okf-catalog 0.1.0

package/dist/config/company-config.js

@@ -0,0 +1,272 @@
+import { readFileSync, statSync } from "node:fs";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { z } from "zod/v4";
+import { DEFAULT_CAPS } from "../bundle/model.js";
+import { isSafeRelativePath } from "../bundle/paths.js";
+import { safe } from "../catalog/text.js";
+const COMPANY = /^[a-z0-9][a-z0-9-]{0,62}$/;
+/** The scp-like repository form: a user, a host, a colon and a path that is not an option. */
+const SCP_LIKE = /^[A-Za-z0-9._][A-Za-z0-9._-]*@[A-Za-z0-9.-]+:[^-\s/][^\s]*$/;
+/** A branch name as one plain ref segment or a few: letters, digits, `.`, `_`, `-` and `/`, nothing a refspec or an option could misread. */
+const BRANCH = /^[A-Za-z0-9_][A-Za-z0-9._/-]*$/;
+/** Why a repository string is not one the server will fetch (D50), or undefined when it is. */
+export function repositoryProblem(value, options = {}) {
+    if (SCP_LIKE.test(value))
+        return undefined;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return "must be an https:// or ssh:// URL, or user@host:path";
+    }
+    if (url.protocol === "file:" && options.allowFileRepositories === true)
+        return undefined;
+    if (url.protocol !== "https:" && url.protocol !== "ssh:")
+        return "must be an https:// or ssh:// URL, or user@host:path (a local path or another scheme is not fetched)";
+    if (url.hostname.length === 0)
+        return "must name a host";
+    if (url.password.length > 0)
+        return "must not carry a password; use a credential helper";
+    if (url.search.length > 0 || url.hash.length > 0)
+        return "must not carry a query or a fragment (a token in a URL would reach the log)";
+    if (url.protocol === "https:" && url.username.length > 0)
+        return "must not carry a user name over https; use a credential helper";
+    if (url.username.startsWith("-"))
+        return "must not carry a user name that looks like an option";
+    return undefined;
+}
+/** Why a branch name is refused (D50), or undefined when it is accepted. */
+export function branchProblem(value) {
+    if (!BRANCH.test(value) || value.includes("..") || value.includes("//") || value.includes("@{"))
+        return "must be a plain branch name of letters, digits, '.', '_', '-' and '/'";
+    if (value.endsWith("/") || value.endsWith(".") || value.includes("/."))
+        return "must not end in '/' or '.', and no segment may start with '.'";
+    if (value === "HEAD" || value.split("/").some((segment) => segment.endsWith(".lock")))
+        return "must not be HEAD, and no segment may end in '.lock'";
+    return undefined;
+}
+/** Why a bundle path is refused (D50), or undefined: `.` or a safe relative path with no dot-leading segment. */
+export function bundlePathProblem(value) {
+    if (value === ".")
+        return undefined;
+    if (!isSafeRelativePath(value) || value.endsWith("/"))
+        return "must be '.' or a relative path with no empty, '.', '..' or backslash segments";
+    if (value.split("/").some((segment) => segment.startsWith(".")))
+        return "must not name a hidden folder (a segment starting with '.')";
+    return undefined;
+}
+const DURATION = /^(\d+)(s|m|h)$/;
+const MIN_INTERVAL_MS = 30_000;
+const MAX_INTERVAL_MS = 24 * 60 * 60 * 1000;
+const CAP_CEILINGS = {
+    file_bytes: 64 * 1024 * 1024,
+    files: 200_000,
+    tree_bytes: 8 * 1024 * 1024 * 1024,
+};
+const Raw = z.strictObject({
+    company: z.string(),
+    source: z.strictObject({
+        local: z.string().min(1).optional(),
+        repository: z.string().min(1).optional(),
+        branch: z.string().min(1).optional(),
+        bundle_path: z.string().min(1).optional(),
+    }),
+    serve: z
+        .strictObject({
+        admit: z.array(z.string()).optional(),
+        dev: z.boolean().optional(),
+        pull_interval: z.string().optional(),
+        limit_default: z.number().int().min(1).max(25).optional(),
+    })
+        .optional(),
+    caps: z
+        .strictObject({
+        file_bytes: z.number().int().min(1).max(CAP_CEILINGS.file_bytes).optional(),
+        files: z.number().int().min(1).max(CAP_CEILINGS.files).optional(),
+        tree_bytes: z.number().int().min(1).max(CAP_CEILINGS.tree_bytes).optional(),
+    })
+        .optional(),
+    types: z.array(z.string().min(1)).optional(),
+    spec_text: z.enum(["2026-08-15", "2026-08-21"]).optional(),
+});
+function issueText(issue) {
+    const path = issue.path.map(String).join(".");
+    if (issue.code === "unrecognized_keys") {
+        return issue.keys.map((k) => `${path === "" ? k : `${path}.${k}`}: unknown key`).join("; ");
+    }
+    return `${path === "" ? "document" : path}: ${issue.message}`;
+}
+/** `~/x` against the home folder, an absolute path as is, anything else against the configuration file's folder. */
+function resolvePath(value, configDir, home) {
+    if (value === "~")
+        return home;
+    if (value.startsWith("~/"))
+        return join(home, value.slice(2));
+    if (isAbsolute(value))
+        return value;
+    return resolve(configDir, value);
+}
+function durationMs(text) {
+    const m = DURATION.exec(text);
+    if (m === null)
+        return undefined;
+    const n = Number(m[1]);
+    const unit = m[2] === "s" ? 1000 : m[2] === "m" ? 60_000 : 3_600_000;
+    return n * unit;
+}
+/** Parses one company's YAML configuration. Every problem is a sentence naming the key; nothing is guessed. */
+export function parseCompanyConfig(text, configDir, home, parseOptions = {}) {
+    let document;
+    try {
+        document = parseYaml(text, { version: "1.2" });
+    }
+    catch (error) {
+        // The parser's message carries a code frame of the file on later lines: the first line names the problem.
