@agimon-ai/doompi-core 0.0.1-alpha.70

package/dist/schemas/remoteApiContracts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteApiContracts.mjs","names":[],"sources":["../../src/schemas/remoteApiContracts.ts"],"sourcesContent":["import { Type, type TSchema } from 'typebox';\n\nimport type { DoomHttpContract } from './apiContracts';\nimport { ApiErrorSchema, ApiOkSchema, jsonApiResponses } from './httpApiContracts';\n\nconst Text = Type.String();\nconst NumberValue = Type.Number();\nconst Optional = Type.Optional;\nconst Flag = Type.Boolean();\nconst JsonObject = Type.Record(\n  Text,\n  Type.Unknown({\n    description: 'WebAuthn ceremony fields supplied and verified by the installed WebAuthn implementation.',\n  }),\n);\nconst Tunnel = Type.Union([\n  Type.Object({ kind: Type.Literal('quick') }),\n  Type.Object({\n    kind: Type.Literal('named'),\n    hostname: Text,\n    name: Optional(Text),\n    tokenFile: Optional(Text),\n    configFile: Optional(Text),\n  }),\n]);\nconst Settings = Type.Object({\n  autoCloseEnabled: Flag,\n  autoCloseMinutes: NumberValue,\n  sessionExpiryEnabled: Flag,\n  idleMinutes: NumberValue,\n  absoluteHours: NumberValue,\n  tunnel: Tunnel,\n  sandbox: Type.Object({ enabled: Flag, workspaces: Type.Array(Text) }),\n});\nconst State = Type.Object({\n  status: Type.Union([Type.Literal('off'), Type.Literal('starting'), Type.Literal('on'), Type.Literal('failed')]),\n  publicUrl: Optional(Text),\n  startedAt: Optional(Text),\n  closesAt: Optional(Text),\n  error: Optional(Text),\n  devices: Type.Array(\n    Type.Object({ id: Text, label: Text, userAgent: Text, createdAt: Text, lastSeenAt: Text, self: Flag }),\n  ),\n  pending: Type.Array(Type.Object({ id: Text, userAgent: Text, edgeIp: Text, createdAt: Text, expiresAt: Text })),\n  settings: Settings,\n});\nconst StateResponse = Type.Object({ state: State, handingOver: Optional(Flag) });\nconst Trust = Type.Object({ publicKey: Text, fingerprint: Text, revision: NumberValue });\nconst Begun = Type.Object({ ceremonyId: Text, options: JsonObject });\nconst Finish = Type.Object({ ceremonyId: Text, response: JsonObject });\nexport const SealedEnvelopeSchema = Type.Object({ v: Type.Literal(1), n: Text, c: Text });\nexport const SealedHttpRequestSchema = Type.Object({\n  v: Type.Literal(1),\n  method: Text,\n  target: Text,\n  headers: Type.Array(Type.Tuple([Text, Text])),\n  body: Optional(Text),\n});\nexport const SealedHttpResponseSchema = Type.Object({\n  v: Type.Literal(1),\n  status: NumberValue,\n  headers: Type.Array(Type.Tuple([Text, Text])),\n  body: Text,\n});\nconst route = (\n  id: string,\n  path: string,\n  method: DoomHttpContract['method'],\n  result: TSchema,\n  input?: TSchema,\n  extra: Partial<DoomHttpContract> = {},\n): DoomHttpContract => ({\n  id: `remote.