@agent-teams/docs-protocol-agent-teams 0.0.0 → 0.1.1

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v1.d.ts

@@ -1,3 +1,22 @@
 import type { ConsumerIntegrationDesiredStateV1 } from "../domain/model.js";
+export interface QualifiedPnpmLockfileTarget {
+    readonly name: string;
+    readonly version: string;
+    readonly integrity: string;
+    readonly direct?: boolean;
+}
+export interface QualifiedPnpmLockfileInternalEdge {
+    readonly from: string;
+    readonly to: string;
+}
+export declare function assertQualifiedPnpmLockfileTargets(bytes: Uint8Array, options: {
+    readonly targets: readonly QualifiedPnpmLockfileTarget[];
+    readonly internalEdges: readonly QualifiedPnpmLockfileInternalEdge[];
+    readonly runtimeClosureDigest: string;
+    readonly computeRuntimeClosureDigest: (lockfile: Record<string, unknown>) => `sha256:${string}`;
+    readonly forbiddenAliasTargetPackageNames?: readonly string[];
+    /** V1 historically validates closure safety without binding the consumer's full graph digest. */
+    readonly enforceRuntimeClosureDigest?: boolean;
+}): void;
 export declare function assertQualifiedPnpmLockfileV1(bytes: Uint8Array, desired: ConsumerIntegrationDesiredStateV1): void;
 //# sourceMappingURL=pnpm-lockfile-validator-v1.d.ts.map

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm-lockfile-validator-v1.d.ts","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-lockfile-validator-v1.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AA+E5E,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iCAAiC,GACzC,IAAI,CAiHN"}
+{"version":3,"file":"pnpm-lockfile-validator-v1.d.ts","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-lockfile-validator-v1.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAQ5E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAkSD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE;IACP,QAAQ,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACrE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,2BAA2B,EAAE,CACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,UAAU,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,gCAAgC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,iGAAiG;IACjG,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;CAChD,GACA,IAAI,CAwEN;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iCAAiC,GACzC,IAAI,CAkBN"}

