@agentproto/app-kit 1.3.0 → 1.4.0

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { join, relative, isAbsolute, dirname, resolve } from 'path';
+import { join, relative, isAbsolute, dirname, resolve, basename } from 'path';
 import { defineWorkspace } from '@agentproto/workspace';
-import { mkdir, writeFile, copyFile, cp, readFile, readdir } from 'fs/promises';
+import { mkdir, writeFile, copyFile, cp, readFile, mkdtemp, readdir, rm, stat } from 'fs/promises';
 import matter2 from 'gray-matter';
 import { parseAgentManifest, agentFromManifest } from '@agentproto/agent/manifest';
 import { loadWorkflowHandle } from '@agentproto/workflow-loader';
@@ -10,6 +10,9 @@ import { parseDriverManifest, driverDefinitionFromManifest, driverFromManifest }
 import { normalizeToolId } from '@agentproto/driver';
 import { defineCliDriver } from '@agentproto/driver-cli';
 import { defineHttpDriver } from '@agentproto/driver-http';
+import { createHash } from 'crypto';
+import { tmpdir } from 'os';
+import { spawn } from 'child_process';
 
 /**
  * @agentproto/app-kit v0.1.0
@@ -58,7 +61,8 @@ async function emitApp(app, dir) {
       ...app.ui.description !== void 0 ? { description: app.ui.description } : {},
       ...app.ui.tools !== void 0 ? { tools: app.ui.tools } : {},
       ...app.ui.port !== void 0 ? { port: app.ui.port } : {},
-      ...app.ui.csp !== void 0 ? { csp: app.ui.csp } : {}
+      ...app.ui.csp !== void 0 ? { csp: app.ui.csp } : {},
+      ...app.ui.build !== void 0 ? { build: app.ui.build } : {}
     };
   }
   let artifactPath;
@@ -111,7 +115,10 @@ async function emitApp(app, dir) {
     agents: agentRefs,
     workflows: workflowRefs2,
     ...app.workspace ? { workspace: app.workspace.id } : {},
-    ...app.requires !== void 0 ? { requires: app.requires } : {},
+    ...requiresFrontmatter(app),
+    ...app.placement !== void 0 && app.placement !== "any" ? { placement: app.placement } : {},
+    ...app.exposes && (app.exposes.agents.length > 0 || app.exposes.workflows.length > 0) ? { exposes: { agents: app.exposes.agents, workflows: app.exposes.workflows } } : {},
+    ...app.accepts?.tasks ? { accepts: { tasks: true } } : {},
     ...uiFrontmatter !== void 0 ? { ui: uiFrontmatter } : {},
     ...artifactFrontmatter !== void 0 ? { artifact: artifactFrontmatter } : {},
     ...skillFrontmatter !== void 0 ? { skill: skillFrontmatter } : {},
@@ -119,6 +126,7 @@ async function emitApp(app, dir) {
     ...app.dev !== void 0 ? { dev: app.dev } : {},
     ...app.data !== void 0 ? { data: app.data } : {},
     ...app.externalReadRoots !== void 0 ? { externalReadRoots: app.externalReadRoots } : {},
+    ...app.boundaries !== void 0 ? { boundaries: app.boundaries } : {},
     ...app.category !== void 0 ? { category: app.category } : {}
   };
   await writeFile(appPath, toManifest(appFrontmatter, app.description ?? ""), "utf8");
@@ -132,6 +140,15 @@ async function emitApp(app, dir) {
     ...skillPath ? { skillPath } : {}
   };
 }
+function requiresFrontmatter(app) {
+  const r = app.requirements;
+  if (r && (r.browser || r.fs || r.gpu || r.secrets.length > 0)) {
+    return {
+      requires: { browser: r.browser, fs: r.fs, gpu: r.gpu, secrets: r.secrets, apps: r.apps }
+    };
+  }
+  return app.requires !== void 0 ? { requires: app.requires } : {};
+}
 function toManifest(handle, body) {
   const data = JSON.parse(JSON.stringify(handle));
   return matter2.stringify(`
@@ -139,6 +156,86 @@ ${body}
 `, data);
 }
 
+// src/manifest-fields.ts
