forgeprint 0.1.1

package/dist/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/json.js

@@ -0,0 +1,9 @@
+/** Serialize a generated artifact: 2-space JSON with a trailing newline. */
+export function stableJson(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+/** Normalize line endings so drift checks do not fire on checkout differences. */
+export function normalizeNewlines(text) {
+    return text.replace(/\r\n/g, '\n');
+}
+//# sourceMappingURL=json.js.map

package/dist/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC"}

package/dist/lint-setup.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Structural and safety rules for `setup.md`.
+ *
+ * A setup recipe is executed by an agent on somebody else's machine, so it is
+ * held to a script's standards rather than a document's: numbered steps, one
+ * action each, a verification after each one, pinned versions, and no command
+ * that reaches outside the project.
+ */
+export interface SetupProblem {
+    readonly line: number;
+    readonly rule: string;
+    readonly message: string;
+}
+export interface LintOptions {
+    /** Option fields and values declared in the manifest, for guard checking. */
+    readonly options?: Readonly<Record<string, readonly string[]>>;
+}
+export declare function lintSetup(source: string, { options }?: LintOptions): SetupProblem[];
+//# sourceMappingURL=lint-setup.d.ts.map

package/dist/lint-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint-setup.d.ts","sourceRoot":"","sources":["../src/lint-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AA2HD,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CAChE;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAY,EAAE,GAAE,WAAgB,GAAG,YAAY,EAAE,CA0L5F"}

package/dist/lint-setup.js

@@ -0,0 +1,278 @@
+/**
+ * Structural and safety rules for `setup.md`.
+ *
+ * A setup recipe is executed by an agent on somebody else's machine, so it is
+ * held to a script's standards rather than a document's: numbered steps, one
+ * action each, a verification after each one, pinned versions, and no command
+ * that reaches outside the project.
+ */
+/** Marker that closes a step: the command that proves the step worked. */
+const VERIFY_PATTERN = /^\s*(?:[-*]\s*)?Verify:\s*`[^`]+`/;
+/** `1. Do the thing` — the start of a step. */
+const STEP_PATTERN = /^(\d+)\.\s+(\S.*)$/;
+const IF_PATTERN = /^<!--\s*if\s+options\.([a-z0-9-]+)\s*==\s*([a-z0-9-]+)\s*-->$/;
+const ENDIF_PATTERN = /^<!--\s*endif\s*-->$/;
+const ANY_GUARD_PATTERN = /^<!--\s*(if|endif)\b/;
+/** Opening or closing line of a fenced code block. */
+const FENCE_PATTERN = /^\s*(?:```|~~~)/;
+/** Hosts a setup step may reach: package registries and the local machine. */
+const ALLOWED_HOSTS = new Set([
+    'localhost',
+    '127.0.0.1',
+    '[::1]',
+    'api.nuget.org',
+    'nuget.org',
+    'www.nuget.org',
+    'registry.npmjs.org',
+    'www.npmjs.com',
+    'npmjs.com',
+    'pypi.org',
+    'files.pythonhosted.org',
+    'crates.io',
+    'static.crates.io',
+    'proxy.golang.org',
+    'repo.maven.apache.org',
+    'rubygems.org',
+    'packagist.org',
+    'mcr.microsoft.com',
+    'ghcr.io',
+    'docker.io',
+    'registry-1.docker.io',
+]);
+const FORBIDDEN = [
+    {
+        rule: 'no-pipe-to-shell',
+        pattern: /(?:curl|wget|iwr|invoke-webrequest)[^`\n]*\|[^`\n]*\b(?:ba|z|fi)?sh\b/i,
+        message: 'piping a download into a shell is not allowed',
+    },
+    {
+        rule: 'no-sudo',
+        pattern: /(?:^|[\s`(])sudo\s/i,
+        message: 'sudo is not allowed: a setup step may not need elevated privileges',
+    },
+    {
+        rule: 'no-recursive-delete',
+        pattern: /(?:\brm\s+-[a-zA-Z]*r[a-zA-Z]*f|\bRemove-Item\b[^`\n]*-Recurse[^`\n]*-Force)/,
+        message: 'recursive force deletes are not allowed',
+    },
+    {
+        rule: 'no-open-permissions',
+        pattern: /\bchmod\s+(?:-R\s+)?777\b/,
