle(event.currentTarget).direction === 'rtl';
+            drag.current = {
+                startX: event.clientX,
+                startWidth: shownWidth,
+                width: shownWidth,
+                sign: rtl ? -1 : 1,
+            };
+            document.body.setAttribute(RESIZING_ATTR, '');
+            setDragWidth(shownWidth);
+        },
+        onPointerMove: (event) => {
+            const state = drag.current;
+            if (!state)
+                return;
+            state.width = clamp(state.startWidth + state.sign * (event.clientX - state.startX), minWidth, maxWidth);
+            setDragWidth(state.width);
+        },
+        onPointerUp: endDrag,
+        onPointerCancel: endDrag,
+        onLostPointerCapture: endDrag,
+        onKeyDown: (event) => {
+            const rtl = getComputedStyle(event.currentTarget).direction === 'rtl';
+            const grow = rtl ? 'ArrowLeft' : 'ArrowRight';
+            const shrink = rtl ? 'ArrowRight' : 'ArrowLeft';
+            const next = event.key === grow
+                ? shownWidth + KEY_STEP_PX
+                : event.key === shrink
+                    ? shownWidth - KEY_STEP_PX
+                    : event.key === 'Home'
+                        ? minWidth
+                        : event.key === 'End'
+                            ? maxWidth
+                            : undefined;
+            if (next === undefined)
+                return;
+            event.preventDefault();
+            onWidthChange(clamp(next, minWidth, maxWidth));
+        },
+    };
+    const overlay = mode === 'overlay';
+    const style = {
+        position: overlay ? 'absolute' : 'relative',
+        insetBlock: overlay ? 0 : undefined,
+        insetInlineStart: overlay ? 0 : undefined,
+        zIndex: overlay ? 2 : undefined,
+        boxShadow: overlay ? 'var(--mantine-shadow-md)' : undefined,
+        width: shownWidth,
+        maxWidth: '100%',
+        height: '100%',
+        display: 'flex',
+        flexDirection: 'column',
+        background: 'var(--mantine-color-body)',
+        borderInlineEnd: '1px solid var(--canopy-input-border)',
+    };
+    return (_jsxs("section", { ref: panelRef, id: panelId, "aria-labelledby": titleId, tabIndex: -1, "data-testid": testId, "data-panel-mode": mode, style: style, onFocus: () => {
+            focusInside.current = true;
+        }, onBlur: (event) => {
+            if (!event.currentTarget.contains(event.relatedTarget))
+                focusInside.current = false;
+        }, children: [_jsx("style", { children: PANEL_STYLES }), _jsxs(Group, { justify: "space-between", wrap: "nowrap", gap: "xs", px: "md", py: "xs", style: { borderBlockEnd: '1px solid var(--canopy-input-border)' }, children: [_jsx(Text, { id: titleId, component: "h2", fw: 600, size: "md", m: 0, children: title }), _jsxs(Group, { gap: "xs", wrap: "nowrap", children: [actions, _jsx(Tooltip, { label: `Close ${title.toLowerCase()} panel`, children: _jsx(CloseButton, { "aria-label": `Close ${title.toLowerCase()} panel`, onClick: onClose }) })] })] }), _jsx("div", { style: { flex: 1, minHeight: 0, overflow: 'auto' }, children: children }), _jsx("div", { role: "separator", "aria-orientation": "vertical", "aria-label": `Resize ${title.toLowerCase()} panel`, "aria-controls": panelId, "aria-valuenow": Math.round(shownWidth), "aria-valuemin": minWidth, "aria-valuemax": maxWidth, 
+                // A focusable separator is a window splitter, a widget; jsx-a11y counts every one static.
+                // eslint-disable-next-line jsx-a11y/no-noninteractive-tabindex
+                tabIndex: 0, className: "canopy-side-panel-separator", "data-dragging": dragWidth !== null || undefined, ...separatorHandlers })] }));
+}