+var APP_PLACEMENTS = ["local", "box", "any", "split"];
+function isRecord(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function stringList(v, key, fail) {
+  if (v === void 0) return [];
+  if (!Array.isArray(v) || !v.every((e) => typeof e === "string" && e.trim() !== "")) {
+    throw fail(`'${key}' must be an array of non-empty strings.`);
+  }
+  return [...v];
+}
+function bool(v, key, fail) {
+  if (v === void 0) return false;
+  if (typeof v !== "boolean") throw fail(`'${key}' must be a boolean.`);
+  return v;
+}
+function normalizeManifestFields(input, declared, fail) {
+  let placement = "any";
+  if (input.placement !== void 0) {
+    if (typeof input.placement !== "string" || !APP_PLACEMENTS.includes(input.placement)) {
+      throw fail(
+        `'placement' must be one of ${APP_PLACEMENTS.map((p) => `"${p}"`).join(", ")}, got ${JSON.stringify(input.placement)}.`
+      );
+    }
+    placement = input.placement;
+  }
+  let requires;
+  let requirements = { browser: false, fs: false, gpu: false, secrets: [], apps: [] };
+  const r = input.requires;
+  if (r !== void 0) {
+    if (Array.isArray(r)) {
+      if (!r.every((e) => typeof e === "string")) {
+        throw fail("'requires' must be an array of strings or an object { browser, fs, gpu, secrets, apps }.");
+      }
+      requires = [...r];
+      requirements = { ...requirements, apps: requires };
+    } else if (isRecord(r)) {
+      const apps = stringList(r.apps, "requires.apps", fail);
+      requirements = {
+        browser: bool(r.browser, "requires.browser", fail),
+        fs: bool(r.fs, "requires.fs", fail),
+        gpu: bool(r.gpu, "requires.gpu", fail),
+        secrets: stringList(r.secrets, "requires.secrets", fail),
+        apps
+      };
+      if (apps.length > 0) requires = apps;
+    } else {
+      throw fail("'requires' must be an array of strings or an object { browser, fs, gpu, secrets, apps }.");
+    }
+  }
+  let exposes = { agents: [], workflows: [] };
+  if (input.exposes !== void 0) {
+    if (!isRecord(input.exposes)) throw fail("'exposes' must be an object { agents, workflows }.");
+    const agents = stringList(input.exposes.agents, "exposes.agents", fail);
+    const workflows = stringList(input.exposes.workflows, "exposes.workflows", fail);
+    for (const id of agents) {
+      if (!declared.agents.includes(id)) {
+        throw fail(
+          `'exposes.agents' names '${id}' but the app declares no such agent. Declared: [${declared.agents.join(", ") || "none"}].`
+        );
+      }
+    }
+    for (const id of workflows) {
+      if (!declared.workflows.includes(id)) {
+        throw fail(
+          `'exposes.workflows' names '${id}' but the app declares no such workflow. Declared: [${declared.workflows.join(", ") || "none"}].`
+        );
+      }
+    }
+    exposes = { agents, workflows };
+  }
+  let accepts = { tasks: false };
+  if (input.accepts !== void 0) {
+    if (!isRecord(input.accepts)) throw fail("'accepts' must be an object { tasks }.");
+    accepts = { tasks: bool(input.accepts.tasks, "accepts.tasks", fail) };
+  }
+  return { placement, requires, requirements, exposes, accepts };
+}
+
 // src/define-app.ts
 var AppDefinitionError = class extends Error {
   constructor(message) {
@@ -193,7 +290,23 @@ function defineApp(def) {
   const name = def.name;
   const version = def.version ?? (id ? "0.1.0" : void 0);
   const description = def.description;
-  const requires = def.requires ? Object.freeze([...def.requires]) : void 0;
