lopebase 0.6.4 → 0.6.6

package/README.md

@@ -89,6 +89,35 @@ Made for web products, and fine with anything else:
 | `npx lopebase mcp` | Run the LopeBase tools as a local MCP server (stdio) for any agent. |
 | `npx lopebase adapter secret` | Print a new signing secret for [@lopebase/adapter](https://www.npmjs.com/package/@lopebase/adapter). Pipe it straight into your secret store. |
 | `npx lopebase adapter check <url>` | Test a running adapter, local or deployed, before you connect it. |
+| `npx lopebase blog check [dir]` | Check the blog posts LopeBase publishes to your repo. Exits 1 on any problem, for CI. `--format <preset>`, `--allow-empty`. |
+
+## Check published blog posts in CI
+
+When LopeBase publishes articles to your GitHub repo, add this to CI so a
+malformed post fails the check instead of breaking your site build:
+
+```sh
+npx lopebase blog check --format astro
+```
+
+It reads only the post files in one folder, with no network calls, and prints
+one line per problem as `<file>: <problem>` plus a summary.
+
+| Preset | Folder | File name |
+| --- | --- | --- |
+| `markdown` (default) | `content/blog` | `<slug>.md` |
+| `next-mdx` | `content/blog` | `<slug>.mdx` |
+| `astro` | `src/content/blog` | `<slug>.md` |
+| `hugo` | `content/posts` | `<slug>.md` |
+| `jekyll` | `_posts` | `YYYY-MM-DD-<slug>.md` |
+
+Pass a folder to check somewhere else. For each post it checks the front
+matter (required fields, quoted strings, dates, tag and image lists), that the
+slug is lowercase words joined by hyphens and matches the file name, that the
+body has at least one `##` heading, does not open with a `#` heading, and has
+no raw HTML outside code, and that no two posts share a slug. A missing or
+empty folder fails too, unless you pass `--allow-empty` (useful before the
+first post lands).
 
 ## What it reads, and what it keeps
 

package/dist/lopebase.js

@@ -502,7 +502,7 @@ var require_cross_spawn = __commonJS(function(exports, module) {
 
 // bin/lopebase.ts
 import { spawn as spawn2 } from "node:child_process";
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 
 // ../../node_modules/.bun/@clack+prompts@0.11.0/node_modules/@clack/prompts/dist/index.mjs
 import { stripVTControlCharacters as S2 } from "node:util";
@@ -1206,7 +1206,18 @@ var Y2 = ({ indicator: t = "dots" } = {}) => {
 };
 
 // ../admin-adapter/src/releases.ts
-var ADAPTER_VERSION = "0.4.1", ADAPTER_RELEASES = [
+var ADAPTER_VERSION = "0.4.2", ADAPTER_RELEASES = [
+  {
+    version: "0.4.2",
+    date: "2026-11-03",
+    features: [
+      "A service check that fails is tried once more within its time limit before the health address reports it down, so one dropped database query no longer marks the product down. cachedCheck retries the same way before it keeps a failure.",
+      "When health() reports ok: false and no services are declared, the health address now answers 503, so LopeBase sees the product down instead of up.",
+      "A health() hook that throws is reported as unhealthy instead of crashing the request.",
+      "Every answer is sent with Cache-Control: no-store, so a CDN in front of the app never serves an old health result or caches rows."
+    ],
+    steps: []
+  },
   {
     version: "0.4.1",
     date: "2026-10-08",
@@ -1290,7 +1301,7 @@ function releasesSince(version) {
 function upgradePrompt(fromVersion) {
   let todo = releasesSince(fromVersion), breaking = todo.flatMap((r2) => r2.breaking ?? []), steps = todo.flatMap((r2) => r2.steps);
   return [
-    `Update this app's LopeBase adapter (@lopebase/adapter) from ${fromVersion ?? "its current version"} to 0.4.1.`,
+    `Update this app's LopeBase adapter (@lopebase/adapter) from ${fromVersion ?? "its current version"} to 0.4.2.`,
     "",
     "1. Install it with this repo's package manager, for example `npm install @lopebase/adapter@latest`. A 0.x range like ^0.1.2 does not pick up 0.2 or later on its own.",
     ...breaking.length ? [
@@ -1654,12 +1665,270 @@ function installedAgents() {
   return AGENTS.filter((a) => isInstalled(a.bin));
 }
 