package/dist/editor/shell/TopBar.d.ts

@@ -0,0 +1,12 @@
+import { type ReactNode } from 'react';
+export interface TopBarProps {
+    /** Where you are: the breadcrumb and anything that describes the open entry. */
+    leading: ReactNode;
+    /** What you can do: the branch and the actions on it. */
+    trailing: ReactNode;
+}
+/**
+ * The shell's top bar: one 48px row from `md` up. Narrower, `leading` takes a row of its own
+ * above `trailing`, which wraps rather than clip a control. Layout only.
+ */
+export declare function TopBar({ leading, trailing }: TopBarProps): import("react/jsx-runtime").JSX.Element;

package/dist/editor/shell/TopBar.js

@@ -0,0 +1,14 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Group } from '@mantine/core';
+const TOP_BAR_HEIGHT = 48;
+/**
+ * The shell's top bar: one 48px row from `md` up. Narrower, `leading` takes a row of its own
+ * above `trailing`, which wraps rather than clip a control. Layout only.
+ */
+export function TopBar({ leading, trailing }) {
+    return (_jsxs(Group, { gap: "xs", wrap: "wrap", align: "center", px: "sm", py: 6, mih: TOP_BAR_HEIGHT, style: {
+            borderBottom: '1px solid var(--canopy-input-border)',
+            background: 'var(--mantine-color-body)',
+        }, children: [_jsx(Box, { flex: { base: '1 0 100%', md: '1 1 0%' }, miw: 0, children: leading }), _jsx(Group, { gap: 6, wrap: "wrap", align: "center", justify: "flex-end", flex: { base: '1 0 100%', md: '0 1 auto' }, miw: 0, children: trailing })] }));
+}

package/dist/editor/shell/host-chrome.d.ts

@@ -0,0 +1,16 @@
+import { type RefObject } from 'react';
+/**
+ * @internal Exported for tests. The host page's chrome around `anchor`, an element the editor
+ * renders in place: the `<body>` child holding it, plus every `<body>` child the same copy of React
+ * rendered (a Next.js root layout's header and footer). That copy's fiber key has a random suffix,
+ * so portal containers and the roots other libraries create, such as MDXEditor's popup
+ * container, never match it.
+ */
+export declare function findHostChrome(anchor: Element): HTMLElement[];
+/**
+ * Makes the host's chrome inert and hidden while the editor is mounted: Tab never leaves the
+ * editor, and chrome with its own z-index never paints over the shell. Applied once, at mount,
+ * since an element added later may be a third-party popup that must stay usable; unmount restores
+ * exactly what this changed.
+ */
+export declare function useHideHostChrome(anchorRef: RefObject<Element | null>): void;

package/dist/editor/shell/host-chrome.js

@@ -0,0 +1,69 @@
+'use client';
+import { useEffect } from 'react';
+const REACT_FIBER_KEY_PREFIX = '__reactFiber$';
+function reactFiberKey(element) {
+    return Object.keys(element).find((key) => key.startsWith(REACT_FIBER_KEY_PREFIX));
+}
+/**
+ * @internal Exported for tests. The host page's chrome around `anchor`, an element the editor
+ * renders in place: the `<body>` child holding it, plus every `<body>` child the same copy of React
+ * rendered (a Next.js root layout's header and footer). That copy's fiber key has a random suffix,
+ * so portal containers and the roots other libraries create, such as MDXEditor's popup
+ * container, never match it.
+ */
+export function findHostChrome(anchor) {
+    const body = anchor.ownerDocument.body;
+    let root = anchor;
+    while (root.parentElement && root.parentElement !== body)
+        root = root.parentElement;
+    if (root.parentElement !== body)
+        return [];
+    const fiberKey = reactFiberKey(anchor);
+    const siblings = fiberKey
+        ? Array.from(body.children).filter((child) => child !== root && fiberKey in child)
+        : [];
+    return [root, ...siblings].filter((element) => element instanceof HTMLElement);
+}
+/** Per element, so a second editor mounted at once never restores what the first still hides. */
+const holds = new WeakMap();
+function hide(element) {
+    let hold = holds.get(element);
+    if (!hold) {
+        const wasInert = element.hasAttribute('inert');
+        const { visibility } = element.style;
+        element.setAttribute('inert', '');
+        element.style.visibility = 'hidden';
+        hold = {
+            count: 0,
+            restore: () => {
+                if (!wasInert)
+                    element.removeAttribute('inert');
+                element.style.visibility = visibility;
+            },
+        };
+        holds.set(element, hold);
+    }
+    hold.count++;
+    const held = hold;
+    return () => {
+        if (--held.count > 0)
+            return;
+        holds.delete(element);
+        held.restore();
+    };
+}
+/**
+ * Makes the host's chrome inert and hidden while the editor is mounted: Tab never leaves the
+ * editor, and chrome with its own z-index never paints over the shell. Applied once, at mount,
+ * since an element added later may be a third-party popup that must stay usable; unmount restores
+ * exactly what this changed.
+ */
+export function useHideHostChrome(anchorRef) {
+    useEffect(() => {
+        const anchor = anchorRef.current;
+        if (!anchor)
+            return;
+        const releases = findHostChrome(anchor).map(hide);
+        return () => releases.forEach((release) => release());
+    }, [anchorRef]);
+}