+  const fields = normalizeManifestFields(
+    { placement: def.placement, requires: def.requires, exposes: def.exposes, accepts: def.accepts },
+    { agents: agents.map((e) => e.agent.id), workflows: workflows.map((w) => w.id) },
+    (msg) => new AppDefinitionError(msg)
+  );
+  const requires = fields.requires ? Object.freeze([...fields.requires]) : void 0;
+  const requirements = Object.freeze({
+    ...fields.requirements,
+    secrets: Object.freeze([...fields.requirements.secrets]),
+    apps: Object.freeze([...fields.requirements.apps])
+  });
+  const placement = fields.placement;
+  const exposes = Object.freeze({
+    agents: Object.freeze([...fields.exposes.agents]),
+    workflows: Object.freeze([...fields.exposes.workflows])
+  });
+  const accepts = Object.freeze({ ...fields.accepts });
   const ui = def.ui ? Object.freeze({ ...def.ui }) : void 0;
   const artifact = def.artifact ? Object.freeze({ ...def.artifact }) : void 0;
   const skill = def.skill ? Object.freeze({ ...def.skill }) : void 0;
@@ -201,6 +314,7 @@ function defineApp(def) {
   const dev = def.dev ? Object.freeze({ launch: Object.freeze(def.dev.launch.map((l) => Object.freeze({ ...l }))) }) : void 0;
   const externalReadRoots = def.externalReadRoots ? Object.freeze([...def.externalReadRoots]) : void 0;
   const data = def.data ? Object.freeze({ ...def.data }) : void 0;
+  const boundaries = def.boundaries ? Object.freeze({ ...def.boundaries }) : void 0;
   const category = def.category;
   validateAttachment(agents, workflows);
   validateUniqueIds(tools, "tool");
@@ -222,6 +336,10 @@ function defineApp(def) {
     ...version !== void 0 ? { version } : {},
     ...description !== void 0 ? { description } : {},
     ...requires !== void 0 ? { requires } : {},
+    requirements,
+    placement,
+    exposes,
+    accepts,
     ...ui !== void 0 ? { ui } : {},
     ...artifact !== void 0 ? { artifact } : {},
     ...skill !== void 0 ? { skill } : {},
@@ -229,6 +347,7 @@ function defineApp(def) {
     ...dev !== void 0 ? { dev } : {},
     ...data !== void 0 ? { data } : {},
     ...externalReadRoots !== void 0 ? { externalReadRoots } : {},
+    ...boundaries !== void 0 ? { boundaries } : {},
     ...category !== void 0 ? { category } : {},
     async toMastraAgents(opts, only) {
       const targets = only ? selectAgents(frozenAgents, only) : frozenAgents;
@@ -260,6 +379,10 @@ function defineApp(def) {
           ...version !== void 0 ? { version } : {},
           ...description !== void 0 ? { description } : {},
           ...requires !== void 0 ? { requires } : {},
+          requirements,
+          placement,
+          exposes,
+          accepts,
           ...ui !== void 0 ? { ui } : {},
           ...artifact !== void 0 ? { artifact } : {},
           ...skill !== void 0 ? { skill } : {},
@@ -267,6 +390,7 @@ function defineApp(def) {
           ...dev !== void 0 ? { dev } : {},
           ...data !== void 0 ? { data } : {},
           ...externalReadRoots !== void 0 ? { externalReadRoots } : {},
+          ...boundaries !== void 0 ? { boundaries } : {},
           ...category !== void 0 ? { category } : {}
         },
         dir
@@ -527,6 +651,54 @@ async function resolveAppUIRoot(appDir) {
   }
   return dirname(resolveRef(appDir, path));
 }
+function parseUiBuildFrontmatter(raw, appMdPath) {
+  if (raw === void 0) return void 0;
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    throw new AppLoadError(`'${appMdPath}': frontmatter 'ui.build' must be an object.`);
+  }
