knitto 0.0.1

package/dist/src/engine/plan.js

@@ -0,0 +1,259 @@
+import { createHash } from "node:crypto";
+import path from "node:path";
+import { readFile } from "node:fs/promises";
+import { glob } from "glob";
+import { KnittoError } from "../errors.js";
+import { assertNoEscapingSymlink, resolveInside, } from "../filesystem/paths.js";
+import { buildContext } from "../context/build.js";
+import { renderTemplate, } from "../context/render.js";
+import { prepareContent } from "../parsers/index.js";
+import { discoverProjectUnits } from "../project/discover.js";
+import { runChecks } from "../checks/run.js";
+import { applyContextHooks, assertHooksTrusted, runCheckHooks, runParserHook, } from "../hooks/run.js";
+function digest(contents) {
+    return `sha256:${createHash("sha256").update(contents).digest("hex")}`;
+}
+async function readOptional(file) {
+    try {
+        return await readFile(file, "utf8");
+    }
+    catch (error) {
+        if (typeof error === "object" &&
+            error !== null &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return null;
+        }
+        throw error;
+    }
+}
+async function renderRule(rule, snapshot, context, partials) {
+    const templatePath = resolveInside(snapshot.directory, rule.template);
+    const template = await readFile(templatePath, "utf8");
+    return renderTemplate(template, context, rule.template, partials);
+}
+async function loadPartials(snapshot) {
+    const partials = [];
+    for (const [name, file] of Object.entries(snapshot.manifest.partials ?? {})) {
+        const contents = await readFile(resolveInside(snapshot.directory, file), "utf8");
+        partials.push({ name, contents });
+    }
+    return partials;
+}
+function parserFor(rule) {
+    if (rule.type === "file")
+        return "text";
+    if (rule.type === "json")
+        return "json-merge";
+    return rule.parser;
+}
+function rulePointers(rule) {
+    return rule.type === "json" || rule.type === "content"
+        ? rule.pointers
+        : undefined;
+}
+function ruleSchema(rule) {
+    return rule.type === "json" || rule.type === "content"
+        ? rule.schema
+        : undefined;
+}
+function structuredRule(rule) {
+    if (rule.type === "json")
+        return true;
+    return rule.type === "content" && rule.parser !== "text";
+}
+function ruleEnabled(rule, context, partials) {
+    if (!rule.when)
+        return true;
+    const rendered = renderTemplate(rule.when, context, `${rule.id}.when`, partials)
+        .trim()
+        .toLowerCase();
+    return rendered !== "" && rendered !== "false" && rendered !== "0";
+}
+function appliesToUnit(rule, isRoot) {
+    const scope = rule.scope ?? "root";
+    return scope === "all" || (scope === "root" ? isRoot : !isRoot);
+}
+function relativeProjectPath(root, destination) {
+    return path.relative(root, destination).split(path.sep).join("/");
+}
+function validateExceptions(config, snapshot) {
+    const rules = new Map(snapshot.manifest.rules.map((rule) => [rule.id, rule]));
+    for (const ruleId of config.exclude?.rules ?? []) {
+        if (!rules.has(ruleId)) {
+            throw new KnittoError(`Excluded rule does not exist: ${ruleId}`, "CONFIG");
+        }
+    }
+    for (const [ruleId, pointers] of Object.entries(config.exclude?.pointers ?? {})) {
+        const rule = rules.get(ruleId);
+        if (!rule || !structuredRule(rule)) {
+            throw new KnittoError(`Pointer exclusions require a JSON rule: ${ruleId}`, "CONFIG");
+        }
+        for (const pointer of pointers) {
+            const pointers = rulePointers(rule);
+            if (pointers && !pointers.includes(pointer)) {
+                throw new KnittoError(`Excluded pointer is not managed by ${ruleId}: ${pointer}`, "CONFIG");
+            }
+        }
+    }
+    for (const [ruleId, overrides] of Object.entries(config.overrides ?? {})) {
+        const rule = rules.get(ruleId);
+        if (!rule || !structuredRule(rule)) {
+            throw new KnittoError(`Overrides require a JSON rule: ${ruleId}`, "CONFIG");
+        }
+        for (const pointer of Object.keys(overrides)) {
+            const pointers = rulePointers(rule);
+            if (pointers && !pointers.includes(pointer)) {
+                throw new KnittoError(`Override pointer is not managed by ${ruleId}: ${pointer}`, "CONFIG");
+            }
+        }
+    }
+}
+export async function createPlan(projectRoot, config, snapshot) {
+    const root = path.resolve(projectRoot);
+    const partials = await loadPartials(snapshot);
+    const units = await discoverProjectUnits(root, config);
+    const excludedRules = new Set();
+    const excludedPointers = {};
+    const operations = [];
+    const checks = [];
+    const operatedPaths = new Map();
+    for (const unit of units) {
+        assertHooksTrusted(snapshot, unit);
+        validateExceptions(unit.config, snapshot);
+        const context = await applyContextHooks(snapshot, unit, await buildContext(unit, snapshot.manifest));
+        for (const ruleId of unit.config.exclude?.rules ?? []) {
+            excludedRules.add(ruleId);
+        }
+        for (const [ruleId, pointers] of Object.entries(unit.config.exclude?.pointers ?? {})) {
+            excludedPointers[ruleId] = [
+                ...new Set([...(excludedPointers[ruleId] ?? []), ...pointers]),
+            ];
+        }
+        for (const rule of snapshot.manifest.rules) {
+            if (!appliesToUnit(rule, unit.isRoot))
+                continue;
+            if (unit.config.exclude?.rules?.includes(rule.id))
+                continue;
+            if (!ruleEnabled(rule, context, partials))
+                continue;