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v1.js

@@ -8,6 +8,9 @@ function yamlRecord(value, subject) {
     }
     return value;
 }
+function yamlOptionalRecord(value, subject) {
+    return value === undefined ? {} : yamlRecord(value, subject);
+}
 function assertRegistryPackageEntry(options) {
     const resolution = yamlRecord(options.packageEntry["resolution"], `pnpm-lock.yaml#packages.${options.packageName}.resolution`);
     if (resolution["integrity"] !== options.integrity) {
@@ -36,11 +39,45 @@ function assertRootOwnsCohortPins(importers, packageNames) {
         }
     }
 }
-function assertRegistryBoundRuntimeClosure(lockfile, desired) {
+function targetsNpmAlias(value, packageNames) {
+    const candidates = typeof value === "string"
+        ? [value]
+        : typeof value === "object" && value !== null && !Array.isArray(value)
+            ? [
+                value["specifier"],
+                value["version"]
+            ]
+            : [];
+    return candidates.some((candidate) => typeof candidate === "string" &&
+        packageNames.some((packageName) => candidate === `npm:${packageName}` || candidate.startsWith(`npm:${packageName}@`) ||
+            candidate === packageName || candidate.startsWith(`${packageName}@`)));
+}
+function assertNoCohortAliases(importers, packageNames) {
+    for (const [importerPath, importerValue] of Object.entries(importers)) {
+        const importer = yamlRecord(importerValue, `pnpm-lock.yaml#importers.${importerPath}`);
+        for (const field of [
+            "dependencies", "devDependencies", "optionalDependencies", "peerDependencies"
+        ]) {
+            if (importer[field] === undefined) {
+                continue;
+            }
+            const declarations = yamlRecord(importer[field], `pnpm-lock.yaml#importers.${importerPath}.${field}`);
+            for (const [alias, declaration] of Object.entries(declarations)) {
+                if (targetsNpmAlias(declaration, packageNames)) {
+                    throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_COHORT_ALIAS_FORBIDDEN", `pnpm importer ${importerPath} alias ${alias} must not target a Cohort package.`);
+                }
+            }
+        }
+    }
+}
+function assertRegistryBoundRuntimeClosure(lockfile, compute, expectedDigest, enforceDigest) {
     try {
         // The Cohort digest qualifies the isolated release graph. A consumer may select
         // compatible transitives or peer contexts, but every reachable edge stays registry/SRI bound.
-        computePnpmRuntimeClosureDigestV1(lockfile, desired.cohort);
+        const observedDigest = compute(lockfile);
+        if (enforceDigest && observedDigest !== expectedDigest) {
+            throw new PnpmRuntimeClosureError("Runtime closure digest differs from the selected Cohort.");
+        }
     }
     catch (error) {
         if (error instanceof PnpmRuntimeClosureError) {
@@ -49,22 +86,128 @@ function assertRegistryBoundRuntimeClosure(lockfile, desired) {
         throw error;
     }
 }
-export function assertQualifiedPnpmLockfileV1(bytes, desired) {
+function assertTargetSnapshots(input) {
+    const snapshotKeys = new Map();
+    for (const target of input.targets) {
+        const packageName = target.name;
+        const direct = target.direct ?? true;
+        snapshotKeys.set(packageName, new Set());
+        const importerValue = input.devDependencies[packageName];
+        if (!direct && importerValue !== undefined) {
+            throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_COHORT_MISMATCH", `${packageName} is a transitive Cohort coordinate and must not be a root importer pin.`);
+        }
+        if (direct) {
+            const importerEntry = yamlRecord(importerValue, `pnpm-lock.yaml#importers...${packageName}`);
+            if (importerEntry["specifier"] !== target.version ||
+                !validPnpmPeerContext(importerEntry["version"], target.version)) {
+                throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_COHORT_MISMATCH", `${packageName} importer evidence must select exact cohort version ${target.version}.`);
+            }
+            const snapshotKey = `${packageName}@${String(importerEntry["version"])}`;
+            if (input.snapshots[snapshotKey] === undefined) {
+                throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_SNAPSHOT_MISSING", `${packageName} has no snapshot selected by the root importer.`);
+            }
+            snapshotKeys.get(packageName).add(snapshotKey);
+        }
+        const packageEntry = yamlRecord(input.packages[`${packageName}@${target.version}`], `pnpm-lock.yaml#packages.${packageName}`);
+        assertRegistryPackageEntry({ integrity: target.integrity, packageEntry, packageName });
+    }
+    return snapshotKeys;
+}
+function assertSinglePackageResolutions(packages, targets) {
+    for (const target of targets) {
+        const packageName = target.name;
+        const prefix = `${packageName}@`;
+        const keys = Object.keys(packages).filter((key) => key.startsWith(prefix));
+        if (keys.length !== 1 || keys[0] !== `${prefix}${target.version}`) {
+            throw new ConsumerIntegrationNodeError(packageName.endsWith("engineering-foundation")
+                ? "DOCS_CONSUMER_DUPLICATE_FOUNDATION_RESOLUTION"
+                : packageName.endsWith("docs-protocol")
+                    ? "DOCS_CONSUMER_DUPLICATE_DOCS_PROTOCOL_RESOLUTION"
+                    : "DOCS_CONSUMER_DUPLICATE_COHORT_RESOLUTION", `pnpm-lock.yaml must contain exactly one physical cohort ${packageName} resolution.`);
+        }
+    }
+}
+function assertInternalEdges(input) {
+    const targetByName = new Map(input.targets.map((target) => [target.name, target]));
+    const allowedTargetsBySource = new Map();
+    for (const edge of input.edges) {
+        const source = targetByName.get(edge.from);
+        const target = targetByName.get(edge.to);
+        if (source === undefined || target === undefined) {
+            throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_COHORT_DEPENDENCY_MISMATCH", `Internal Cohort edge ${edge.from} -> ${edge.to} has no declared coordinate.`);
+        }
+        const allowedTargets = allowedTargetsBySource.get(source.name) ?? new Set();
+        allowedTargets.add(target.name);
+        allowedTargetsBySource.set(source.name, allowedTargets);
+    }
+    const selectedSnapshots = new Map([...input.snapshotKeys].map(([name, keys]) => [name, new Set(keys)]));
+    const pending = input.targets.flatMap((target) => [...(selectedSnapshots.get(target.name) ?? [])].map((snapshotKey) => ({
+        source: target,
+        snapshotKey
+    })));
+    const visited = new Set();
+    while (pending.length > 0) {
+        const { source, snapshotKey } = pending.shift();
+        if (visited.has(snapshotKey)) {
+            continue;
+        }
+        visited.add(snapshotKey);
+        const sourceSnapshot = yamlRecord(input.snapshots[snapshotKey], `pnpm-lock.yaml#snapshots.${snapshotKey}`);
+        const dependencies = yamlOptionalRecord(sourceSnapshot["dependencies"], `pnpm-lock.yaml#snapshots.${source.name}.dependencies`);
+        const optionalDependencies = yamlOptionalRecord(sourceSnapshot["optionalDependencies"], `pnpm-lock.yaml#snapshots.${source.name}.optionalDependencies`);
+        const allowedTargets = allowedTargetsBySource.get(source.name) ?? new Set();
+        for (const target of input.targets) {
+            const dependency = dependencies[target.name];
+            const optionalDependency = optionalDependencies[target.name];
+            if (optionalDependency !== undefined) {
+                throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_COHORT_DEPENDENCY_MISMATCH", `${source.name} must not optionally depend on Cohort package ${target.name}.`);
+            }
+            if (allowedTargets.has(target.name)) {
+                if (!validPnpmPeerContext(dependency, target.version)) {
+                    throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_COHORT_DEPENDENCY_MISMATCH", `${source.name} must depend on exact Cohort ${target.name}@${target.version}.`);
+                }
+                const targetSnapshotKey = `${target.name}@${String(dependency)}`;