+        const first = error.message.split("\n")[0] ?? "";
+        return { ok: false, problems: [`the configuration is not valid YAML: ${safe(first)}`] };
+    }
+    if (document === null || typeof document !== "object" || Array.isArray(document)) {
+        return { ok: false, problems: ["the configuration must be a mapping of keys to values"] };
+    }
+    const parsed = Raw.safeParse(document);
+    if (!parsed.success)
+        return { ok: false, problems: parsed.error.issues.map(issueText) };
+    const raw = parsed.data;
+    const problems = [];
+    if (!COMPANY.test(raw.company)) {
+        problems.push("company: must be one lower-case path segment (letters, digits and hyphens, starting with a letter or digit, at most 63 characters)");
+    }
+    const hasLocal = raw.source.local !== undefined;
+    const hasGit = raw.source.repository !== undefined;
+    if (hasLocal && hasGit)
+        problems.push("source: exactly one of local or repository, not both");
+    if (!hasLocal && !hasGit)
+        problems.push("source: local or repository is required");
+    if (hasLocal && (raw.source.branch !== undefined || raw.source.bundle_path !== undefined)) {
+        problems.push("source: branch and bundle_path belong to a repository source");
+    }
+    if (hasGit) {
+        const repository = repositoryProblem(raw.source.repository ?? "", parseOptions);
+        if (repository !== undefined)
+            problems.push(`source.repository: ${repository}`);
+        const branch = branchProblem(raw.source.branch ?? "published");
+        if (branch !== undefined)
+            problems.push(`source.branch: ${branch}`);
+        const bundle = bundlePathProblem(raw.source.bundle_path ?? ".");
+        if (bundle !== undefined)
+            problems.push(`source.bundle_path: ${bundle}`);
+    }
+    const admit = raw.serve?.admit ?? ["stable", "deprecated"];
+    if (admit.length === 0)
+        problems.push("serve.admit: at least one status is required");
+    for (const status of admit) {
+        if (status === "draft")
+            problems.push("serve.admit: draft is admitted only through serve.dev");
+        else if (status !== "stable" && status !== "deprecated")
+            problems.push(`serve.admit: ${JSON.stringify(status)} is not a status`);
+    }
+    const dev = raw.serve?.dev ?? false;
+    if (dev && !hasLocal)
+        problems.push("serve.dev: allowed only with source.local");
+    let pullIntervalMs = 600_000;
+    if (raw.serve?.pull_interval !== undefined) {
+        const ms = durationMs(raw.serve.pull_interval);
+        if (ms === undefined) {
+            problems.push("serve.pull_interval: write a number and a unit, such as 30s, 10m or 2h");
+        }
+        else if (ms < MIN_INTERVAL_MS || ms > MAX_INTERVAL_MS) {
+            problems.push("serve.pull_interval: must be between 30s and 24h");
+        }
+        else
+            pullIntervalMs = ms;
+    }
+    if (problems.length > 0)
+        return { ok: false, problems };
+    const caps = {
+        fileBytes: raw.caps?.file_bytes ?? DEFAULT_CAPS.fileBytes,
+        files: raw.caps?.files ?? DEFAULT_CAPS.files,
+        treeBytes: raw.caps?.tree_bytes ?? DEFAULT_CAPS.treeBytes,
+    };
+    const config = {
+        company: raw.company,
+        source: raw.source.local !== undefined
+            ? {
+                kind: "local",
+                path: resolvePath(raw.source.local, configDir, home),
+                configured: raw.source.local,
+            }
+            : {
+                kind: "git",
+                repository: raw.source.repository ?? "",
+                branch: raw.source.branch ?? "published",
+                bundlePath: raw.source.bundle_path ?? ".",
+            },
+        serve: {
+            admit: admit,
+            dev,
+            pullIntervalMs,
+            limitDefault: raw.serve?.limit_default ?? 8,
+        },
+        integrity: dev ? "none" : "require-manifest",
+        caps,
+        specText: raw.spec_text ?? "2026-08-15",
+    };
+    if (raw.types !== undefined && raw.types.length > 0)
+        config.types = raw.types;
+    return { ok: true, config };
+}
+/**
+ * Where the configuration is: the flag, then `OKF_CATALOG_CONFIG`, then `okf-catalog.yaml` in the working
+ * folder. A variable that is set but empty, or that still holds a `${...}` placeholder, is an error and never
+ * falls through, so a checked-out repository can never choose the bundle by accident.
+ */
+export function discoverConfigPath(flag, env, cwd, home) {
+    // A leading `~/` is expanded as it is inside the file; nothing else is interpreted.