+        message: 'chmod 777 is not allowed',
+    },
+    {
+        rule: 'no-system-paths',
+        pattern: /(?:^|[\s`"'(])(?:\/usr\/|\/etc\/|\/opt\/|\/var\/|C:\\Windows|C:\\Program Files)/i,
+        message: 'a setup step may not write outside the project directory',
+    },
+];
+const PINNING = [
+    {
+        rule: 'pin-nuget',
+        detect: /\bdotnet\s+add\s+package\s+\S+/i,
+        pinned: /--version\s+\S+/i,
+        message: 'dotnet add package needs an explicit --version',
+    },
+    {
+        rule: 'pin-npm',
+        detect: /\bnpm\s+(?:install|i|add)\s+(?!-)[@\w][^\s`]*/i,
+        pinned: /\bnpm\s+(?:install|i|add)\s+(?:-\S+\s+)*@?[^\s`@]+(?:\/[^\s`@]+)?@\S+/i,
+        message: 'npm install needs an explicit version, for example package@1.2.3',
+    },
+    {
+        rule: 'pin-pip',
+        detect: /\bpip\s+install\s+(?!-)[^\s`]+/i,
+        pinned: /\bpip\s+install\s+(?:-\S+\s+)*[^\s`]+==\S+/i,
+        message: 'pip install needs an explicit ==version',
+    },
+    {
+        rule: 'pin-image',
+        detect: /^\s*FROM\s+\S+/,
+        pinned: /^\s*FROM\s+\S+:(?!latest\b)\S+/,
+        message: 'a Dockerfile FROM needs an explicit tag that is not "latest"',
+    },
+    {
+        rule: 'pin-image',
+        detect: /\bdocker\s+(?:run|pull)\b/i,
+        // An image reference starts with a letter, which is what separates it from
+        // a port mapping such as `-p 8080:8080`.
+        pinned: /\bdocker\s+(?:run|pull)\b[^`\n]*\s[a-z][\w./-]*:(?!latest\b)[\w.-]+/i,
+        message: 'container images need an explicit tag that is not "latest"',
+    },
+];
+export function lintSetup(source, { options = {} } = {}) {
+    const problems = [];
+    const lines = source.split(/\r?\n/);
+    const add = (line, rule, message) => {
+        problems.push({ line, rule, message });
+    };
+    const steps = [];
+    let current = null;
+    // Guard state: at most one level, because a nested branch is a variant in
+    // disguise (ADR 0001).
+    // Held on an object so that narrowing does not leak out of the loop below.
+    const guardState = {
+        open: null,
+    };
+    let expected = 1;
+    let guardEntry = 1;
+    let afterGuard = null;
+    /** The option field of the guard group being read, and the values it used. */
+    let groupField = null;
+    let groupValues = new Set();
+    const closeStep = () => {
+        if (current !== null)
+            steps.push(current);
+        current = null;
+    };
+    // A fenced block is content, not structure: a line inside one that looks like
+    // a step or a guard is neither.
+    let inFence = false;
+    lines.forEach((text, index) => {
+        const line = index + 1;
+        const isFence = FENCE_PATTERN.test(text);
+        if (isFence)
+            inFence = !inFence;
+        if (inFence || isFence) {
+            if (current !== null)
+                current.body.push(text);
+            return;
+        }
+        const guard = IF_PATTERN.exec(text.trim());
+        const isEndif = ENDIF_PATTERN.test(text.trim());
+        if (guard !== null) {
+            closeStep();
+            if (guardState.open !== null) {
+                add(line, 'no-nested-guards', `guard opened at line ${guardState.open.line} is still open`);
+            }
+            const [, field = '', value = ''] = guard;
+            const declared = options[field];
+            if (declared === undefined) {
+                add(line, 'unknown-option', `options.${field} is not declared in manifest.yaml`);
+            }
+            else if (!declared.includes(value)) {
+                add(line, 'unknown-option-value', `"${value}" is not a declared value of options.${field} (${declared.join(', ')})`);
+            }
+            // A sibling branch of the same group repeats its numbering instead of
+            // continuing it. A repeated value means a new group, not a sibling.