${id}`,\n  path: `/api/remote${path}`,\n  method,\n  scope: 'global',\n  authentication: 'owner',\n  description: `Remote Control ${id}.`,\n  availability:\n    'Global host provides Remote Control. Tunnel routes additionally enforce device, origin and step-up policy.',\n  responses: { ...jsonApiResponses(result), '429': { description: 'Rate limit exceeded', schema: ApiErrorSchema } },\n  ...(input ? { body: { contentType: 'application/json', required: true, schema: input } } : {}),\n  ...extra,\n});\nconst direct: DoomHttpContract[] = [\n  route('state', '', 'GET', StateResponse),\n  route('enable', '/enable', 'POST', StateResponse, undefined, {\n    responses: {\n      ...jsonApiResponses(StateResponse),\n      '202': { description: 'Container handover started', schema: StateResponse },\n    },\n  }),\n  route('disable', '/disable', 'POST', StateResponse, undefined, {\n    responses: {\n      ...jsonApiResponses(StateResponse),\n      '202': { description: 'Tunnel closing', schema: Type.Object({ status: Type.Literal('closing') }) },\n    },\n  }),\n  route(\n    'codes',\n    '/codes',\n    'POST',\n    Type.Object({ ...Trust.properties, code: Text, manualCode: Text, pairUrl: Text, expiresAt: Text }),\n    undefined,\n    {\n      responses: jsonApiResponses(\n        Type.Object({ ...Trust.properties, code: Text, manualCode: Text, pairUrl: Text, expiresAt: Text }),\n        201,\n      ),\n    },\n  ),\n  route('approve', '/pairing/{id}/approve', 'POST', StateResponse),\n  route('deny', '/pairing/{id}/deny', 'POST', StateResponse),\n  route('revoke', '/devices/{id}', 'DELETE', StateResponse),\n  route('settings', '/settings', 'PUT', Type.Object({ settings: Settings }), Type.Partial(Settings)),\n  route(\n    'passkeys',\n    '/passkeys',\n    'GET',\n    Type.Object({\n      support: Type.Union([\n        Type.Object({ supported: Type.Literal(true), rpId: Text }),\n        Type.Object({ supported: Type.Literal(false), reason: Text }),\n      ]),\n      credentials: Type.Array(Type.Object({ id: Text, label: Text, createdAt: Text, lastUsedAt: Text })),\n    }),\n  ),\n  route('passkeys.remove', '/passkeys/{id}', 'DELETE', ApiOkSchema),\n  route('register.begin', '/passkeys/register/begin', 'POST', Begun, undefined, { authentication: 'device' }),\n  route('register.finish', '/passkeys/register/finish', 'POST', Type.Object({ id: Text }), Finish, {\n    authentication: 'device',\n  }),\n  route('authenticate.begin', '/passkeys/authenticate/begin', 'POST', Begun, undefined, { authentication: 'none' }),\n  route(\n    'authenticate.finish',\n    '/passkeys/authenticate/finish',\n    'POST',\n    Type.Object({ ok: Type.Literal(true), hostPublicKey: Text }),\n    Finish,\n    { authentication: 'none' },\n  ),\n  route('challenge', '/challenge', 'POST', Begun, Type.Object({ action: Text }), { authentication: 'device' }),\n  route(\n    'channel',\n    '/channel',\n    'POST',\n    ApiOkSchema,\n    Type.Object({\n      clientPublicKey: Text,\n      scope: Type.Union([Type.Literal('session'), Type.Literal('protocol'), Type.Literal('http')]),\n    }),\n    { authentication: 'device' },\n  ),\n  route('request', '/request', 'POST', SealedEnvelopeSchema, SealedEnvelopeSchema, {\n    authentication: 'device',\n    description:\n      'Sealed HTTP gateway. Decrypted requests/responses use the SealedHttpRequest and SealedHttpResponse envelopes.',\n  }),\n  route(\n    'pair',\n    '/pair',\n    'POST',\n    Type.Object({ requestId: Text, status: Type.Literal('pending') }),\n    Type.Object({ code: Type.String({ minLength: 1 }) }),\n    {\n      authentication: 'none',\n      responses: {\n        ...jsonApiResponses(Type.Object({ requestId: Text, status: Type.Literal('pending') }), 202),\n        '410': { description: 'Pairing code is no longer valid', schema: ApiErrorSchema },\n      },\n    },\n  ),\n  route(\n    'pair.status',\n    '/pair/status',\n    'GET',\n    Type.Object({\n      status: Type.Union([\n        Type.Literal('pending'),\n        Type.Literal('approved'),\n        Type.Literal('denied'),\n        Type.Literal('expired'),\n        Type.Literal('consumed'),\n      ]),\n      bundleTrust: Optional(Trust),\n      hostPublicKey: Optional(Text),\n    }),\n    undefined,\n    { authentication: 'none', parameters: [{ name: 'request', in: 'query', required: true, schema: Text }] },\n  ),\n];\nexport const remoteHttpContracts: DoomHttpContract[] = [\n  route('frontend', '/frontend', 'POST', ApiOkSchema, Type.Object({ origin: Text }), {\n    authentication: 'owner',\n    availability: 'Internal loopback frontend registration; blocked by the browser proxy.',\n    parameters: [{ name: 'x-doompi-web-registration', in: 'header', required: true, schema: Text }],\n  }),\n  ...direct,\n  ...direct.map((operation) => ({\n    ...operation,\n    id: `${operation.id}.plugin`,\n    basePath: 'remote',\n    path: operation.path.slice('/api/remote'.length) || '/',\n    authentication: 'owner' as const,\n    availability: 'Global Remote Control plugin mount, reached through the authenticated headless listener.',\n  })),\n  {\n    id: 'remote.pair.page',\n    scope: 'global',\n    path: '/pair',\n    method: 'GET',\n    authentication: 'none',\n    availability: 'Remote listener only',\n    description: 'Pairing and passkey bootstrap page.',\n    responses: { '200': { description: 'Pairing page', contentType: 'text/html', schema: Text } },\n  },\n];\nconst