+  const command = raw.command;
+  if (typeof command !== "string" || command.trim() === "") {
+    throw new AppLoadError(`'${appMdPath}': frontmatter 'ui.build.command' must be a non-empty string.`);
+  }
+  const cwd = raw.cwd;
+  if (cwd !== void 0 && (typeof cwd !== "string" || cwd.trim() === "")) {
+    throw new AppLoadError(`'${appMdPath}': frontmatter 'ui.build.cwd' must be a non-empty string.`);
+  }
+  const sources = raw.sources;
+  if (sources !== void 0 && (!Array.isArray(sources) || !sources.every((s) => typeof s === "string" && s.trim() !== ""))) {
+    throw new AppLoadError(
+      `'${appMdPath}': frontmatter 'ui.build.sources' must be an array of non-empty strings.`
+    );
+  }
+  return {
+    command,
+    ...cwd !== void 0 ? { cwd } : {},
+    ...sources !== void 0 ? { sources } : {}
+  };
+}
+async function peekAppUi(appDir) {
+  const appMdPath = join(appDir, ".agentproto", "APP.md");
+  let source;
+  try {
+    source = await readFile(appMdPath, "utf8");
+  } catch {
+    return void 0;
+  }
+  const data = matter2(source).data;
+  const ui = data.ui;
+  if (ui === void 0) return void 0;
+  if (typeof ui !== "object" || ui === null || Array.isArray(ui)) {
+    throw new AppLoadError(`'${appMdPath}': frontmatter 'ui' must be an object.`);
+  }
+  const path = ui.path;
+  if (typeof path !== "string" || path.trim() === "") {
+    throw new AppLoadError(
+      `'${appMdPath}': frontmatter 'ui.path' must be a non-empty string.`
+    );
+  }
+  const build = parseUiBuildFrontmatter(ui.build, appMdPath);
+  return { path: resolveRef(appDir, path), ...build ? { build } : {} };
+}
 function isRefArray(v) {
   return Array.isArray(v) && v.every(
     (e) => typeof e === "object" && e !== null && typeof e.id === "string" && typeof e.path === "string"
@@ -546,11 +718,11 @@ function parseAppFrontmatter(data, appPath) {
       `'${appPath}': frontmatter 'workflows' must be an array of { id, path }.`
     );
   }
-  if (data.requires !== void 0) {
-    if (!Array.isArray(data.requires) || !data.requires.every((e) => typeof e === "string")) {
-      throw new AppLoadError(`'${appPath}': frontmatter 'requires' must be an array of strings.`);
-    }
-  }
+  normalizeManifestFields(
+    data,
+    { agents: data.agents.map((a) => a.id), workflows: data.workflows.map((w) => w.id) },
+    (msg) => new AppLoadError(`'${appPath}': frontmatter ${msg}`)
+  );
   if (data.data !== void 0) {
     const d = data.data;
     if (typeof d !== "object" || d === null || d.dir !== void 0 && (typeof d.dir !== "string" || d.dir.trim() === "")) {
@@ -566,6 +738,14 @@ function parseAppFrontmatter(data, appPath) {
       );
     }
   }
+  if (data.boundaries !== void 0) {
+    const b = data.boundaries;
+    if (typeof b !== "object" || b === null || Array.isArray(b) || b.enforce !== void 0 && b.enforce !== "required" && b.enforce !== "best-effort") {
+      throw new AppLoadError(
+        `'${appPath}': frontmatter 'boundaries' must be an object whose optional 'enforce' is "required" or "best-effort".`
+      );
+    }
+  }
   if (data.category !== void 0 && (typeof data.category !== "string" || data.category.trim() === "")) {
     throw new AppLoadError(`'${appPath}': frontmatter 'category' must be a non-empty string.`);
   }
@@ -654,13 +834,15 @@ async function loadAppHandle(dir) {
         `ui: cannot read '${uiPath}': ${err instanceof Error ? err.message : String(err)}`
       );
     }
+    const build = parseUiBuildFrontmatter(fm.ui.build, appPath);
     ui = {