+            const renderedDestination = renderTemplate(rule.destination, context, `${rule.id}.destination`, partials);
+            const destinationRoot = rule.target === "root" ? root : unit.path;
+            if (rule.type === "delete" && rule.glob) {
+                const matches = await glob(renderedDestination, {
+                    cwd: destinationRoot,
+                    dot: true,
+                    nodir: true,
+                });
+                for (const match of matches.sort()) {
+                    const matchedDestination = resolveInside(destinationRoot, match);
+                    await assertNoEscapingSymlink(root, matchedDestination);
+                    const matchedCurrent = await readOptional(matchedDestination);
+                    if (matchedCurrent !== null) {
+                        const operationPath = relativeProjectPath(root, matchedDestination);
+                        operations.push({
+                            type: "delete",
+                            ruleId: rule.id,
+                            path: operationPath,
+                            before: matchedCurrent,
+                            beforeDigest: digest(matchedCurrent),
+                        });
+                    }
+                }
+                continue;
+            }
+            const destination = resolveInside(destinationRoot, renderedDestination);
+            await assertNoEscapingSymlink(root, destination);
+            const current = await readOptional(destination);
+            const operationPath = relativeProjectPath(root, destination);
+            const existingRule = operatedPaths.get(operationPath);
+            if (existingRule) {
+                throw new KnittoError(`Rules ${existingRule} and ${rule.id} both manage ${operationPath}`, "TEMPLATE");
+            }
+            if (rule.type === "delete") {
+                if (current !== null) {
+                    operatedPaths.set(operationPath, rule.id);
+                    operations.push({
+                        type: "delete",
+                        ruleId: rule.id,
+                        path: operationPath,
+                        before: current,
+                        beforeDigest: digest(current),
+                    });
+                }
+                continue;
+            }
+            const rendered = await renderRule(rule, snapshot, context, partials);
+            const pointers = rulePointers(rule);
+            const schemaPath = ruleSchema(rule);
+            let schema;
+            if (schemaPath) {
+                const schemaTemplate = await readFile(resolveInside(snapshot.directory, schemaPath), "utf8");
+                const renderedSchema = renderTemplate(schemaTemplate, context, schemaPath, partials);
+                try {
+                    schema = JSON.parse(renderedSchema);
+                }
+                catch (error) {
+                    throw new KnittoError(`Rendered JSON Schema is invalid: ${schemaPath}`, "TEMPLATE", { cause: error });
+                }
+            }
+            const excluded = unit.config.exclude?.pointers?.[rule.id];
+            const overrides = unit.config.overrides?.[rule.id];
+            const prepared = rule.type === "content" && rule.parser === "hook"
+                ? await runParserHook(snapshot, rule.hook ?? "", {
+                    rule,
+                    rendered,
+                    current,
+                    schema,
+                    pointers,
+                    excludedPointers: excluded ?? [],
+                    overrides: overrides ?? {},
+                    context,
+                })
+                : prepareContent({
+                    parser: parserFor(rule),
+                    rendered,
+                    current,
+                    ...(schema !== undefined ? { schema } : {}),
+                    ...((rule.type === "json" || rule.type === "content") &&
+                        rule.exact
+                        ? { exactPointers: rule.exact }
+                        : {}),
+                    ...(pointers ? { pointers } : {}),
+                    ...(excluded ? { excludedPointers: excluded } : {}),
+                    ...(overrides ? { overrides } : {}),
+                    ...((rule.type === "json" || rule.type === "content") &&
+                        rule.indent !== undefined
+                        ? { indent: rule.indent }
+                        : {}),
+                });
+            const desired = prepared.contents;
+            if (current !== desired) {
+                operatedPaths.set(operationPath, rule.id);
+                operations.push({
+                    type: "write",
+                    ruleId: rule.id,
+                    path: operationPath,
+                    before: current,
+                    after: desired,
+                    beforeDigest: current === null ? null : digest(current),
+                    ...(prepared.jsonPatch ? { jsonPatch: prepared.jsonPatch } : {}),
+                    ...((rule.type === "file" || rule.type === "content") &&
+                        rule.mode !== undefined
+                        ? { mode: rule.mode }
+                        : {}),
+                });
+            }
+        }
+        checks.push(...(await runChecks(snapshot.manifest.checks ?? [], unit, context, partials)), ...(await runCheckHooks(snapshot, unit, context)));
+    }
+    return {
+        projectRoot: root,
+        templateDigest: snapshot.digest,
+        operations,
+        checks,
+        excludedRules: [...excludedRules],
+        excludedPointers,
+    };
+}
+//# sourceMappingURL=plan.js.map