Asset = Type.Object({\n  path: Text,\n  sha256: Type.String({ pattern: '^[a-f0-9]{64}$' }),\n  byteLength: Type.Integer({ minimum: 0 }),\n  contentType: Text,\n});\nconst Signed = Type.Object({\n  manifest: Type.Object({\n    version: Type.Literal(2),\n    revision: Type.Integer({ minimum: 1 }),\n    builtAt: NumberValue,\n    assets: Type.Array(Asset),\n  }),\n  signature: Text,\n  publicKey: Text,\n});\nexport const bundleHttpContracts: DoomHttpContract[] = [\n  ...['/bundle-manifest.json', '/api/web-plugins/{id}/{revision}/manifest'].flatMap((path) =>\n    (['GET', 'HEAD'] as const).map((method): DoomHttpContract => ({\n      id: `bundle.${path}.${method}`,\n      scope: 'global',\n      path,\n      method,\n      authentication: 'owner',\n      availability: 'Host publishes a web bundle',\n      description: 'Read an immutable signed browser bundle manifest.',\n      responses:\n        method === 'HEAD'\n          ? { '200': { description: 'Manifest response headers' }, '404': { description: 'Bundle not published' } }\n          : jsonApiResponses(Signed),\n    })),\n  ),\n  ...['/bundle-assets/{revision}/{assetPath}', '/api/web-plugins/{id}/{revision}/assets/{assetPath}'].flatMap((path) =>\n    (['GET', 'HEAD'] as const).map((method): DoomHttpContract => ({\n      id: `asset.${path}.${method}`,\n      scope: 'global',\n      path,\n      method,\n      authentication: 'owner',\n      availability: 'Host publishes a web bundle',\n      description: 'Read an asset from the signed manifest. assetPath may contain multiple path segments.',\n      responses: {\n        '200': {\n          description: 'Manifest-listed asset, original MIME type',\n          ...(method === 'GET' ? { contentType: '*/*', schema: Type.String({ contentEncoding: 'binary' }) } : {}),\n        },\n        '404': { description: 'Asset not published' },\n      },\n    })),\n  ),\n];\n"],"mappings":";;;AAKA,MAAM,OAAO,KAAK,OAAO;AACzB,MAAM,cAAc,KAAK,OAAO;AAChC,MAAM,WAAW,KAAK;AACtB,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAM,aAAa,KAAK,OACtB,MACA,KAAK,QAAQ,EACX,aAAa,2FACf,CAAC,CACH;AACA,MAAM,SAAS,KAAK,MAAM,CACxB,KAAK,OAAO,EAAE,MAAM,KAAK,QAAQ,OAAO,EAAE,CAAC,GAC3C,KAAK,OAAO;CACV,MAAM,KAAK,QAAQ,OAAO;CAC1B,UAAU;CACV,MAAM,SAAS,IAAI;CACnB,WAAW,SAAS,IAAI;CACxB,YAAY,SAAS,IAAI;AAC3B,CAAC,CACH,CAAC;AACD,MAAM,WAAW,KAAK,OAAO;CAC3B,kBAAkB;CAClB,kBAAkB;CAClB,sBAAsB;CACtB,aAAa;CACb,eAAe;CACf,QAAQ;CACR,SAAS,KAAK,OAAO;EAAE,SAAS;EAAM,YAAY,KAAK,MAAM,IAAI;CAAE,CAAC;AACtE,CAAC;AACD,MAAM,QAAQ,KAAK,OAAO;CACxB,QAAQ,KAAK,MAAM;EAAC,KAAK,QAAQ,KAAK;EAAG,KAAK,QAAQ,UAAU;EAAG,KAAK,QAAQ,IAAI;EAAG,KAAK,QAAQ,QAAQ;CAAC,CAAC;CAC9G,WAAW,SAAS,IAAI;CACxB,WAAW,SAAS,IAAI;CACxB,UAAU,SAAS,IAAI;CACvB,OAAO,SAAS,IAAI;CACpB,SAAS,KAAK,MACZ,KAAK,OAAO;EAAE,IAAI;EAAM,