sfscanner 0.0.0-stage → 0.1.0

package/dist/v2/arguments.d.ts

@@ -0,0 +1,86 @@
+import { type ScanConfigV2, type ScanSeverityV2 } from './contracts';
+import type { V2CommandName } from './help';
+export type CliFormatV2 = 'json' | 'ndjson' | 'sarif' | 'table';
+export type CliProfileV2 = 'beta-default' | 'beta-hardened';
+export type CliTargetEnumV2 = 'UNKNOWN' | 'COMMUNITY' | 'ENTERPRISE' | 'CLOUD' | 'SELF_HOSTED' | 'OWNER' | 'ADMIN' | 'MEMBER' | 'LEGACY' | 'NATIVE';
+export type CliParseErrorCodeV2 = 'NO_COMMAND' | 'UNKNOWN_COMMAND' | 'UNKNOWN_OPTION' | 'MISSING_VALUE' | 'INVALID_VALUE' | 'DUPLICATE_OPTION' | 'UNEXPECTED_ARGUMENT' | 'REMOTE_PATH' | 'RULE_PACK_INVALID' | 'SEMANTIC_CATALOGUE_INVALID' | 'PROFILE_NOT_ADMITTED';
+export type CliParseErrorV2 = Readonly<{
+    code: CliParseErrorCodeV2;
+    message: string;
+    argument?: string;
+}>;
+type ScanCommandV2 = Readonly<{
+    kind: 'scan';
+    schema: 'v2';
+    inputs: readonly string[];
+    format: CliFormatV2;
+    profile: CliProfileV2;
+    failOn: ScanSeverityV2;
+    requireComplete: boolean;
+    concurrency: number;
+    timeoutMs?: number;
+    output?: string;
+    configPath?: string;
+    rules: 'builtin';
+    catalogue: 'builtin';
+    limits: string;
+    target?: string;
+    n8nVersion?: string;
+    edition: 'COMMUNITY' | 'ENTERPRISE' | 'CLOUD' | 'UNKNOWN';
+    deployment: 'SELF_HOSTED' | 'CLOUD' | 'UNKNOWN';
+    role: 'OWNER' | 'ADMIN' | 'MEMBER' | 'UNKNOWN';
+    taskRunner: 'LEGACY' | 'NATIVE' | 'UNKNOWN';
+    communityPackages: readonly string[];
+    configuration: readonly string[];
+    include: readonly string[];
+    exclude: readonly string[];
+    allowUnsignedDevelopmentRules: boolean;
+    noColor: boolean;
+    cliOverrides: Readonly<Partial<ScanConfigV2>>;
+}>;
+export type CliHelpCommandV2 = Readonly<{
+    kind: 'help';
+    schema: 'v2';
+    command?: V2CommandName;
+}>;
+export type CliCommandV2 = ScanCommandV2 | Readonly<{
+    kind: 'rules';
+    schema: 'v2';
+    format: 'json' | 'table';
+}> | Readonly<{
+    kind: 'explain';
+    schema: 'v2';
+    format: 'json' | 'table';
+    ruleId: string;
+}> | Readonly<{
+    kind: 'profiles';
+    schema: 'v2';
+    format: 'json' | 'table';
+}> | Readonly<{
+    kind: 'validate-config';
+    schema: 'v2';
+    format: 'json' | 'table';
+    path: string;
+}> | Readonly<{
+    kind: 'version';
+    schema: 'v2';
+    format: 'json' | 'table';
+}>;
+type ParsedCommandV2 = CliCommandV2 | CliHelpCommandV2;
+export type CliParseResultV2 = Readonly<{
+    ok: true;
+    command: ParsedCommandV2;
+} | {
+    ok: false;
+    error: CliParseErrorV2;
+}>;
+export type CliArgumentDispatch = Readonly<{
+    mode: 'v1';
+    argv: readonly string[];
+} | {
+    mode: 'v2';
+    result: CliParseResultV2;
+}>;
+export declare function parseArgumentsV2(argv: readonly string[]): CliParseResultV2;
+export declare function parseCliArguments(argv: readonly string[]): CliArgumentDispatch;
+export {};

package/dist/v2/arguments.js

@@ -0,0 +1,294 @@
+// src/v2/contracts.ts
+var SCAN_CONFIG_SCHEMA_V2 = "n8n-scan-config-v2";
+var ADMITTED_PROFILE_V2 = Object.freeze({ id: "beta-default", version: "2.0.0", digest: "3ca5d69db2554383e22c44afe507cc98e381ea58a7e42aaac0ee8f7497fb4f44" });
+var ADMITTED_PROFILE_SPECIFIERS_V2 = Object.freeze([
+  ADMITTED_PROFILE_V2.id,
+  `${ADMITTED_PROFILE_V2.id}@${ADMITTED_PROFILE_V2.version}`
+]);
+function isAdmittedProfileSpecifierV2(value) {
+  return typeof value === "string" && ADMITTED_PROFILE_SPECIFIERS_V2.includes(value);
+}
+var BUILTIN_AUTHORITIES_V2 = Object.freeze({
+  profile: ADMITTED_PROFILE_V2,
+  rules: Object.freeze({ id: "scanner-core-builtins", version: "2.0.0", digest: "a36d00564bbf8e8c38f05820480782cdc53fdbd3712558850066c4e3f5c3413d", signatureStatus: "VERIFIED" }),
+  semantics: Object.freeze({ id: "scanner-core-builtins", version: "2.0.0", digest: "1bb11f63269d427cb28e141dfe0a6a1512e53c298abdb4d6450545ceb56d11c4" }),
+  limits: Object.freeze({ schemaVersion: "scanner-limits-v2", digest: "fca787753ca88f71cf0d174427f4ac730a7aef1c823aaf73aa1ea72af92b4077" })
+});
+var PROFILE_MANIFEST_DIGEST_V2 = ADMITTED_PROFILE_V2.digest;
+var BUILTIN_RULESET_AUTHORITY_V2 = BUILTIN_AUTHORITIES_V2.rules;
+var BUILTIN_SEMANTICS_AUTHORITY_V2 = BUILTIN_AUTHORITIES_V2.semantics;
+var BUILTIN_LIMITS_AUTHORITY_V2 = BUILTIN_AUTHORITIES_V2.limits;
+var RULE_PACK_DIGEST_V2 = BUILTIN_RULESET_AUTHORITY_V2.digest;
+var SEMANTIC_CATALOGUE_DIGEST_V2 = BUILTIN_SEMANTICS_AUTHORITY_V2.digest;
+var DEFAULT_SCAN_CONFIG_V2 = Object.freeze({
+  schemaVersion: SCAN_CONFIG_SCHEMA_V2,
+  format: "json",
+  profile: ADMITTED_PROFILE_V2.id,
+  failOn: "INFO",
+  requireComplete: false,
+  concurrency: 1,
+  rules: "builtin",
+  catalogue: "builtin",
+  limits: "builtin",
+  include: Object.freeze(["**/*.json"]),
+  exclude: Object.freeze([".git/**", "node_modules/**"]),
+  allowUnsignedDevelopmentRules: false,
+  noColor: false
+});
+var SCAN_CONFIG_V2_FIELDS = Object.freeze([
+  "schemaVersion",
+  "format",
+  "profile",
+  "output",
+  "inputs",
+  "configPath",
+  "failOn",
+  "requireComplete",
+  "concurrency",
+  "rules",
+  "catalogue",
+  "limits",
+  "target",
+  "include",
+  "exclude",
+  "allowUnsignedDevelopmentRules",
+  "noColor"
+]);
+
+// src/v2/arguments.ts
+var severities = ["CRITICAL", "HIGH", "MEDIUM", "LOW", "INFO"];
+var commands = Object.freeze({ scan: true, rules: true, explain: true, profiles: true, "validate-config": true, version: true, "--version": true });
+var implicitV2Commands = Object.freeze({ rules: true, explain: true, profiles: true, "validate-config": true, version: true });
+var scalarOptions = Object.freeze({ "--format": true, "--profile": true, "--fail-on": true, "--max-concurrency": true, "--concurrency": true, "--timeout": true, "--output": true, "--config": true, "--rules": true, "--catalogue": true, "--limits": true, "--target": true, "--n8n-version": true, "--edition": true, "--deployment": true, "--role": true, "--task-runner": true });
+var repeatableOptions = Object.freeze({ "--community-package": true, "--configuration": true, "--include": true, "--exclude": true });
+var configFields = Object.freeze({ "--format": "format", "--profile": "profile", "--fail-on": "failOn", "--max-concurrency": "concurrency", "--concurrency": "concurrency", "--output": "output", "--config": "configPath", "--rules": "rules", "--catalogue": "catalogue", "--limits": "limits", "--target": "target", "--include": "include", "--exclude": "exclude", "inputs": "inputs", "--require-complete": "requireComplete", "--allow-unsigned-development-rules": "allowUnsignedDevelopmentRules", "--no-color": "noColor" });
+var overrideOrder = ["format", "profile", "output", "inputs", "configPath", "failOn", "requireComplete", "concurrency", "rules", "catalogue", "limits", "target", "include", "exclude", "allowUnsignedDevelopmentRules", "noColor"];
+function parseArgumentsV2(argv) {
+  const stripped = stripSchema(argv);
+  if (!stripped.ok) return stripped.result;
+  const args = stripped.args;
+  const raw = args[0];