+    const expand = (value) => value.startsWith("~/") ? join(home, value.slice(2)) : resolve(cwd, value);
+    if (flag !== undefined)
+        return { path: expand(flag), rule: "flag" };
+    if (Object.hasOwn(env, "OKF_CATALOG_CONFIG")) {
+        const value = (env.OKF_CATALOG_CONFIG ?? "").trim();
+        if (value.length === 0 || value.includes("${")) {
+            return {
+                error: "OKF_CATALOG_CONFIG is empty or still holds a placeholder; set it to the configuration file's path, put okf-catalog.yaml in the project folder, or pass --config",
+            };
+        }
+        return { path: expand(value), rule: "env" };
+    }
+    return { path: join(cwd, "okf-catalog.yaml"), rule: "cwd" };
+}
+/** Reads and parses a configuration file; relative paths inside it resolve against the file's folder. */
+/** A configuration is a short file; anything over this is refused unread. */
+export const CONFIG_SIZE_CAP = 1024 * 1024;
+export function readCompanyConfig(path, home, parseOptions = {}) {
+    let text;
+    try {
+        const stat = statSync(path);
+        if (!stat.isFile()) {
+            return { ok: false, problems: [`the configuration path ${path} is not a regular file`] };
+        }
+        if (stat.size > CONFIG_SIZE_CAP) {
+            return {
+                ok: false,
+                problems: [
+                    `the configuration file ${path} is too large (${stat.size} bytes, over ${CONFIG_SIZE_CAP})`,
+                ],
+            };
+        }
+        text = readFileSync(path, "utf8");
+    }
+    catch (error) {
+        const code = error.code;
+        const why = code === "ENOENT"
+            ? "does not exist"
+            : code === "EISDIR"
+                ? "is a folder, not a file"
+                : `cannot be read (${code ?? "error"})`;
+        return { ok: false, problems: [`the configuration file ${path} ${why}`] };
+    }
+    return parseCompanyConfig(text, dirname(path), home, parseOptions);
+}
+//# sourceMappingURL=company-config.js.map

package/dist/config/company-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-config.js","sourceRoot":"","sources":["../../src/config/company-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAa,YAAY,EAA8B,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAiB1C,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAC5C,8FAA8F;AAC9F,MAAM,QAAQ,GAAG,6DAA6D,CAAC;AAC/E,6IAA6I;AAC7I,MAAM,MAAM,GAAG,gCAAgC,CAAC;AAQhD,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,OAAO,GAAiB,EAAE;IACzE,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QACtD,OAAO,sGAAsG,CAAC;IAChH,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,oDAAoD,CAAC;IACzF,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAC9C,OAAO,6EAA6E,CAAC;IACvF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACtD,OAAO,gEAAgE,CAAC;IAC1E,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,sDAAsD,CAAC;IAChG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC7F,OAAO,uEAAuE,CAAC;IACjF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpE,OAAO,+DAA+D,CAAC;IACzE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnF,OAAO,qDAAqD,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnD,OAAO,+EAA+E,CAAC;IACzF,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,6DAA6D,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,YAAY,GAAG;IACnB,UAAU,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC5B,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;CACnC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC;IACF,KAAK,EAAE,CAAC;SACL,YAAY,CAAC;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC3B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC1D,CAAC;SACD,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC;SACJ,YAAY,CAAC;QACZ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;QAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;QACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;KAC5E,CAAC;SACD,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,KAAuB;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;AAChE,CAAC;AAED,oHAAoH;AACpH,SAAS,WAAW,CAAC,KAAa,EAAE,SAAiB,EAAE,IAAY;IACjE,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,CAAC,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,SAAiB,EACjB,IAAY,EACZ,YAAY,GAAiB,EAAE;IAE/B,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0GAA0G;QAC1G,MAAM,KAAK,GAAI,KAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,wCAAwC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,uDAAuD,CAAC,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;IACxF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CACX,oIAAoI,CACrI,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC;IACnD,IAAI,QAAQ,IAAI,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC9F,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACnF,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1F,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;QAChF,IAAI,UAAU,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACtF,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,MAAM,KAAK,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;aAC1F,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY;YACrD,QAAQ,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK,CAAC;IACpC,IAAI,GAAG,IAAI,CAAC,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACjF,IAAI,cAAc,GAAG,OAAO,CAAC;IAC7B,IAAI,