+            if (afterGuard !== null && field === groupField && !groupValues.has(value)) {
+                expected = guardEntry;
+                groupValues.add(value);
+            }
+            else {
+                if (afterGuard !== null) {
+                    expected = afterGuard;
+                    afterGuard = null;
+                }
+                guardEntry = expected;
+                groupField = field;
+                groupValues = new Set([value]);
+            }
+            guardState.open = { field, value, line };
+            return;
+        }
+        if (isEndif) {
+            closeStep();
+            if (guardState.open === null) {
+                add(line, 'unmatched-endif', 'endif without a matching if');
+            }
+            else {
+                afterGuard = Math.max(afterGuard ?? 0, expected);
+                expected = guardEntry;
+                guardState.open = null;
+            }
+            return;
+        }
+        if (ANY_GUARD_PATTERN.test(text.trim())) {
+            add(line, 'guard-syntax', 'a guard must read exactly `<!-- if options.<field> == <value> -->` or `<!-- endif -->`');
+            return;
+        }
+        const step = STEP_PATTERN.exec(text);
+        if (step !== null) {
+            closeStep();
+            const number = Number(step[1]);
+            if (guardState.open === null && afterGuard !== null) {
+                expected = afterGuard;
+                afterGuard = null;
+            }
+            if (number !== expected) {
+                add(line, 'step-numbering', `step is numbered ${number}, expected ${expected}${guardState.open === null
+                    ? ''
+                    : ' (a guarded branch continues the numbering it opened at)'}`);
+                expected = number;
+            }
+            expected += 1;
+            current = { number, line, body: [step[2] ?? ''] };
+            return;
+        }
+        if (current !== null && text.trim().length > 0) {
+            current.body.push(text);
+        }
+        else if (current !== null && text.trim().length === 0) {
+            current.body.push('');
+        }
+    });
+    closeStep();
+    if (guardState.open !== null) {
+        add(guardState.open.line, 'unclosed-guard', 'guard is never closed by `<!-- endif -->`');
+    }
+    if (steps.length === 0) {
+        add(1, 'no-steps', 'setup.md has no numbered steps');
+    }
+    for (const step of steps) {
+        // The verification line does not count: the action itself must name a
+        // command or a file, or the step is prose telling someone to figure it out.
+        const action = step.body.filter((text) => !VERIFY_PATTERN.test(text)).join('\n');
+        if (!/`[^`]+`/.test(action)) {
+            add(step.line, 'step-needs-command', `step ${step.number} states no command or file path; a step is one concrete action`);
+        }
+        if (!step.body.some((text) => VERIFY_PATTERN.test(text))) {
+            add(step.line, 'step-needs-verification', `step ${step.number} has no "Verify: \`command\`" line`);
+        }
+    }
+    // Only commands are linted. Prose that mentions `sudo` to warn against it is
+    // not a violation; a code span that runs it is.