+                if (input.snapshots[targetSnapshotKey] === undefined) {
+                    throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_SNAPSHOT_MISSING", `${source.name} selects missing Cohort snapshot ${targetSnapshotKey}.`);
+                }
+                const targetSelections = selectedSnapshots.get(target.name);
+                if (!targetSelections.has(targetSnapshotKey)) {
+                    targetSelections.add(targetSnapshotKey);
+                    pending.push({ source: target, snapshotKey: targetSnapshotKey });
+                }
+            }
+            else if (dependency !== undefined) {
+                throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_COHORT_DEPENDENCY_MISMATCH", `${source.name} has forbidden extra Cohort dependency ${target.name}.`);
+            }
+        }
+    }
+    for (const target of input.targets) {
+        if ((selectedSnapshots.get(target.name)?.size ?? 0) === 0) {
+            throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_SNAPSHOT_MISSING", `${target.name} has no snapshot reachable from the root Cohort pins.`);
+        }
+    }
+}
+export function assertQualifiedPnpmLockfileTargets(bytes, options) {
     const document = parseDocument(Buffer.from(bytes).toString("utf8"), { uniqueKeys: true });
     if (document.errors.length > 0) {
         throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_INVALID", "pnpm-lock.yaml must be duplicate-free YAML.");
     }
     const lockfile = yamlRecord(document.toJS({ maxAliasCount: 0 }), "pnpm-lock.yaml");
     if (String(lockfile["lockfileVersion"]) !== "9.0") {
-        throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_INVALID", "V1 requires pnpm lockfileVersion 9.0.");
+        throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_INVALID", "Managed consumer integration requires pnpm lockfileVersion 9.0.");
     }
-    if (targetsManagedPackage(lockfile["overrides"]) ||
-        targetsManagedPackage(lockfile["patchedDependencies"])) {
+    const targetPackageNames = options.targets.map(({ name }) => name);
+    if (targetsManagedPackage(lockfile["overrides"], targetPackageNames) ||
+        targetsManagedPackage(lockfile["patchedDependencies"], targetPackageNames)) {
         throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_OVERRIDE", "Docs Protocol cohort packages must not use lockfile overrides or patches.");
     }
     const importers = yamlRecord(lockfile["importers"], "pnpm-lock.yaml#importers");
     if (importers["."] === undefined) {
-        throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_UNSUPPORTED_WORKSPACE", "V1 requires one root pnpm importer in the repository lockfile.");
+        throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_UNSUPPORTED_WORKSPACE", "Managed consumer integration requires one root pnpm importer.");
+    }
+    const forbiddenAliasTargetPackageNames = options.forbiddenAliasTargetPackageNames ?? [];
+    if (forbiddenAliasTargetPackageNames.length > 0) {
+        assertNoCohortAliases(importers, forbiddenAliasTargetPackageNames);
     }
     const importer = yamlRecord(importers["."], "pnpm-lock.yaml#importers.");
     const devDependencies = yamlRecord(importer["devDependencies"], "pnpm-lock.yaml#importers...devDependencies");
@@ -74,47 +217,44 @@ export function assertQualifiedPnpmLockfileV1(bytes, desired) {
             continue;
         }
         const record = yamlRecord(declarations, `pnpm-lock.yaml#importers...${field}`);
-        if (["@agent-teams/docs-protocol", "@agent-teams/engineering-foundation"]
-            .some((packageName) => record[packageName] !== undefined)) {
+        if (targetPackageNames.some((packageName) => record[packageName] !== undefined)) {
             throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_NON_DEV_DEPENDENCY", "Docs Protocol cohort packages may be declared only in root devDependencies.");
         }
     }
     const packages = yamlRecord(lockfile["packages"], "pnpm-lock.yaml#packages");
     const snapshots = yamlRecord(lockfile["snapshots"], "pnpm-lock.yaml#snapshots");
-    const targets = [
-        ["@agent-teams/docs-protocol", desired.cohort.packages.docsProtocol],
-        ["@agent-teams/engineering-foundation", desired.cohort.packages.engineeringFoundation]
-    ];
-    assertRootOwnsCohortPins(importers, targets.map(([packageName]) => packageName));
-    for (const [packageName, target] of targets) {
-        const importerEntry = yamlRecord(devDependencies[packageName], `pnpm-lock.yaml#importers...${packageName}`);
-        const selectedVersion = importerEntry["version"];
-        if (importerEntry["specifier"] !== target.version ||
-            !validPnpmPeerContext(selectedVersion, target.version)) {
-            throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_COHORT_MISMATCH", `${packageName} importer evidence must select exact cohort version ${target.version}.`);
-        }
-        const packageEntry = yamlRecord(packages[`${packageName}@${target.version}`], `pnpm-lock.yaml#packages.${packageName}`);
-        assertRegistryPackageEntry({ integrity: target.integrity, packageEntry, packageName });
-        const snapshotKey = `${packageName}@${selectedVersion}`;
-        if (snapshots[snapshotKey] === undefined) {
-            throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_LOCKFILE_SNAPSHOT_MISSING", `${packageName} must have the exact selected pnpm snapshot.`);
-        }
-    }
-    for (const [packageName, target] of targets) {
-        const prefix = `${packageName}@`;
-        const keys = Object.keys(packages).filter((key) => key.startsWith(prefix));
-        if (keys.length !== 1 || keys[0] !== `${prefix}${target.version}`) {
-            throw new ConsumerIntegrationNodeError(packageName.endsWith("engineering-foundation")
-                ? "DOCS_CONSUMER_DUPLICATE_FOUNDATION_RESOLUTION"
-                : "DOCS_CONSUMER_DUPLICATE_DOCS_PROTOCOL_RESOLUTION", `pnpm-lock.yaml must contain exactly one physical cohort ${packageName} resolution.`);
-        }
-    }
-    const docsSelection = yamlRecord(devDependencies["@agent-teams/docs-protocol"], "pnpm-lock.yaml#importers...docs-protocol")["version"];
-    const docsSnapshot = yamlRecord(snapshots[`@agent-teams/docs-protocol@${String(docsSelection)}`], "pnpm-lock.yaml#snapshots.docs-protocol");
-    const docsDependencies = yamlRecord(docsSnapshot["dependencies"], "pnpm-lock.yaml#snapshots.docs-protocol.dependencies");
-    if (!validPnpmPeerContext(docsDependencies["@agent-teams/engineering-foundation"], desired.cohort.packages.engineeringFoundation.version)) {
-        throw new ConsumerIntegrationNodeError("DOCS_CONSUMER_COHORT_DEPENDENCY_MISMATCH", "The selected Docs Protocol snapshot must depend on the exact cohort Foundation version.");
-    }
-    assertRegistryBoundRuntimeClosure(lockfile, desired);
+    assertRootOwnsCohortPins(importers, targetPackageNames);
+    const snapshotKeys = assertTargetSnapshots({
+        devDependencies,
+        packages,
+        snapshots,
+        targets: options.targets
+    });
+    assertSinglePackageResolutions(packages, options.targets);
+    assertInternalEdges({
+        edges: options.internalEdges,
+        snapshots,
+        snapshotKeys,
+        targets: options.targets
+    });
+    assertRegistryBoundRuntimeClosure(lockfile, options.computeRuntimeClosureDigest, options.runtimeClosureDigest, options.enforceRuntimeClosureDigest ?? true);
+}
+export function assertQualifiedPnpmLockfileV1(bytes, desired) {
+    assertQualifiedPnpmLockfileTargets(bytes, {
+        targets: [
+            { name: "@agent-teams/docs-protocol", ...desired.cohort.packages.docsProtocol },
+            {
+                name: "@agent-teams/engineering-foundation",
+                ...desired.cohort.packages.engineeringFoundation
+            }
+        ],
+        internalEdges: [{
+                from: "@agent-teams/docs-protocol",
+                to: "@agent-teams/engineering-foundation"
+            }],
+        runtimeClosureDigest: desired.cohort.runtime.runtimeClosureDigest,
+        enforceRuntimeClosureDigest: false,
+        computeRuntimeClosureDigest: (lockfile) => computePnpmRuntimeClosureDigestV1(lockfile, desired.cohort)
+    });
 }
 //# sourceMappingURL=pnpm-lockfile-validator-v1.js.map

