open-agreements 0.1.0

package/dist/core/recipe/patcher.js

@@ -0,0 +1,240 @@
+import AdmZip from 'adm-zip';
+import { writeFileSync } from 'node:fs';
+import { DOMParser, XMLSerializer } from '@xmldom/xmldom';
+import { enumerateTextParts, getGeneralTextPartNames } from './ooxml-parts.js';
+const W_NS = 'http://schemas.openxmlformats.org/wordprocessingml/2006/main';
+/** Maximum replacement iterations per key per paragraph to prevent infinite loops. */
+const MAX_REPLACEMENTS_PER_KEY = 200;
+/**
+ * Element local names that indicate a run is NOT safe to remove even if its text is empty.
+ * These are non-text children that carry visual or structural meaning.
+ */
+const UNSAFE_RUN_CHILDREN = new Set([
+    'drawing', 'pict', 'object', 'fldChar', 'instrText',
+    'br', 'cr', 'tab', 'footnoteReference', 'endnoteReference',
+]);
+/**
+ * Patch a DOCX document by replacing bracketed placeholders with template tags.
+ * Uses a char_map algorithm to handle cross-run replacements where Word splits
+ * placeholder text across multiple XML run elements.
+ *
+ * Processes all general OOXML text parts (document, headers, footers, endnotes).
+ */
+export async function patchDocument(inputPath, outputPath, replacements) {
+    const zip = new AdmZip(inputPath);
+    const parser = new DOMParser();
+    const serializer = new XMLSerializer();
+    const parts = enumerateTextParts(zip);
+    const partNames = getGeneralTextPartNames(parts);
+    if (partNames.length === 0) {
+        throw new Error('No OOXML text parts found in DOCX');
+    }
+    // Sort keys longest-first to prevent partial matches
+    const sortedKeys = Object.keys(replacements).sort((a, b) => b.length - a.length);
+    // Track which parts we modify so we can rebuild the zip cleanly
+    const modifiedParts = new Map();
+    for (const partName of partNames) {
+        const entry = zip.getEntry(partName);
+        if (!entry)
+            continue;
+        const xml = entry.getData().toString('utf-8');
+        const doc = parser.parseFromString(xml, 'text/xml');
+        // Process all paragraphs (body + tables)
+        const allParagraphs = doc.getElementsByTagNameNS(W_NS, 'p');
+        for (let i = 0; i < allParagraphs.length; i++) {
+            replaceInParagraph(allParagraphs[i], replacements, sortedKeys);
+        }
+        modifiedParts.set(partName, Buffer.from(serializer.serializeToString(doc), 'utf-8'));
+    }
+    // Rebuild the zip from scratch using addFile() to avoid adm-zip data
+    // descriptor issues. Some DOCX files use streaming (bit 3) flags which
+    // adm-zip's updateFile/writeZip/toBuffer handle incorrectly.
+    const outZip = new AdmZip();
+    for (const entry of zip.getEntries()) {
+        const data = modifiedParts.get(entry.entryName) ?? entry.getData();
+        outZip.addFile(entry.entryName, data);
+    }
+    writeFileSync(outputPath, outZip.toBuffer());
+    return outputPath;
+}
+function buildCharMap(runs) {
+    const charMap = [];
+    let fullText = '';
+    for (let runIndex = 0; runIndex < runs.length; runIndex++) {
+        const text = getRunText(runs[runIndex]);
+        for (let offset = 0; offset < text.length; offset++) {
+            charMap.push({ runIndex, charOffset: offset });
+        }
+        fullText += text;
+    }
+    return { fullText, charMap };
+}
+export function getRunText(run) {
+    const tElements = run.getElementsByTagNameNS(W_NS, 't');
+    let text = '';
+    for (let i = 0; i < tElements.length; i++) {
+        text += tElements[i].textContent ?? '';
+    }
+    return text;
+}
+function setRunText(run, text) {
+    const tElements = run.getElementsByTagNameNS(W_NS, 't');
+    if (tElements.length === 0) {
+        const doc = run.ownerDocument;
+        const t = doc.createElementNS(W_NS, 'w:t');
+        t.setAttribute('xml:space', 'preserve');
+        t.textContent = text;
+        run.appendChild(t);
+        return;
+    }
+    tElements[0].textContent = text;
+    if (text.startsWith(' ') || text.endsWith(' ')) {
+        tElements[0].setAttribute('xml:space', 'preserve');
+    }
+    for (let i = 1; i < tElements.length; i++) {
+        tElements[i].textContent = '';
+    }
+}
+/**
+ * Collect all <w:r> elements in document order within a paragraph, including
+ * runs nested inside wrapper elements like <w:hyperlink>, <w:ins>, <w:del>, etc.
+ */
+function getRunElements(para) {
+    const runs = [];
+    collectRunsRecursive(para, runs);
+    return runs;
+}
+function collectRunsRecursive(node, runs) {
+    const children = node.childNodes;
+    if (!children)
+        return;
+    for (let i = 0; i < children.length; i++) {
+        const child = children[i];
+        if (child.nodeType !== 1)
+            continue;
+        const el = child;
+        if (el.localName === 'r' && el.namespaceURI === W_NS) {
+            runs.push(el);
+        }
+        else if (el.localName !== 'p') {
+            // Recurse into wrapper elements (hyperlink, ins, del, smartTag, etc.)
+            // but don't recurse into nested paragraphs