+    let inCodeFence = false;
+    lines.forEach((text, index) => {
+        const line = index + 1;
+        if (FENCE_PATTERN.test(text)) {
+            inCodeFence = !inCodeFence;
+            return;
+        }
+        const code = inCodeFence ? text : inlineCode(text);
+        if (code.trim().length === 0)
+            return;
+        for (const { rule, pattern, message } of FORBIDDEN) {
+            if (pattern.test(code))
+                add(line, rule, message);
+        }
+        for (const { rule, detect, pinned, message } of PINNING) {
+            if (detect.test(code) && !pinned.test(code))
+                add(line, rule, message);
+        }
+        for (const host of hostsIn(code)) {
+            if (!ALLOWED_HOSTS.has(host)) {
+                add(line, 'registry-only', `${host} is not a package registry or the local machine`);
+            }
+        }
+    });
+    return problems.sort((a, b) => a.line - b.line || a.rule.localeCompare(b.rule));
+}
+/** The contents of every `code span` on a line, joined by newlines. */
+function inlineCode(text) {
+    return [...text.matchAll(/`([^`]+)`/g)].map((match) => match[1] ?? '').join('\n');
+}
+/** Hosts of every http(s) URL on a line. */
+function hostsIn(text) {
+    const hosts = [];
+    const urls = text.matchAll(/https?:\/\/([^\s/`)"'>]+)/gi);
+    for (const match of urls) {
+        const authority = match[1];
+        if (authority === undefined)
+            continue;
+        const host = authority.split('@').pop() ?? authority;
+        hosts.push(host.replace(/:\d+$/, '').toLowerCase());
+    }
+    return hosts;
+}
+//# sourceMappingURL=lint-setup.js.map

package/dist/lint-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint-setup.js","sourceRoot":"","sources":["../src/lint-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,0EAA0E;AAC1E,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,+CAA+C;AAC/C,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,MAAM,UAAU,GAAG,+DAA+D,CAAC;AACnF,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD,sDAAsD;AACtD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC,8EAA8E;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,WAAW;IACX,WAAW;IACX,OAAO;IACP,eAAe;IACf,WAAW;IACX,eAAe;IACf,oBAAoB;IACpB,eAAe;IACf,WAAW;IACX,UAAU;IACV,wBAAwB;IACxB,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,cAAc;IACd,eAAe;IACf,mBAAmB;IACnB,SAAS;IACT,WAAW;IACX,sBAAsB;CACvB,CAAC,CAAC;AAQH,MAAM,SAAS,GAA6B;IAC1C;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,wEAAwE;QACjF,OAAO,EAAE,+CAA+C;KACzD;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,oEAAoE;KAC9E;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,8EAA8E;QACvF,OAAO,EAAE,yCAAyC;KACnD;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,2BAA2B;QACpC,OAAO,EAAE,0BAA0B;KACpC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,kFAAkF;QAC3F,OAAO,EAAE,0DAA0D;KACpE;CACF,CAAC;AASF,MAAM,OAAO,GAAuB;IAClC;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,iCAAiC;QACzC,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,gDAAgD;KAC1D;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,gDAAgD;QACxD,MAAM,EAAE,wEAAwE;QAChF,OAAO,EAAE,kEAAkE;KAC5E;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,iCAAiC;QACzC,MAAM,EAAE,6CAA6C;QACrD,OAAO,EAAE,yCAAyC;KACnD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,gCAAgC;QACxC,OAAO,EAAE,8DAA8D;KACxE;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,4BAA4B;QACpC,2EAA2E;QAC3E,yCAAyC;QACzC,MAAM,EAAE,sEAAsE;QAC9E,OAAO,EAAE,4DAA4D;KACtE;CACF,CAAC;AAcF,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,EAAE,OAAO,GAAG,EAAE,KAAkB,EAAE;IAC1E,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe,EAAQ,EAAE;QAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,OAAO,GAA4D,IAAI,CAAC;IAE5E,0EAA0E;IAC1E,uBAAuB;IACvB,2EAA2E;IAC3E,MAAM,UAAU,GAAoE;QAClF,IAAI,EAAE,IAAI;KACX,CAAC;IACF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,8EAA8E;IAC9E,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,IAAI,OAAO,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;IAEF,8EAA8E;IAC9E,gCAAgC;IAChC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,SAAS,EAAE,CAAC;YACZ,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;YACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,KAAK,mCAAmC,CAAC,CAAC;YACnF,CAAC;iBAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,GAAG,CACD,IAAI,EACJ,sBAAsB,EACtB,IAAI,KAAK,wCAAwC,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClF,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,oEAAoE;YACpE,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3E,QAAQ,GAAG,UAAU,CAAC;gBACtB