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v1.js.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm-lockfile-validator-v1.js","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-lockfile-validator-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAGrC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACxB,MAAM,8BAA8B,CAAC;AAEtC,SAAS,UAAU,CAAC,KAAc,EAAE,OAAe;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,4BAA4B,CACpC,gCAAgC,EAChC,GAAG,OAAO,uBAAuB,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,0BAA0B,CAAC,OAInC;IACC,MAAM,UAAU,GAAG,UAAU,CAC3B,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAClC,2BAA2B,OAAO,CAAC,WAAW,aAAa,CAC5D,CAAC;IACF,IAAI,UAAU,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,4BAA4B,CACpC,2CAA2C,EAC3C,GAAG,OAAO,CAAC,WAAW,yDAAyD,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,4BAA4B,CACpC,uCAAuC,EACvC,GAAG,OAAO,CAAC,WAAW,wCAAwC,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAAkC,EAClC,YAA+B;IAE/B,KAAK,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACrC,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,EAAE,4BAA4B,YAAY,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAChF,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,4BAA4B,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;YAC7F,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,4BAA4B,CACpC,6CAA6C,EAC7C,0EAA0E,YAAY,GAAG,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iCAAiC,CACxC,QAAiC,EACjC,OAA0C;IAE1C,IAAI,CAAC;QACH,gFAAgF;QAChF,8FAA8F;QAC9F,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAiB,EACjB,OAA0C;IAE1C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,4BAA4B,CACpC,gCAAgC,EAChC,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAClD,MAAM,IAAI,4BAA4B,CACpC,gCAAgC,EAChC,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9C,qBAAqB,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,4BAA4B,CACpC,iCAAiC,EACjC,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAChF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,4BAA4B,CACpC,qCAAqC,EACrC,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,UAAU,CAChC,QAAQ,CAAC,iBAAiB,CAAC,EAC3B,4CAA4C,CAC7C,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,8BAA8B,KAAK,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,4BAA4B,EAAE,qCAAqC,CAAC;aACtE,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,4BAA4B,CACpC,kCAAkC,EAClC,6EAA6E,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG;QACd,CAAC,4BAA4B,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QACpE,CAAC,qCAAqC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAC9E,CAAC;IACX,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,UAAU,CAC9B,eAAe,CAAC,WAAW,CAAC,EAC5B,8BAA8B,WAAW,EAAE,CAC5C,CAAC;QACF,MAAM,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,OAAO;YAC/C,CAAC,oBAAoB,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,4BAA4B,CACpC,wCAAwC,EACxC,GAAG,WAAW,uDAAuD,MAAM,CAAC,OAAO,GAAG,CACvF,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAC7B,QAAQ,CAAC,GAAG,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,EAC5C,2BAA2B,WAAW,EAAE,CACzC,CAAC;QACF,0BAA0B,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,WAAW,GAAG,GAAG,WAAW,IAAI,eAAe,EAAE,CAAC;QACxD,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,4BAA4B,CACpC,yCAAyC,EACzC,GAAG,WAAW,8CAA8C,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,WAAW,GAAG,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,4BAA4B,CACpC,WAAW,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC5C,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,kDAAkD,EACtD,2DAA2D,WAAW,cAAc,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAC9B,eAAe,CAAC,4BAA4B,CAAC,EAC7C,0CAA0C,CAC3C,CAAC,SAAS,CAAC,CAAC;IACb,MAAM,YAAY,GAAG,UAAU,CAC7B,SAAS,CAAC,8BAA8B,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,EAChE,wCAAwC,CACzC,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,YAAY,CAAC,cAAc,CAAC,EAC5B,qDAAqD,CACtD,CAAC;IACF,IAAI,CAAC,oBAAoB,CACvB,gBAAgB,CAAC,qCAAqC,CAAC,EACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CACtD,EAAE,CAAC;QACF,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,EAC1C,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"pnpm-lockfile-validator-v1.js","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-lockfile-validator-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAGrC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACxB,MAAM,8BAA8B,CAAC;AActC,SAAS,UAAU,CAAC,KAAc,EAAE,OAAe;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,4BAA4B,CACpC,gCAAgC,EAChC,GAAG,OAAO,uBAAuB,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,OAAe;IACzD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,0BAA0B,CAAC,OAInC;IACC,MAAM,UAAU,GAAG,UAAU,CAC3B,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAClC,2BAA2B,OAAO,CAAC,WAAW,aAAa,CAC5D,CAAC;IACF,IAAI,UAAU,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,4BAA4B,CACpC,2CAA2C,EAC3C,GAAG,OAAO,CAAC,WAAW,yDAAyD,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,4BAA4B,CACpC,uCAAuC,EACvC,GAAG,OAAO,CAAC,WAAW,wCAAwC,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAAkC,EAClC,YAA+B;IAE/B,KAAK,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACrC,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,EAAE,4BAA4B,YAAY,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAChF,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,4BAA4B,YAAY,IAAI,KAAK,EAAE,CAAC,CAAC;YAC7F,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,4BAA4B,CACpC,6CAA6C,EAC7C,0EAA0E,YAAY,GAAG,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,YAA+B;IACtE,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ;QAC1C,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpE,CAAC,CAAC;gBACG,KAAiC,CAAC,WAAW,CAAC;gBAC9C,KAAiC,CAAC,SAAS,CAAC;aAC9C;YACH,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ;QACjE,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAChC,SAAS,KAAK,OAAO,WAAW,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC;YACjF,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CACrE,CAAC,CAAC;AACP,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAkC,EAClC,YAA+B;IAE/B,KAAK,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,aAAa,EAAE,4BAA4B,YAAY,EAAE,CAAC,CAAC;QACvF,KAAK,MAAM,KAAK,IAAI;YAClB,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,kBAAkB;SAC9E,EAAE,CAAC;YACF,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC9C,MAAM,YAAY,GAAG,UAAU,CAC7B,QAAQ,CAAC,KAAK,CAAC,EACf,4BAA4B,YAAY,IAAI,KAAK,EAAE,CACpD,CAAC;YACF,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChE,IAAI,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,4BAA4B,CACpC,sCAAsC,EACtC,iBAAiB,YAAY,UAAU,KAAK,oCAAoC,CACjF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iCAAiC,CACxC,QAAiC,EACjC,OAAkE,EAClE,cAAsB,EACtB,aAAsB;IAEtB,IAAI,CAAC;QACH,gFAAgF;QAChF,8FAA8F;QAC9F,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,aAAa,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;YACvD,MAAM,IAAI,uBAAuB,CAC/B,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAK9B;IACC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;QACrC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,4BAA4B,CACpC,wCAAwC,EACxC,GAAG,WAAW,yEAAyE,CACxF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,aAAa,GAAG,UAAU,CAC9B,aAAa,EACb,8BAA8B,WAAW,EAAE,CAC5C,CAAC;YACF,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,OAAO;gBAC/C,CAAC,oBAAoB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,4BAA4B,CACpC,wCAAwC,EACxC,GAAG,WAAW,uDAAuD,MAAM,CAAC,OAAO,GAAG,CACvF,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,WAAW,IAAI,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,4BAA4B,CACpC,yCAAyC,EACzC,GAAG,WAAW,iDAAiD,CAChE,CAAC;YACJ,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAC7B,KAAK,CAAC,QAAQ,CAAC,GAAG,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,EAClD,2BAA2B,WAAW,EAAE,CACzC,CAAC;QACF,0BAA0B,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAiC,EACjC,OAA+C;IAE/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,WAAW,GAAG,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,4BAA4B,CACpC,WAAW,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC5C,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC;oBACrC,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,2CAA2C,EACjD,2DAA2D,WAAW,cAAc,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAK5B;IACC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,EAC1C,wBAAwB,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,8BAA8B,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACpF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CACrE,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,MAAM;QACd,WAAW;KACZ,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,EAAG,CAAC;QACjD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,MAAM,cAAc,GAAG,UAAU,CAC/B,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,EAC5B,4BAA4B,WAAW,EAAE,CAC1C,CAAC;QACF,MAAM,YAAY,GAAG,kBAAkB,CACrC,cAAc,CAAC,cAAc,CAAC,EAC9B,4BAA4B,MAAM,CAAC,IAAI,eAAe,CACvD,CAAC;QACF,MAAM,oBAAoB,GAAG,kBAAkB,CAC7C,cAAc,CAAC,sBAAsB,CAAC,EACtC,4BAA4B,MAAM,CAAC,IAAI,uBAAuB,CAC/D,CAAC;QACF,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACpF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,EAC1C,GAAG,MAAM,CAAC,IAAI,iDAAiD,MAAM,CAAC,IAAI,GAAG,CAC9E,CAAC;YACJ,CAAC;YACD,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,EAC1C,GAAG,MAAM,CAAC,IAAI,gCAAgC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,CAC/E,CAAC;gBACJ,CAAC;gBACD,MAAM,iBAAiB,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjE,IAAI,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;oBACrD,MAAM,IAAI,4BAA4B,CACpC,yCAAyC,EACzC,GAAG,MAAM,CAAC,IAAI,oCAAoC,iBAAiB,GAAG,CACvE,CAAC;gBACJ,CAAC;gBACD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC;gBAC7D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC7C,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBACxC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;iBAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,EAC1C,GAAG,MAAM,CAAC,IAAI,0CAA0C,MAAM,CAAC,IAAI,GAAG,CACvE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,4BAA4B,CACpC,yCAAyC,EACzC,GAAG,MAAM,CAAC,IAAI,uDAAuD,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAiB,EACjB,OAUC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,4BAA4B,CACpC,gCAAgC,EAChC,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAClD,MAAM,IAAI,4BAA4B,CACpC,gCAAgC,EAChC,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;QAClE,qBAAqB,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,4BAA4B,CACpC,iCAAiC,EACjC,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAChF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,4BAA4B,CACpC,qCAAqC,EACrC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,gCAAgC,GAAG,OAAO,CAAC,gCAAgC,IAAI,EAAE,CAAC;IACxF,IAAI,gCAAgC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,UAAU,CAChC,QAAQ,CAAC,iBAAiB,CAAC,EAC3B,4CAA4C,CAC7C,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,8BAA8B,KAAK,EAAE,CAAC,CAAC;QAC/E,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,4BAA4B,CACpC,kCAAkC,EAClC,6EAA6E,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAChF,wBAAwB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,qBAAqB,CAAC;QACzC,eAAe;QACf,QAAQ;QACR,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,mBAAmB,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC,aAAa;QAC5B,SAAS;QACT,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,iCAAiC,CAC/B,QAAQ,EACR,OAAO,CAAC,2BAA2B,EACnC,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,2BAA2B,IAAI,IAAI,CAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAiB,EACjB,OAA0C;IAE1C,kCAAkC,CAAC,KAAK,EAAE;QACxC,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE;YAC/E;gBACE,IAAI,EAAE,qCAAqC;gBAC3C,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB;aACjD;SACF;QACD,aAAa,EAAE,CAAC;gBACd,IAAI,EAAE,4BAA4B;gBAClC,EAAE,EAAE,qCAAqC;aAC1C,CAAC;QACF,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB;QACjE,2BAA2B,EAAE,KAAK;QAClC,2BAA2B,EAAE,CAAC,QAAQ,EAAE,EAAE,CACxC,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v2.d.ts