       html,
       ...fm.ui.title !== void 0 ? { title: fm.ui.title } : {},
       ...fm.ui.description !== void 0 ? { description: fm.ui.description } : {},
       ...fm.ui.tools !== void 0 ? { tools: fm.ui.tools } : {},
       ...fm.ui.port !== void 0 ? { port: fm.ui.port } : {},
-      ...fm.ui.csp !== void 0 ? { csp: fm.ui.csp } : {}
+      ...fm.ui.csp !== void 0 ? { csp: fm.ui.csp } : {},
+      ...build !== void 0 ? { build } : {}
     };
   }
   return defineApp({
@@ -674,6 +856,9 @@ async function loadAppHandle(dir) {
     ...fm.version !== void 0 ? { version: fm.version } : {},
     ...fm.description !== void 0 ? { description: fm.description } : {},
     ...fm.requires !== void 0 ? { requires: fm.requires } : {},
+    ...fm.placement !== void 0 ? { placement: fm.placement } : {},
+    ...fm.exposes !== void 0 ? { exposes: fm.exposes } : {},
+    ...fm.accepts !== void 0 ? { accepts: fm.accepts } : {},
     ...ui !== void 0 ? { ui } : {},
     ...fm.artifact !== void 0 ? { artifact: { path: resolveRef(dir, fm.artifact.path), ...fm.artifact.title !== void 0 ? { title: fm.artifact.title } : {}, ...fm.artifact.description !== void 0 ? { description: fm.artifact.description } : {} } } : {},
     ...fm.skill !== void 0 ? { skill: { path: resolveRef(dir, fm.skill.path), ...fm.skill.title !== void 0 ? { title: fm.skill.title } : {}, ...fm.skill.description !== void 0 ? { description: fm.skill.description } : {} } } : {},
@@ -681,10 +866,230 @@ async function loadAppHandle(dir) {
     ...fm.dev !== void 0 ? { dev: fm.dev } : {},
     ...fm.data !== void 0 ? { data: fm.data } : {},
     ...fm.externalReadRoots !== void 0 ? { externalReadRoots: fm.externalReadRoots } : {},
+    ...fm.boundaries !== void 0 ? { boundaries: fm.boundaries } : {},
     ...fm.category !== void 0 ? { category: fm.category } : {}
   });
 }
+var AGENTAPP_FORMAT = "agentapp/v1";
+var DEFAULT_VERSION = "0.1.0";
+var SKIP_DIR_NAMES = /* @__PURE__ */ new Set(["node_modules", ".git"]);
+var AgentAppPackError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "AgentAppPackError";
+    this.code = code;
+  }
+};
+async function pathExists(p) {
+  try {
+    await stat(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function safeId(id) {
+  return String(id || "app").replace(/^@/, "").replace(/[^A-Za-z0-9._-]+/g, "-");
+}
+function isManifest(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const m = value;
+  return typeof m.format === "string" && typeof m.id === "string" && typeof m.version === "string" && Array.isArray(m.agents) && Array.isArray(m.workflows) && Array.isArray(m.files) && typeof m.fileCount === "number" && typeof m.totalSize === "number" && typeof m.sha256 === "string";
+}
+async function collectFiles(root) {
+  const files = [];
+  async function walk(relDir) {
+    const absDir = join(root, relDir);
+    for (const entry of await readdir(absDir, { withFileTypes: true })) {
+      if (entry.isDirectory() && SKIP_DIR_NAMES.has(entry.name)) continue;
+      const rel = relDir ? join(relDir, entry.name) : entry.name;
+      const abs = join(absDir, entry.name);
+      if (entry.isDirectory()) {
+        await walk(rel);
+      } else if (entry.isFile()) {
+        const st = await stat(abs);
+        files.push({ path: rel, size: st.size });
+      }
+    }
+  }
+  await walk("");
+  return files;
+}
+async function aggregateSha256(root, files) {
+  const hash = createHash("sha256");
+  for (const file of files) {
+    hash.update(await readFile(join(root, file)));