package/dist/editor/theme.js

@@ -104,7 +104,18 @@ const canopyComponents = {
             }
             : { root: {} },
     }),
-    ActionIcon: ActionIcon.extend({ defaultProps: { size: 'sm' } }),
+    ActionIcon: ActionIcon.extend({
+        defaultProps: { size: 'sm' },
+        vars: (theme, props) => (props.variant ?? 'filled') === 'filled' && isPrimary(theme, props.color)
+            ? {
+                root: {
+                    '--ai-bg': 'var(--canopy-primary-fill)',
+                    '--ai-hover': 'var(--canopy-primary-fill-hover)',
+                    '--ai-color': 'var(--mantine-color-white)',
+                },
+            }
+            : { root: {} },
+    }),
     // Tooltips open on focus and touch too, so an icon-only control's name reaches the keyboard.
     Tooltip: Tooltip.extend({ defaultProps: { events: { hover: true, focus: true, touch: true } } }),
     // A default input's border is `--canopy-input-border`; errored and focused ones keep Mantine's.
@@ -151,7 +162,11 @@ const canopyComponents = {
     }),
     ModalCloseButton: Modal.CloseButton.extend({ defaultProps: CLOSE_BUTTON_PROPS }),
     DrawerCloseButton: Drawer.CloseButton.extend({ defaultProps: CLOSE_BUTTON_PROPS }),
-    Notification: Notification.extend({ defaultProps: { closeButtonProps: CLOSE_BUTTON_PROPS } }),
+    // Mantine dims a titled toast's text to gray.6 / dark.2, under 4.5:1 on its surface.
+    Notification: Notification.extend({
+        defaultProps: { closeButtonProps: CLOSE_BUTTON_PROPS },
+        styles: { description: { color: 'var(--mantine-color-text)' } },
+    }),
     // A light yellow Alert's title, icon and close button are yellow on pale yellow, under 2:1, so
     // they take the text colour; the tint and the icon's shape still mark it a warning.
     Alert: Alert.extend({
@@ -348,5 +363,5 @@ input.mantine-TimeInput-input::-webkit-datetime-edit-ampm-field:focus {
 `;
 export const CanopyCMSProvider = ({ children, colors, colorScheme = 'light', themeOverride, withNotifications = true, }) => {
     const theme = useMemo(() => createCanopyTheme({ colors, themeOverride }), [colors, themeOverride]);
-    return (_jsxs(MantineProvider, { theme: theme, defaultColorScheme: colorScheme, cssVariablesResolver: canopyCssVariablesResolver, children: [_jsx("style", { "data-canopy-styles": true, dangerouslySetInnerHTML: { __html: CANOPY_STYLES } }), _jsxs(ModalsProvider, { modalProps: { zIndex: getDefaultZIndex('popover') }, children: [withNotifications ? _jsx(Notifications, { position: "bottom-left" }) : null, children] })] }));
+    return (_jsxs(MantineProvider, { theme: theme, defaultColorScheme: colorScheme, cssVariablesResolver: canopyCssVariablesResolver, children: [_jsx("style", { "data-canopy-styles": true, dangerouslySetInnerHTML: { __html: CANOPY_STYLES } }), _jsxs(ModalsProvider, { modalProps: { zIndex: getDefaultZIndex('popover') }, children: [withNotifications ? _jsx(Notifications, { position: "bottom-right" }) : null, children] })] }));
 };