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBACxB,QAAQ,GAAG,UAAU,CAAC;oBACtB,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,UAAU,GAAG,QAAQ,CAAC;gBACtB,UAAU,GAAG,KAAK,CAAC;gBACnB,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;YACD,UAAU,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;YACZ,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACjD,QAAQ,GAAG,UAAU,CAAC;gBACtB,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;YACzB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACxC,GAAG,CACD,IAAI,EACJ,cAAc,EACd,wFAAwF,CACzF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,SAAS,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACpD,QAAQ,GAAG,UAAU,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,GAAG,CACD,IAAI,EACJ,gBAAgB,EAChB,oBAAoB,MAAM,cAAc,QAAQ,GAC9C,UAAU,CAAC,IAAI,KAAK,IAAI;oBACtB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,0DACN,EAAE,CACH,CAAC;gBACF,QAAQ,GAAG,MAAM,CAAC;YACpB,CAAC;YACD,QAAQ,IAAI,CAAC,CAAC;YACd,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,SAAS,EAAE,CAAC;IAEZ,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,GAAG,CACD,IAAI,CAAC,IAAI,EACT,oBAAoB,EACpB,QAAQ,IAAI,CAAC,MAAM,gEAAgE,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CACD,IAAI,CAAC,IAAI,EACT,yBAAyB,EACzB,QAAQ,IAAI,CAAC,MAAM,oCAAoC,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,gDAAgD;IAChD,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,WAAW,GAAG,CAAC,WAAW,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,IAAI,iDAAiD,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAED,4CAA4C;AAC5C,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+import { type Taxonomy } from './taxonomy.js';
+/** ADR 0001: variation is limited so the option matrix stays testable. */
+export declare const MAX_OPTION_FIELDS = 3;
+export declare const MAX_OPTION_VALUES = 3;
+export declare const MIN_OPTION_VALUES = 2;
+/**
+ * The manifest shape without cross-field rules, so that it can be rendered as
+ * JSON Schema. `manifestSchema` adds the rules that JSON Schema cannot express.
+ */
+export declare function manifestObjectSchema(taxonomy: Taxonomy): z.ZodObject<{
+    schema: z.ZodLiteral<1>;
+    slug: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodString;
+    tier: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    maintainers: z.ZodArray<z.ZodString>;
+    summary: z.ZodString;
+    stack: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    languages: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    platforms: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    distribution: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    project_type: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    audience: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    requirements: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    agents: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+    provides: z.ZodOptional<z.ZodObject<{
+        mcp: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    requires_tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    deprecated: z.ZodDefault<z.ZodBoolean>;
+    supersedes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+/** Runtime validation schema: the object shape plus cross-field rules. */
+export declare function manifestSchema(taxonomy: Taxonomy): z.ZodObject<{
+    schema: z.ZodLiteral<1>;
+    slug: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodString;
+    tier: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    maintainers: z.ZodArray<z.ZodString>;
+    summary: z.ZodString;
+    stack: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    languages: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    platforms: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    distribution: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    project_type: z.ZodEnum<{
+        [x: string]: string;
+    }>;
+    audience: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    requirements: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    agents: z.ZodArray<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+    provides: z.ZodOptional<z.ZodObject<{
+        mcp: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    requires_tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    deprecated: z.ZodDefault<z.ZodBoolean>;
+    supersedes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type Manifest = z.infer<ReturnType<typeof manifestObjectSchema>>;
+/**
+ * The combination that must be unique across the catalog (rule 9): two
+ * blueprints may not claim the same stack, project type and requirements.