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC/C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QAC1F,CAAC;aAAM,IAAI,EAAE,GAAG,eAAe,IAAI,EAAE,GAAG,eAAe,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACpE,CAAC;;YAAM,cAAc,GAAG,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxD,MAAM,IAAI,GAAS;QACjB,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,YAAY,CAAC,SAAS;QACzD,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,YAAY,CAAC,KAAK;QAC5C,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,YAAY,CAAC,SAAS;KAC1D,CAAC;IACF,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EACJ,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;YAC5B,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC;gBACpD,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;aAC7B;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE;gBACvC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,WAAW;gBACxC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG;aAC1C;QACP,KAAK,EAAE;YACL,KAAK,EAAE,KAAiB;YACxB,GAAG;YACH,cAAc;YACd,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC;SAC5C;QACD,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB;QAC5C,IAAI;QACJ,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,YAAY;KACxC,CAAC;IACF,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAwB,EACxB,GAAsB,EACtB,GAAW,EACX,IAAY;IAEZ,oFAAoF;IACpF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CACvC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,KAAK,EACH,iKAAiK;aACpK,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,yGAAyG;AACzG,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,IAAY,EACZ,YAAY,GAAiB,EAAE;IAE/B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,0BAA0B,IAAI,wBAAwB,CAAC,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE;oBACR,0BAA0B,IAAI,kBAAkB,IAAI,CAAC,IAAI,gBAAgB,eAAe,GAAG;iBAC5F;aACF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,MAAM,GAAG,GACP,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,IAAI,KAAK,QAAQ;gBACjB,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,mBAAmB,IAAI,IAAI,OAAO,GAAG,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,0BAA0B,IAAI,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC","sourcesContent":["import { readFileSync, statSync } from \"node:fs\";\nimport { dirname, isAbsolute, join, resolve } from \"node:path\";\nimport { parse as parseYaml } from \"yaml\";\nimport { z } from \"zod/v4\";\nimport { type Caps, DEFAULT_CAPS, type SpecText, type Status } from \"../bundle/model.js\";\nimport { isSafeRelativePath } from \"../bundle/paths.js\";\nimport { safe } from \"../catalog/text.js\";\n\n/** Configuration as the server uses it: paths resolved, defaults applied, `dev` mapped onto drafts and integrity. */\nexport interface CompanyConfig {\n  company: string;\n  source:\n    | { kind: \"local\"; path: string; configured: string }\n    | { kind: \"git\"; repository: string; branch: string; bundlePath: string };\n  serve: { admit: Status[]; dev: boolean; pullIntervalMs: number; limitDefault: number };\n  integrity: \"require-manifest\" | \"none\";\n  caps: Caps;\n  types?: string[];\n  specText: SpecText;\n}\n\nexport type ConfigResult = { ok: true; config: CompanyConfig } | { ok: false; problems: string[] };\n\nconst COMPANY = /^[a-z0-9][a-z0-9-]{0,62}$/;\n/** The scp-like repository form: a user, a host, a colon and a path that is not an option. */\nconst SCP_LIKE = /^[A-Za-z0-9._][A-Za-z0-9._-]*@[A-Za-z0-9.-]+:[^-\\s/][^\\s]*$/;\n/** A branch name as one plain ref segment or a few: letters, digits, `.`, `_`, `-` and `/`, nothing a refspec or an option could misread. */\nconst BRANCH = /^[A-Za-z0-9_][A-Za-z0-9._/-]*$/;\n\n/** What a reader of the configuration may relax; only the suite does. */\nexport interface ParseOptions {\n  /** Accept `file://` repositories (a test-only setting, paired with the `file` transport protocol). */\n  allowFileRepositories?: boolean;\n}\n\n/** Why a repository string is not one the server will fetch (D50), or undefined when it is. */\nexport function repositoryProblem(value: string, options: ParseOptions = {}): string | undefined {\n  if (SCP_LIKE.test(value)) return undefined;\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    return \"must be an https:// or ssh:// URL, or user@host:path\";\n  }\n  if (url.protocol === \"file:\" && options.allowFileRepositories === true) return undefined;\n  if (url.protocol !== \"https:\" && url.protocol !== \"ssh:\")\n    return \"must be an https:// or ssh:// URL, or user@host:path (a local path or another scheme is not fetched)\";\n  if (url.hostname.length === 0) return \"must name a host\";\n  if (url.password.length > 0) return \"must not carry a password; use a credential helper\";\n  if (url.search.length > 0 || url.hash.length > 0)\n    return \"must not carry a query or a fragment (a token in a URL would reach the log)\";\n  if (url.protocol === \"https:\" && url.username.length > 0)\n    return \"must not carry a user name over https; use a credential helper\";\n  if (url.username.startsWith(\"-\")) return \"must not carry a user name that looks like an option\";\n  return undefined;\n}\n\n/** Why a branch name is refused (D50), or undefined when it is accepted. */\nexport function branchProblem(value: string): string | undefined {\n  if (!BRANCH.test(value) || value.includes(\"..