OAAO;EAAM,WAAW;EAAM,WAAW;EAAM,YAAY;EAAM,MAAM;CAAK,CAAC,CACvG;CACA,SAAS,KAAK,MAAM,KAAK,OAAO;EAAE,IAAI;EAAM,WAAW;EAAM,QAAQ;EAAM,WAAW;EAAM,WAAW;CAAK,CAAC,CAAC;CAC9G,UAAU;AACZ,CAAC;AACD,MAAM,gBAAgB,KAAK,OAAO;CAAE,OAAO;CAAO,aAAa,SAAS,IAAI;AAAE,CAAC;AAC/E,MAAM,QAAQ,KAAK,OAAO;CAAE,WAAW;CAAM,aAAa;CAAM,UAAU;AAAY,CAAC;AACvF,MAAM,QAAQ,KAAK,OAAO;CAAE,YAAY;CAAM,SAAS;AAAW,CAAC;AACnE,MAAM,SAAS,KAAK,OAAO;CAAE,YAAY;CAAM,UAAU;AAAW,CAAC;AACrE,MAAa,uBAAuB,KAAK,OAAO;CAAE,GAAG,KAAK,QAAQ,CAAC;CAAG,GAAG;CAAM,GAAG;AAAK,CAAC;AACxF,MAAa,0BAA0B,KAAK,OAAO;CACjD,GAAG,KAAK,QAAQ,CAAC;CACjB,QAAQ;CACR,QAAQ;CACR,SAAS,KAAK,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;CAC5C,MAAM,SAAS,IAAI;AACrB,CAAC;AACD,MAAa,2BAA2B,KAAK,OAAO;CAClD,GAAG,KAAK,QAAQ,CAAC;CACjB,QAAQ;CACR,SAAS,KAAK,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;CAC5C,MAAM;AACR,CAAC;AACD,MAAM,SACJ,IACA,MACA,QACA,QACA,OACA,QAAmC,CAAC,OACd;CACtB,IAAI,UAAU;CACd,MAAM,cAAc;CACpB;CACA,OAAO;CACP,gBAAgB;CAChB,aAAa,kBAAkB,GAAG;CAClC,cACE;CACF,WAAW;EAAE,GAAG,iBAAiB,MAAM;EAAG,OAAO;GAAE,aAAa;GAAuB,QAAQ;EAAe;CAAE;CAChH,GAAI,QAAQ,EAAE,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQ;CAAM,EAAE,IAAI,CAAC;CAC5F,GAAG;AACL;AACA,MAAM,SAA6B;CACjC,MAAM,SAAS,IAAI,OAAO,aAAa;CACvC,MAAM,UAAU,WAAW,QAAQ,eAAe,KAAA,GAAW,EAC3D,WAAW;EACT,GAAG,iBAAiB,aAAa;EACjC,OAAO;GAAE,aAAa;GAA8B,QAAQ;EAAc;CAC5E,EACF,CAAC;CACD,MAAM,WAAW,YAAY,QAAQ,eAAe,KAAA,GAAW,EAC7D,WAAW;EACT,GAAG,iBAAiB,aAAa;EACjC,OAAO;GAAE,aAAa;GAAkB,QAAQ,KAAK,OAAO,EAAE,QAAQ,KAAK,QAAQ,SAAS,EAAE,CAAC;EAAE;CACnG,EACF,CAAC;CACD,MACE,SACA,UACA,QACA,KAAK,OAAO;EAAE,GAAG,MAAM;EAAY,MAAM;EAAM,YAAY;EAAM,SAAS;EAAM,WAAW;CAAK,CAAC,GACjG,KAAA,GACA,EACE,WAAW,iBACT,KAAK,OAAO;EAAE,GAAG,MAAM;EAAY,MAAM;EAAM,YAAY;EAAM,SAAS;EAAM,WAAW;CAAK,CAAC,GACjG,GACF,EACF,CACF;CACA,MAAM,WAAW,yBAAyB,QAAQ,aAAa;CAC/D,MAAM,QAAQ,sBAAsB,QAAQ,aAAa;CACzD,MAAM,UAAU,iBAAiB,UAAU,aAAa;CACxD,MAAM,YAAY,aAAa,OAAO,KAAK,OAAO,EAAE,UAAU,SAAS,CAAC,GAAG,KAAK,QAAQ,QAAQ,CAAC;CACjG,MACE,YACA,aACA,OACA,KAAK,OAAO;EACV,SAAS,KAAK,MAAM,CAClB,KAAK,OAAO;GAAE,WAAW,KAAK,QAAQ,IAAI;GAAG,MAAM;EAAK,CAAC,GACzD,KAAK,OAAO;GAAE,WAAW,KAAK,QAAQ,KAAK;GAAG,QAAQ;EAAK,CAAC,CAC9D,CAAC;EACD,aAAa,KAAK,MAAM,KAAK,OAAO;GAAE,IAAI;GAAM,OAAO;GAAM,WAAW;GAAM,YAAY;EAAK,CAAC,CAAC;CACnG,CAAC,CACH;CACA,MAAM,mBAAmB,kBAAkB,UAAU,WAAW;CAChE,MAAM,kBAAkB,4BAA4B,QAAQ,OAAO,KAAA,GAAW,EAAE,gBAAgB,SAAS,CAAC;CAC1G,MAAM,mBAAmB,6BAA6B,QAAQ,KAAK,OAAO,EAAE,IAAI,KAAK,CAAC,GAAG,QAAQ,EAC/F,gBAAgB,SAClB,CAAC;CACD,MAAM,sBAAsB,gCAAgC,QAAQ,OAAO,KAAA,GAAW,EAAE,gBAAgB,OAAO,CAAC;CAChH,MACE,uBACA,iCACA,QACA,KAAK,OAAO;EAAE,IAAI,KAAK,QAAQ,IAAI;EAAG,eAAe;CAAK,CAAC,GAC3D,QACA,EAAE,gBAAgB,OAAO,CAC3B;CACA,MAAM,aAAa,cAAc,QAAQ,OAAO,KAAK,OAAO,EAAE,QAAQ,KAAK,CAAC,GAAG,EAAE,gBAAgB,SAAS,CAAC;CAC3G,MACE,WACA,YACA,QACA,aACA,KAAK,OAAO;EACV,iBAAiB;EACjB,OAAO,KAAK,MAAM;GAAC,KAAK,QAAQ,SAAS;GAAG,KAAK,QAAQ,UAAU;GAAG,KAAK,QAAQ,MAAM;EAAC,CAAC;CAC7F,CAAC,GACD,EAAE,gBAAgB,SAAS,CAC7B;CACA,MAAM,WAAW,YAAY,QAAQ,sBAAsB,sBAAsB;EAC/E,gBAAgB;EAChB,aACE;CACJ,CAAC;CACD,MACE,QACA,SACA,QACA,KAAK,OAAO;EAAE,WAAW;EAAM,QAAQ,KAAK,QAAQ,SAAS;CAAE,CAAC,GAChE,KAAK,OAAO,EAAE,MAAM,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,GACnD;EACE,gBAAgB;EAChB,WAAW;GACT,GAAG,iBAAiB,KAAK,OAAO;IAAE,WAAW;IAAM,QAAQ,KAAK,QAAQ,SAAS;GAAE,CAAC,GAAG,GAAG;GAC1F,OAAO;IAAE,aAAa;IAAmC,QAAQ;GAAe;EAClF;CACF,CACF;CACA,MACE,eACA,gBACA,OACA,KAAK,OAAO;EACV,QAAQ,KAAK,MAAM;GACjB,KAAK,QAAQ,SAAS;GACtB,KAAK,QAAQ,UAAU;GACvB,KAAK,QAAQ,QAAQ;GACrB,KAAK,QAAQ,SAAS;GACtB,KAAK,QAAQ,UAAU;EACzB,CAAC;EACD,aAAa,SAAS,KAAK;EAC3B,eAAe,SAAS,IAAI;CAC9B,CAAC,GACD,KAAA,GACA;EAAE,gBAAgB;EAAQ,YAAY,CAAC;GAAE,MAAM;GAAW,IAAI;GAAS,UAAU;GAAM,QAAQ;EAAK,CAAC;CAAE,CACzG;AACF;AACA,MAAa,sBAA0C;CACrD,MAAM,YAAY,aAAa,QAAQ,aAAa,KAAK,OAAO,EAAE,QAAQ,KAAK,CAAC,GAAG;EACjF,gBAAgB;EAChB,cAAc;EACd,YAAY,CAAC;GAAE,MAAM;GAA6B,IAAI;GAAU,UAAU;GAAM,QAAQ;EAAK,CAAC;CAChG,CAAC;CACD,GAAG;CACH,GAAG,OAAO,KAAK,eAAe;EAC5B,GAAG;EACH,IAAI,GAAG,UAAU,GAAG;EACpB,UAAU;EACV,MAAM,UAAU,KAAK,MAAM,EAAoB,KAAK;EACpD,gBAAgB;EAChB,cAAc;CAChB,EAAE;CACF;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,QAAQ;EACR,gBAAgB;EAChB,cAAc;EACd,aAAa;EACb,WAAW,EAAE,OAAO;GAAE,aAAa;GAAgB,aAAa;GAAa,QAAQ;EAAK,EAAE;CAC9F;AACF;AACA,MAAM,QAAQ,KAAK,OAAO;CACxB,MAAM;CACN,QAAQ,KAAK,OAAO,EAAE,SAAS,iBAAiB,CAAC;CACjD,YAAY,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;CACvC,aAAa;AACf,CAAC;AACD,MAAM,SAAS,KAAK,OAAO;CACzB,UAAU,KAAK,OAAO;EACpB,SAAS,KAAK,QAAQ,CAAC;EACvB,UAAU,KAAK,QAAQ,EAAE,SAAS,EAAE,CAAC;EACrC,SAAS;EACT,QAAQ,KAAK,MAAM,KAAK;CAC1B,CAAC;CACD,WAAW;CACX,WAAW;AACb,CAAC;AACD,MAAa,sBAA0C,CACrD,GAAG,CAAC,yBAAyB,2CAA2C,CAAC,CAAC,SAAS,SAChF,CAAC,OAAO,MAAM,CAAC,CAAW,KAAK,YAA8B;CAC5D,IAAI,UAAU,KAAK,GAAG;CACtB,OAAO;CACP;CACA;CACA,gBAAgB;CAChB,cAAc;CACd,aAAa;CACb,WACE,WAAW,SACP;EAAE,OAAO,EAAE,aAAa,4BAA4B;EAAG,OAAO,EAAE,aAAa,uBAAuB;CAAE,IACtG,iBAAiB,MAAM;AAC/B,EAAE,CACJ,GACA,GAAG,CAAC,yCAAyC,qDAAqD,CAAC,CAAC,SAAS,SAC1G,CAAC,OAAO,MAAM,CAAC,CAAW,KAAK,YAA8B;CAC5D,IAAI,SAAS,KAAK,GAAG;CACrB,OAAO;CACP;CACA;CACA,gBAAgB;CAChB,cAAc;CACd,aAAa;CACb,WAAW;EACT,OAAO;GACL,aAAa;GACb,GAAI,WAAW,QAAQ;IAAE,aAAa;IAAO,QAAQ,KAAK,OAAO,EAAE,iBAAiB,SAAS,CAAC;GAAE,IAAI,CAAC;EACvG;EACA,OAAO,EAAE,aAAa,sBAAsB;CAC9C;AACF,EAAE,CACJ,CACF"}

package/dist/schemas/sandboxHarness.cjs

@@ -0,0 +1,29 @@
+//#region src/schemas/sandboxHarness.ts
+/**
+* Sandbox harness contract.
+*
+* A layer package that owns sandboxed launches exports a module at the
+* `./sandbox-harness` subpath. The harness resolves that module from the
+* selected composition and delegates the whole launch to it, so core never
+* depends on a concrete sandbox technology.