+ */
+export declare function combinationKey(manifest: Manifest): string;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAanE,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAiBnC;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAmCtD;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAkBhD;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;AAExE;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAIzD"}

package/dist/manifest.js

@@ -0,0 +1,93 @@
+import { z } from 'zod';
+import { SLUG_PATTERN, terms } from './taxonomy.js';
+/** https://semver.org — the official recommended pattern, anchored. */
+const SEMVER_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/;
+/** GitHub login, as GitHub itself validates it. */
+const GITHUB_HANDLE_PATTERN = /^[a-zA-Z\d](?:[a-zA-Z\d]|-(?=[a-zA-Z\d])){0,38}$/;
+/** A tool with an optional version constraint, for example `dotnet>=9`. */
+const REQUIRED_TOOL_PATTERN = /^[a-z0-9][a-z0-9.+-]*(?:\s*(?:>=|<=|==|>|<|~|\^)\s*[0-9][0-9a-zA-Z.-]*)?$/;
+/** ADR 0001: variation is limited so the option matrix stays testable. */
+export const MAX_OPTION_FIELDS = 3;
+export const MAX_OPTION_VALUES = 3;
+export const MIN_OPTION_VALUES = 2;
+const slug = z.string().regex(SLUG_PATTERN, 'must be lower kebab-case');
+function vocabulary(taxonomy, name) {
+    const values = terms(taxonomy, name);
+    if (values.length === 0)
+        throw new Error(`Taxonomy vocabulary "${name}" is empty`);
+    return z.enum(values);
+}
+function uniqueArray(item, min = 1) {
+    return z
+        .array(item)
+        .min(min)
+        .refine((values) => new Set(values).size === values.length, 'must not contain duplicates');
+}
+/**
+ * The manifest shape without cross-field rules, so that it can be rendered as
+ * JSON Schema. `manifestSchema` adds the rules that JSON Schema cannot express.
+ */
+export function manifestObjectSchema(taxonomy) {
+    return z
+        .object({
+        schema: z.literal(1),
+        slug,
+        name: z.string().min(3).max(80),
+        version: z.string().regex(SEMVER_PATTERN, 'must be a semantic version'),
+        tier: vocabulary(taxonomy, 'tier'),
+        maintainers: uniqueArray(z.string().regex(GITHUB_HANDLE_PATTERN, 'must be a GitHub login')),
+        summary: z.string().min(20).max(200),
+        stack: uniqueArray(vocabulary(taxonomy, 'stack')),
+        languages: uniqueArray(vocabulary(taxonomy, 'languages')),
+        platforms: uniqueArray(vocabulary(taxonomy, 'platforms')),
+        distribution: uniqueArray(vocabulary(taxonomy, 'distribution')),
+        project_type: vocabulary(taxonomy, 'project_type'),
+        audience: uniqueArray(vocabulary(taxonomy, 'audience')),
+        requirements: uniqueArray(vocabulary(taxonomy, 'requirements')),
+        agents: uniqueArray(vocabulary(taxonomy, 'agents')),
+        options: z
+            .record(slug, uniqueArray(slug, MIN_OPTION_VALUES).max(MAX_OPTION_VALUES))
+            .optional(),
+        provides: z
+            .object({
+            mcp: uniqueArray(slug).optional(),
+            skills: uniqueArray(slug).optional(),
+        })
+            .strict()
+            .optional(),
+        requires_tools: uniqueArray(z.string().regex(REQUIRED_TOOL_PATTERN, 'must be a tool name with an optional version')).optional(),
+        deprecated: z.boolean().default(false),
+        supersedes: slug.nullable().default(null),
+    })
+        .strict();
+}
+/** Runtime validation schema: the object shape plus cross-field rules. */
+export function manifestSchema(taxonomy) {
+    return manifestObjectSchema(taxonomy).superRefine((manifest, ctx) => {
+        const fields = Object.keys(manifest.options ?? {});
+        if (fields.length > MAX_OPTION_FIELDS) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['options'],
+                message: `at most ${MAX_OPTION_FIELDS} option fields are allowed, found ${fields.length} (ADR 0001)`,
+            });
+        }
+        if (manifest.supersedes === manifest.slug) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['supersedes'],
+                message: 'a blueprint cannot supersede itself',
+            });
+        }
+    });
+}
+/**
+ * The combination that must be unique across the catalog (rule 9): two
+ * blueprints may not claim the same stack, project type and requirements.