package/dist/src/engine/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/engine/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,aAAa,GACd,MAAM,iBAAiB,CAAC;AAczB,SAAS,MAAM,CAAC,QAAgB;IAC9B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAA+C,EAC/C,QAAkB,EAClB,OAAiD,EACjD,QAA2B;IAE3B,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CACjC,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,IAAuC;IACxD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CACnB,IAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QACpD,CAAC,CAAC,IAAI,CAAC,QAAQ;QACf,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB;IACpC,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QACpD,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,IAAkB;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;AAC3D,CAAC;AAED,SAAS,WAAW,CAClB,IAAkB,EAClB,OAAiD,EACjD,QAA2B;IAE3B,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC;SAC7E,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,OAAO,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,GAAG,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,IAAkB,EAAE,MAAe;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACnC,OAAO,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,WAAmB;IAC5D,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAqB,EACrB,QAAkB;IAElB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,WAAW,CAAC,iCAAiC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC7E,CAAC;IAEH,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAC7C,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAC/B,EAAE,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CACnB,2CAA2C,MAAM,EAAE,EACnD,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,WAAW,CACnB,sCAAsC,MAAM,KAAK,OAAO,EAAE,EAC1D,QAAQ,CACT,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CACnB,kCAAkC,MAAM,EAAE,EAC1C,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,WAAW,CACnB,sCAAsC,MAAM,KAAK,OAAO,EAAE,EAC1D,QAAQ,CACT,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAAmB,EACnB,MAAqB,EACrB,QAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,gBAAgB,GAA6B,EAAE,CAAC;IACtD,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CACrC,QAAQ,EACR,IAAI,EACJ,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAC5C,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YACtD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CACpC,EAAE,CAAC;YACF,gBAAgB,CAAC,MAAM,CAAC,GAAG;gBACzB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAChD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC5D,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;gBAAE,SAAS;YAEpD,MAAM,mBAAmB,GAAG,cAAc,CACxC,IAAI,CAAC,WAAW,EAChB,OAAO,EACP,GAAG,IAAI,CAAC,EAAE,cAAc,EACxB,QAAQ,CACT,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAElE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;oBAC9C,GAAG,EAAE,eAAe;oBACpB,GAAG,EAAE,IAAI;oBACT,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBACnC,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;oBACjE,MAAM,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;oBACxD,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,CAAC;oBAC9D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;wBAC5B,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;wBACpE,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,QAAQ;4BACd,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,IAAI,EAAE,aAAa;4BACnB,MAAM,EAAE,cAAc;4BACtB,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC;yBACrC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,aAAa,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YACxE,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACtD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,WAAW,CACnB,SAAS,YAAY,QAAQ,IAAI,CAAC,EAAE,gBAAgB,aAAa,EAAE,EACnE,UAAU,CACX,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC1C,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,OAAO;wBACf,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC;qBAC9B,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAe,CAAC;YACpB,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,cAAc,GAAG,MAAM,QAAQ,CACnC,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,EAC7C,MAAM,CACP,CAAC;gBACF,MAAM,cAAc,GAAG,cAAc,CACnC,cAAc,EACd,OAAO,EACP,UAAU,EACV,QAAQ,CACT,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAY,CAAC;gBACjD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,WAAW,CACnB,oCAAoC,UAAU,EAAE,EAChD,UAAU,EACV,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAC/C,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE;oBAC7C,IAAI;oBACJ,QAAQ;oBACR,OAAO;oBACP,MAAM;oBACN,QAAQ;oBACR,gBAAgB,EAAE,QAAQ,IAAI,EAAE;oBAChC,SAAS,EAAE,SAAS,IAAI,EAAE;oBAC1B,OAAO;iBACR,CAAC;gBACJ,CAAC,CAAC,cAAc,CAAC;oBACb,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;oBACvB,QAAQ;oBACR,OAAO;oBACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;wBACrD,IAAI,CAAC,KAAK;wBACR,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE;wBAC/B,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;wBACrD,IAAI,CAAC,MAAM,KAAK,SAAS;wBACvB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;wBACzB,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACT,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAElC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,OAAO;oBACd,YAAY,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACvD,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;wBACrD,IAAI,CAAC,IAAI,KAAK,SAAS;wBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;wBACrB,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,SAAS,CACjB,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAC9B,IAAI,EACJ,OAAO,EACP,QAAQ,CACT,CAAC,EACF,GAAG,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,UAAU;QACV,MAAM;QACN,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;QACjC,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/src/errors.d.ts