+  if (!raw) return failure("NO_COMMAND", "A v2 command is required.");
+  if (raw === "--help") return success({ kind: "help", schema: "v2" });
+  if (commands[raw] !== true) return failure("UNKNOWN_COMMAND", "Unknown v2 command.");
+  const kind = raw === "--version" ? "version" : raw;
+  if (kind !== "scan") return parseMetadata(kind, args.slice(1));
+  if (args.length === 2 && args[1] === "--help") return success({ kind: "help", schema: "v2", command: "scan" });
+  const value = {
+    kind: "scan",
+    schema: "v2",
+    inputs: [],
+    format: "json",
+    profile: "beta-default",
+    failOn: "INFO",
+    requireComplete: false,
+    concurrency: 1,
+    rules: "builtin",
+    catalogue: "builtin",
+    limits: "builtin",
+    edition: "UNKNOWN",
+    deployment: "UNKNOWN",
+    role: "UNKNOWN",
+    taskRunner: "UNKNOWN",
+    communityPackages: [],
+    configuration: [],
+    include: ["**/*.json"],
+    exclude: [".git/**", "node_modules/**"],
+    allowUnsignedDevelopmentRules: false,
+    noColor: false
+  };
+  const overrides = {};
+  const inputs = [];
+  const repeatable = { "--community-package": [], "--configuration": [], "--include": [], "--exclude": [] };
+  const seen = /* @__PURE__ */ new Set();
+  for (let index = 1; index < args.length; index += 1) {
+    const token = args[index];
+    if (token === "--") {
+      inputs.push(...args.slice(index + 1));
+      break;
+    }
+    if (token === "-" || !token.startsWith("-")) {
+      if (!local(token)) return failure("REMOTE_PATH", "Input path is not admitted.");
+      inputs.push(token);
+      continue;
+    }
+    const [name, inline] = splitOption(token);
+    if (name === "--require-complete" || name === "--allow-unsigned-development-rules" || name === "--no-color") {
+      if (inline !== void 0 || seen.has(name)) return failure("DUPLICATE_OPTION", "Option supplied more than once.", name);
+      seen.add(name);
+      value[name === "--require-complete" ? "requireComplete" : name === "--no-color" ? "noColor" : "allowUnsignedDevelopmentRules"] = true;
+      overrides[configFields[name]] = true;
+      continue;
+    }
+    if (scalarOptions[name] !== true && repeatableOptions[name] !== true) return failure("UNKNOWN_OPTION", "Unknown option.", name);
+    const duplicateKey = name === "--max-concurrency" ? "--concurrency" : name;
+    if (seen.has(duplicateKey) && scalarOptions[name] === true) return failure("DUPLICATE_OPTION", "Option supplied more than once.", name);
+    const read = inline === void 0 ? args[index + 1] : inline;
+    if (read === void 0 || read.length === 0 || inline === void 0 && read.startsWith("-") && !(name === "--output" && read === "-")) return failure("MISSING_VALUE", "Option requires a value.", name);
+    if (inline === void 0) index += 1;
+    if (repeatableOptions[name] === true) {
+      if (!local(read)) return failure("REMOTE_PATH", "Option value is not admitted.", name);
+      repeatable[name].push(read);
+      if (configFields[name]) overrides[configFields[name]] = Object.freeze([...repeatable[name]]);
+      continue;
+    }
+    if (name === "--format" && !["json", "ndjson", "sarif", "table"].includes(read)) return failure("INVALID_VALUE", "Format is invalid.", name);
+    if (name === "--profile" && !isAdmittedProfileSpecifierV2(read)) return failure("PROFILE_NOT_ADMITTED", "Profile is not admitted.", name);
+    if (name === "--fail-on" && !severities.includes(read)) return failure("INVALID_VALUE", "Fail threshold is invalid.", name);
+    if ((name === "--max-concurrency" || name === "--concurrency" || name === "--timeout") && !positiveInteger(read, name === "--timeout" ? 2 ** 31 - 1 : 16)) return failure("INVALID_VALUE", "Numeric option is invalid.", name);
+    if (name === "--n8n-version" && !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(read)) return failure("INVALID_VALUE", "n8n version is invalid.", name);
+    if (name === "--edition" && !["COMMUNITY", "ENTERPRISE", "CLOUD", "UNKNOWN"].includes(read)) return failure("INVALID_VALUE", "Edition is invalid.", name);
+    if (name === "--deployment" && !["SELF_HOSTED", "CLOUD", "UNKNOWN"].includes(read)) return failure("INVALID_VALUE", "Deployment is invalid.", name);
+    if (name === "--role" && !["OWNER", "ADMIN", "MEMBER", "UNKNOWN"].includes(read)) return failure("INVALID_VALUE", "Role is invalid.", name);
+    if (name === "--task-runner" && !["LEGACY", "NATIVE", "UNKNOWN"].includes(read)) return failure("INVALID_VALUE", "Task runner is invalid.", name);
+    if (name === "--rules" || name === "--catalogue") {
+      if (read !== "builtin") return failure(name === "--rules" ? "RULE_PACK_INVALID" : "SEMANTIC_CATALOGUE_INVALID", "Only built-in authority is available.", name);
+    } else if (["--limits", "--target", "--config"].includes(name) && (read === "-" || !local(read))) return failure("REMOTE_PATH", "Option value is not admitted.", name);
+    else if (name === "--output" && read !== "-" && !local(read)) return failure("REMOTE_PATH", "Option value is not admitted.", name);
+    else if (["--n8n-version", "--edition", "--deployment", "--role", "--task-runner"].includes(name) && !safeText(read)) return failure("INVALID_VALUE", "Option value is not admitted.", name);
+    seen.add(duplicateKey);
+    assign(value, name, read);
+    if (configFields[name]) overrides[configFields[name]] = ["--max-concurrency", "--concurrency"].includes(name) ? Number(read) : read;
+  }
+  if (value.allowUnsignedDevelopmentRules === true) return failure("RULE_PACK_INVALID", "External rule packs are not admitted in this release.", "--allow-unsigned-development-rules");
+  if (inputs.length === 0) return failure("UNEXPECTED_ARGUMENT", "At least one workflow input is required.");
+  if (inputs.some((input) => !local(input))) return failure("REMOTE_PATH", "Input path is not admitted.");
+  if (inputs.includes("-") && inputs.length > 1) return failure("UNEXPECTED_ARGUMENT", "Standard input cannot be combined with file inputs.");
+  overrides.inputs = Object.freeze([...inputs]);
+  const cliOverrides = {};
+  const sparse = cliOverrides;
+  for (const field of overrideOrder) if (Object.prototype.hasOwnProperty.call(overrides, field)) sparse[field] = overrides[field];
+  const command = {
+    kind: "scan",
+    schema: "v2",
+    inputs: Object.freeze([...inputs]),
+    format: value.format,
+    profile: value.profile,
+    failOn: value.failOn,
+    requireComplete: value.requireComplete,
+    concurrency: value.concurrency,
+    ...typeof value.timeoutMs === "number" ? { timeoutMs: value.timeoutMs } : {},
+    ...typeof value.output === "string" ? { output: value.output } : {},
+    ...typeof value.configPath === "string" ? { configPath: value.configPath } : {},
+    rules: value.rules,
+    catalogue: value.catalogue,
+    limits: value.limits,
+    ...typeof value.target === "string" ? { target: value.target } : {},
+    ...typeof value.n8nVersion === "string" ? { n8nVersion: value.n8nVersion } : {},
+    edition: value.edition,
+    deployment: value.deployment,
+    role: value.role,
+    taskRunner: value.taskRunner,