\") || value.includes(\"//\") || value.includes(\"@{\"))\n    return \"must be a plain branch name of letters, digits, '.', '_', '-' and '/'\";\n  if (value.endsWith(\"/\") || value.endsWith(\".\") || value.includes(\"/.\"))\n    return \"must not end in '/' or '.', and no segment may start with '.'\";\n  if (value === \"HEAD\" || value.split(\"/\").some((segment) => segment.endsWith(\".lock\")))\n    return \"must not be HEAD, and no segment may end in '.lock'\";\n  return undefined;\n}\n\n/** Why a bundle path is refused (D50), or undefined: `.` or a safe relative path with no dot-leading segment. */\nexport function bundlePathProblem(value: string): string | undefined {\n  if (value === \".\") return undefined;\n  if (!isSafeRelativePath(value) || value.endsWith(\"/\"))\n    return \"must be '.' or a relative path with no empty, '.', '..' or backslash segments\";\n  if (value.split(\"/\").some((segment) => segment.startsWith(\".\")))\n    return \"must not name a hidden folder (a segment starting with '.')\";\n  return undefined;\n}\nconst DURATION = /^(\\d+)(s|m|h)$/;\nconst MIN_INTERVAL_MS = 30_000;\nconst MAX_INTERVAL_MS = 24 * 60 * 60 * 1000;\nconst CAP_CEILINGS = {\n  file_bytes: 64 * 1024 * 1024,\n  files: 200_000,\n  tree_bytes: 8 * 1024 * 1024 * 1024,\n};\n\nconst Raw = z.strictObject({\n  company: z.string(),\n  source: z.strictObject({\n    local: z.string().min(1).optional(),\n    repository: z.string().min(1).optional(),\n    branch: z.string().min(1).optional(),\n    bundle_path: z.string().min(1).optional(),\n  }),\n  serve: z\n    .strictObject({\n      admit: z.array(z.string()).optional(),\n      dev: z.boolean().optional(),\n      pull_interval: z.string().optional(),\n      limit_default: z.number().int().min(1).max(25).optional(),\n    })\n    .optional(),\n  caps: z\n    .strictObject({\n      file_bytes: z.number().int().min(1).max(CAP_CEILINGS.file_bytes).optional(),\n      files: z.number().int().min(1).max(CAP_CEILINGS.files).optional(),\n      tree_bytes: z.number().int().min(1).max(CAP_CEILINGS.tree_bytes).optional(),\n    })\n    .optional(),\n  types: z.array(z.string().min(1)).optional(),\n  spec_text: z.enum([\"2026-08-15\", \"2026-08-21\"]).optional(),\n});\n\nfunction issueText(issue: z.core.$ZodIssue): string {\n  const path = issue.path.map(String).join(\".\");\n  if (issue.code === \"unrecognized_keys\") {\n    return issue.keys.map((k) => `${path === \"\" ? k : `${path}.${k}`}: unknown key`).join(\"; \");\n  }\n  return `${path === \"\" ? \"document\" : path}: ${issue.message}`;\n}\n\n/** `~/x` against the home folder, an absolute path as is, anything else against the configuration file's folder. */\nfunction resolvePath(value: string, configDir: string, home: string): string {\n  if (value === \"~\") return home;\n  if (value.startsWith(\"~/\")) return join(home, value.slice(2));\n  if (isAbsolute(value)) return value;\n  return resolve(configDir, value);\n}\n\nfunction durationMs(text: string): number | undefined {\n  const m = DURATION.exec(text);\n  if (m === null) return undefined;\n  const n = Number(m[1]);\n  const unit = m[2] === \"s\" ? 1000 : m[2] === \"m\" ? 60_000 : 3_600_000;\n  return n * unit;\n}\n\n/** Parses one company's YAML configuration. Every problem is a sentence naming the key; nothing is guessed. */\nexport function parseCompanyConfig(\n  text: string,\n  configDir: string,\n  home: string,\n  parseOptions: ParseOptions = {},\n): ConfigResult {\n  let document: unknown;\n  try {\n    document = parseYaml(text, { version: \"1.2\" });\n  } catch (error) {\n    // The parser's message carries a code frame of the file on later lines: the first line names the problem.\n    const first = (error as Error).message.split(\"\\n\")[0] ?? \"\";\n    return { ok: false, problems: [`the configuration is not valid YAML: ${safe(first)}`] };\n  }\n  if (document === null || typeof document !== \"object\" || Array.isArray(document)) {\n    return { ok: false, problems: [\"the configuration must be a mapping of keys to values\"] };\n  }\n  const parsed = Raw.safeParse(document);\n  if (!parsed.success) return { ok: false, problems: parsed.error.issues.map(issueText) };\n  const raw = parsed.data;\n  const problems: string[] = [];\n  if (!COMPANY.test(raw.company)) {\n    problems.push(\n      \"company: must be one lower-case path segment (letters, digits and hyphens, starting with a letter or digit, at most 63 characters)\",\n    );\n  }\n  const hasLocal = raw.source.local !== undefined;\n  const hasGit = raw.source.repository !== undefined;\n  if (hasLocal && hasGit) problems.push(\"source: exactly one of local or repository, not both\");\n  if (!hasLocal && !hasGit) problems.push(\"source: local or repository is required\");\n  if (hasLocal && (raw.source.branch !== undefined || raw.source.bundle_path !== undefined)) {\n    problems.push(\"source: branch and bundle_path belong to a repository source\");\n  }\n  if (hasGit) {\n    const repository = repositoryProblem(raw.source.repository ?? \"\", parseOptions);\n    if (repository !== undefined) problems.push(`source.repository: ${repository}`);\n    const branch = branchProblem(raw.source.branch ?? \"published\");\n    if (branch !== undefined) problems.push(`source.branch: ${branch}`);\n    const bundle = bundlePathProblem(raw.source.bundle_path ?? \".\");\n    if (bundle !