@@ -0,0 +1,14 @@
+export declare class KnittoError extends Error {
+    readonly code: "DRIFT" | "CONFIG" | "SOURCE" | "TEMPLATE" | "APPLY" | "USAGE";
+    constructor(message: string, code: "DRIFT" | "CONFIG" | "SOURCE" | "TEMPLATE" | "APPLY" | "USAGE", options?: ErrorOptions);
+}
+export declare const EXIT_CODES: {
+    readonly success: 0;
+    readonly drift: 1;
+    readonly config: 2;
+    readonly source: 3;
+    readonly template: 4;
+    readonly apply: 5;
+    readonly usage: 64;
+};
+export declare function exitCodeFor(error: unknown): number;

package/dist/src/errors.js

@@ -0,0 +1,31 @@
+export class KnittoError extends Error {
+    code;
+    constructor(message, code, options) {
+        super(message, options);
+        this.code = code;
+        this.name = "KnittoError";
+    }
+}
+export const EXIT_CODES = {
+    success: 0,
+    drift: 1,
+    config: 2,
+    source: 3,
+    template: 4,
+    apply: 5,
+    usage: 64,
+};
+export function exitCodeFor(error) {
+    if (!(error instanceof KnittoError)) {
+        return EXIT_CODES.apply;
+    }
+    return {
+        DRIFT: EXIT_CODES.drift,
+        CONFIG: EXIT_CODES.config,
+        SOURCE: EXIT_CODES.source,
+        TEMPLATE: EXIT_CODES.template,
+        APPLY: EXIT_CODES.apply,
+        USAGE: EXIT_CODES.usage,
+    }[error.code];
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGzB;IAFX,YACE,OAAe,EACN,IAME,EACX,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QATf,SAAI,GAAJ,IAAI,CAMF;QAIX,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,EAAE;CACD,CAAC;AAEX,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;KACxB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/src/filesystem/paths.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveInside(root: string, relativePath: string): string;
+export declare function assertNoEscapingSymlink(root: string, target: string): Promise<void>;