+    communityPackages: arrayFor(repeatable["--community-package"]),
+    configuration: arrayFor(repeatable["--configuration"]),
+    include: repeatable["--include"].length > 0 ? arrayFor(repeatable["--include"]) : Object.freeze(["**/*.json"]),
+    exclude: repeatable["--exclude"].length > 0 ? arrayFor(repeatable["--exclude"]) : Object.freeze([".git/**", "node_modules/**"]),
+    allowUnsignedDevelopmentRules: value.allowUnsignedDevelopmentRules,
+    noColor: value.noColor,
+    cliOverrides
+  };
+  return success(command);
+}
+function arrayFor(values) {
+  return Object.freeze([...values ?? []]);
+}
+function parseCliArguments(argv) {
+  const hasSchema = hasSchemaMarker(argv);
+  const implicit = argv[0] !== void 0 && implicitV2Commands[argv[0]] === true;
+  return hasSchema || implicit ? freeze({ mode: "v2", result: parseArgumentsV2(argv) }) : freeze({ mode: "v1", argv: Object.freeze([...argv]) });
+}
+function parseMetadata(kind, args) {
+  if (args.length === 1 && args[0] === "--help") return success({ kind: "help", schema: "v2", command: kind });
+  let format = "json";
+  const rest = [];
+  let seen = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const token = args[index];
+    if (token.startsWith("-")) {
+      const [name, inline] = splitOption(token);
+      if (name !== "--format" || seen) return failure(seen ? "DUPLICATE_OPTION" : "UNKNOWN_OPTION", seen ? "Option supplied more than once." : "Unknown option.", name);
+      const value = inline ?? args[++index];
+      if (!value) return failure("MISSING_VALUE", "Option requires a value.", name);
+      if (value !== "json" && value !== "table") return failure("INVALID_VALUE", "Format is invalid.", name);
+      format = value;
+      seen = true;
+    } else rest.push(token);
+  }
+  if (kind === "rules" || kind === "profiles" || kind === "version") {
+    if (rest.length > 0) return failure("UNEXPECTED_ARGUMENT", "Command does not accept positional arguments.");
+    return success({ kind, schema: "v2", format });
+  }
+  if (kind === "explain") return rest.length === 1 && safeText(rest[0]) ? success({ kind, schema: "v2", format, ruleId: rest[0] }) : failure("UNEXPECTED_ARGUMENT", "explain requires one rule ID.");
+  if (rest.length !== 1 || !local(rest[0])) return failure("UNEXPECTED_ARGUMENT", "validate-config requires one local file.");
+  return success({ kind, schema: "v2", format, path: rest[0] });
+}
+function assign(value, name, read) {
+  const fields = { "--format": "format", "--profile": "profile", "--fail-on": "failOn", "--max-concurrency": "concurrency", "--concurrency": "concurrency", "--timeout": "timeoutMs", "--output": "output", "--config": "configPath", "--rules": "rules", "--catalogue": "catalogue", "--limits": "limits", "--target": "target", "--n8n-version": "n8nVersion", "--edition": "edition", "--deployment": "deployment", "--role": "role", "--task-runner": "taskRunner" };
+  value[fields[name]] = ["--max-concurrency", "--concurrency", "--timeout"].includes(name) ? Number(read) : read;
+}
+function splitOption(token) {
+  const at = token.indexOf("=");
+  return at < 0 ? [token, void 0] : [token.slice(0, at), token.slice(at + 1)];
+}
+function positiveInteger(value, maximum) {
+  if (!/^\d+$/.test(value)) return false;
+  const number = Number(value);
+  return Number.isSafeInteger(number) && number > 0 && number <= maximum;
+}
+function safeText(value) {
+  return value.length > 0 && value.length <= 4096 && !/[\u0000-\u001f\u007f]/.test(value) && !/^(?:[a-z][a-z\d+.-]*:|\/|[a-z]:|\\\\)/i.test(value);
+}
+function local(value) {
+  return safeText(value) && !/^(?:[a-z][a-z\d+.-]*:|\/|[a-z]:|\\\\)/i.test(value);
+}
+function hasSchemaMarker(argv) {
+  for (const token of argv) {
+    if (token === "--") break;
+    if (token === "--schema" || token.startsWith("--schema=")) return true;
+  }
+  return false;
+}
+function stripSchema(argv) {
+  const args = [];
+  let seen = false;
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (token === "--") {
+      args.push(...argv.slice(index));
+      break;
+    }
+    if (token === "--schema") {
+      if (seen || argv[index + 1] !== "v2") return { ok: false, result: failure(seen ? "DUPLICATE_OPTION" : "INVALID_VALUE", seen ? "Option supplied more than once." : "Schema must be v2.", "--schema") };
+      seen = true;
+      index += 1;
+      continue;
+    }
+    if (token.startsWith("--schema=")) {
+      if (seen || token.slice(9) !== "v2") return { ok: false, result: failure(seen ? "DUPLICATE_OPTION" : "INVALID_VALUE", seen ? "Option supplied more than once." : "Schema must be v2.", "--schema") };
+      seen = true;
+      continue;
+    }
+    args.push(token);
+  }
+  return { ok: true, args };
+}
+function success(command) {
+  return freeze({ ok: true, command });
+}
+function failure(code, message, argument) {
+  const safe = argument !== void 0 && /^--[A-Za-z0-9][A-Za-z0-9-]{0,63}$/.test(argument) ? argument : void 0;
+  return freeze({ ok: false, error: { code, message, ...safe === void 0 ? {} : { argument: safe } } });
+}
+function freeze(value, seen = /* @__PURE__ */ new WeakSet()) {
+  if (value && typeof value === "object") {
+    if (seen.has(value)) return value;
+    seen.add(value);
+    for (const name of Object.getOwnPropertyNames(value)) freeze(value[name], seen);
+    Object.freeze(value);
+  }
+  return value;
+}
+export {
+  parseArgumentsV2,
+  parseCliArguments
+};

package/dist/v2/arguments.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/v2/contracts.ts", "../../src/v2/arguments.ts"],
+  "sourcesContent": ["export const SCAN_CONFIG_SCHEMA_V2 = 'n8n-scan-config-v2' as const;\nexport type ScanFormatV2 = 'json' | 'ndjson' | 'sarif' | 'table';\nexport type ScanSeverityV2 = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO';\n\nexport type ScanConfigV2 = Readonly<{\n  schemaVersion: typeof SCAN_CONFIG_SCHEMA_V2;\n  format?: ScanFormatV2;\n  profile?: string;\n  output?: string;\n  inputs?: readonly string[];\n  configPath?: string;\n  failOn?: ScanSeverityV2;\n  requireComplete?: boolean;\n  concurrency?: number;\n  rules?: string;\n  catalogue?: string;\n  limits?: string;\n  target?: string;\n  include?: readonly string[];\n  exclude?: readonly string[];\n  allowUnsignedDevelopmentRules?: boolean;\n  noColor?: boolean;\n}>;\n\nexport const ADMITTED_PROFILE_V2 = Object.freeze({ id: 'beta-default', version: '2.0.0', digest: '3ca5d69db2554383e22c44afe507cc98e381ea58a7e42aaac0ee8f7497fb4f44' });\n\n/**\n * The profile spellings a caller may write, and the one place they are listed. Both the\n * config loader and the MCP tool read this, so a profile cannot be admitted on one\n * surface and refused on the other; the bare id and its `id@version` pin are the same\n * admission, and both canonicalize to `ADMITTED_PROFILE_V2.id`.