+// src/blog-check.ts
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+// ../lopebase-blog/src/contract.ts
+var shared = {
+  title: { kind: "string", required: !0, role: "title" },
+  description: { kind: "string", required: !0, role: "description" },
+  author: { kind: "string", role: "author" },
+  tags: { kind: "tags", role: "tags" }
+}, markdownKeys = {
+  ...shared,
+  date: { kind: "date", required: !0, role: "date" },
+  slug: { kind: "string", required: !0, role: "slug" },
+  updated: { kind: "date", role: "updated" },
+  image: { kind: "url", role: "image" },
+  image_alt: { kind: "string", role: "imageAlt" },
+  faq: { kind: "faq", role: "faq" }
+}, BLOG_PRESETS = {
+  markdown: {
+    dir: "content/blog",
+    ext: ".md",
+    keys: markdownKeys,
+    slugKey: "slug"
+  },
+  "next-mdx": {
+    dir: "content/blog",
+    ext: ".mdx",
+    keys: markdownKeys,
+    slugKey: "slug"
+  },
+  astro: {
+    dir: "src/content/blog",
+    ext: ".md",
+    keys: {
+      ...shared,
+      pubDate: { kind: "date", required: !0, role: "date" },
+      updatedDate: { kind: "date", role: "updated" },
+      heroImage: { kind: "url", role: "image" }
+    }
+  },
+  hugo: {
+    dir: "content/posts",
+    ext: ".md",
+    keys: {
+      ...shared,
+      date: { kind: "datetime", required: !0, role: "date" },
+      slug: { kind: "string", required: !0, role: "slug" },
+      lastmod: { kind: "datetime", role: "updated" },
+      images: { kind: "urls", role: "images" }
+    },
+    slugKey: "slug"
+  },
+  jekyll: {
+    dir: "_posts",
+    ext: ".md",
+    keys: {
+      layout: { kind: "layout", required: !0 },
+      ...shared,
+      date: { kind: "date", required: !0, role: "date" },
+      last_modified_at: { kind: "date", role: "updated" },
+      image: { kind: "url", role: "image" }
+    },
+    datedFileKey: "date"
+  }
+}, isBlogFormat = (v2) => Object.hasOwn(BLOG_PRESETS, v2), SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/, DATE = /^(\d{4})-(\d{2})-(\d{2})$/, DATETIME = /^(\d{4})-(\d{2})-(\d{2})T([01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/, JEKYLL_FILE = /^(\d{4}-\d{2}-\d{2})-(.+)$/, HTML_TAG = /<\/?[A-Za-z][A-Za-z0-9-]*(?:\s[^<>]*)?\/?>|<!--/;
+function realDate(y3, m2, d3) {
+  let date = new Date(Date.UTC(+y3, +m2 - 1, +d3));
+  return date.getUTCFullYear() === +y3 && date.getUTCMonth() === +m2 - 1 && date.getUTCDate() === +d3;
+}
+function isUrl(v2) {
+  if (typeof v2 !== "string")
+    return !1;
+  try {
+    let u2 = new URL(v2);
+    return u2.protocol === "https:" || u2.protocol === "http:";
+  } catch {
+    return !1;
+  }
+}
+var filled = (v2) => typeof v2 === "string" && v2.trim() !== "";
+function json(raw) {
+  try {
+    return { ok: !0, value: JSON.parse(raw) };
+  } catch {
+    return { ok: !1 };
+  }
+}
+function checkValue(key, kind, raw) {
+  switch (kind) {
+    case "layout":
+      return raw === "post" ? void 0 : `${key} must be post`;
+    case "date": {
+      let m2 = DATE.exec(raw);
+      return m2 && realDate(m2[1], m2[2], m2[3]) ? void 0 : `${key} must be a date like 2026-11-05`;
+    }
+    case "datetime": {
+      let m2 = DATETIME.exec(raw);
+      return m2 && realDate(m2[1], m2[2], m2[3]) ? void 0 : `${key} must be a date and time like 2026-11-05T15:00:00Z`;
+    }
+    case "string": {
+      let v2 = json(raw);
+      if (!v2.ok || typeof v2.value !== "string")
+        return `${key} must be a quoted string`;
+      return v2.value.trim() ? void 0 : `${key} is empty`;
+    }
+    case "url": {
+      let v2 = json(raw);
+      return v2.ok && isUrl(v2.value) ? void 0 : `${key} must be a quoted http or https address`;
+    }
+    case "tags": {
+      let v2 = json(raw);
+      return v2.ok && Array.isArray(v2.value) && v2.value.every((t) => typeof t === "string") ? void 0 : `${key} must be a list of quoted strings, like ["seo"]`;
+    }
+    case "urls": {
+      let v2 = json(raw);
+      return v2.ok && Array.isArray(v2.value) && v2.value.every(isUrl) ? void 0 : `${key} must be a list of quoted http or https addresses`;
+    }
+    case "faq": {
+      let v2 = json(raw);
+      return v2.ok && Array.isArray(v2.value) && v2.value.every((f) => f !== null && typeof f === "object" && filled(f.q) && filled(f.a)) ? void 0 : `${key} must be one line of JSON like [{"q": "A question?", "a": "An answer."}]`;
+    }
+  }
+}
+function proseOnly(body2) {
+  let out = [], fence;
+  for (let line of body2.split(`
+`)) {
+    let open = /^\s{0,3}(`{3,}|~{3,})/.exec(line);
+    if (fence) {
+      if (open && open[1][0] === fence[0] && open[1].length >= fence.length)
+        fence = void 0;
+      continue;
+    }
+    if (open) {
+      fence = open[1];
+      continue;
+    }
+    out.push(line.replace(/(`+)[^`]*?\1/g, ""));
+  }
+  return out;
+}
+function inspectPost(fileName, text, format) {
+  let preset = BLOG_PRESETS[format], problems = [], base = fileName.endsWith(preset.ext) ? fileName.slice(0, fileName.length - preset.ext.length) : fileName.replace(/\.[^.]*$/, ""), fileSlug = base, fileDate;