+  }
+  return hash.digest("hex");
+}
+function runTar(args, opts) {
+  return new Promise((resolvePromise, reject) => {
+    const child = spawn("tar", args, { stdio: "ignore", cwd: opts?.cwd });
+    child.once("error", reject);
+    child.once("exit", (code) => resolvePromise(code ?? 0));
+  });
+}
+function extractIds(value) {
+  if (!Array.isArray(value)) return [];
+  const out = [];
+  for (const entry of value) {
+    if (typeof entry === "string") {
+      if (entry) out.push(entry);
+    } else if (entry && typeof entry === "object") {
+      const id = entry.id;
+      if (typeof id === "string" && id) out.push(id);
+    }
+  }
+  return out;
+}
+function extractPaths(front, key) {
+  const value = front[key];
+  if (value === void 0 || value === null) return void 0;
+  const items = Array.isArray(value) ? value : [value];
+  const out = [];
+  for (const item of items) {
+    if (typeof item === "string") {
+      if (item) out.push(basename(item));
+    } else if (item && typeof item === "object") {
+      const p = item.path;
+      if (typeof p === "string" && p) out.push(basename(p));
+    }
+  }
+  return out.length > 0 ? out : void 0;
+}
+function extractMeta(front) {
+  const id = typeof front.id === "string" && front.id.length > 0 ? front.id : typeof front.slug === "string" && front.slug.length > 0 ? front.slug : "app";
+  const version = typeof front.version === "string" && front.version.length > 0 ? front.version : DEFAULT_VERSION;
+  const name = typeof front.name === "string" ? front.name : void 0;
+  const description = typeof front.description === "string" ? front.description : void 0;
+  const ui = extractPaths(front, "ui");
+  return {
+    id,
+    ...name !== void 0 ? { name } : {},
+    version,
+    ...description !== void 0 ? { description } : {},
+    agents: extractIds(front.agents),
+    workflows: extractIds(front.workflows),
+    ...ui !== void 0 ? { ui } : {}
+  };
+}
+async function packApp(input) {
+  const appDirAbs = resolve(input.appDir);
+  const appMdPath = join(appDirAbs, ".agentproto", "APP.md");
+  if (!await pathExists(appMdPath)) {
+    throw new AgentAppPackError(
+      "not-an-app",
+      `${appDirAbs} is not an agentproto app (missing ${appMdPath}).`
+    );
+  }
+  const raw = await readFile(appMdPath, "utf8");
+  const front = matter2(raw).data;
+  const meta = extractMeta(front);
+  const outAbs = input.out !== void 0 ? resolve(input.out) : resolve(process.cwd(), `${safeId(meta.id)}-${meta.version}.agentapp`);
+  await mkdir(dirname(outAbs), { recursive: true });
+  const files = (await collectFiles(appDirAbs)).filter((f) => f.path !== "manifest.json").filter((f) => join(appDirAbs, f.path) !== outAbs).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+  const fileCount = files.length;
+  const totalSize = files.reduce((sum, f) => sum + f.size, 0);
+  const sha256 = await aggregateSha256(
+    appDirAbs,
+    files.map((f) => f.path)
+  );
+  const manifest = {
+    format: AGENTAPP_FORMAT,
+    id: meta.id,
+    ...meta.name !== void 0 ? { name: meta.name } : {},
+    version: meta.version,
+    ...meta.description !== void 0 ? { description: meta.description } : {},
+    agents: meta.agents,
+    workflows: meta.workflows,
+    ...meta.ui !== void 0 ? { ui: meta.ui } : {},
+    files: files.map((f) => f.path),
+    fileCount,
+    totalSize,
+    sha256,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    agentprotoVersion: ">=0.1.0"
+  };
+  const staging = await mkdtemp(join(tmpdir(), "agentapp-"));