\n */\nexport const ADMITTED_PROFILE_SPECIFIERS_V2: readonly string[] = Object.freeze([\n  ADMITTED_PROFILE_V2.id,\n  `${ADMITTED_PROFILE_V2.id}@${ADMITTED_PROFILE_V2.version}`,\n]);\n\nexport function isAdmittedProfileSpecifierV2(value: unknown): value is string {\n  return typeof value === 'string' && ADMITTED_PROFILE_SPECIFIERS_V2.includes(value);\n}\nexport const BUILTIN_AUTHORITIES_V2 = Object.freeze({\n  profile: ADMITTED_PROFILE_V2,\n  rules: Object.freeze({ id: 'scanner-core-builtins', version: '2.0.0', digest: 'a36d00564bbf8e8c38f05820480782cdc53fdbd3712558850066c4e3f5c3413d', signatureStatus: 'VERIFIED' as const }),\n  semantics: Object.freeze({ id: 'scanner-core-builtins', version: '2.0.0', digest: '1bb11f63269d427cb28e141dfe0a6a1512e53c298abdb4d6450545ceb56d11c4' }),\n  limits: Object.freeze({ schemaVersion: 'scanner-limits-v2' as const, digest: 'fca787753ca88f71cf0d174427f4ac730a7aef1c823aaf73aa1ea72af92b4077' }),\n});\nexport const PROFILE_MANIFEST_DIGEST_V2 = ADMITTED_PROFILE_V2.digest;\nexport const BUILTIN_RULESET_AUTHORITY_V2 = BUILTIN_AUTHORITIES_V2.rules;\nexport const BUILTIN_SEMANTICS_AUTHORITY_V2 = BUILTIN_AUTHORITIES_V2.semantics;\nexport const BUILTIN_LIMITS_AUTHORITY_V2 = BUILTIN_AUTHORITIES_V2.limits;\nexport const RULE_PACK_DIGEST_V2 = BUILTIN_RULESET_AUTHORITY_V2.digest;\nexport const SEMANTIC_CATALOGUE_DIGEST_V2 = BUILTIN_SEMANTICS_AUTHORITY_V2.digest;\n\nexport const DEFAULT_SCAN_CONFIG_V2: ScanConfigV2 = Object.freeze({\n  schemaVersion: SCAN_CONFIG_SCHEMA_V2,\n  format: 'json', profile: ADMITTED_PROFILE_V2.id, failOn: 'INFO', requireComplete: false, concurrency: 1,\n  rules: 'builtin', catalogue: 'builtin', limits: 'builtin',\n  include: Object.freeze(['**/*.json']), exclude: Object.freeze(['.git/**', 'node_modules/**']),\n  allowUnsignedDevelopmentRules: false, noColor: false,\n});\n\nexport const SCAN_CONFIG_V2_FIELDS = Object.freeze([\n  'schemaVersion', 'format', 'profile', 'output', 'inputs', 'configPath', 'failOn', 'requireComplete', 'concurrency',\n  'rules', 'catalogue', 'limits', 'target', 'include', 'exclude', 'allowUnsignedDevelopmentRules', 'noColor',\n] as const);\nexport const SCAN_CONFIG_V2_MAX_STRING = 4096;\nexport const SCAN_CONFIG_V2_MAX_PATTERNS = 1024;\nexport const SCAN_CONFIG_V2_MAX_CONCURRENCY = 16;\n", "import { isAdmittedProfileSpecifierV2, type ScanConfigV2, type ScanSeverityV2 } from './contracts';\nimport type { V2CommandName } from './help';\n\nexport type CliFormatV2 = 'json' | 'ndjson' | 'sarif' | 'table';\nexport type CliProfileV2 = 'beta-default' | 'beta-hardened';\nexport type CliTargetEnumV2 = 'UNKNOWN' | 'COMMUNITY' | 'ENTERPRISE' | 'CLOUD' | 'SELF_HOSTED' | 'OWNER' | 'ADMIN' | 'MEMBER' | 'LEGACY' | 'NATIVE';\nexport type CliParseErrorCodeV2 = 'NO_COMMAND' | 'UNKNOWN_COMMAND' | 'UNKNOWN_OPTION' | 'MISSING_VALUE' | 'INVALID_VALUE' | 'DUPLICATE_OPTION' | 'UNEXPECTED_ARGUMENT' | 'REMOTE_PATH' | 'RULE_PACK_INVALID' | 'SEMANTIC_CATALOGUE_INVALID' | 'PROFILE_NOT_ADMITTED';\nexport type CliParseErrorV2 = Readonly<{ code: CliParseErrorCodeV2; message: string; argument?: string }>;\n\ntype ScanCommandV2 = Readonly<{\n  kind: 'scan'; schema: 'v2'; inputs: readonly string[]; format: CliFormatV2; profile: CliProfileV2; failOn: ScanSeverityV2;\n  requireComplete: boolean; concurrency: number; timeoutMs?: number; output?: string; configPath?: string;\n  rules: 'builtin'; catalogue: 'builtin'; limits: string; target?: string; n8nVersion?: string;\n  edition: 'COMMUNITY' | 'ENTERPRISE' | 'CLOUD' | 'UNKNOWN'; deployment: 'SELF_HOSTED' | 'CLOUD' | 'UNKNOWN';\n  role: 'OWNER' | 'ADMIN' | 'MEMBER' | 'UNKNOWN'; taskRunner: 'LEGACY' | 'NATIVE' | 'UNKNOWN';\n  communityPackages: readonly string[]; configuration: readonly string[]; include: readonly string[]; exclude: readonly string[];\n  allowUnsignedDevelopmentRules: boolean; noColor: boolean; cliOverrides: Readonly<Partial<ScanConfigV2>>;\n}>;\nexport type CliHelpCommandV2 = Readonly<{ kind: 'help'; schema: 'v2'; command?: V2CommandName }>;\nexport type CliCommandV2 = ScanCommandV2\n  | Readonly<{ kind: 'rules'; schema: 'v2'; format: 'json' | 'table' }>\n  | Readonly<{ kind: 'explain'; schema: 'v2'; format: 'json' | 'table'; ruleId: string }>\n  | Readonly<{ kind: 'profiles'; schema: 'v2'; format: 'json' | 'table' }>\n  | Readonly<{ kind: 'validate-config'; schema: 'v2'; format: 'json' | 'table'; path: string }>\n  | Readonly<{ kind: 'version'; schema: 'v2'; format: 'json' | 'table' }>;\ntype ParsedCommandV2 = CliCommandV2 | CliHelpCommandV2;\nexport type CliParseResultV2 = Readonly<{ ok: true; command: ParsedCommandV2 } | { ok: false; error: CliParseErrorV2 }>;\nexport type CliArgumentDispatch = Readonly<{ mode: 'v1'; argv: readonly string[] } | { mode: 'v2'; result: CliParseResultV2 }>;\n\nconst severities: readonly ScanSeverityV2[] = ['CRITICAL', 'HIGH', 'MEDIUM', 'LOW', 'INFO'];\nconst commands: Record<string, true> = Object.freeze({ scan: true, rules: true, explain: true, profiles: true, 'validate-config': true, version: true, '--version': true });\nconst implicitV2Commands: Record<string, true> = Object.freeze({ rules: true, explain: true, profiles: true, 'validate-config': true, version: true });\nconst scalarOptions: Record<string, true> = Object.freeze({ '--format': true, '--profile': true, '--fail-on': true, '--max-concurrency': true, '--concurrency': true, '--timeout': true, '--output': true, '--config': true, '--rules': true, '--catalogue': true, '--limits': true, '--target': true, '--n8n-version': true, '--edition': true, '--deployment': true, '--role': true, '--task-runner': true });\nconst repeatableOptions: Record<string, true> = Object.freeze({ '--community-package': true, '--configuration': true, '--include': true, '--exclude': true });\nconst configFields: Record<string, keyof ScanConfigV2> = Object.freeze({ '--format': 'format', '--profile': 'profile', '--fail-on': 'failOn', '--max-concurrency': 'concurrency', '--concurrency': 'concurrency', '--output': 'output', '--config': 'configPath', '--rules': 'rules', '--catalogue': 'catalogue', '--limits': 'limits', '--target': 'target', '--include': 'include', '--exclude': 'exclude', 'inputs': 'inputs', '--require-complete': 'requireComplete', '--allow-unsigned-development-rules': 'allowUnsignedDevelopmentRules', '--no-color': 'noColor' });\nconst overrideOrder: readonly (keyof ScanConfigV2)[] = ['format', 'profile', 'output', 'inputs', 'configPath', 'failOn', 'requireComplete', 'concurrency', 'rules', 'catalogue', 'limits', 'target', 'include', 'exclude', 'allowUnsignedDevelopmentRules', 'noColor'];\n\nexport function parseArgumentsV2(argv: readonly string[]): CliParseResultV2 {\n  const stripped = stripSchema(argv); if (!stripped.ok) return stripped.result;\n  const args = stripped.args; const raw = args[0];\n  if (!raw) return failure('NO_COMMAND', 'A v2 command is required.');\n  if (raw === '--help') return success({ kind: 'help', schema: 'v2' });\n  if (commands[raw] !== true) return failure('UNKNOWN_COMMAND', 'Unknown v2 command.');\n  const kind = raw === '--version' ? 'version' : raw;\n  if (kind !