package/dist/src/filesystem/paths.js

@@ -0,0 +1,47 @@
+import path from "node:path";
+import { lstat, realpath } from "node:fs/promises";
+import { KnittoError } from "../errors.js";
+export function resolveInside(root, relativePath) {
+    if (path.isAbsolute(relativePath)) {
+        throw new KnittoError(`Absolute paths are not allowed: ${relativePath}`, "TEMPLATE");
+    }
+    const resolvedRoot = path.resolve(root);
+    const resolved = path.resolve(resolvedRoot, relativePath);
+    const relative = path.relative(resolvedRoot, resolved);
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        throw new KnittoError(`Path escapes the selected root: ${relativePath}`, "TEMPLATE");
+    }
+    return resolved;
+}
+export async function assertNoEscapingSymlink(root, target) {
+    const resolvedRoot = await realpath(root);
+    let current = path.resolve(target);
+    while (current.startsWith(path.resolve(root))) {
+        try {
+            const stat = await lstat(current);
+            if (stat.isSymbolicLink()) {
+                const destination = await realpath(current);
+                const relative = path.relative(resolvedRoot, destination);
+                if (relative.startsWith("..") || path.isAbsolute(relative)) {
+                    throw new KnittoError(`Symlink escapes the selected root: ${target}`, "TEMPLATE");
+                }
+            }
+        }
+        catch (error) {
+            if (typeof error === "object" &&
+                error !== null &&
+                "code" in error &&
+                error.code === "ENOENT") {
+                // Missing destination components are safe until created.
+            }
+            else {
+                throw error;
+            }
+        }
+        if (current === path.resolve(root)) {
+            break;
+        }
+        current = path.dirname(current);
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/src/filesystem/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/filesystem/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAoB;IAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,WAAW,CACnB,mCAAmC,YAAY,EAAE,EACjD,UAAU,CACX,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEvD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,WAAW,CACnB,mCAAmC,YAAY,EAAE,EACjD,UAAU,CACX,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAY,EACZ,MAAc;IAEd,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;gBAC1D,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3D,MAAM,IAAI,WAAW,CACnB,sCAAsC,MAAM,EAAE,EAC9C,UAAU,CACX,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,MAAM,IAAI,KAAK;gBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,yDAAyD;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/src/hooks/run.d.ts

@@ -0,0 +1,10 @@
+import type { CheckResult, JsonPatchOperation, ProjectUnit, RenderContext, Snapshot } from "../types.js";
+interface ParserHookResult {
+    contents: string;
+    jsonPatch?: JsonPatchOperation[];
+}
+export declare function assertHooksTrusted(snapshot: Snapshot, unit: ProjectUnit): void;
+export declare function applyContextHooks(snapshot: Snapshot, unit: ProjectUnit, context: RenderContext): Promise<RenderContext>;
+export declare function runParserHook(snapshot: Snapshot, hookId: string, input: unknown): Promise<ParserHookResult>;
+export declare function runCheckHooks(snapshot: Snapshot, unit: ProjectUnit, context: RenderContext): Promise<CheckResult[]>;
+export {};