@@ -0,0 +1,4 @@
+import type { ConsumerIntegrationDesiredStateV3 } from "../domain/model.js";
+export declare function observeQualifiedPnpmLockfileV2(bytes: Uint8Array, desired: ConsumerIntegrationDesiredStateV3): `sha256:${string}`;
+export declare function assertQualifiedPnpmLockfileV2(bytes: Uint8Array, desired: ConsumerIntegrationDesiredStateV3): void;
+//# sourceMappingURL=pnpm-lockfile-validator-v2.d.ts.map

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpm-lockfile-validator-v2.d.ts","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-lockfile-validator-v2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAuE5E,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iCAAiC,GACzC,UAAU,MAAM,EAAE,CAEpB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,iCAAiC,GACzC,IAAI,CAEN"}

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v2.js

@@ -0,0 +1,64 @@
+import { qualifiedDocsCohortV2PackageEntries } from "../application/policies/qualified-docs-cohort-v2.js";
+import { assertQualifiedPnpmLockfileTargets } from "./pnpm-lockfile-validator-v1.js";
+import { computePnpmRuntimeClosureDigestV2 } from "./pnpm-runtime-closure-v2.js";
+const MAXIMUM_LOCKFILE_BYTES = 32 * 1024 * 1024;
+const INTERNAL_EDGES = Object.freeze([
+    Object.freeze({
+        from: "@agent-teams/document-authoring",
+        to: "@agent-teams/repository-mutation"
+    }),
+    Object.freeze({
+        from: "@agent-teams/docs-protocol",
+        to: "@agent-teams/document-authoring"
+    }),
+    Object.freeze({
+        from: "@agent-teams/docs-protocol",
+        to: "@agent-teams/repository-mutation"
+    }),
+    Object.freeze({
+        from: "@agent-teams/docs-protocol-agent-teams",
+        to: "@agent-teams/docs-protocol"
+    }),
+    Object.freeze({
+        from: "@agent-teams/docs-protocol-agent-teams",
+        to: "@agent-teams/repository-mutation"
+    }),
+    Object.freeze({
+        from: "@agent-teams/engineering-foundation",
+        to: "@agent-teams/document-authoring"
+    }),
+    Object.freeze({
+        from: "@agent-teams/engineering-foundation",
+        to: "@agent-teams/repository-mutation"
+    })
+]);
+function validateQualifiedPnpmLockfileV2(bytes, desired, enforceRuntimeClosureDigest) {
+    if (!(bytes instanceof Uint8Array) || bytes.byteLength === 0 ||
+        bytes.byteLength > MAXIMUM_LOCKFILE_BYTES) {
+        throw new TypeError(`Qualification v3 lockfile must contain 1..${MAXIMUM_LOCKFILE_BYTES} bytes.`);
+    }
+    const entries = qualifiedDocsCohortV2PackageEntries(desired.cohort);
+    let runtimeClosureDigest;
+    assertQualifiedPnpmLockfileTargets(bytes, {
+        targets: entries.map(({ name, version, integrity, direct }) => ({ name, version, integrity, direct })),
+        internalEdges: INTERNAL_EDGES,
+        forbiddenAliasTargetPackageNames: entries.map(({ name }) => name),
+        runtimeClosureDigest: desired.cohort.runtime.runtimeClosureDigest,
+        enforceRuntimeClosureDigest,
+        computeRuntimeClosureDigest(lockfile) {
+            runtimeClosureDigest = computePnpmRuntimeClosureDigestV2(lockfile, desired.cohort);
+            return runtimeClosureDigest;
+        }
+    });
+    if (runtimeClosureDigest === undefined) {
+        throw new Error("Qualified pnpm lockfile validation did not observe a runtime closure.");
+    }
+    return runtimeClosureDigest;
+}
+export function observeQualifiedPnpmLockfileV2(bytes, desired) {
+    return validateQualifiedPnpmLockfileV2(bytes, desired, false);
+}
+export function assertQualifiedPnpmLockfileV2(bytes, desired) {
+    validateQualifiedPnpmLockfileV2(bytes, desired, true);
+}
+//# sourceMappingURL=pnpm-lockfile-validator-v2.js.map

package/dist/consumer-integration/adapters/pnpm-lockfile-validator-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpm-lockfile-validator-v2.js","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-lockfile-validator-v2.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAC5C,qDAAqD,CAAC;AACxD,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAEjF,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,iCAAiC;QACvC,EAAE,EAAE,kCAAkC;KACvC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,4BAA4B;QAClC,EAAE,EAAE,iCAAiC;KACtC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,4BAA4B;QAClC,EAAE,EAAE,kCAAkC;KACvC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,wCAAwC;QAC9C,EAAE,EAAE,4BAA4B;KACjC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,wCAAwC;QAC9C,EAAE,EAAE,kCAAkC;KACvC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,qCAAqC;QAC3C,EAAE,EAAE,iCAAiC;KACtC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,qCAAqC;QAC3C,EAAE,EAAE,kCAAkC;KACvC,CAAC;CACH,CAAC,CAAC;AAEH,SAAS,+BAA+B,CACtC,KAAiB,EACjB,OAA0C,EAC1C,2BAAoC;IAEpC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;QAC1D,KAAK,CAAC,UAAU,GAAG,sBAAsB,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CACjB,6CAA6C,sBAAsB,SAAS,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,mCAAmC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,oBAAoD,CAAC;IACzD,kCAAkC,CAAC,KAAK,EAAE;QACxC,OAAO,EAAE,OAAO,CAAC,GAAG,CAClB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CACjF;QACD,aAAa,EAAE,cAAc;QAC7B,gCAAgC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;QACjE,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB;QACjE,2BAA2B;QAC3B,2BAA2B,CAAC,QAAQ;YAClC,oBAAoB,GAAG,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACnF,OAAO,oBAAoB,CAAC;QAC9B,CAAC;KACF,CAAC,CAAC;IACH,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAiB,EACjB,OAA0C;IAE1C,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAiB,EACjB,OAA0C;IAE1C,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC"}