== 'scan') return parseMetadata(kind as Exclude<CliCommandV2['kind'], 'scan' | 'help'>, args.slice(1));\n  if (args.length === 2 && args[1] === '--help') return success({ kind: 'help', schema: 'v2', command: 'scan' });\n  const value: Record<string, unknown> = {\n    kind: 'scan', schema: 'v2', inputs: [], format: 'json', profile: 'beta-default', failOn: 'INFO', requireComplete: false,\n    concurrency: 1, rules: 'builtin', catalogue: 'builtin', limits: 'builtin', edition: 'UNKNOWN', deployment: 'UNKNOWN',\n    role: 'UNKNOWN', taskRunner: 'UNKNOWN', communityPackages: [], configuration: [], include: ['**/*.json'],\n    exclude: ['.git/**', 'node_modules/**'], allowUnsignedDevelopmentRules: false, noColor: false,\n  };\n  const overrides: Record<string, unknown> = {}; const inputs: string[] = []; const repeatable: Record<string, string[]> = { '--community-package': [], '--configuration': [], '--include': [], '--exclude': [] }; const seen = new Set<string>();\n  for (let index = 1; index < args.length; index += 1) {\n    const token = args[index]!;\n    if (token === '--') { inputs.push(...args.slice(index + 1)); break; }\n    if (token === '-' || !token.startsWith('-')) { if (!local(token)) return failure('REMOTE_PATH', 'Input path is not admitted.'); inputs.push(token); continue; }\n    const [name, inline] = splitOption(token);\n    if (name === '--require-complete' || name === '--allow-unsigned-development-rules' || name === '--no-color') {\n      if (inline !== undefined || seen.has(name)) return failure('DUPLICATE_OPTION', 'Option supplied more than once.', name);\n      seen.add(name); value[name === '--require-complete' ? 'requireComplete' : name === '--no-color' ? 'noColor' : 'allowUnsignedDevelopmentRules'] = true; overrides[configFields[name]!] = true; continue;\n    }\n    if (scalarOptions[name] !== true && repeatableOptions[name] !== true) return failure('UNKNOWN_OPTION', 'Unknown option.', name);\n    const duplicateKey = name === '--max-concurrency' ? '--concurrency' : name;\n    if (seen.has(duplicateKey) && scalarOptions[name] === true) return failure('DUPLICATE_OPTION', 'Option supplied more than once.', name);\n    const read = inline === undefined ? args[index + 1] : inline;\n    if (read === undefined || read.length === 0 || (inline === undefined && read.startsWith('-') && !(name === '--output' && read === '-'))) return failure('MISSING_VALUE', 'Option requires a value.', name);\n    if (inline === undefined) index += 1;\n    if (repeatableOptions[name] === true) { if (!local(read)) return failure('REMOTE_PATH', 'Option value is not admitted.', name); repeatable[name]!.push(read); if (configFields[name]) overrides[configFields[name]!] = Object.freeze([...repeatable[name]!]); continue; }\n    if (name === '--format' && !['json', 'ndjson', 'sarif', 'table'].includes(read)) return failure('INVALID_VALUE', 'Format is invalid.', name);\n    if (name === '--profile' && !isAdmittedProfileSpecifierV2(read)) return failure('PROFILE_NOT_ADMITTED', 'Profile is not admitted.', name);\n    if (name === '--fail-on' && !severities.includes(read as ScanSeverityV2)) return failure('INVALID_VALUE', 'Fail threshold is invalid.', name);\n    if ((name === '--max-concurrency' || name === '--concurrency' || name === '--timeout') && !positiveInteger(read, name === '--timeout' ? 2 ** 31 - 1 : 16)) return failure('INVALID_VALUE', 'Numeric option is invalid.', name);\n    if (name === '--n8n-version' && !/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/.test(read)) return failure('INVALID_VALUE', 'n8n version is invalid.', name);\n    if (name === '--edition' && !['COMMUNITY', 'ENTERPRISE', 'CLOUD', 'UNKNOWN'].includes(read)) return failure('INVALID_VALUE', 'Edition is invalid.', name);\n    if (name === '--deployment' && !['SELF_HOSTED', 'CLOUD', 'UNKNOWN'].includes(read)) return failure('INVALID_VALUE', 'Deployment is invalid.', name);\n    if (name === '--role' && !['OWNER', 'ADMIN', 'MEMBER', 'UNKNOWN'].includes(read)) return failure('INVALID_VALUE', 'Role is invalid.', name);\n    if (name === '--task-runner' && !['LEGACY', 'NATIVE', 'UNKNOWN'].includes(read)) return failure('INVALID_VALUE', 'Task runner is invalid.', name);\n    if (name === '--rules' || name === '--catalogue') { if (read !== 'builtin') return failure(name === '--rules' ? 'RULE_PACK_INVALID' : 'SEMANTIC_CATALOGUE_INVALID', 'Only built-in authority is available.', name); }\n    else if (['--limits', '--target', '--config'].includes(name) && (read === '-' || !local(read))) return failure('REMOTE_PATH', 'Option value is not admitted.', name);\n    else if (name === '--output' && read !== '-' && !local(read)) return failure('REMOTE_PATH', 'Option value is not admitted.', name);\n    else if (['--n8n-version', '--edition', '--deployment', '--role', '--task-runner'].includes(name) && !safeText(read)) return failure('INVALID_VALUE', 'Option value is not admitted.', name);\n    seen.add(duplicateKey); assign(value, name, read); if (configFields[name]) overrides[configFields[name]!] = ['--max-concurrency', '--concurrency'].includes(name) ? Number(read) : read;\n  }\n  // No external rule pack is admittable: `--rules`/`--catalogue` accept only the built-in authority,\n  // so the unsigned development escape hatch has nothing it could admit. It is refused as a usage\n  // error instead of being left to imply that a local pack would be loaded.\n  if (value.allowUnsignedDevelopmentRules === true) return failure('RULE_PACK_INVALID', 'External rule packs are not admitted in this release.', '--allow-unsigned-development-rules');\n  if (inputs.length === 0) return failure('UNEXPECTED_ARGUMENT', 'At least one workflow input is required.');\n  if (inputs.some((input) => !local(input))) return failure('REMOTE_PATH', 'Input path is not admitted.');\n  if (inputs.includes('-') && inputs.length > 1) return failure('UNEXPECTED_ARGUMENT', 'Standard input cannot be combined with file inputs.');\n  overrides.inputs = Object.freeze([...inputs]);\n  const cliOverrides: Partial<ScanConfigV2> = {}; const sparse = cliOverrides as Record<string, unknown>; for (const field of overrideOrder) if (Object.prototype.hasOwnProperty.call(overrides, field)) sparse[field] = overrides[field];\n  const command: ScanCommandV2 = {\n    kind: 'scan', schema: 'v2', inputs: Object.freeze([...inputs]), format: value.format as CliFormatV2, profile: value.profile as CliProfileV2, failOn: value.failOn as ScanSeverityV2, requireComplete: value.requireComplete as boolean, concurrency: value.concurrency as number,\n    ...(typeof value.timeoutMs === 'number' ? { timeoutMs: value.timeoutMs } : {}), ...(typeof value.output === 'string' ? { output: value.output } : {}), ...(typeof value.configPath === 'string' ? { configPath: value.configPath } : {}), rules: value.rules as 'builtin', catalogue: value.catalogue as 'builtin', limits: value.limits as string,\n    ...(typeof value.target === 'string' ? { target: value.target } : {}), ...