package/dist/src/hooks/run.js

@@ -0,0 +1,105 @@
+import { spawn } from "node:child_process";
+import { KnittoError } from "../errors.js";
+import { resolveInside } from "../filesystem/paths.js";
+async function executeHook(snapshot, hook, input) {
+    const command = resolveInside(snapshot.directory, hook.command);
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, hook.args ?? [], {
+            cwd: snapshot.directory,
+            env: {
+                PATH: process.env.PATH,
+                HOME: process.env.HOME,
+                TMPDIR: process.env.TMPDIR,
+            },
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+        const stdout = [];
+        const stderr = [];
+        child.stdout.on("data", (chunk) => stdout.push(chunk));
+        child.stderr.on("data", (chunk) => stderr.push(chunk));
+        child.on("error", (error) => reject(new KnittoError(`Unable to execute hook ${hook.id}`, "TEMPLATE", {
+            cause: error,
+        })));
+        child.on("close", (code) => {
+            if (code !== 0) {
+                reject(new KnittoError(`Hook ${hook.id} failed with exit code ${code}: ${Buffer.concat(stderr).toString("utf8").trim()}`, "TEMPLATE"));
+                return;
+            }
+            try {
+                resolve(JSON.parse(Buffer.concat(stdout).toString("utf8")));
+            }
+            catch (error) {
+                reject(new KnittoError(`Hook ${hook.id} did not return valid JSON`, "TEMPLATE", { cause: error }));
+            }
+        });
+        child.stdin.end(JSON.stringify(input));
+    });
+}
+export function assertHooksTrusted(snapshot, unit) {
+    if ((snapshot.manifest.hooks?.length ?? 0) > 0 &&
+        !unit.config.trust?.hooks?.includes(snapshot.digest)) {
+        throw new KnittoError(`Template ${snapshot.digest} contains executable hooks and is not trusted`, "CONFIG");
+    }
+}
+export async function applyContextHooks(snapshot, unit, context) {
+    let derived = context.derived;
+    for (const hook of snapshot.manifest.hooks ?? []) {
+        if (hook.kind !== "context")
+            continue;
+        const result = await executeHook(snapshot, hook, { unit, context });
+        if (typeof result !== "object" || result === null || Array.isArray(result)) {
+            throw new KnittoError(`Context hook ${hook.id} must return an object`, "TEMPLATE");
+        }
+        derived = { ...derived, ...result };
+    }
+    return { ...context, derived };
+}
+export async function runParserHook(snapshot, hookId, input) {
+    const hook = snapshot.manifest.hooks?.find((candidate) => candidate.id === hookId && candidate.kind === "parser");
+    if (!hook) {
+        throw new KnittoError(`Parser hook does not exist: ${hookId}`, "TEMPLATE");
+    }
+    const result = await executeHook(snapshot, hook, input);
+    if (typeof result !== "object" ||
+        result === null ||
+        !("contents" in result) ||
+        typeof result.contents !== "string") {
+        throw new KnittoError(`Parser hook ${hookId} must return a contents string`, "TEMPLATE");
+    }
+    return {
+        contents: result.contents,
+        ...("jsonPatch" in result && Array.isArray(result.jsonPatch)
+            ? { jsonPatch: result.jsonPatch }
+            : {}),
+    };
+}
+export async function runCheckHooks(snapshot, unit, context) {
+    const results = [];
+    for (const hook of snapshot.manifest.hooks ?? []) {
+        if (hook.kind !== "check")
+            continue;
+        const result = await executeHook(snapshot, hook, { unit, context });
+        if (!Array.isArray(result)) {
+            throw new KnittoError(`Check hook ${hook.id} must return an array`, "TEMPLATE");
+        }
+        for (const entry of result) {
+            if (typeof entry !== "object" ||
+                entry === null ||
+                typeof entry.title !== "string" ||
+                !Array.isArray(entry.body)) {
+                throw new KnittoError(`Check hook ${hook.id} returned an invalid result`, "TEMPLATE");
+            }
+            results.push({
+                id: hook.id,
+                project: unit.relativePath,
+                title: entry.title,
+                body: entry.body.map(String),
+                ...("solution" in entry && typeof entry.solution === "string"
+                    ? { solution: entry.solution }
+                    : {}),
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=run.js.map