+            collectRunsRecursive(el, runs);
+        }
+    }
+}
+/**
+ * Check if a run is safe to remove when its text is empty.
+ * Returns true only if all element children are <w:rPr> or <w:t>.
+ * Returns false if the run contains drawings, fields, breaks, or other non-text elements.
+ */
+export function isRunSafeToRemove(run) {
+    const children = run.childNodes;
+    if (!children)
+        return true;
+    for (let i = 0; i < children.length; i++) {
+        const child = children[i];
+        if (child.nodeType !== 1)
+            continue; // skip text/comment nodes
+        const name = child.localName;
+        if (!name)
+            return false;
+        if (name === 'rPr' || name === 't')
+            continue;
+        if (UNSAFE_RUN_CHILDREN.has(name))
+            return false;
+        // Any other element child we don't recognize — not safe
+        return false;
+    }
+    return true;
+}
+/**
+ * Compute the length of the common prefix between two strings.
+ */
+function commonPrefixLen(a, b) {
+    let i = 0;
+    while (i < a.length && i < b.length && a[i] === b[i])
+        i++;
+    return i;
+}
+/**
+ * Compute the length of the common suffix between two strings,
+ * not overlapping with a known common prefix.
+ */
+function commonSuffixLen(a, b, prefixLen) {
+    let i = 0;
+    while (i < a.length - prefixLen &&
+        i < b.length - prefixLen &&
+        a[a.length - 1 - i] === b[b.length - 1 - i])
+        i++;
+    return i;
+}
+function replaceInParagraph(para, replacements, sortedKeys) {
+    const runs = getRunElements(para);
+    if (runs.length === 0)
+        return;
+    const { fullText } = buildCharMap(runs);
+    if (!sortedKeys.some((key) => fullText.includes(key)))
+        return;
+    for (const key of sortedKeys) {
+        let rebuilt = buildCharMap(runs);
+        let iterations = 0;
+        while (rebuilt.fullText.includes(key)) {
+            iterations++;
+            if (iterations > MAX_REPLACEMENTS_PER_KEY) {
+                throw new Error(`Patcher: exceeded ${MAX_REPLACEMENTS_PER_KEY} replacements for key "${key}" ` +
+                    `in a single paragraph. This usually means the replacement value contains ` +
+                    `the search key, creating an infinite loop.`);
+            }
+            const prevText = rebuilt.fullText;
+            const matchStart = rebuilt.fullText.indexOf(key);
+            const replacement = replacements[key];
+            // Surgical replacement: compute common prefix/suffix between key and value
+            // so we only modify the differing middle, preserving formatting on context text.
+            const cpLen = commonPrefixLen(key, replacement);
+            const csLen = commonSuffixLen(key, replacement, cpLen);
+            let start;
+            let end;
+            let replText;
+            if (cpLen + csLen >= key.length || cpLen + csLen >= replacement.length) {
+                // No useful common prefix/suffix — full replacement (current behavior)
+                start = matchStart;
+                end = matchStart + key.length;
+                replText = replacement;
+            }
+            else {
+                // Surgical: only replace the differing middle
+                start = matchStart + cpLen;
+                end = matchStart + key.length - csLen;
+                replText = replacement.slice(cpLen, replacement.length - csLen);
+            }
+            const firstEntry = rebuilt.charMap[start];
+            const lastEntry = rebuilt.charMap[end - 1];
+            if (firstEntry.runIndex === lastEntry.runIndex) {
+                const runText = getRunText(runs[firstEntry.runIndex]);
+                setRunText(runs[firstEntry.runIndex], runText.slice(0, firstEntry.charOffset) + replText + runText.slice(lastEntry.charOffset + 1));
+            }
+            else {
+                const firstRunText = getRunText(runs[firstEntry.runIndex]);
+                setRunText(runs[firstEntry.runIndex], firstRunText.slice(0, firstEntry.charOffset) + replText);
+                const lastRunText = getRunText(runs[lastEntry.runIndex]);
+                setRunText(runs[lastEntry.runIndex], lastRunText.slice(lastEntry.charOffset + 1));
+                for (let mid = firstEntry.runIndex + 1; mid < lastEntry.runIndex; mid++) {
+                    setRunText(runs[mid], '');
+                }
+            }
+            rebuilt = buildCharMap(runs);
+            // Progress guard: if text didn't change, we're stuck
+            if (rebuilt.fullText === prevText) {
+                throw new Error(`Patcher: no progress replacing key "${key}" — replacement value may contain the search key.`);
+            }
+        }
+    }
+    // Sweep: remove empty runs that are safe to remove (no drawings, fields, etc.)
+    for (let i = runs.length - 1; i >= 0; i--) {
+        if (getRunText(runs[i]) === '' && isRunSafeToRemove(runs[i])) {
+            runs[i].parentNode?.removeChild(runs[i]);
+        }
+    }
+}
+//# sourceMappingURL=patcher.js.map