(typeof value.n8nVersion === 'string' ? { n8nVersion: value.n8nVersion } : {}), edition: value.edition as ScanCommandV2['edition'], deployment: value.deployment as ScanCommandV2['deployment'], role: value.role as ScanCommandV2['role'], taskRunner: value.taskRunner as ScanCommandV2['taskRunner'], communityPackages: arrayFor(repeatable['--community-package']), configuration: arrayFor(repeatable['--configuration']), include: repeatable['--include']!.length > 0 ? arrayFor(repeatable['--include']) : Object.freeze(['**/*.json']), exclude: repeatable['--exclude']!.length > 0 ? arrayFor(repeatable['--exclude']) : Object.freeze(['.git/**', 'node_modules/**']), allowUnsignedDevelopmentRules: value.allowUnsignedDevelopmentRules as boolean, noColor: value.noColor as boolean, cliOverrides,\n  };\n  return success(command);\n}\n\nfunction arrayFor(values: readonly string[] | undefined): readonly string[] { return Object.freeze([...(values ?? [])]); }\nexport function parseCliArguments(argv: readonly string[]): CliArgumentDispatch { const hasSchema = hasSchemaMarker(argv); const implicit = argv[0] !== undefined && implicitV2Commands[argv[0]!] === true; return hasSchema || implicit ? freeze({ mode: 'v2', result: parseArgumentsV2(argv) }) : freeze({ mode: 'v1', argv: Object.freeze([...argv]) }); }\nfunction parseMetadata(kind: Exclude<CliCommandV2['kind'], 'scan' | 'help'>, args: readonly string[]): CliParseResultV2 {\n  if (args.length === 1 && args[0] === '--help') return success({ kind: 'help', schema: 'v2', command: kind });\n  let format: 'json' | 'table' = 'json';\n  const rest: string[] = [];\n  let seen = false;\n  for (let index = 0; index < args.length; index += 1) {\n    const token = args[index]!;\n    if (token.startsWith('-')) {\n      const [name, inline] = splitOption(token);\n      if (name !== '--format' || seen) return failure(seen ? 'DUPLICATE_OPTION' : 'UNKNOWN_OPTION', seen ? 'Option supplied more than once.' : 'Unknown option.', name);\n      const value = inline ?? args[++index];\n      if (!value) return failure('MISSING_VALUE', 'Option requires a value.', name);\n      if (value !== 'json' && value !== 'table') return failure('INVALID_VALUE', 'Format is invalid.', name);\n      format = value;\n      seen = true;\n    } else rest.push(token);\n  }\n  if (kind === 'rules' || kind === 'profiles' || kind === 'version') {\n    if (rest.length > 0) return failure('UNEXPECTED_ARGUMENT', 'Command does not accept positional arguments.');\n    return success({ kind, schema: 'v2', format });\n  }\n  if (kind === 'explain') return rest.length === 1 && safeText(rest[0]!) ? success({ kind, schema: 'v2', format, ruleId: rest[0]! }) : failure('UNEXPECTED_ARGUMENT', 'explain requires one rule ID.');\n  if (rest.length !== 1 || !local(rest[0]!)) return failure('UNEXPECTED_ARGUMENT', 'validate-config requires one local file.');\n  return success({ kind, schema: 'v2', format, path: rest[0]! });\n}\nfunction assign(value: Record<string, unknown>, name: string, read: string): void { const fields: Record<string, string> = { '--format': 'format', '--profile': 'profile', '--fail-on': 'failOn', '--max-concurrency': 'concurrency', '--concurrency': 'concurrency', '--timeout': 'timeoutMs', '--output': 'output', '--config': 'configPath', '--rules': 'rules', '--catalogue': 'catalogue', '--limits': 'limits', '--target': 'target', '--n8n-version': 'n8nVersion', '--edition': 'edition', '--deployment': 'deployment', '--role': 'role', '--task-runner': 'taskRunner' }; value[fields[name]!] = ['--max-concurrency', '--concurrency', '--timeout'].includes(name) ? Number(read) : read; }\nfunction splitOption(token: string): [string, string | undefined] { const at = token.indexOf('='); return at < 0 ? [token, undefined] : [token.slice(0, at), token.slice(at + 1)]; }\nfunction positiveInteger(value: string, maximum: number): boolean { if (!/^\\d+$/.test(value)) return false; const number = Number(value); return Number.isSafeInteger(number) && number > 0 && number <= maximum; }\nfunction safeText(value: string): boolean { return value.length > 0 && value.length <= 4096 && !/[\\u0000-\\u001f\\u007f]/.test(value) && !/^(?:[a-z][a-z\\d+.-]*:|\\/|[a-z]:|\\\\\\\\)/i.test(value); }\nfunction local(value: string): boolean { return safeText(value) && !/^(?:[a-z][a-z\\d+.-]*:|\\/|[a-z]:|\\\\\\\\)/i.test(value); }\nfunction hasSchemaMarker(argv: readonly string[]): boolean { for (const token of argv) { if (token === '--') break; if (token === '--schema' || token.startsWith('--schema=')) return true; } return false; }\nfunction stripSchema(argv: readonly string[]): { ok: true; args: readonly string[] } | { ok: false; result: CliParseResultV2 } { const args: string[] = []; let seen = false; for (let index = 0; index < argv.length; index += 1) { const token = argv[index]!; if (token === '--') { args.push(...argv.slice(index)); break; } if (token === '--schema') { if (seen || argv[index + 1] !== 'v2') return { ok: false, result: failure(seen ? 'DUPLICATE_OPTION' : 'INVALID_VALUE', seen ? 'Option supplied more than once.' : 'Schema must be v2.', '--schema') }; seen = true; index += 1; continue; } if (token.startsWith('--schema=')) { if (seen || token.slice(9) !== 'v2') return { ok: false, result: failure(seen ? 'DUPLICATE_OPTION' : 'INVALID_VALUE', seen ? 'Option supplied more than once.' : 'Schema must be v2.', '--schema') }; seen = true; continue; } args.push(token); } return { ok: true, args }; }\nfunction success(command: ParsedCommandV2): CliParseResultV2 { return freeze({ ok: true as const, command }); }\nfunction failure(code: CliParseErrorCodeV2, message: string, argument?: string): CliParseResultV2 { const safe = argument !== undefined && /^--[A-Za-z0-9][A-Za-z0-9-]{0,63}$/.test(argument) ? argument : undefined; return freeze({ ok: false as const, error: { code, message, ...(safe === undefined ? {} : { argument: safe }) } }); }\nfunction freeze<T>(value: T, seen = new WeakSet<object>()): T { if (value && typeof value === 'object') { if (seen.has(value as object)) return value; seen.add(value as object); for (const name of Object.getOwnPropertyNames(value as object)) freeze((value as Record<string, unknown>)[name], seen); Object.freeze(value); } return value; }\n"],
+  "mappings": ";AAAO,IAAM,wBAAwB;AAwB9B,IAAM,sBAAsB,OAAO,OAAO,EAAE,IAAI,gBAAgB,SAAS,SAAS,QAAQ,mEAAmE,CAAC;AAQ9J,IAAM,iCAAoD,OAAO,OAAO;AAAA,EAC7E,oBAAoB;AAAA,EACpB,GAAG,oBAAoB,EAAE,IAAI,oBAAoB,OAAO;AAC1D,CAAC;AAEM,SAAS,6BAA6B,OAAiC;AAC5E,SAAO,OAAO,UAAU,YAAY,+BAA+B,SAAS,KAAK;AACnF;AACO,IAAM,yBAAyB,OAAO,OAAO;AAAA,EAClD,SAAS;AAAA,EACT,OAAO,OAAO,OAAO,EAAE,IAAI,yBAAyB,SAAS,SAAS,QAAQ,oEAAoE,iBAAiB,WAAoB,CAAC;AAAA,EACxL,WAAW,OAAO,OAAO,EAAE,IAAI,yBAAyB,SAAS,SAAS,QAAQ,mEAAmE,CAAC;AAAA,EACtJ,QAAQ,OAAO,OAAO,EAAE,eAAe,qBAA8B,QAAQ,mEAAmE,CAAC;AACnJ,CAAC;AACM,IAAM,6BAA6B,oBAAoB;AACvD,IAAM,+BAA+B,uBAAuB;AAC5D,IAAM,iCAAiC,uBAAuB;AAC9D,IAAM,8BAA8B,uBAAuB;AAC3D,IAAM,sBAAsB,6BAA6B;AACzD,IAAM,+BAA+B,+BAA+B;AAEpE,IAAM,yBAAuC,OAAO,OAAO;AAAA,EAChE,eAAe;AAAA,EACf,QAAQ;AAAA,EAAQ,SAAS,oBAAoB;AAAA,EAAI,QAAQ;AAAA,EAAQ,iBAAiB;AAAA,EAAO,aAAa;AAAA,EACtG,OAAO;AAAA,EAAW,WAAW;AAAA,EAAW,QAAQ;AAAA,EAChD,SAAS,OAAO,OAAO,CAAC,WAAW,CAAC;AAAA,EAAG,SAAS,OAAO,OAAO,CAAC,WAAW,iBAAiB,CAAC;AAAA,EAC5F,+BAA+B;AAAA,EAAO,SAAS;AACjD,CAAC;AAEM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD;AAAA,EAAiB;AAAA,EAAU;AAAA,EAAW;AAAA,EAAU;AAAA,EAAU;AAAA,EAAc;AAAA,EAAU;AAAA,EAAmB;AAAA,EACrG;AAAA,EAAS;AAAA,EAAa;AAAA,EAAU;AAAA,EAAU;AAAA,EAAW;AAAA,EAAW;AAAA,EAAiC;AACnG,CAAU;;;ACnCV,IAAM,aAAwC,CAAC,YAAY,QAAQ,UAAU,OAAO,