package/dist/src/hooks/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/hooks/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAevD,KAAK,UAAU,WAAW,CACxB,QAAkB,EAClB,IAAkB,EAClB,KAAc;IAEd,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE;YAC5C,GAAG,EAAE,QAAQ,CAAC,SAAS;YACvB,GAAG,EAAE;gBACH,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;gBACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;gBACtB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;aAC3B;YACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1B,MAAM,CACJ,IAAI,WAAW,CAAC,0BAA0B,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE;YAC/D,KAAK,EAAE,KAAK;SACb,CAAC,CACH,CACF,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CACJ,IAAI,WAAW,CACb,QAAQ,IAAI,CAAC,EAAE,0BAA0B,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EACjG,UAAU,CACX,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CACJ,IAAI,WAAW,CACb,QAAQ,IAAI,CAAC,EAAE,4BAA4B,EAC3C,UAAU,EACV,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAkB,EAAE,IAAiB;IACtE,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,YAAY,QAAQ,CAAC,MAAM,+CAA+C,EAC1E,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkB,EAClB,IAAiB,EACjB,OAAsB;IAEtB,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,WAAW,CACnB,gBAAgB,IAAI,CAAC,EAAE,wBAAwB,EAC/C,UAAU,CACX,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAI,MAAkC,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAkB,EAClB,MAAc,EACd,KAAc;IAEd,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CACxC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,CACtE,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,WAAW,CAAC,+BAA+B,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC;QACvB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,eAAe,MAAM,gCAAgC,EACrD,UAAU,CACX,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,WAAW,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAC1D,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAiC,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAkB,EAClB,IAAiB,EACjB,OAAsB;IAEtB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACpC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,WAAW,CACnB,cAAc,IAAI,CAAC,EAAE,uBAAuB,EAC5C,UAAU,CACX,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IACE,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAC1B,CAAC;gBACD,MAAM,IAAI,WAAW,CACnB,cAAc,IAAI,CAAC,EAAE,6BAA6B,EAClD,UAAU,CACX,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC5B,GAAG,CAAC,UAAU,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;oBAC3D,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;oBAC9B,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,7 @@
+export { applyPlan } from "./engine/apply.js";
+export { createPlan } from "./engine/plan.js";
+export { formatPlan } from "./engine/diff.js";
+export { resolveCurrentSnapshot, resolveLockedSnapshot, } from "./sources/resolve.js";
+export { createLock } from "./lock.js";
+export { prepareJson } from "./parsers/json.js";
+export type { ProjectConfig, ProjectLock, ReconciliationPlan, Snapshot, SourceConfig, TemplateManifest, TemplateRule, } from "./types.js";

package/dist/src/index.js

@@ -0,0 +1,7 @@
+export { applyPlan } from "./engine/apply.js";
+export { createPlan } from "./engine/plan.js";
+export { formatPlan } from "./engine/diff.js";
+export { resolveCurrentSnapshot, resolveLockedSnapshot, } from "./sources/resolve.js";
+export { createLock } from "./lock.js";
+export { prepareJson } from "./parsers/json.js";
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/src/lock.d.ts

@@ -0,0 +1,2 @@
+import type { ProjectLock, Snapshot, SourceConfig } from "./types.js";
+export declare function createLock(source: SourceConfig, snapshot: Snapshot): ProjectLock;

package/dist/src/lock.js

@@ -0,0 +1,16 @@
+import { KNITTO_PACKAGE, KNITTO_VERSION } from "./version.js";
+export function createLock(source, snapshot) {
+    return {
+        schemaVersion: 1,
+        digest: snapshot.digest,
+        source,
+        engine: {
+            package: KNITTO_PACKAGE,
+            version: KNITTO_VERSION,
+        },
+        provenance: snapshot.provenance,
+        templateSchemaVersion: snapshot.manifest.schemaVersion,
+        resolvedAt: new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=lock.js.map

package/dist/src/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/lock.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,UAAU,UAAU,CACxB,MAAoB,EACpB,QAAkB;IAElB,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM;QACN,MAAM,EAAE;YACN,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,cAAc;SACxB;QACD,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,qBAAqB,EAAE,QAAQ,CAAC,QAAQ,CAAC,aAAa;QACtD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;AACJ,CAAC"}

package/dist/src/onboarding.d.ts

@@ -0,0 +1,26 @@
+import type { ProjectConfig, TemplateManifest, TemplatePrompt } from "./types.js";
+export declare function parsePromptAssignments(values: string[]): Record<string, string>;
+export declare function describeTemplateInputs(root: string, config: ProjectConfig, manifest: TemplateManifest): {
+    inputs: Array<{
+        path: string;
+        type: TemplatePrompt["type"];
+        message: string;
+        description?: string;
+        required: boolean;
+        configured: boolean;
+        willPrompt: boolean;
+        value?: unknown;
+        default?: string;
+        choices?: Array<{
+            value: string;
+            label?: string;
+        }>;
+    }>;
+    willPrompt: boolean;
+    missingRequired: string[];
+};
+export declare function assertCiTemplateInputsConfigured(root: string, config: ProjectConfig, manifest: TemplateManifest, supplied: Record<string, string>, ci: boolean): void;
+export declare function resolveTemplateInputs(root: string, originalConfig: ProjectConfig, manifest: TemplateManifest, supplied: Record<string, string>): Promise<{
+    config: ProjectConfig;
+    changed: boolean;
+}>;