+  if (preset.datedFileKey) {
+    let m2 = JEKYLL_FILE.exec(base);
+    if (m2)
+      fileDate = m2[1], fileSlug = m2[2];
+    else
+      problems.push("file name must look like YYYY-MM-DD-<slug>.md");
+  }
+  if (!SLUG.test(fileSlug))
+    problems.push(`file name slug "${fileSlug}" must be lowercase words joined by hyphens`);
+  let lines = text.replace(/^/, "").split(/\r?\n/), end = lines[0] === "---" ? lines.indexOf("---", 1) : -1;
+  if (end < 0)
+    return problems.push("front matter must open and close with --- lines at the top"), { slug: fileSlug, problems };
+  let raws = /* @__PURE__ */ new Map;
+  for (let line of lines.slice(1, end)) {
+    if (!line.trim())
+      continue;
+    let m2 = /^([A-Za-z_][A-Za-z0-9_]*):\s*(.*)$/.exec(line);
+    if (!m2) {
+      problems.push(`front matter line is not "key: value": ${line.trim()}`);
+      continue;
+    }
+    if (raws.has(m2[1]))
+      problems.push(`${m2[1]} appears more than once`);
+    raws.set(m2[1], m2[2].trim());
+  }
+  let values = {};
+  for (let [key, spec] of Object.entries(preset.keys)) {
+    let raw = raws.get(key);
+    if (raw === void 0 || raw === "") {
+      if (spec.required)
+        problems.push(`missing ${key}`);
+      continue;
+    }
+    let problem = checkValue(key, spec.kind, raw);
+    if (problem)
+      problems.push(problem);
+    else if (spec.role)
+      values[spec.role] = spec.kind === "date" || spec.kind === "datetime" ? raw : JSON.parse(raw);
+  }
+  let slug = fileSlug;
+  if (preset.slugKey) {
+    let v2 = json(raws.get(preset.slugKey) ?? "");
+    if (v2.ok && typeof v2.value === "string" && v2.value) {
+      if (!SLUG.test(v2.value))
+        problems.push(`${preset.slugKey} "${v2.value}" must be lowercase words joined by hyphens`);
+      else if (v2.value !== fileSlug)
+        problems.push(`${preset.slugKey} "${v2.value}" does not match the file name "${fileSlug}"`);
+      slug = v2.value;
+    }
+  }
+  if (preset.datedFileKey && fileDate) {
+    let date = raws.get(preset.datedFileKey);
+    if (date && DATE.test(date) && date !== fileDate)
+      problems.push(`${preset.datedFileKey} ${date} does not match the file name date ${fileDate}`);
+  }
+  let body2 = lines.slice(end + 1).join(`
+`), fields = { slug, values, body: body2 };
+  if (!body2.trim())
+    return problems.push("the post has no body"), { slug, problems, fields };
+  let prose = proseOnly(body2), first = body2.split(`
+`).find((l2) => l2.trim());
+  if (first && /^\s{0,3}#(?:\s|$)/.test(first))
+    problems.push("the body starts with a # heading; the title comes from front matter");
+  if (!prose.some((l2) => /^\s{0,3}## /.test(l2)))
+    problems.push("the body needs at least one ## heading");
+  if (prose.some((l2) => HTML_TAG.test(l2)))
+    problems.push("the body has raw HTML outside code; use Markdown instead");
+  return { slug, problems, fields };
+}
+function checkPost(fileName, text, format) {
+  let { slug, problems } = inspectPost(fileName, text, format);
+  return { slug, problems };
+}
+// src/blog-check.ts
+function checkBlog(opts) {
+  let format = opts.format ?? "markdown", preset = BLOG_PRESETS[format], dir = (opts.dir ?? preset.dir).replace(/\\/g, "/").replace(/\/+$/, ""), abs = join(opts.cwd, dir), problems = [], names;
+  try {
+    if (!statSync(abs).isDirectory())
+      return {
+        dir,
+        posts: 0,
+        problems: [{ file: dir, problem: "is not a folder" }]
+      };
+    names = readdirSync(abs, { withFileTypes: !0 }).filter((e2) => e2.isFile() && e2.name.endsWith(preset.ext)).map((e2) => e2.name).sort();
+  } catch {
+    return {
+      dir,
+      posts: 0,
+      problems: opts.allowEmpty ? [] : [{ file: dir, problem: "folder not found (pass --allow-empty)" }]
+    };
+  }
+  if (!names.length && !opts.allowEmpty)
+    problems.push({
+      file: dir,
+      problem: `no ${preset.ext} posts found (pass --allow-empty)`
+    });
+  let seen = /* @__PURE__ */ new Map;
+  for (let name of names) {
+    let file = `${dir}/${name}`, res = checkPost(name, readFileSync(join(abs, name), "utf8"), format);
+    for (let problem of res.problems)
+      problems.push({ file, problem });
+    if (res.slug) {
+      let other = seen.get(res.slug);
+      if (other)
+        problems.push({
+          file,
+          problem: `slug "${res.slug}" is also used by ${other}`
+        });
+      else
+        seen.set(res.slug, file);
+    }
+  }
+  return { dir, posts: names.length, problems };
+}
+
 // src/config.ts
 import {
   chmodSync,
   existsSync,
   mkdirSync,
-  readFileSync,
+  readFileSync as readFileSync2,
   writeFileSync
 } from "node:fs";
 import os from "node:os";
@@ -1705,7 +1974,7 @@ function loadAuth() {
   if (!existsSync(authFile()))
     return null;
   try {
-    let a = JSON.parse(readFileSync(authFile(), "utf8"));
+    let a = JSON.parse(readFileSync2(authFile(), "utf8"));
     if (!a.token)
       return null;
     return { url: envUrl || a.url || DEFAULT_URL, token: a.token };
@@ -2530,7 +2799,7 @@ function onboardingPrompt(input) {
 }
 