MAAM;AAC1F,IAAM,WAAiC,OAAO,OAAO,EAAE,MAAM,MAAM,OAAO,MAAM,SAAS,MAAM,UAAU,MAAM,mBAAmB,MAAM,SAAS,MAAM,aAAa,KAAK,CAAC;AAC1K,IAAM,qBAA2C,OAAO,OAAO,EAAE,OAAO,MAAM,SAAS,MAAM,UAAU,MAAM,mBAAmB,MAAM,SAAS,KAAK,CAAC;AACrJ,IAAM,gBAAsC,OAAO,OAAO,EAAE,YAAY,MAAM,aAAa,MAAM,aAAa,MAAM,qBAAqB,MAAM,iBAAiB,MAAM,aAAa,MAAM,YAAY,MAAM,YAAY,MAAM,WAAW,MAAM,eAAe,MAAM,YAAY,MAAM,YAAY,MAAM,iBAAiB,MAAM,aAAa,MAAM,gBAAgB,MAAM,UAAU,MAAM,iBAAiB,KAAK,CAAC;AAC9Y,IAAM,oBAA0C,OAAO,OAAO,EAAE,uBAAuB,MAAM,mBAAmB,MAAM,aAAa,MAAM,aAAa,KAAK,CAAC;AAC5J,IAAM,eAAmD,OAAO,OAAO,EAAE,YAAY,UAAU,aAAa,WAAW,aAAa,UAAU,qBAAqB,eAAe,iBAAiB,eAAe,YAAY,UAAU,YAAY,cAAc,WAAW,SAAS,eAAe,aAAa,YAAY,UAAU,YAAY,UAAU,aAAa,WAAW,aAAa,WAAW,UAAU,UAAU,sBAAsB,mBAAmB,sCAAsC,iCAAiC,cAAc,UAAU,CAAC;AAC3iB,IAAM,gBAAiD,CAAC,UAAU,WAAW,UAAU,UAAU,cAAc,UAAU,mBAAmB,eAAe,SAAS,aAAa,UAAU,UAAU,WAAW,WAAW,iCAAiC,SAAS;AAE9P,SAAS,iBAAiB,MAA2C;AAC1E,QAAM,WAAW,YAAY,IAAI;AAAG,MAAI,CAAC,SAAS,GAAI,QAAO,SAAS;AACtE,QAAM,OAAO,SAAS;AAAM,QAAM,MAAM,KAAK,CAAC;AAC9C,MAAI,CAAC,IAAK,QAAO,QAAQ,cAAc,2BAA2B;AAClE,MAAI,QAAQ,SAAU,QAAO,QAAQ,EAAE,MAAM,QAAQ,QAAQ,KAAK,CAAC;AACnE,MAAI,SAAS,GAAG,MAAM,KAAM,QAAO,QAAQ,mBAAmB,qBAAqB;AACnF,QAAM,OAAO,QAAQ,cAAc,YAAY;AAC/C,MAAI,SAAS,OAAQ,QAAO,cAAc,MAAwD,KAAK,MAAM,CAAC,CAAC;AAC/G,MAAI,KAAK,WAAW,KAAK,KAAK,CAAC,MAAM,SAAU,QAAO,QAAQ,EAAE,MAAM,QAAQ,QAAQ,MAAM,SAAS,OAAO,CAAC;AAC7G,QAAM,QAAiC;AAAA,IACrC,MAAM;AAAA,IAAQ,QAAQ;AAAA,IAAM,QAAQ,CAAC;AAAA,IAAG,QAAQ;AAAA,IAAQ,SAAS;AAAA,IAAgB,QAAQ;AAAA,IAAQ,iBAAiB;AAAA,IAClH,aAAa;AAAA,IAAG,OAAO;AAAA,IAAW,WAAW;AAAA,IAAW,QAAQ;AAAA,IAAW,SAAS;AAAA,IAAW,YAAY;AAAA,IAC3G,MAAM;AAAA,IAAW,YAAY;AAAA,IAAW,mBAAmB,CAAC;AAAA,IAAG,eAAe,CAAC;AAAA,IAAG,SAAS,CAAC,WAAW;AAAA,IACvG,SAAS,CAAC,WAAW,iBAAiB;AAAA,IAAG,+BAA+B;AAAA,IAAO,SAAS;AAAA,EAC1F;AACA,QAAM,YAAqC,CAAC;AAAG,QAAM,SAAmB,CAAC;AAAG,QAAM,aAAuC,EAAE,uBAAuB,CAAC,GAAG,mBAAmB,CAAC,GAAG,aAAa,CAAC,GAAG,aAAa,CAAC,EAAE;AAAG,QAAM,OAAO,oBAAI,IAAY;AAC9O,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,QAAQ,KAAK,KAAK;AACxB,QAAI,UAAU,MAAM;AAAE,aAAO,KAAK,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAG;AAAA,IAAO;AACpE,QAAI,UAAU,OAAO,CAAC,MAAM,WAAW,GAAG,GAAG;AAAE,UAAI,CAAC,MAAM,KAAK,EAAG,QAAO,QAAQ,eAAe,6BAA6B;AAAG,aAAO,KAAK,KAAK;AAAG;AAAA,IAAU;AAC9J,UAAM,CAAC,MAAM,MAAM,IAAI,YAAY,KAAK;AACxC,QAAI,SAAS,wBAAwB,SAAS,wCAAwC,SAAS,cAAc;AAC3G,UAAI,WAAW,UAAa,KAAK,IAAI,IAAI,EAAG,QAAO,QAAQ,oBAAoB,mCAAmC,IAAI;AACtH,WAAK,IAAI,IAAI;AAAG,YAAM,SAAS,uBAAuB,oBAAoB,SAAS,eAAe,YAAY,+BAA+B,IAAI;AAAM,gBAAU,aAAa,IAAI,CAAE,IAAI;AAAM;AAAA,IAChM;AACA,QAAI,cAAc,IAAI,MAAM,QAAQ,kBAAkB,IAAI,MAAM,KAAM,QAAO,QAAQ,kBAAkB,mBAAmB,IAAI;AAC9H,UAAM,eAAe,SAAS,sBAAsB,kBAAkB;AACtE,QAAI,KAAK,IAAI,YAAY,KAAK,cAAc,IAAI,MAAM,KAAM,QAAO,QAAQ,oBAAoB,mCAAmC,IAAI;AACtI,UAAM,OAAO,WAAW,SAAY,KAAK,QAAQ,CAAC,IAAI;AACtD,QAAI,SAAS,UAAa,KAAK,WAAW,KAAM,WAAW,UAAa,KAAK,WAAW,GAAG,KAAK,EAAE,SAAS,cAAc,SAAS,KAAO,QAAO,QAAQ,iBAAiB,4BAA4B,IAAI;AACzM,QAAI,WAAW,OAAW,UAAS;AACnC,QAAI,kBAAkB,IAAI,MAAM,MAAM;AAAE,UAAI,CAAC,MAAM,IAAI,EAAG,QAAO,QAAQ,eAAe,iCAAiC,IAAI;AAAG,iBAAW,IAAI,EAAG,KAAK,IAAI;AAAG,UAAI,aAAa,IAAI,EAAG,WAAU,aAAa,IAAI,CAAE,IAAI,OAAO,OAAO,CAAC,GAAG,WAAW,IAAI,CAAE,CAAC;AAAG;AAAA,IAAU;AACxQ,QAAI,SAAS,cAAc,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,EAAE,SAAS,IAAI,EAAG,QAAO,QAAQ,iBAAiB,sBAAsB,IAAI;AAC3I,QAAI,SAAS,eAAe,CAAC,6BAA6B,IAAI,EAAG,QAAO,QAAQ,wBAAwB,4BAA4B,IAAI;AACxI,QAAI,SAAS,eAAe,CAAC,WAAW,SAAS,IAAsB,EAAG,QAAO,QAAQ,iBAAiB,8BAA8B,IAAI;AAC5I,SAAK,SAAS,uBAAuB,SAAS,mBAAmB,SAAS,gBAAgB,CAAC,gBAAgB,MAAM,SAAS,cAAc,KAAK,KAAK,IAAI,EAAE,EAAG,QAAO,QAAQ,iBAAiB,8BAA8B,IAAI;AAC7N,QAAI,SAAS,mBAAmB,CAAC,2DAA2D,KAAK,IAAI,EAAG,QAAO,QAAQ,iBAAiB,2BAA2B,IAAI;AACvK,QAAI,SAAS,eAAe,CAAC,CAAC,aAAa,cAAc,SAAS,SAAS,EAAE,SAAS,IAAI,EAAG,QAAO,QAAQ,iBAAiB,uBAAuB,IAAI;AACxJ,QAAI,SAAS,kBAAkB,CAAC,CAAC,eAAe,SAAS,SAAS,EAAE,SAAS,IAAI,EAAG,QAAO,QAAQ,iBAAiB,0BAA0B,IAAI;AAClJ,QAAI,SAAS,YAAY,CAAC,CAAC,SAAS,SAAS,UAAU,SAAS,EAAE,SAAS,IAAI,EAAG,QAAO,QAAQ,iBAAiB,oBAAoB,IAAI;AAC1I,QAAI,SAAS,mBAAmB,CAAC,CAAC,UAAU,UAAU,SAAS,EAAE,SAAS,IAAI,EAAG,QAAO,QAAQ,iBAAiB,2BAA2B,IAAI;AAChJ,QAAI,SAAS,aAAa,SAAS,eAAe;AAAE,UAAI,SAAS,UAAW,QAAO,QAAQ,SAAS,YAAY,sBAAsB,8BAA8B,yCAAyC,IAAI;AAAA,IAAG,WAC3M,CAAC,YAAY,YAAY,UAAU,EAAE,SAAS,IAAI,MAAM,SAAS,OAAO,CAAC,MAAM,IAAI,GAAI,QAAO,QAAQ,eAAe,iCAAiC,IAAI;AAAA,aAC1J,SAAS,cAAc,SAAS,OAAO,CAAC,MAAM,IAAI,EAAG,QAAO,QAAQ,eAAe,iCAAiC,IAAI;AAAA,aACxH,CAAC,iBAAiB,aAAa,gBAAgB,UAAU,eAAe,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,EAAG,QAAO,QAAQ,iBAAiB,iCAAiC,IAAI;AAC3L,SAAK,IAAI,YAAY;AAAG,WAAO,OAAO,MAAM,IAAI;AAAG,QAAI,aAAa,IAAI,EAAG,WAAU,aAAa,IAAI,CAAE,IAAI,CAAC,qBAAqB,eAAe,EAAE,SAAS,IAAI,IAAI,OAAO,IAAI,IAAI;AAAA,EACrL;AAIA,MAAI,MAAM,kCAAkC,KAAM,QAAO,QAAQ,qBAAqB,yDAAyD,oCAAoC;AACnL,MAAI,OAAO,WAAW,EAAG,QAAO,QAAQ,uBAAuB,0CAA0C;AACzG,MAAI,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAG,QAAO,QAAQ,eAAe,6BAA6B;AACtG,MAAI,OAAO,SAAS,GAAG,KAAK,OAAO,SAAS,EAAG,QAAO,QAAQ,uBAAuB,qDAAqD;AAC1I,YAAU,SAAS,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC;AAC5C,QAAM,eAAsC,CAAC;AAAG,QAAM,SAAS;AAAyC,aAAW,SAAS,cAAe,KAAI,OAAO,UAAU,eAAe,KAAK,WAAW,KAAK,EAAG,QAAO,KAAK,IAAI,UAAU,KAAK;AACtO,QAAM,UAAyB;AAAA,IAC7B,MAAM;AAAA,IAAQ,QAAQ;AAAA,IAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,MAAM,CAAC;AAAA,IAAG,QAAQ,MAAM;AAAA,IAAuB,SAAS,MAAM;AAAA,IAAyB,QAAQ,MAAM;AAAA,IAA0B,iBAAiB,MAAM;AAAA,IAA4B,aAAa,MAAM;AAAA,IAC3P,GAAI,OAAO,MAAM,cAAc,WAAW,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IAAI,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IAAI,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IAAI,OAAO,MAAM;AAAA,IAAoB,WAAW,MAAM;AAAA,IAAwB,QAAQ,MAAM;AAAA,IAClU,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IAAI,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IAAI,SAAS,MAAM;AAAA,IAAqC,YAAY,MAAM;AAAA,IAA2C,MAAM,MAAM;AAAA,IAA+B,YAAY,MAAM;AAAA,IAA2C,mBAAmB,SAAS,WAAW,qBAAqB,CAAC;AAAA,IAAG,eAAe,SAAS,WAAW,iBAAiB,CAAC;AAAA,IAAG,SAAS,WAAW,WAAW,EAAG,SAAS,IAAI,SAAS,WAAW,WAAW,CAAC,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC;AAAA,IAAG,SAAS,WAAW,WAAW,EAAG,SAAS,IAAI,SAAS,WAAW,WAAW,CAAC,IAAI,OAAO,OAAO,CAAC,WAAW,iBAAiB,CAAC;AAAA,IAAG,+BAA+B,MAAM;AAAA,IAA0C,SAAS,MAAM;AAAA,IAAoB;AAAA,EACl1B;AACA,SAAO,QAAQ,OAAO;AACxB;AAEA,SAAS,SAAS,QAA0D;AAAE,SAAO,OAAO,OAAO,CAAC,GAAI,UAAU,CAAC,CAAE,CAAC;AAAG;AAClH,SAAS,kBAAkB,MAA8C;AAAE,QAAM,YAAY,gBAAgB,IAAI;AAAG,QAAM,WAAW,KAAK,CAAC,MAAM,UAAa,mBAAmB,KAAK,CAAC,CAAE,MAAM;AAAM,SAAO,aAAa,WAAW,OAAO,EAAE,MAAM,MAAM,QAAQ,iBAAiB,IAAI,EAAE,CAAC,IAAI,OAAO,EAAE,MAAM,MAAM,MAAM,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AAAG;AAC5V,SAAS,cAAc,MAAsD,MAA2C;AACtH,MAAI,KAAK,WAAW,KAAK,KAAK,CAAC,MAAM,SAAU,QAAO,QAAQ,EAAE,MAAM,QAAQ,QAAQ,MAAM,SAAS,KAAK,CAAC;AAC3G,MAAI,SAA2B;AAC/B,QAAM,OAAiB,CAAC;AACxB,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,QAAQ,KAAK,KAAK;AACxB,QAAI,MAAM,WAAW,GAAG,GAAG;AACzB,YAAM,CAAC,MAAM,MAAM,IAAI,YAAY,KAAK;AACxC,UAAI,SAAS,cAAc,KAAM,QAAO,QAAQ,OAAO,qBAAqB,kBAAkB,OAAO,oCAAoC,mBAAmB,IAAI;AAChK,YAAM,QAAQ,UAAU,KAAK,EAAE,KAAK;AACpC,UAAI,CAAC,MAAO,QAAO,QAAQ,iBAAiB,4BAA4B,IAAI;AAC5E,UAAI,UAAU,UAAU,UAAU,QAAS,QAAO,QAAQ,iBAAiB,sBAAsB,IAAI;AACrG,eAAS;AACT,aAAO;AAAA,IACT,MAAO,MAAK,KAAK,KAAK;AAAA,EACxB;AACA,MAAI,SAAS,WAAW,SAAS,cAAc,SAAS,WAAW;AACjE,QAAI,KAAK,SAAS,EAAG,QAAO,QAAQ,uBAAuB,+CAA+C;AAC1G,WAAO,QAAQ,EAAE,