package/dist/core/recipe/patcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patcher.js","sourceRoot":"","sources":["../../../src/core/recipe/patcher.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,MAAM,IAAI,GAAG,8DAA8D,CAAC;AAO5E,sFAAsF;AACtF,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;GAGG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW;IACnD,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,kBAAkB;CAC3D,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,UAAkB,EAClB,YAAoC;IAEpC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,aAAa,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAEjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,qDAAqD;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAEjF,gEAAgE;IAChE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAa,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAE9D,yCAAyC;QACzC,MAAM,aAAa,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;QAED,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,IAAe;IACnC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,QAAQ,IAAI,IAAI,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,GAAY,EAAE,IAAY;IAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,aAAyB,CAAC;QAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;IAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAU,EAAE,IAAe;IACvD,MAAM,QAAQ,GAAI,IAAgB,CAAC,UAAU,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAS,CAAC;QAClC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,EAAE,GAAG,KAAgB,CAAC;QAC5B,IAAI,EAAE,CAAC,SAAS,KAAK,GAAG,IAAI,EAAE,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;aAAM,IAAI,EAAE,CAAC,SAAS,KAAK,GAAG,EAAE,CAAC;YAChC,sEAAsE;YACtE,2CAA2C;YAC3C,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAS,CAAC;QAClC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,SAAS,CAAC,0BAA0B;QAC9D,MAAM,IAAI,GAAI,KAAiB,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG;YAAE,SAAS;QAC7C,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,wDAAwD;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAC;IAC1D,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS,EAAE,SAAiB;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OACE,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,SAAS;QACxB,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,SAAS;QACxB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC,EAAE,CAAC;IACN,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAa,EACb,YAAoC,EACpC,UAAoB;IAEpB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE9B,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO;IAE9D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,UAAU,EAAE,CAAC;YACb,IAAI,UAAU,GAAG,wBAAwB,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,qBAAqB,wBAAwB,0BAA0B,GAAG,IAAI;oBAC9E,2EAA2E;oBAC3E,4CAA4C,CAC7C,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAEtC,2EAA2E;YAC3E,iFAAiF;YACjF,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAEvD,IAAI,KAAa,CAAC;YAClB,IAAI,GAAW,CAAC;YAChB,IAAI,QAAgB,CAAC;YAErB,IAAI,KAAK,GAAG,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,GAAG,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvE,uEAAuE;gBACvE,KAAK,GAAG,UAAU,CAAC;gBACnB,GAAG,GAAG,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC9B,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC;gBAC3B,GAAG,GAAG,UAAU,GAAG,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtC,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAE3C,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACtD,UAAU,CACR,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EACzB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAC7F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAC/F,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClF,KAAK,IAAI,GAAG,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC;oBACxE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAE7B,qDAAqD;YACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,mDAAmD,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/recipe/types.d.ts