+  try {
+    await cp(appDirAbs, staging, {
+      recursive: true,
+      filter: (source) => !SKIP_DIR_NAMES.has(basename(source))
+    });
+    await writeFile(join(staging, "manifest.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
+    const entries = (await readdir(staging)).sort();
+    const packCode = await runTar(["-czf", outAbs, ...entries], { cwd: staging });
+    if (packCode !== 0) {
+      throw new AgentAppPackError("tar-failed", `tar failed with exit code ${packCode}`);
+    }
+  } finally {
+    await rm(staging, { recursive: true, force: true });
+  }
+  return { file: outAbs, manifest };
+}
+function isUnsafeBundlePath(p) {
+  if (p === "" || isAbsolute(p)) return true;
+  return p.split(/[\\/]/).includes("..");
+}
+async function unpackApp(input) {
+  const bundleAbs = resolve(input.file);
+  if (!await pathExists(bundleAbs)) {
+    throw new AgentAppPackError("bundle-not-found", `bundle not found: ${bundleAbs}`);
+  }
+  const temp = await mkdtemp(join(tmpdir(), "agentapp-"));
+  try {
+    const unpackCode = await runTar(["-xzf", bundleAbs, "-C", temp]);
+    if (unpackCode !== 0) {
+      throw new AgentAppPackError("tar-failed", `tar failed with exit code ${unpackCode}`);
+    }
+    const manifestPath = join(temp, "manifest.json");
+    if (!await pathExists(manifestPath)) {
+      throw new AgentAppPackError(
+        "missing-manifest",
+        `${bundleAbs} is not a valid .agentapp (missing manifest.json).`
+      );
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(await readFile(manifestPath, "utf8"));
+    } catch {
+      throw new AgentAppPackError("malformed-manifest", `${bundleAbs} has a malformed manifest.json.`);
+    }
+    if (!isManifest(parsed)) {
+      throw new AgentAppPackError("malformed-manifest", `${bundleAbs} has a malformed manifest.json.`);
+    }
+    const manifest = parsed;
+    if (manifest.format !== AGENTAPP_FORMAT) {
+      throw new AgentAppPackError(
+        "unsupported-format",
+        `unsupported bundle format '${manifest.format}' (expected ${AGENTAPP_FORMAT}).`
+      );
+    }
+    const unsafe = manifest.files.find((f) => typeof f !== "string" || isUnsafeBundlePath(f));
+    if (unsafe !== void 0) {
+      throw new AgentAppPackError(
+        "unsafe-path",
+        `manifest.json lists a path outside the bundle root: ${JSON.stringify(unsafe)}.`
+      );
+    }
+    const actual = await aggregateSha256(temp, manifest.files);
+    if (actual !== manifest.sha256) {
+      throw new AgentAppPackError(
+        "digest-mismatch",
+        `SHA-256 mismatch (expected ${manifest.sha256}, got ${actual}). Bundle is corrupted.`
+      );
+    }
+    const outDir = input.dest !== void 0 ? resolve(input.dest) : resolve(process.cwd(), `${safeId(manifest.id)}-${manifest.version}`);
+    await rm(manifestPath, { force: true });
+    await mkdir(outDir, { recursive: true });
+    await cp(temp, outDir, { recursive: true });
+    return { dir: outDir, manifest };
+  } finally {
+    await rm(temp, { recursive: true, force: true });
+  }
+}
 
-export { AppDefinitionError, AppLoadError, defineApp, emitApp, loadAppBundledTools, loadAppHandle, refKey, resolveAppUIRoot, stripOwner };
+export { AGENTAPP_FORMAT, AgentAppPackError, AppDefinitionError, AppLoadError, aggregateSha256, collectFiles, defineApp, emitApp, isManifest, loadAppBundledTools, loadAppHandle, packApp, peekAppUi, refKey, resolveAppUIRoot, safeId, stripOwner, unpackApp };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map