== undefined) problems.push(`source.bundle_path: ${bundle}`);\n  }\n  const admit = raw.serve?.admit ?? [\"stable\", \"deprecated\"];\n  if (admit.length === 0) problems.push(\"serve.admit: at least one status is required\");\n  for (const status of admit) {\n    if (status === \"draft\") problems.push(\"serve.admit: draft is admitted only through serve.dev\");\n    else if (status !== \"stable\" && status !== \"deprecated\")\n      problems.push(`serve.admit: ${JSON.stringify(status)} is not a status`);\n  }\n  const dev = raw.serve?.dev ?? false;\n  if (dev && !hasLocal) problems.push(\"serve.dev: allowed only with source.local\");\n  let pullIntervalMs = 600_000;\n  if (raw.serve?.pull_interval !== undefined) {\n    const ms = durationMs(raw.serve.pull_interval);\n    if (ms === undefined) {\n      problems.push(\"serve.pull_interval: write a number and a unit, such as 30s, 10m or 2h\");\n    } else if (ms < MIN_INTERVAL_MS || ms > MAX_INTERVAL_MS) {\n      problems.push(\"serve.pull_interval: must be between 30s and 24h\");\n    } else pullIntervalMs = ms;\n  }\n  if (problems.length > 0) return { ok: false, problems };\n  const caps: Caps = {\n    fileBytes: raw.caps?.file_bytes ?? DEFAULT_CAPS.fileBytes,\n    files: raw.caps?.files ?? DEFAULT_CAPS.files,\n    treeBytes: raw.caps?.tree_bytes ?? DEFAULT_CAPS.treeBytes,\n  };\n  const config: CompanyConfig = {\n    company: raw.company,\n    source:\n      raw.source.local !== undefined\n        ? {\n            kind: \"local\",\n            path: resolvePath(raw.source.local, configDir, home),\n            configured: raw.source.local,\n          }\n        : {\n            kind: \"git\",\n            repository: raw.source.repository ?? \"\",\n            branch: raw.source.branch ?? \"published\",\n            bundlePath: raw.source.bundle_path ?? \".\",\n          },\n    serve: {\n      admit: admit as Status[],\n      dev,\n      pullIntervalMs,\n      limitDefault: raw.serve?.limit_default ?? 8,\n    },\n    integrity: dev ? \"none\" : \"require-manifest\",\n    caps,\n    specText: raw.spec_text ?? \"2026-08-15\",\n  };\n  if (raw.types !== undefined && raw.types.length > 0) config.types = raw.types;\n  return { ok: true, config };\n}\n\nexport type Discovery = { path: string; rule: \"flag\" | \"env\" | \"cwd\" } | { error: string };\n\n/**\n * Where the configuration is: the flag, then `OKF_CATALOG_CONFIG`, then `okf-catalog.yaml` in the working\n * folder. A variable that is set but empty, or that still holds a `${...}` placeholder, is an error and never\n * falls through, so a checked-out repository can never choose the bundle by accident.\n */\nexport function discoverConfigPath(\n  flag: string | undefined,\n  env: NodeJS.ProcessEnv,\n  cwd: string,\n  home: string,\n): Discovery {\n  // A leading `~/` is expanded as it is inside the file; nothing else is interpreted.\n  const expand = (value: string): string =>\n    value.startsWith(\"~/\") ? join(home, value.slice(2)) : resolve(cwd, value);\n  if (flag !== undefined) return { path: expand(flag), rule: \"flag\" };\n  if (Object.hasOwn(env, \"OKF_CATALOG_CONFIG\")) {\n    const value = (env.OKF_CATALOG_CONFIG ?? \"\").trim();\n    if (value.length === 0 || value.includes(\"${\")) {\n      return {\n        error:\n          \"OKF_CATALOG_CONFIG is empty or still holds a placeholder; set it to the configuration file's path, put okf-catalog.yaml in the project folder, or pass --config\",\n      };\n    }\n    return { path: expand(value), rule: \"env\" };\n  }\n  return { path: join(cwd, \"okf-catalog.yaml\"), rule: \"cwd\" };\n}\n\n/** Reads and parses a configuration file; relative paths inside it resolve against the file's folder. */\n/** A configuration is a short file; anything over this is refused unread. */\nexport const CONFIG_SIZE_CAP = 1024 * 1024;\n\nexport function readCompanyConfig(\n  path: string,\n  home: string,\n  parseOptions: ParseOptions = {},\n): ConfigResult {\n  let text: string;\n  try {\n    const stat = statSync(path);\n    if (!stat.isFile()) {\n      return { ok: false, problems: [`the configuration path ${path} is not a regular file`] };\n    }\n    if (stat.size > CONFIG_SIZE_CAP) {\n      return {\n        ok: false,\n        problems: [\n          `the configuration file ${path} is too large (${stat.size} bytes, over ${CONFIG_SIZE_CAP})`,\n        ],\n      };\n    }\n    text = readFileSync(path, \"utf8\");\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException).code;\n    const why =\n      code === \"ENOENT\"\n        ? \"does not exist\"\n        : code === \"EISDIR\"\n          ? \"is a folder, not a file\"\n          : `cannot be read (${code ?? \"error\"})`;\n    return { ok: false, problems: [`the configuration file ${path} ${why}`] };\n  }\n  return parseCompanyConfig(text, dirname(path), home, parseOptions);\n}\n"]}

package/dist/derive/derived-document.js

@@ -0,0 +1,42 @@
+const normalise = (s) => s.replace(/\s+/g, " ").trim().toLowerCase();
+const ATX_HEADING = /^(?:[ \t]*\n)* {0,3}#{1,6}[ \t]+([^\n]*?)(?:[ \t]+#+)?[ \t]*\n+/;
+const SETEXT_HEADING = /^(?:[ \t]*\n)* {0,3}([^\n]+?)[ \t]*\n {0,3}=+[ \t]*\n+/;
+/**
+ * Removes a leading heading whose text equals the title, so the rendered copy carries the title once. ATX or
+ * setext, at most three spaces of indentation (four is a code block), and closing hashes only after a space, as
+ * CommonMark reads them: `# C#` under the title C stays.