 // src/scan.ts
-import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync3, statSync as statSync2 } from "node:fs";
 import path2 from "node:path";
 var MONOREPO_DIRS = ["apps", "packages", "services", "sites", "web", "site"], SKIP_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
@@ -2588,7 +2857,7 @@ var MONOREPO_DIRS = ["apps", "packages", "services", "sites", "web", "site"], SK
 ], EXAMPLE_ENV = /^(\.env\.(example|sample|template|dist|local\.example|development\.example|production\.example)|example\.env|\.dev\.vars\.example)$/;
 function readText(file2) {
   try {
-    return readFileSync2(file2, "utf8");
+    return readFileSync3(file2, "utf8");
   } catch {
     return null;
   }
@@ -2605,14 +2874,14 @@ function readJson(file2) {
 }
 function isDir(p2) {
   try {
-    return statSync(p2).isDirectory();
+    return statSync2(p2).isDirectory();
   } catch {
     return !1;
   }
 }
 function listDir(dir) {
   try {
-    return readdirSync(dir);
+    return readdirSync2(dir);
   } catch {
     return [];
   }
@@ -3030,11 +3299,11 @@ function watchRows(items) {
 }
 
 // src/update.ts
-import { readFileSync as readFileSync3 } from "node:fs";
+import { readFileSync as readFileSync4 } from "node:fs";
 import path3 from "node:path";
 var readJson2 = (file2) => {
   try {
-    return JSON.parse(readFileSync3(file2, "utf8"));
+    return JSON.parse(readFileSync4(file2, "utf8"));
   } catch {
     return null;
   }
@@ -3088,6 +3357,8 @@ ${import_picocolors4.default.bold("Usage")}
   npx lopebase mcp                  run the LopeBase tools as a stdio MCP server
   npx lopebase adapter secret       print a new @lopebase/adapter signing secret
   npx lopebase adapter check <url>  test a running adapter (reads LOPEBASE_SIGNING_SECRET)
+  npx lopebase blog check [dir]     check the blog posts LopeBase publishes to your repo
+                                    (--format <preset>, --allow-empty)
 