package/dist/consumer-integration/adapters/pnpm-manifest-adapter-v1.d.ts

@@ -1,15 +1,32 @@
 import type { ConsumerIntegrationDigest, ConsumerIntegrationFileObservation, QualifiedDocsCohortBindingV1 } from "../domain/model.js";
-import type { PnpmManifestPlanV1, PnpmManifestPlannerV1 } from "../application/ports/consumer-integration-planners.js";
+import type { PnpmManifestPlanV1 } from "../application/ports/consumer-integration-planners.js";
+export interface CohortManifestTarget {
+    readonly name: string;
+    readonly version: string;
+}
 export type { PnpmManifestPlanV1 } from "../application/ports/consumer-integration-planners.js";
+export declare function projectPnpmManifestCohortTargets(input: {
+    readonly bytes: Uint8Array;
+    readonly targets: readonly CohortManifestTarget[];
+    readonly transitivePackageNames?: readonly string[];
+    readonly forbiddenAliasTargetPackageNames?: readonly string[];
+}): Uint8Array;
 export declare function projectPnpmManifestCohortPinsV1(input: {
     readonly bytes: Uint8Array;
     readonly cohort: QualifiedDocsCohortBindingV1;
 }): Uint8Array;
+export declare function planPnpmManifestTargets(input: {
+    readonly observation: ConsumerIntegrationFileObservation;
+    readonly profilePath: string;
+    readonly targets: readonly CohortManifestTarget[];
+    readonly forbiddenRootPackageNames?: readonly string[];
+    readonly forbiddenAliasTargetPackageNames?: readonly string[];
+    readonly knownPriorScriptsDigest?: ConsumerIntegrationDigest;
+}): PnpmManifestPlanV1;
 export declare function planPnpmManifestV1(input: {
     readonly observation: ConsumerIntegrationFileObservation;
     readonly profilePath: string;
     readonly cohort: QualifiedDocsCohortBindingV1;
     readonly knownPriorScriptsDigest?: ConsumerIntegrationDigest;
 }): PnpmManifestPlanV1;
-export declare const pnpmManifestPlannerV1: PnpmManifestPlannerV1;
 //# sourceMappingURL=pnpm-manifest-adapter-v1.d.ts.map

package/dist/consumer-integration/adapters/pnpm-manifest-adapter-v1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pnpm-manifest-adapter-v1.d.ts","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-manifest-adapter-v1.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EACzB,kCAAkC,EAElC,4BAA4B,EAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,uDAAuD,CAAC;AAU/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAsGhG,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GAAG,UAAU,CAgCb;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,WAAW,EAAE,kCAAkC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;CAC9D,GAAG,kBAAkB,CA8ErB;AAED,eAAO,MAAM,qBAAqB,EAAE,qBAElC,CAAC"}
+{"version":3,"file":"pnpm-manifest-adapter-v1.d.ts","sourceRoot":"","sources":["../../../src/consumer-integration/adapters/pnpm-manifest-adapter-v1.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EACzB,kCAAkC,EAElC,4BAA4B,EAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,kBAAkB,EACnB,MAAM,uDAAuD,CAAC;AAU/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,YAAY,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAgJhG,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,QAAQ,CAAC,gCAAgC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/D,GAAG,UAAU,CA+Cb;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C,GAAG,UAAU,CAKb;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,WAAW,EAAE,kCAAkC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvD,QAAQ,CAAC,gCAAgC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;CAC9D,GAAG,kBAAkB,CA4FrB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,WAAW,EAAE,kCAAkC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;CAC9D,GAAG,kBAAkB,CASrB"}