+ */
+export function combinationKey(manifest) {
+    const stack = [...manifest.stack].sort().join(',');
+    const requirements = [...manifest.requirements].sort().join(',');
+    return `${stack}|${manifest.project_type}|${requirements}`;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,KAAK,EAAiB,MAAM,eAAe,CAAC;AAEnE,uEAAuE;AACvE,MAAM,cAAc,GAClB,qLAAqL,CAAC;AAExL,mDAAmD;AACnD,MAAM,qBAAqB,GAAG,kDAAkD,CAAC;AAEjF,2EAA2E;AAC3E,MAAM,qBAAqB,GACzB,2EAA2E,CAAC;AAE9E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;AAExE,SAAS,UAAU,CAAC,QAAkB,EAAE,IAAiC;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,YAAY,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAsB,IAAO,EAAE,GAAG,GAAG,CAAC;IACxD,OAAO,CAAC;SACL,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,GAAG,CAAC;SACR,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,CAAC;SACL,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpB,IAAI;QACJ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,4BAA4B,CAAC;QACvE,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;QAClC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;QAC3F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACpC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACzD,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACzD,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC/D,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC;QAClD,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvD,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;aACzE,QAAQ,EAAE;QACb,QAAQ,EAAE,CAAC;aACR,MAAM,CAAC;YACN,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SACrC,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,cAAc,EAAE,WAAW,CACzB,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CACxF,CAAC,QAAQ,EAAE;QACZ,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC1C,CAAC;SACD,MAAM,EAAE,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACtC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,WAAW,iBAAiB,qCAAqC,MAAM,CAAC,MAAM,aAAa;aACrG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;AAC7D,CAAC"}

package/dist/options.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Resolving `setup.md` option guards.
+ *
+ * A recipe is written with every branch present:
+ *
+ * ```markdown
+ * <!-- if options.database == postgres -->
+ * ...
+ * <!-- endif -->
+ * ```
+ *
+ * A caller who has chosen `database: postgres` should receive the recipe with
+ * that branch inlined and the others gone, because a step list with branches in
+ * it is a document, and the point of `setup.md` is that it is a script.
+ */
+import type { Manifest } from './manifest.js';
+export interface ResolveOptionsResult {
+    readonly markdown: string;
+    /** Option fields that appear in guards but were not chosen by the caller. */
+    readonly unresolved: readonly string[];
+}
+export declare class UnknownOptionError extends Error {
+}
+/**
+ * Validate a caller's option selection against what the manifest declares.
+ * Throws rather than guessing: a typo that silently selects the default would
+ * hand somebody a recipe for a database they did not ask for.
+ */
+export declare function checkOptions(manifest: Manifest, chosen: Readonly<Record<string, string>>): void;
+/**
+ * Inline the chosen branches and drop the rest.
+ *
+ * A guard on a field the caller did not choose is left exactly as written, and
+ * the field is reported in `unresolved`, so the caller can be asked rather than
+ * handed a recipe with a branch silently removed.
+ */
+export declare function resolveSetupOptions(markdown: string, chosen?: Readonly<Record<string, string>>): ResolveOptionsResult;
+/** Option fields a caller still has to choose, given what they have chosen. */
+export declare function missingOptions(manifest: Manifest, chosen?: Readonly<Record<string, string>>): {
+    field: string;
+    values: readonly string[];
+}[];
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAK9C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAkB/F;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GAC5C,oBAAoB,CAuDtB;AAmBD,+EAA+E;AAC/E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,QAAQ,EAClB,MAAM,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GAC5C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAAE,CAIhD"}