@@ -0,0 +1,28 @@
+import type { RecipeMetadata } from '../metadata.js';
+export interface RecipeRunOptions {
+    recipeId: string;
+    inputPath?: string;
+    outputPath: string;
+    values: Record<string, string>;
+    keepIntermediate?: boolean;
+}
+export interface RecipeRunResult {
+    outputPath: string;
+    metadata: RecipeMetadata;
+    fieldsUsed: string[];
+    stages: {
+        clean: string;
+        patch: string;
+        fill: string;
+    };
+}
+export interface VerifyResult {
+    passed: boolean;
+    checks: VerifyCheck[];
+}
+export interface VerifyCheck {
+    name: string;
+    passed: boolean;
+    details?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/recipe/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/recipe/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/core/recipe/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/recipe/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/recipe/types.ts"],"names":[],"mappings":""}

package/dist/core/recipe/verifier.d.ts

@@ -0,0 +1,24 @@
+import type { VerifyResult } from './types.js';
+import type { CleanConfig } from '../metadata.js';
+/**
+ * Normalize text for value comparison:
+ * - Convert non-breaking spaces to regular spaces
+ * - Normalize smart quotes to straight quotes
+ * - Collapse runs of spaces/tabs to single space (preserve newlines)
+ * - Trim
+ */
+export declare function normalizeText(text: string): string;
+/**
+ * Verify a filled recipe output DOCX:
+ * - All context values appear in the document text
+ * - No unrendered {template_tags} remain
+ * - No leftover [bracketed placeholders] from the replacement map remain
+ * - Footnotes removed (if clean config specified)
+ * - Drafting note paragraphs removed (if clean config specified)
+ */
+export declare function verifyOutput(outputPath: string, values: Record<string, string>, replacements: Record<string, string>, cleanConfig?: CleanConfig): Promise<VerifyResult>;
+/**
+ * Extract all text from general OOXML text parts (document, headers, footers, endnotes).
+ */
+export declare function extractAllText(docxPath: string): string;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/core/recipe/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../src/core/recipe/verifier.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,YAAY,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKlD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWlD;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,YAAY,CAAC,CA6EvB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA8BvD"}