package/dist/consumer-integration/adapters/pnpm-manifest-adapter-v1.js

@@ -59,9 +59,9 @@ function manifestShapeIssues(manifest) {
     }
     return issues;
 }
-function cohortDependencyIssues(dependencies, devDependencies, optionalDependencies, peerDependencies, cohort) {
+function cohortDependencyIssues(dependencies, devDependencies, optionalDependencies, peerDependencies, targets) {
     const issues = [];
-    for (const packageName of [DOCS_PACKAGE, FOUNDATION_PACKAGE]) {
+    for (const { name: packageName } of targets) {
         for (const [field, declarations] of [
             ["dependencies", dependencies],
             ["optionalDependencies", optionalDependencies],
@@ -72,24 +72,45 @@ function cohortDependencyIssues(dependencies, devDependencies, optionalDependenc
             }
         }
     }
-    const requiredVersions = {
-        [DOCS_PACKAGE]: cohort.packages.docsProtocol.version,
-        [FOUNDATION_PACKAGE]: cohort.packages.engineeringFoundation.version
-    };
-    for (const [packageName, version] of Object.entries(requiredVersions)) {
+    for (const { name: packageName, version } of targets) {
         if (devDependencies[packageName] !== version) {
             issues.push(issue(`package.json#devDependencies.${packageName}`, "DOCS_CONSUMER_COHORT_PIN_REQUIRED", `Update ${packageName} and pnpm-lock.yaml together to exact version ${version} before consumer apply.`));
         }
     }
     return issues;
 }
-export function projectPnpmManifestCohortPinsV1(input) {
+function forbiddenRootDeclarationIssues(declarationsByField, packageNames) {
+    return packageNames.flatMap((packageName) => declarationsByField.flatMap(([field, declarations]) => declarations[packageName] === undefined ? [] : [issue(`package.json#${field}.${packageName}`, "DOCS_CONSUMER_TRANSITIVE_ROOT_DECLARATION", `${packageName} is a transitive Cohort coordinate and must not be a root declaration.`)]));
+}
+function targetsNpmAlias(value, packageNames) {
+    return typeof value === "string" && packageNames.some((packageName) => value === `npm:${packageName}` || value.startsWith(`npm:${packageName}@`));
+}
+function cohortAliasIssues(declarationsByField, packageNames) {
+    return declarationsByField.flatMap(([field, declarations]) => Object.entries(declarations).flatMap(([alias, value]) => targetsNpmAlias(value, packageNames) ? [issue(`package.json#${field}.${alias}`, "DOCS_CONSUMER_COHORT_ALIAS_FORBIDDEN", `npm alias ${alias} must not target a Cohort package.`)] : []));
+}
+function cohortManifestTargetsV1(cohort) {
+    return Object.freeze([
+        Object.freeze({ name: DOCS_PACKAGE, version: cohort.packages.docsProtocol.version }),
+        Object.freeze({
+            name: FOUNDATION_PACKAGE,
+            version: cohort.packages.engineeringFoundation.version
+        })
+    ]);
+}
+export function projectPnpmManifestCohortTargets(input) {
     const { manifest, source } = parseManifest(input.bytes);
     const issues = manifestShapeIssues(manifest);
     const dependencies = recordField(manifest, "dependencies");
+    const devDependencies = recordField(manifest, "devDependencies");
     const optionalDependencies = recordField(manifest, "optionalDependencies");
     const peerDependencies = recordField(manifest, "peerDependencies");
-    for (const packageName of [DOCS_PACKAGE, FOUNDATION_PACKAGE]) {
+    const declarationsByField = [
+        ["dependencies", dependencies],
+        ["devDependencies", devDependencies],
+        ["optionalDependencies", optionalDependencies],
+        ["peerDependencies", peerDependencies]
+    ];
+    for (const { name: packageName } of input.targets) {
         for (const [field, declarations] of [
             ["dependencies", dependencies],
             ["optionalDependencies", optionalDependencies],
@@ -100,19 +121,30 @@ export function projectPnpmManifestCohortPinsV1(input) {
             }
         }
     }
+    issues.push(...cohortAliasIssues(declarationsByField, input.forbiddenAliasTargetPackageNames ?? []));
     if (issues.length > 0) {
         throw new TypeError(issues.map(({ message }) => message).join(" "));
     }
     let postimage = source;
-    for (const [packageName, version] of [
-        [DOCS_PACKAGE, input.cohort.packages.docsProtocol.version],
-        [FOUNDATION_PACKAGE, input.cohort.packages.engineeringFoundation.version]
-    ]) {
+    for (const packageName of input.transitivePackageNames ?? []) {
+        for (const [field, declarations] of declarationsByField) {
+            if (declarations[packageName] !== undefined) {
+                postimage = applyField(postimage, [field, packageName], void 0);
+            }
+        }
+    }
+    for (const { name: packageName, version } of input.targets) {
         postimage = applyField(postimage, ["devDependencies", packageName], version);
     }
     return Buffer.from(postimage, "utf8");
 }
-export function planPnpmManifestV1(input) {
+export function projectPnpmManifestCohortPinsV1(input) {
+    return projectPnpmManifestCohortTargets({
+        bytes: input.bytes,
+        targets: cohortManifestTargetsV1(input.cohort)
+    });
+}
+export function planPnpmManifestTargets(input) {
     if (input.observation.state === "absent") {
         const empty = digestBytes(new Uint8Array());
         return {
@@ -143,7 +175,15 @@ export function planPnpmManifestV1(input) {
     const devDependencies = recordField(manifest, "devDependencies");
     const optionalDependencies = recordField(manifest, "optionalDependencies");
     const peerDependencies = recordField(manifest, "peerDependencies");
-    issues.push(...cohortDependencyIssues(dependencies, devDependencies, optionalDependencies, peerDependencies, input.cohort));
+    const declarationsByField = [
+        ["dependencies", dependencies],
+        ["devDependencies", devDependencies],
+        ["optionalDependencies", optionalDependencies],
+        ["peerDependencies", peerDependencies]
+    ];
+    issues.push(...cohortDependencyIssues(dependencies, devDependencies, optionalDependencies, peerDependencies, input.targets));
+    issues.push(...forbiddenRootDeclarationIssues(declarationsByField, input.forbiddenRootPackageNames ?? []));
+    issues.push(...cohortAliasIssues(declarationsByField, input.forbiddenAliasTargetPackageNames ?? []));
     const desiredScripts = canonicalDocsScripts(input.profilePath);
     const observedScripts = Object.fromEntries(Object.keys(desiredScripts).map((script) => [
         script,
@@ -183,7 +223,14 @@ export function planPnpmManifestV1(input) {
         issues: []
     };
 }
-export const pnpmManifestPlannerV1 = Object.freeze({
-    plan: planPnpmManifestV1
-});
+export function planPnpmManifestV1(input) {
+    return planPnpmManifestTargets({
+        observation: input.observation,
+        profilePath: input.profilePath,
+        targets: cohortManifestTargetsV1(input.cohort),
+        ...(input.knownPriorScriptsDigest === undefined
+            ? {}
+            : { knownPriorScriptsDigest: input.knownPriorScriptsDigest })
+    });
+}
 //# sourceMappingURL=pnpm-manifest-adapter-v1.js.map