package/dist/git-manager.d.ts

@@ -54,7 +54,7 @@ export declare function repackBareRemoteIfNeeded(gitDir: string, git?: SimpleGit
  * so a clone or checkout the OOM killer stopped would pass for complete. Given as `errors` to a
  * GitManager's own instance, to `cloneRepo`'s, and to the worker's ref probes of an existing
  * remote.git (worker/cms-worker.ts); its static helpers and the bare-remote functions do not pass
- * it yet (.claude/future-tasks/simple-git-signal-exit-reads-as-success.md).
+ * it yet (safeinsights/canopycms#845).
  */
 export declare function failOnSignalExit(error: Buffer | Error | undefined, result: {
     exitCode: number;

package/dist/git-manager.js

@@ -181,7 +181,7 @@ export async function repackBareRemoteIfNeeded(gitDir, git = simpleGit().env(git
  * so a clone or checkout the OOM killer stopped would pass for complete. Given as `errors` to a
  * GitManager's own instance, to `cloneRepo`'s, and to the worker's ref probes of an existing
  * remote.git (worker/cms-worker.ts); its static helpers and the bare-remote functions do not pass
- * it yet (.claude/future-tasks/simple-git-signal-exit-reads-as-success.md).
+ * it yet (safeinsights/canopycms#845).
  */
 export function failOnSignalExit(error, result) {
     if (error)
@@ -399,7 +399,7 @@ export class GitManager {
         // gitNetworkChildEnv instead. Under the `allowNetworkRemoteInProd` escape
         // hatch `this.remote` CAN be a network URL, and these calls do hit it with
         // that restricted env: a known limitation of the escape hatch, tracked in
-        // .claude/future-tasks/network-escape-hatch-git-env.md.
+        // safeinsights/canopycms#754.
         //
         // GIT_CEILING_DIRECTORIES stops git traversing above repoPath to a parent
         // .git: a corrupt or missing workspace .git must fail, never silently

package/dist/operating-mode/types.d.ts

@@ -2,7 +2,7 @@
 import type { OperatingMode as OM } from './index.js';
 import type { CanopyConfig } from '../config/index.js';
 export type OperatingMode = OM;
-/** @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md. */
+/** @internal No importer; deletion candidate in safeinsights/canopycms#725. */
 export interface ResolveRemoteUrlOptions {
     mode: OperatingMode;
     remoteUrl?: string;

package/dist/resolve-canopy-user.d.ts

@@ -3,7 +3,7 @@ import type { CanopyUser } from './user.js';
 import type { OperatingMode } from './operating-mode/index.js';
 /**
  * Test-only: reset the once-per-process "no admins configured" warning latch.
- * @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md.
+ * @internal No importer; deletion candidate in safeinsights/canopycms#725.
  */
 export declare function resetResolveCanopyUserWarningForTests(): void;
 export interface ResolveCanopyUserDeps {

package/dist/resolve-canopy-user.js

@@ -17,7 +17,7 @@ import { timeRequestPhase } from './utils/request-timing.js';
 let warnedNoAdmins = false;
 /**
  * Test-only: reset the once-per-process "no admins configured" warning latch.
- * @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md.
+ * @internal No importer; deletion candidate in safeinsights/canopycms#725.
  */
 export function resetResolveCanopyUserWarningForTests() {
     warnedNoAdmins = false;

package/dist/schema/resolver.d.ts

@@ -26,7 +26,7 @@ export declare function resolveSchema(contentRoot: string, entrySchemaRegistry:
  *
  * @param contentRoot - Path to the content directory
  * @returns true if at least one .collection.json file exists
- * @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md.
+ * @internal No importer; deletion candidate in safeinsights/canopycms#725.
  */
 export declare function hasSchemaFiles(contentRoot: string): Promise<boolean>;
 /**

package/dist/schema/resolver.js

@@ -43,7 +43,7 @@ export async function resolveSchema(contentRoot, entrySchemaRegistry, options =
  *
  * @param contentRoot - Path to the content directory
  * @returns true if at least one .collection.json file exists
- * @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md.
+ * @internal No importer; deletion candidate in safeinsights/canopycms#725.
  */
 export async function hasSchemaFiles(contentRoot) {
     const metaFiles = await loadCollectionMetaFiles(contentRoot);