package/dist/core/recipe/verifier.js

@@ -0,0 +1,143 @@
+import AdmZip from 'adm-zip';
+import { DOMParser } from '@xmldom/xmldom';
+import { enumerateTextParts, getGeneralTextPartNames } from './ooxml-parts.js';
+const W_NS = 'http://schemas.openxmlformats.org/wordprocessingml/2006/main';
+/**
+ * Normalize text for value comparison:
+ * - Convert non-breaking spaces to regular spaces
+ * - Normalize smart quotes to straight quotes
+ * - Collapse runs of spaces/tabs to single space (preserve newlines)
+ * - Trim
+ */
+export function normalizeText(text) {
+    return text
+        // Non-breaking spaces
+        .replace(/[\u00A0\u2007\u202F]/g, ' ')
+        // Smart single quotes → straight
+        .replace(/[\u2018\u2019\u2039\u203A]/g, "'")
+        // Smart double quotes → straight
+        .replace(/[\u201C\u201D\u201A\u201E\u00AB\u00BB]/g, '"')
+        // Collapse horizontal whitespace (spaces/tabs) to single space, preserve newlines
+        .replace(/[^\S\n]+/g, ' ')
+        .trim();
+}
+/**
+ * Verify a filled recipe output DOCX:
+ * - All context values appear in the document text
+ * - No unrendered {template_tags} remain
+ * - No leftover [bracketed placeholders] from the replacement map remain
+ * - Footnotes removed (if clean config specified)
+ * - Drafting note paragraphs removed (if clean config specified)
+ */
+export async function verifyOutput(outputPath, values, replacements, cleanConfig) {
+    const checks = [];
+    const rawFullText = extractAllText(outputPath);
+    const normalizedFullText = normalizeText(rawFullText);
+    const xml = extractDocumentXml(outputPath);
+    // Check 1: All context values present (with normalization)
+    const missingValues = [];
+    for (const [key, value] of Object.entries(values)) {
+        if (!value || !value.trim())
+            continue; // skip empty/whitespace-only values
+        const normalizedValue = normalizeText(value);
+        if (!normalizedFullText.includes(normalizedValue)) {
+            missingValues.push(`${key}="${value}"`);
+        }
+    }
+    checks.push({
+        name: 'Context values present',
+        passed: missingValues.length === 0,
+        details: missingValues.length > 0 ? `Missing: ${missingValues.join(', ')}` : undefined,
+    });
+    // Check 2: No unrendered {template_tags}
+    const unrenderedTags = rawFullText.match(/\{[a-z_][a-z0-9_]*\}/gi) ?? [];
+    checks.push({
+        name: 'No unrendered template tags',
+        passed: unrenderedTags.length === 0,
+        details: unrenderedTags.length > 0 ? `Found: ${unrenderedTags.join(', ')}` : undefined,
+    });
+    // Check 3: No leftover [bracketed placeholders] from replacement map
+    const replacementKeys = Object.keys(replacements);
+    const leftoverBrackets = replacementKeys.filter((key) => rawFullText.includes(key));
+    checks.push({
+        name: 'No leftover source placeholders',
+        passed: leftoverBrackets.length === 0,
+        details: leftoverBrackets.length > 0 ? `Found: ${leftoverBrackets.join(', ')}` : undefined,
+    });
+    // Check 4: No footnote references (if removeFootnotes was set)
+    if (cleanConfig?.removeFootnotes) {
+        const footnoteRefs = (xml.match(/footnoteReference/g) ?? []).length;
+        checks.push({
+            name: 'Footnotes removed',
+            passed: footnoteRefs === 0,
+            details: footnoteRefs > 0 ? `${footnoteRefs} footnote reference(s) remain` : undefined,
+        });
+    }
+    // Check 5: No double dollar signs ($$ or $ $)
+    // This catches cases where the template already has a $ before a placeholder
+    // and the user also included a $ in their value (e.g. "$1,000,000")
+    const doubleDollarPattern = /\$[\s\u00A0\t]*\$/;
+    const doubleDollarLines = rawFullText.split('\n').filter((line) => doubleDollarPattern.test(line));
+    checks.push({
+        name: 'No double dollar signs',
+        passed: doubleDollarLines.length === 0,
+        details: doubleDollarLines.length > 0
+            ? `Found ${doubleDollarLines.length} occurrence(s): "${doubleDollarLines[0].trim().slice(0, 80)}"`
+            : undefined,
+    });
+    // Check 6: No drafting note paragraphs (if patterns were set)
+    if (cleanConfig?.removeParagraphPatterns && cleanConfig.removeParagraphPatterns.length > 0) {
+        const regexes = cleanConfig.removeParagraphPatterns.map((p) => new RegExp(p, 'i'));
+        const lines = rawFullText.split('\n');
+        const matchingLines = lines.filter((line) => regexes.some((r) => r.test(line.trim())));
+        checks.push({
+            name: 'Drafting notes removed',
+            passed: matchingLines.length === 0,
+            details: matchingLines.length > 0 ? `Found: ${matchingLines[0].trim().slice(0, 80)}...` : undefined,
+        });
+    }
+    return {
+        passed: checks.every((c) => c.passed),
+        checks,
+    };
+}
+/**
+ * Extract all text from general OOXML text parts (document, headers, footers, endnotes).
+ */
+export function extractAllText(docxPath) {
+    const zip = new AdmZip(docxPath);
+    const parser = new DOMParser();
+    const parts = enumerateTextParts(zip);
+    const partNames = getGeneralTextPartNames(parts);
+    const allParagraphs = [];
+    for (const partName of partNames) {
+        const entry = zip.getEntry(partName);
+        if (!entry)
+            continue;
+        const xml = entry.getData().toString('utf-8');
+        const doc = parser.parseFromString(xml, 'text/xml');
+        const paras = doc.getElementsByTagNameNS(W_NS, 'p');
+        for (let i = 0; i < paras.length; i++) {
+            const tElements = paras[i].getElementsByTagNameNS(W_NS, 't');
+            const textParts = [];
+            for (let j = 0; j < tElements.length; j++) {
+                textParts.push(tElements[j].textContent ?? '');
+            }
+            if (textParts.length > 0) {
+                allParagraphs.push(textParts.join(''));
+            }
+        }
+    }
+    return allParagraphs.join('\n');
+}
+/**
+ * Extract raw XML from word/document.xml only (for footnote ref counting).
+ */
+function extractDocumentXml(docxPath) {
+    const zip = new AdmZip(docxPath);
+    const entry = zip.getEntry('word/document.xml');
+    if (!entry)
+        return '';
+    return entry.getData().toString('utf-8');
+}
+//# sourceMappingURL=verifier.js.map