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,EAC/C;AACA,MAAI,SAAS,UAAW,QAAO,KAAK,WAAW,KAAK,SAAS,KAAK,CAAC,CAAE,IAAI,QAAQ,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,KAAK,CAAC,EAAG,CAAC,IAAI,QAAQ,uBAAuB,+BAA+B;AACnM,MAAI,KAAK,WAAW,KAAK,CAAC,MAAM,KAAK,CAAC,CAAE,EAAG,QAAO,QAAQ,uBAAuB,0CAA0C;AAC3H,SAAO,QAAQ,EAAE,MAAM,QAAQ,MAAM,QAAQ,MAAM,KAAK,CAAC,EAAG,CAAC;AAC/D;AACA,SAAS,OAAO,OAAgC,MAAc,MAAoB;AAAE,QAAM,SAAiC,EAAE,YAAY,UAAU,aAAa,WAAW,aAAa,UAAU,qBAAqB,eAAe,iBAAiB,eAAe,aAAa,aAAa,YAAY,UAAU,YAAY,cAAc,WAAW,SAAS,eAAe,aAAa,YAAY,UAAU,YAAY,UAAU,iBAAiB,cAAc,aAAa,WAAW,gBAAgB,cAAc,UAAU,QAAQ,iBAAiB,aAAa;AAAG,QAAM,OAAO,IAAI,CAAE,IAAI,CAAC,qBAAqB,iBAAiB,WAAW,EAAE,SAAS,IAAI,IAAI,OAAO,IAAI,IAAI;AAAM;AACrqB,SAAS,YAAY,OAA6C;AAAE,QAAM,KAAK,MAAM,QAAQ,GAAG;AAAG,SAAO,KAAK,IAAI,CAAC,OAAO,MAAS,IAAI,CAAC,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,MAAM,KAAK,CAAC,CAAC;AAAG;AACnL,SAAS,gBAAgB,OAAe,SAA0B;AAAE,MAAI,CAAC,QAAQ,KAAK,KAAK,EAAG,QAAO;AAAO,QAAM,SAAS,OAAO,KAAK;AAAG,SAAO,OAAO,cAAc,MAAM,KAAK,SAAS,KAAK,UAAU;AAAS;AAClN,SAAS,SAAS,OAAwB;AAAE,SAAO,MAAM,SAAS,KAAK,MAAM,UAAU,QAAQ,CAAC,wBAAwB,KAAK,KAAK,KAAK,CAAC,yCAAyC,KAAK,KAAK;AAAG;AAC9L,SAAS,MAAM,OAAwB;AAAE,SAAO,SAAS,KAAK,KAAK,CAAC,yCAAyC,KAAK,KAAK;AAAG;AAC1H,SAAS,gBAAgB,MAAkC;AAAE,aAAW,SAAS,MAAM;AAAE,QAAI,UAAU,KAAM;AAAO,QAAI,UAAU,cAAc,MAAM,WAAW,WAAW,EAAG,QAAO;AAAA,EAAM;AAAE,SAAO;AAAO;AAC5M,SAAS,YAAY,MAA0G;AAAE,QAAM,OAAiB,CAAC;AAAG,MAAI,OAAO;AAAO,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AAAE,UAAM,QAAQ,KAAK,KAAK;AAAI,QAAI,UAAU,MAAM;AAAE,WAAK,KAAK,GAAG,KAAK,MAAM,KAAK,CAAC;AAAG;AAAA,IAAO;AAAE,QAAI,UAAU,YAAY;AAAE,UAAI,QAAQ,KAAK,QAAQ,CAAC,MAAM,KAAM,QAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ,OAAO,qBAAqB,iBAAiB,OAAO,oCAAoC,sBAAsB,UAAU,EAAE;AAAG,aAAO;AAAM,eAAS;AAAG;AAAA,IAAU;AAAE,QAAI,MAAM,WAAW,WAAW,GAAG;AAAE,UAAI,QAAQ,MAAM,MAAM,CAAC,MAAM,KAAM,QAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ,OAAO,qBAAqB,iBAAiB,OAAO,oCAAoC,sBAAsB,UAAU,EAAE;AAAG,aAAO;AAAM;AAAA,IAAU;AAAE,SAAK,KAAK,KAAK;AAAA,EAAG;AAAE,SAAO,EAAE,IAAI,MAAM,KAAK;AAAG;AAC53B,SAAS,QAAQ,SAA4C;AAAE,SAAO,OAAO,EAAE,IAAI,MAAe,QAAQ,CAAC;AAAG;AAC9G,SAAS,QAAQ,MAA2B,SAAiB,UAAqC;AAAE,QAAM,OAAO,aAAa,UAAa,oCAAoC,KAAK,QAAQ,IAAI,WAAW;AAAW,SAAO,OAAO,EAAE,IAAI,OAAgB,OAAO,EAAE,MAAM,SAAS,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,EAAG,EAAE,CAAC;AAAG;AAC1U,SAAS,OAAU,OAAU,OAAO,oBAAI,QAAgB,GAAM;AAAE,MAAI,SAAS,OAAO,UAAU,UAAU;AAAE,QAAI,KAAK,IAAI,KAAe,EAAG,QAAO;AAAO,SAAK,IAAI,KAAe;AAAG,eAAW,QAAQ,OAAO,oBAAoB,KAAe,EAAG,QAAQ,MAAkC,IAAI,GAAG,IAAI;AAAG,WAAO,OAAO,KAAK;AAAA,EAAG;AAAE,SAAO;AAAO;",
+  "names": []
+}

package/dist/v2/atomic-output.d.ts

@@ -0,0 +1,34 @@
+import type { Stats } from 'node:fs';
+export type AtomicOutputFailureCodeV2 = 'INVALID_CONFIG' | 'SERIALIZATION_FAILED' | 'OUTPUT_WRITE_FAILED' | 'CANCELLED';
+export type AtomicOutputResultV2 = Readonly<{
+    ok: true;
+} | {
+    ok: false;
+    code: AtomicOutputFailureCodeV2;
+    message: string;
+}>;
+export type AtomicOutputHandleV2 = Readonly<{
+    write: (bytes: Uint8Array) => Promise<void>;
+    sync: () => Promise<void>;
+    close: () => Promise<void>;
+}>;
+export type AtomicOutputStatV2 = Pick<Stats, 'isFile' | 'isDirectory' | 'isSymbolicLink'>;
+export type AtomicOutputHostV2 = Readonly<{
+    lstat?: (path: string) => Promise<AtomicOutputStatV2>;
+    realpath?: (path: string) => Promise<string>;
+    open?: (path: string) => Promise<AtomicOutputHandleV2>;
+    write?: (path: string, bytes: Uint8Array) => Promise<void>;
+    sync?: (path: string) => Promise<void>;
+    rename?: (from: string, to: string) => Promise<void>;
+    unlink?: (path: string) => Promise<void>;
+}>;
+export type AtomicOutputOptionsV2 = Readonly<{
+    baseDirectory?: string;
+    inputPaths?: readonly string[];
+    signal?: AbortSignal;
+    maxTempAttempts?: number;
+    host?: AtomicOutputHostV2;
+}>;
+export declare function writeAtomicUtf8V2(target: string, text: string, options?: AtomicOutputOptionsV2): Promise<AtomicOutputResultV2>;
+export declare function writeAtomicBytesV2(target: string, bytes: Uint8Array, options?: AtomicOutputOptionsV2): Promise<AtomicOutputResultV2>;
+export declare function writeAtomicOutputV2(target: string, content: string | Uint8Array, options?: AtomicOutputOptionsV2): Promise<AtomicOutputResultV2>;

package/dist/v2/batch-runner.d.ts

@@ -0,0 +1,44 @@
+import { type ScanWorkflowV2FailureCode, type ScanWorkflowV2Result } from '@hub/scanner-core/v2';
+import { type ScanConfigV2 } from './config';
+import { type CliStdin, type InputReadHost, type ReadInputResult } from './input-read';
+import type { SelectedInputV2 } from './input-selection';
+import { type SigintSource } from './worker-host';
+export type BatchErrorCodeV2 = ScanWorkflowV2FailureCode | 'INPUT_READ_FAILED';
+export type BatchItemStatusV2 = 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'TIMEOUT';
+export type BatchItemV2 = Readonly<{
+    label: string;
+    status: BatchItemStatusV2;
+    result?: ScanWorkflowV2Result;
+    error?: Readonly<{
+        code: BatchErrorCodeV2;
+    }>;
+}>;
+export type BatchResultV2 = Readonly<{
+    ok: true;
+    items: readonly BatchItemV2[];
+    cancelled: boolean;
+    completed: number;
+    failed: number;
+    concurrency: number;
+}> | Readonly<{
+    ok: false;
+    code: 'INVALID_CONFIG' | 'CANCELLED';
+    message: string;
+}>;
+export type BatchScanV2 = (bytes: Uint8Array, item: SelectedInputV2) => ScanWorkflowV2Result | PromiseLike<ScanWorkflowV2Result>;
+export type BatchReadV2 = (item: SelectedInputV2) => Uint8Array | ReadInputResult | PromiseLike<Uint8Array | ReadInputResult>;
+export type BatchRunnerInput = Readonly<{
+    items: readonly SelectedInputV2[];
+    config: ScanConfigV2;
+    scan?: BatchScanV2;
+    read?: BatchReadV2;
+    stdin?: CliStdin;
+    readHost?: InputReadHost;
+    baseDirectory?: string;
+    maxInputBytes?: number;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    sigint?: SigintSource;
+    now?: () => number;
+}>;
+export declare function runBatchV2(input: BatchRunnerInput): Promise<BatchResultV2>;

package/dist/v2/cli-runner.d.ts

@@ -0,0 +1,28 @@
+import type { CliStdin, InputReadHost } from './input-read';
+import { type InputSelectionHost } from './input-selection';
+import type { CliCommandV2 } from './arguments';
+import { type BatchReadV2, type BatchScanV2 } from './batch-runner';
+import { type CliEnvelopeV2 } from './json-output';
+import { type ExitCodeV2 } from './exit-reducer';
+import type { SigintSource } from './worker-host';
+export type V2CliRunOptions = Readonly<{
+    cwd?: string;
+    stdin?: CliStdin;
+    signal?: AbortSignal;
+    read?: BatchReadV2;
+    scan?: BatchScanV2;
+    readHost?: InputReadHost;
+    selectionHost?: InputSelectionHost;
+    sigint?: SigintSource;
+}>;
+export type V2CliRunResult = Readonly<{
+    exitCode: ExitCodeV2;
+    stdout: string;
+    stderr: string;
+    document?: CliEnvelopeV2 | string;
+}>;
+type ScanCommand = Extract<CliCommandV2, {
+    kind: 'scan';
+}>;
+export declare function runCliV2(command: ScanCommand, options?: V2CliRunOptions): Promise<V2CliRunResult>;
+export {};