package/dist/schema/schema-store.d.ts

@@ -317,7 +317,7 @@ export declare class SchemaOps {
      * root can re-normalise to the ROOT collection on a second call, mutating
      * the wrong one instead of reporting not-found. Every entry point calls
      * this exactly once today, so the ambiguity is unreachable; see
-     * .claude/future-tasks/collection-path-content-root-ambiguity.md. A future
+     * safeinsights/canopycms#623. A future
      * method that accepts a logical collection path must do the same.
      */
     private normalizeCollectionPath;

package/dist/schema/schema-store.js

@@ -304,7 +304,7 @@ export class SchemaOps {
      * root can re-normalise to the ROOT collection on a second call, mutating
      * the wrong one instead of reporting not-found. Every entry point calls
      * this exactly once today, so the ambiguity is unreachable; see
-     * .claude/future-tasks/collection-path-content-root-ambiguity.md. A future
+     * safeinsights/canopycms#623. A future
      * method that accepts a logical collection path must do the same.
      */
     normalizeCollectionPath(collectionPath) {
@@ -580,7 +580,7 @@ export class SchemaOps {
                 // already rules out a `{slug}.{id}` directory at the destination — but that check is
                 // case-SENSITIVE and lets an ID-less `docs/`-style directory through, so a case or
                 // ID-less collision can still slip past it for entries deeper than the index; see
-                // .claude/future-tasks/collection-sibling-name-uniqueness.md.
+                // safeinsights/canopycms#624.
                 if (await findIndexEntryIn(physicalPath)) {
                     // Renaming TO "index" collapses this collection onto its OWN new path, not the
                     // parent's — see url-collision.ts's findUrlPathClaimant for the equivalent create-time

package/dist/url-collision.js

@@ -18,7 +18,7 @@ import { parseTypedFilename } from './utils/typed-filename.js';
  * `doc.index.{id}.json` inside an md-only collection claims no URL yet still blocks a sibling
  * write. Closing it means threading each collection's configured formats into a deliberately
  * schema-free module; tracked in
- * .claude/future-tasks/url-collision-guard-superset-of-listing.md.
+ * safeinsights/canopycms#878.
  *
  * A literal rather than derived: deriving it needs the `ContentFormat` union this module has no
  * reason to import. `url-collision.test.ts` carries the drift tripwire — a compile-time
@@ -65,7 +65,7 @@ async function findChildCollectionDir(dir, name) {
  *
  * The claimant set is nonetheless a strict superset of the listing's in three ways, all
  * over-blocking and all needing the same fix — the schema this module deliberately does not have
- * — so they are one task (.claude/future-tasks/url-collision-guard-superset-of-listing.md):
+ * — so they are one task (safeinsights/canopycms#878):
  *
  *   1. extension — see `CONTENT_EXTENSIONS` above;
  *   2. entry TYPE — parsing is structural (no `entryTypes` list), so a file whose type is not in
@@ -155,7 +155,7 @@ export async function findUrlPathClaimant(opts) {
     // KNOWN DEPENDENCY: this resolves ONE child collection by name, and the index direction above
     // likewise looks only for a parent ENTRY. Neither considers a second collection sharing the same
     // name, because nothing stops one being created -- `createCollectionInner` does not check
-    // sibling names (tracked in collection-sibling-name-uniqueness.md). With two `guides.{id}`
+    // sibling names (tracked in safeinsights/canopycms#624). With two `guides.{id}`
     // directories side by side, an index entry can be written into each: both writes pass this
     // guard, two entries claim one URL, and only the build guard catches it. Fixing sibling-name
     // uniqueness closes this without changing anything here, so that task is a prerequisite for

package/dist/url-exclusivity-fixtures.d.ts

@@ -15,7 +15,7 @@
  * Scope of the invariant it checks: entries written in the `{type}.{slug}.{id}.{ext}` grammar
  * with a type their collection declares -- exactly the set `listEntries` can see. A legacy
  * untyped file (`overview.json`) is invisible to enumeration and is deliberately NOT probed here;
- * see `.claude/future-tasks/legacy-untyped-files-url-addressable.md`.
+ * see safeinsights/canopycms#728.
  */
 import { type RootCollectionConfig } from './config/index.js';
 import type { ListEntriesItem } from './content-listing.js';