package/dist/core/recipe/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../../src/core/recipe/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,MAAM,IAAI,GAAG,8DAA8D,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI;QACT,sBAAsB;SACrB,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;QACtC,iCAAiC;SAChC,OAAO,CAAC,6BAA6B,EAAE,GAAG,CAAC;QAC5C,iCAAiC;SAChC,OAAO,CAAC,yCAAyC,EAAE,GAAG,CAAC;QACxD,kFAAkF;SACjF,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,MAA8B,EAC9B,YAAoC,EACpC,WAAyB;IAEzB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,kBAAkB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE3C,2DAA2D;IAC3D,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,SAAS,CAAC,oCAAoC;QAC3E,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAClD,aAAa,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;QAClC,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;KACvF,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC;QACnC,OAAO,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;KACvF,CAAC,CAAC;IAEH,qEAAqE;IACrE,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,iCAAiC;QACvC,MAAM,EAAE,gBAAgB,CAAC,MAAM,KAAK,CAAC;QACrC,OAAO,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;KAC3F,CAAC,CAAC;IAEH,+DAA+D;IAC/D,IAAI,WAAW,EAAE,eAAe,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,YAAY,KAAK,CAAC;YAC1B,OAAO,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,+BAA+B,CAAC,CAAC,CAAC,SAAS;SACvF,CAAC,CAAC;IACL,CAAC;IAED,8CAA8C;IAC9C,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;IAChD,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC;QACtC,OAAO,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC;YACnC,CAAC,CAAC,SAAS,iBAAiB,CAAC,MAAM,oBAAoB,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;YAClG,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,WAAW,EAAE,uBAAuB,IAAI,WAAW,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,OAAO,GAAG,WAAW,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;YAClC,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACrC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAE/B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAEjD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/core/validation/external.d.ts