+ */
+function withoutDuplicateHeading(body, title) {
+    for (const pattern of [ATX_HEADING, SETEXT_HEADING]) {
+        const match = pattern.exec(body);
+        if (match !== null && normalise(match[1] ?? "") === normalise(title)) {
+            return body.slice(match[0].length);
+        }
+    }
+    return body;
+}
+export function deriveDocument(page) {
+    const metadata = {
+        okf_type: page.type,
+        okf_status: page.status,
+        okf_tags: page.tags,
+    };
+    if (page.staleAfter !== undefined)
+        metadata.okf_stale_after = page.staleAfter.raw;
+    metadata.okf_trust = page.trust;
+    if (page.latestVerification !== undefined)
+        metadata.okf_verified_by = page.latestVerification.by;
+    metadata.okf_source_count = page.sources.length;
+    const doc = {
+        path: page.path,
+        title: page.title,
+        type: page.type,
+        tags: page.tags,
+        metadata,
+        body: withoutDuplicateHeading(page.body, page.title),
+    };
+    if (page.description !== undefined)
+        doc.description = page.description;
+    return doc;
+}
+//# sourceMappingURL=derived-document.js.map

package/dist/derive/derived-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived-document.js","sourceRoot":"","sources":["../../src/derive/derived-document.ts"],"names":[],"mappings":"AAaA,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAErF,MAAM,WAAW,GAAG,iEAAiE,CAAC;AACtF,MAAM,cAAc,GAAG,wDAAwD,CAAC;AAEhF;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAY,EAAE,KAAa;IAC1D,KAAK,MAAM,OAAO,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,MAAM,QAAQ,GAA+C;QAC3D,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;KACpB,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAClF,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;IAChC,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS;QAAE,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACjG,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,GAAG,GAAoB;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ;QACR,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;KACrD,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import type { Page, PagePath } from \"../bundle/model.js\";\n\n/** What the engine indexes for one page: the fields that carry signal, the OKF metadata, and the body. */\nexport interface DerivedDocument {\n  path: PagePath;\n  title: string;\n  description?: string;\n  type: string;\n  tags: string[];\n  metadata: Record<string, string | string[] | number>;\n  body: string;\n}\n\nconst normalise = (s: string): string => s.replace(/\\s+/g, \" \").trim().toLowerCase();\n\nconst ATX_HEADING = /^(?:[ \\t]*\\n)* {0,3}#{1,6}[ \\t]+([^\\n]*?)(?:[ \\t]+#+)?[ \\t]*\\n+/;\nconst SETEXT_HEADING = /^(?:[ \\t]*\\n)* {0,3}([^\\n]+?)[ \\t]*\\n {0,3}=+[ \\t]*\\n+/;\n\n/**\n * Removes a leading heading whose text equals the title, so the rendered copy carries the title once. ATX or\n * setext, at most three spaces of indentation (four is a code block), and closing hashes only after a space, as\n * CommonMark reads them: `# C#` under the title C stays.\n */\nfunction withoutDuplicateHeading(body: string, title: string): string {\n  for (const pattern of [ATX_HEADING, SETEXT_HEADING]) {\n    const match = pattern.exec(body);\n    if (match !== null && normalise(match[1] ?? \"\") === normalise(title)) {\n      return body.slice(match[0].length);\n    }\n  }\n  return body;\n}\n\nexport function deriveDocument(page: Page): DerivedDocument {\n  const metadata: Record<string, string | string[] | number> = {\n    okf_type: page.type,\n    okf_status: page.status,\n    okf_tags: page.tags,\n  };\n  if (page.staleAfter !== undefined) metadata.okf_stale_after = page.staleAfter.raw;\n  metadata.okf_trust = page.trust;\n  if (page.latestVerification !== undefined) metadata.okf_verified_by = page.latestVerification.by;\n  metadata.okf_source_count = page.sources.length;\n  const doc: DerivedDocument = {\n    path: page.path,\n    title: page.title,\n    type: page.type,\n    tags: page.tags,\n    metadata,\n    body: withoutDuplicateHeading(page.body, page.title),\n  };\n  if (page.description !== undefined) doc.description = page.description;\n  return doc;\n}\n"]}

package/dist/engine/qmd-render.js

@@ -0,0 +1,54 @@
+/**
+ * The pure half of the qmd adapter: the text qmd indexes for a derived document, and the codec that keeps
+ * bundle paths out of the way of qmd's indexer. Imports no qmd, so golden tests and `check` can use it.
+ */
+import { stringify } from "yaml";
+/** Folder names qmd's indexer skips at any depth, exact and case-sensitive. */
+export const SKIPPED_SEGMENTS = new Set([
+    "node_modules",
+    ".git",
+    ".cache",
+    "vendor",
+    "dist",
+    "build",
+]);
+const collapse = (s) => s.replace(/\s+/g, " ").trim();
+/**
+ * `# <title>` first, because qmd takes the first heading as the title and weights it four times the body; then
+ * the description, the type value and the tag values on their own lines, with no label words, since a word
+ * present in every page would be a universal token; then a blank line and the body.