package/dist/url-exclusivity-fixtures.js

@@ -15,7 +15,7 @@
  * Scope of the invariant it checks: entries written in the `{type}.{slug}.{id}.{ext}` grammar
  * with a type their collection declares -- exactly the set `listEntries` can see. A legacy
  * untyped file (`overview.json`) is invisible to enumeration and is deliberately NOT probed here;
- * see `.claude/future-tasks/legacy-untyped-files-url-addressable.md`.
+ * see safeinsights/canopycms#728.
  */
 import { flattenSchema } from './config/index.js';
 import { findDuplicateUrlPaths } from './static/index.js';

package/dist/utils/content-write-lock.d.ts

@@ -44,7 +44,7 @@ import { type OnLockCompromised } from './provisioning-lock.js';
  * `next dev` and build-time provisioning across worker processes. The case to watch is a write
  * whose in-lock path triggers a full `idIndex()` rescan of a large tree over EFS, which can exceed
  * this budget and start 409ing unrelated saves. Making it configurable is tracked in
- * .claude/future-tasks/content-write-lock-tuning-and-granularity.md.
+ * safeinsights/canopycms#640.
  */
 export declare const DEFAULT_CONTENT_WRITE_LOCK_WAIT_MS = 2000;
 /**

package/dist/utils/content-write-lock.js

@@ -52,7 +52,7 @@ const CONTENT_WRITE_LOCK_NAME = 'content-write.lock';
  * `next dev` and build-time provisioning across worker processes. The case to watch is a write
  * whose in-lock path triggers a full `idIndex()` rescan of a large tree over EFS, which can exceed
  * this budget and start 409ing unrelated saves. Making it configurable is tracked in
- * .claude/future-tasks/content-write-lock-tuning-and-granularity.md.
+ * safeinsights/canopycms#640.
  */
 export const DEFAULT_CONTENT_WRITE_LOCK_WAIT_MS = 2000;
 /**

package/dist/utils/debug.d.ts

@@ -41,6 +41,6 @@ export declare class DebugLogger {
 export declare function createDebugLogger(options?: DebugOptions): DebugLogger;
 /**
  * Default logger for E2E test infrastructure.
- * @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md.
+ * @internal No importer; deletion candidate in safeinsights/canopycms#725.
  */
 export declare const testLogger: DebugLogger;

package/dist/utils/debug.js

@@ -1,3 +1,5 @@
+/** False where no `process` exists: a browser bundle with no shim for it, such as Storybook's. */
+const envFlag = (name) => typeof process !== 'undefined' && process.env[name] === 'true';
 const LOG_LEVELS = {
     DEBUG: 0,
     INFO: 1,
@@ -11,7 +13,7 @@ export class DebugLogger {
     }
     shouldLog(level) {
         // Check enabled at call time to support runtime env var changes
-        const enabled = this.options.enabled ?? process.env.CANOPYCMS_DEBUG === 'true';
+        const enabled = this.options.enabled ?? envFlag('CANOPYCMS_DEBUG');
         if (!enabled)
             return false;
         const minLevel = this.options.minLevel ?? 'DEBUG';
@@ -92,10 +94,10 @@ export function createDebugLogger(options) {
 }
 /**
  * Default logger for E2E test infrastructure.
- * @internal No importer; deletion candidate in knip-no-importer-deletion-candidates.md.
+ * @internal No importer; deletion candidate in safeinsights/canopycms#725.
  */
 export const testLogger = createDebugLogger({
-    enabled: process.env.E2E_DEBUG === 'true',
+    enabled: envFlag('E2E_DEBUG'),
     prefix: 'E2E',
     throwOnError: false,
 });

package/dist/utils/git.d.ts

@@ -47,6 +47,10 @@ export declare function isStaleLeaseRejection(message: string): boolean;
  * GitHub refuses only content it does not already hold: carrying a base-branch workflow change by
  * rebase, merge or fast-forward is accepted. Retrying the identical push can never succeed, so the
  * worker fails it fast. The text is GitHub's own, not git's, so no locale pinning is needed.
+ *
+ * A scan of each line's backquote-delimited spans, linear in the message, which is git's output of
+ * any length: this rule as a regex, with its run between lead and tail, is quadratic on a line
+ * that repeats the lead without the tail.
  */
 export declare function workflowPushRefusalFile(message: string): string | null;
 /**