@@ -0,0 +1,16 @@
+export interface ExternalValidationResult {
+    externalId: string;
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+}
+/**
+ * Validate an external template directory:
+ * - metadata.yaml validates against ExternalMetadataSchema
+ * - template.docx exists and SHA-256 matches source_sha256
+ * - replacements.json is present and valid
+ * - clean.json is valid if present
+ * - Replacement targets reference metadata fields
+ */
+export declare function validateExternal(externalDir: string, externalId: string): ExternalValidationResult;
+//# sourceMappingURL=external.d.ts.map

package/dist/core/validation/external.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../../src/core/validation/external.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AASD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,wBAAwB,CAsG1B"}

package/dist/core/validation/external.js

@@ -0,0 +1,106 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { validateExternalMetadata, loadExternalMetadata, CleanConfigSchema } from '../metadata.js';
+/** Pattern for valid template tags within replacement values */
+const TAG_RE = /\{[a-z_][a-z0-9_]*\}/g;
+/** Pattern for any curly-brace token */
+const ANY_BRACE_RE = /\{[^}]+\}/g;
+/** Only simple identifiers inside braces are allowed */
+const SAFE_TAG_RE = /^\{[a-z_][a-z0-9_]*\}$/;
+/**
+ * Validate an external template directory:
+ * - metadata.yaml validates against ExternalMetadataSchema
+ * - template.docx exists and SHA-256 matches source_sha256
+ * - replacements.json is present and valid
+ * - clean.json is valid if present
+ * - Replacement targets reference metadata fields
+ */
+export function validateExternal(externalDir, externalId) {
+    const errors = [];
+    const warnings = [];
+    // Validate metadata
+    const metaResult = validateExternalMetadata(externalDir);
+    if (!metaResult.valid) {
+        errors.push(...metaResult.errors.map((e) => `metadata: ${e}`));
+        return { externalId, valid: false, errors, warnings };
+    }
+    const metadata = loadExternalMetadata(externalDir);
+    // Validate template.docx exists
+    const docxPath = join(externalDir, 'template.docx');
+    if (!existsSync(docxPath)) {
+        errors.push('template.docx not found');
+        return { externalId, valid: false, errors, warnings };
+    }
+    // SHA-256 integrity check
+    const docxBuf = readFileSync(docxPath);
+    const actualHash = createHash('sha256').update(docxBuf).digest('hex');
+    if (actualHash !== metadata.source_sha256) {
+        errors.push(`DOCX integrity check failed:\n` +
+            `    Expected SHA-256: ${metadata.source_sha256}\n` +
+            `    Actual SHA-256:   ${actualHash}`);
+    }
+    // Validate replacements.json
+    const replacementsPath = join(externalDir, 'replacements.json');
+    if (!existsSync(replacementsPath)) {
+        errors.push('replacements.json not found (required for external templates)');
+    }
+    else {
+        try {
+            const raw = readFileSync(replacementsPath, 'utf-8');
+            const replacements = JSON.parse(raw);
+            if (typeof replacements !== 'object' || replacements === null) {
+                errors.push('replacements.json must be a JSON object');
+            }
+            else {
+                const metadataFieldNames = new Set(metadata.fields.map((f) => f.name));
+                for (const [key, value] of Object.entries(replacements)) {
+                    if (typeof value !== 'string') {
+                        errors.push(`replacements.json: value for "${key}" must be a string`);
+                        continue;
+                    }
+                    const tags = value.match(TAG_RE);
+                    if (!tags || tags.length === 0) {
+                        errors.push(`replacements.json: value for "${key}" must contain at least one {identifier} tag, got "${value}"`);
+                    }
+                    const allBraces = value.match(ANY_BRACE_RE);
+                    if (allBraces) {
+                        for (const token of allBraces) {
+                            if (!SAFE_TAG_RE.test(token)) {
+                                errors.push(`replacements.json: unsafe tag "${token}" in value for "${key}". Only {identifier} tags allowed.`);
+                            }
+                        }
+                    }
+                    if (value.includes(key)) {
+                        errors.push(`replacements.json: value for "${key}" contains the key itself (would cause infinite loop)`);
+                    }
+                    // Check field coverage
+                    if (tags) {
+                        for (const tag of tags) {
+                            const fieldName = tag.slice(1, -1);
+                            if (!metadataFieldNames.has(fieldName)) {
+                                warnings.push(`Replacement target {${fieldName}} not found in metadata fields`);
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        catch (err) {
+            errors.push(`replacements.json: ${err.message}`);
+        }
+    }
+    // Validate clean.json if present
+    const cleanPath = join(externalDir, 'clean.json');
+    if (existsSync(cleanPath)) {
+        try {
+            const raw = readFileSync(cleanPath, 'utf-8');
+            CleanConfigSchema.parse(JSON.parse(raw));
+        }
+        catch {
+            errors.push('clean.json: invalid format');
+        }
+    }
+    return { externalId, valid: errors.length === 0, errors, warnings };
+}
+//# sourceMappingURL=external.js.map