 ${import_picocolors4.default.bold("Options")}
   --print                           print the agent prompt instead of starting an agent
@@ -3103,7 +3374,7 @@ ${import_picocolors4.default.bold("Learn more")}
 }, cwd = process.cwd(), motion = motionAllowed(), TAGLINE = "Every product, one place.", PAGEVIEWS = "LopeBase pageviews";
 function version() {
   try {
-    return JSON.parse(readFileSync4(new URL("../package.json", import.meta.url), "utf8")).version;
+    return JSON.parse(readFileSync5(new URL("../package.json", import.meta.url), "utf8")).version;
   } catch {
     return;
   }
@@ -3400,6 +3671,29 @@ The adapter is in: ${where}. If you have the lopebase MCP tools, call get_onboar
     `  ${brand("3.")} run the adapter check and your tests`
   ]);
 }
+var BLOG_USAGE = `Usage:
+  lopebase blog check [dir] [--format <preset>] [--allow-empty]
+
+Presets: ${Object.entries(BLOG_PRESETS).map(([name, preset]) => `${name} (${preset.dir})`).join(", ")}. Default: markdown.`;
+function blog() {
+  if (rest[0] !== "check")
+    return console.log(BLOG_USAGE), process.exit(rest[0] ? 1 : 0);
+  let format = option("format") ?? "markdown";
+  if (!isBlogFormat(format))
+    return console.error(`Unknown format "${format}".
+
+${BLOG_USAGE}`), process.exit(1);
+  let dir = rest.slice(1).find((a, i, args) => !a.startsWith("--") && args[i - 1] !== "--format"), res = checkBlog({
+    cwd,
+    format,
+    dir,
+    allowEmpty: flag("allow-empty")
+  });
+  for (let { file: file2, problem } of res.problems)
+    console.log(`${file2}: ${problem}`);
+  let posts = `${res.posts} ${res.posts === 1 ? "post" : "posts"}`;
+  console.log(res.problems.length ? import_picocolors4.default.red(`${res.problems.length} ${res.problems.length === 1 ? "problem" : "problems"} in ${posts} in ${res.dir}.`) : import_picocolors4.default.green(`Checked ${posts} in ${res.dir}. All good.`)), process.exit(res.problems.length ? 1 : 0);
+}
 async function main() {
   switch (command) {
     case "init":
@@ -3441,6 +3735,8 @@ async function main() {
   lopebase adapter secret              print a new signing secret
   lopebase adapter check <base-url>    test a running adapter (reads LOPEBASE_SIGNING_SECRET)`), process.exit(sub ? 1 : 0);
     }
+    case "blog":
+      return blog();
     case "mcp": {
       let auth = loadAuth();
       if (!auth)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lopebase",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Set up LopeBase from your project's folder: scan your stack, connect your workspace, and let your coding agent do the rest.",
   "type": "module",
   "bin": {
@@ -28,6 +28,7 @@
   "devDependencies": {
     "@clack/prompts": "^0.11.0",
     "@lopebase/adapter": "workspace:*",
+    "@lopebase/blog": "workspace:*",
     "@types/cross-spawn": "^6.0.6",
     "@types/node": "^22.0.0",
     "cross-spawn": "^7.0.6",