package/dist/utils/git.js

@@ -90,10 +90,11 @@ const STALE_LEASE_REASON = 'stale info';
 export function isStaleLeaseRejection(message) {
     return message.includes(REJECTED_MARKER) && message.includes(STALE_LEASE_REASON);
 }
-// GitHub's reason text when a push would introduce workflow content the credential may not write.
-// It names the credential kind ("a GitHub App", "an OAuth App", ...) and then the file.
-// Both classes stop at a newline, so the match stays on the one status line that carries it.
-const WORKFLOW_REFUSAL_PATTERN = /refusing to allow an? [^`\n]+? to create or update workflow `([^`\n]+)`/;
+// GitHub's reason text when a push would introduce workflow content the credential may not write:
+// `refusing to allow <credential kind> to create or update workflow `<file>``, where the kind
+// ("a GitHub App", "an OAuth App", ...) holds no backquote and the file is the next quoted span.
+const WORKFLOW_REFUSAL_LEADS = ['refusing to allow a ', 'refusing to allow an '];
+const WORKFLOW_REFUSAL_TAIL = ' to create or update workflow ';
 /**
  * The workflow file named by GitHub's refusal of a push that would add workflow content the
  * credential lacks the workflows permission for, or null if the message is not that refusal.
@@ -101,9 +102,30 @@ const WORKFLOW_REFUSAL_PATTERN = /refusing to allow an? [^`\n]+? to create or up
  * GitHub refuses only content it does not already hold: carrying a base-branch workflow change by
  * rebase, merge or fast-forward is accepted. Retrying the identical push can never succeed, so the
  * worker fails it fast. The text is GitHub's own, not git's, so no locale pinning is needed.
+ *
+ * A scan of each line's backquote-delimited spans, linear in the message, which is git's output of
+ * any length: this rule as a regex, with its run between lead and tail, is quadratic on a line
+ * that repeats the lead without the tail.
  */
 export function workflowPushRefusalFile(message) {
-    return WORKFLOW_REFUSAL_PATTERN.exec(message)?.[1] ?? null;
+    for (const line of message.split('\n')) {
+        const spans = line.split('`');
+        // The last span is closed by no backquote, so the file can be at most the one before it.
+        for (let i = 0; i + 2 < spans.length; i++) {
+            const span = spans[i];
+            const file = spans[i + 1];
+            if (file === '' || !span.endsWith(WORKFLOW_REFUSAL_TAIL))
+                continue;
+            const head = span.slice(0, -WORKFLOW_REFUSAL_TAIL.length);
+            const named = WORKFLOW_REFUSAL_LEADS.some((lead) => {
+                const at = head.indexOf(lead);
+                return at !== -1 && at + lead.length < head.length;
+            });
+            if (named)
+                return file;
+        }
+    }
+    return null;
 }
 // git's message when `git fetch <remote> <branch>` names a ref the remote does not have. Both
 // spellings occur: modern git prints the lowercase form, older versions and some transports

package/dist/validation/block-structural-keys.d.ts

@@ -16,7 +16,7 @@
  * Two other readers still spell the keys out themselves — they read the value
  * positionally and disagree on precedence (`resolveBlockItem` prefers `template`,
  * `ai/json-to-markdown.ts` prefers `_type`) — see
- * `.claude/future-tasks/block-discriminator-precedence-disagreement.md`.
+ * safeinsights/canopycms#584.
  *
  * Dependency-free on purpose: both importers reach contexts that must not pull in
  * schema types or node built-ins.

package/dist/validation/block-structural-keys.js

@@ -16,7 +16,7 @@
  * Two other readers still spell the keys out themselves — they read the value
  * positionally and disagree on precedence (`resolveBlockItem` prefers `template`,
  * `ai/json-to-markdown.ts` prefers `_type`) — see
- * `.claude/future-tasks/block-discriminator-precedence-disagreement.md`.
+ * safeinsights/canopycms#584.
  *
  * Dependency-free on purpose: both importers reach contexts that must not pull in
  * schema types or node built-ins.