+ */
+export function renderDocument(doc, options = {}) {
+    const lines = [`# ${collapse(doc.title)}`];
+    const description = doc.description === undefined ? "" : collapse(doc.description);
+    if (description.length > 0)
+        lines.push(description);
+    const type = collapse(doc.type);
+    if (type.length > 0)
+        lines.push(type);
+    const tags = doc.tags.map(collapse).filter((t) => t.length > 0);
+    if (tags.length > 0)
+        lines.push(tags.join(" "));
+    const body = `${lines.join("\n")}\n\n${doc.body}`;
+    if (options.metadataBlock !== true)
+        return body;
+    return `---\n${stringify({ qmd: { metadata: doc.metadata } })}---\n${body}`;
+}
+/** `%`, `\` and `:` are percent-encoded: qmd splits on the backslash and reads a leading `X:` as a Windows drive. */
+function encodeSegment(segment) {
+    const escaped = segment.replace(/%/g, "%25").replace(/\\/g, "%5C").replace(/:/g, "%3A");
+    return SKIPPED_SEGMENTS.has(escaped) || escaped.startsWith("_") ? `_${escaped}` : escaped;
+}
+function decodeSegment(segment) {
+    const unprefixed = segment.startsWith("_") ? segment.slice(1) : segment;
+    return unprefixed.replace(/%3A/g, ":").replace(/%5C/g, "\\").replace(/%25/g, "%");
+}
+/** A bundle path as it is written into the generation tree. */
+export function encodePath(path) {
+    return path.split("/").map(encodeSegment).join("/");
+}
+/** A generation-tree path back to its bundle path. */
+export function decodePath(path) {
+    return path.split("/").map(decodeSegment).join("/");
+}
+//# sourceMappingURL=qmd-render.js.map

package/dist/engine/qmd-render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qmd-render.js","sourceRoot":"","sources":["../../src/engine/qmd-render.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAGjC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,cAAc;IACd,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAoB,EACpB,OAAO,GAAgC,EAAE;IAEzC,MAAM,KAAK,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACnF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,QAAQ,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,qHAAqH;AACrH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxF,OAAO,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACpF,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC","sourcesContent":["/**\n * The pure half of the qmd adapter: the text qmd indexes for a derived document, and the codec that keeps\n * bundle paths out of the way of qmd's indexer. Imports no qmd, so golden tests and `check` can use it.\n */\nimport { stringify } from \"yaml\";\nimport type { DerivedDocument } from \"../derive/derived-document.js\";\n\n/** Folder names qmd's indexer skips at any depth, exact and case-sensitive. */\nexport const SKIPPED_SEGMENTS: ReadonlySet<string> = new Set([\n  \"node_modules\",\n  \".git\",\n  \".cache\",\n  \"vendor\",\n  \"dist\",\n  \"build\",\n]);\n\nconst collapse = (s: string): string => s.replace(/\\s+/g, \" \").trim();\n\n/**\n * `# <title>` first, because qmd takes the first heading as the title and weights it four times the body; then\n * the description, the type value and the tag values on their own lines, with no label words, since a word\n * present in every page would be a universal token; then a blank line and the body.\n */\nexport function renderDocument(\n  doc: DerivedDocument,\n  options: { metadataBlock?: boolean } = {},\n): string {\n  const lines = [`# ${collapse(doc.title)}`];\n  const description = doc.description === undefined ? \"\" : collapse(doc.description);\n  if (description.length > 0) lines.push(description);\n  const type = collapse(doc.type);\n  if (type.length > 0) lines.push(type);\n  const tags = doc.tags.map(collapse).filter((t) => t.length > 0);\n  if (tags.length > 0) lines.push(tags.join(\" \"));\n  const body = `${lines.join(\"\\n\")}\\n\\n${doc.body}`;\n  if (options.metadataBlock !== true) return body;\n  return `---\\n${stringify({ qmd: { metadata: doc.metadata } })}---\\n${body}`;\n}\n\n/** `%`, `\\` and `:` are percent-encoded: qmd splits on the backslash and reads a leading `X:` as a Windows drive. */\nfunction encodeSegment(segment: string): string {\n  const escaped = segment.replace(/%/g, \"%25\").replace(/\\\\/g, \"%5C\").replace(/:/g, \"%3A\");\n  return SKIPPED_SEGMENTS.has(escaped) || escaped.startsWith(\"_\") ? `_${escaped}` : escaped;\n}\n\nfunction decodeSegment(segment: string): string {\n  const unprefixed = segment.startsWith(\"_\") ? segment.slice(1) : segment;\n  return unprefixed.replace(/%3A/g, \":\").replace(/%5C/g, \"\\\\\").replace(/%25/g, \"%\");\n}\n\n/** A bundle path as it is written into the generation tree. */\nexport function encodePath(path: string): string {\n  return path.split(\"/\").map(encodeSegment).join(\"/\");\n}\n\n/** A generation-tree path back to its bundle path. */\nexport function decodePath(path: string): string {\n  return path.split(\"/\").map(decodeSegment).join(\"/\");\n}\n"]}