package/dist/core/validation/external.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external.js","sourceRoot":"","sources":["../../../src/core/validation/external.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AASnG,gEAAgE;AAChE,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,wCAAwC;AACxC,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,wDAAwD;AACxD,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,UAAkB;IAElB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,oBAAoB;IACpB,MAAM,UAAU,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAEnD,gCAAgC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,UAAU,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CACT,gCAAgC;YAChC,yBAAyB,QAAQ,CAAC,aAAa,IAAI;YACnD,yBAAyB,UAAU,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC9D,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAEvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;oBACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,MAAM,CAAC,IAAI,CAAC,iCAAiC,GAAG,oBAAoB,CAAC,CAAC;wBACtE,SAAS;oBACX,CAAC;oBAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CACT,iCAAiC,GAAG,sDAAsD,KAAK,GAAG,CACnG,CAAC;oBACJ,CAAC;oBAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAC5C,IAAI,SAAS,EAAE,CAAC;wBACd,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;4BAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gCAC7B,MAAM,CAAC,IAAI,CACT,kCAAkC,KAAK,mBAAmB,GAAG,oCAAoC,CAClG,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBACxB,MAAM,CAAC,IAAI,CACT,iCAAiC,GAAG,uDAAuD,CAC5F,CAAC;oBACJ,CAAC;oBAED,uBAAuB;oBACvB,IAAI,IAAI,EAAE,CAAC;wBACT,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;4BACvB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;4BACnC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gCACvC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,SAAS,gCAAgC,CAAC,CAAC;4BAClF,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC7C,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtE,CAAC"}

package/dist/core/validation/license.d.ts

@@ -0,0 +1,15 @@
+export interface LicenseValidationResult {
+    templateId: string;
+    valid: boolean;
+    errors: string[];
+}
+/**
+ * Validate a template's license metadata.
+ *
+ * The allow_derivatives field means "the committed source DOCX must not be
+ * modified" when false.  It does NOT prevent the tool from rendering filled
+ * output — that decision is made by the fill command based on directory
+ * context (templates/ vs external/).
+ */
+export declare function validateLicense(templateDir: string, templateId: string): LicenseValidationResult;
+//# sourceMappingURL=license.d.ts.map

package/dist/core/validation/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../../src/core/validation/license.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,uBAAuB,CAyBhG"}