+*/
+/** Exports subpath a sandbox-owning layer package declares. */
+const SANDBOX_HARNESS_EXPORT_SUBPATH = "./sandbox-harness";
+/** Marks a process that already runs inside a DoomPi sandbox. */
+const DOOMPI_SANDBOX_ENV = "DOOMPI_SANDBOX";
+const SANDBOX_FLAG = "1";
+/** True inside a sandboxed session, which is how a provider refuses to nest. */
+function insideSandbox(environment = process.env) {
+	return environment[DOOMPI_SANDBOX_ENV] === SANDBOX_FLAG;
+}
+/** Narrowing guard for a dynamically imported sandbox harness entry. */
+function isSandboxHarnessModule(value) {
+	return typeof value === "object" && value !== null && typeof value.launchSandbox === "function";
+}
+//#endregion
+exports.DOOMPI_SANDBOX_ENV = DOOMPI_SANDBOX_ENV;
+exports.SANDBOX_HARNESS_EXPORT_SUBPATH = SANDBOX_HARNESS_EXPORT_SUBPATH;
+exports.insideSandbox = insideSandbox;
+exports.isSandboxHarnessModule = isSandboxHarnessModule;
+
+//# sourceMappingURL=sandboxHarness.cjs.map

package/dist/schemas/sandboxHarness.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxHarness.cjs","names":[],"sources":["../../src/schemas/sandboxHarness.ts"],"sourcesContent":["/**\n * Sandbox harness contract.\n *\n * A layer package that owns sandboxed launches exports a module at the\n * `./sandbox-harness` subpath. The harness resolves that module from the\n * selected composition and delegates the whole launch to it, so core never\n * depends on a concrete sandbox technology.\n */\n\n/** Exports subpath a sandbox-owning layer package declares. */\nexport const SANDBOX_HARNESS_EXPORT_SUBPATH = './sandbox-harness';\n\n/** Marks a process that already runs inside a DoomPi sandbox. */\nexport const DOOMPI_SANDBOX_ENV = 'DOOMPI_SANDBOX';\n\nconst SANDBOX_FLAG = '1';\n\n/** True inside a sandboxed session, which is how a provider refuses to nest. */\nexport function insideSandbox(environment: NodeJS.ProcessEnv = process.env): boolean {\n  return environment[DOOMPI_SANDBOX_ENV] === SANDBOX_FLAG;\n}\n\n/** One sandboxed launch, owned end to end by the providing layer. */\nexport interface SandboxLaunchRequest {\n  /** Repository the sandbox mounts and works against. */\n  repoRoot: string;\n  /** Working directory of the launch, expected to sit inside the mounted repository. */\n  cwd: string;\n  /**\n   * Harness arguments the in-sandbox launcher replays. Never contains the\n   * sandbox flag itself: a sandboxed launch must not provision another.\n   */\n  forwardArgs: string[];\n  /** Host environment the provider filters before any of it enters the sandbox. */\n  environment: NodeJS.ProcessEnv;\n  /** Receives one human-readable line per provisioning decision. */\n  onProgress?: (message: string) => void;\n}\n\nexport interface SandboxHarnessModule {\n  /** Provisions the sandbox, runs the launch inside it, and reports the exit code. */\n  launchSandbox(request: SandboxLaunchRequest): Promise<number>;\n}\n\n/** Narrowing guard for a dynamically imported sandbox harness entry. */\nexport function isSandboxHarnessModule(value: unknown): value is SandboxHarnessModule {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    typeof (value as { launchSandbox?: unknown }).launchSandbox === 'function'\n  );\n}\n"],"mappings":";;;;;;;;;;AAUA,MAAa,iCAAiC;;AAG9C,MAAa,qBAAqB;AAElC,MAAM,eAAe;;AAGrB,SAAgB,cAAc,cAAiC,QAAQ,KAAc;CACnF,OAAO,YAAY,wBAAwB;AAC7C;;AAyBA,SAAgB,uBAAuB,OAA+C;CACpF,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAsC,kBAAkB;AAEpE"}

package/dist/schemas/sandboxHarness.d.cts

@@ -0,0 +1,39 @@
+//#region src/schemas/sandboxHarness.d.ts
+/**
+ * Sandbox harness contract.
+ *
+ * A layer package that owns sandboxed launches exports a module at the
+ * `./sandbox-harness` subpath. The harness resolves that module from the
+ * selected composition and delegates the whole launch to it, so core never
+ * depends on a concrete sandbox technology.
+ */
+/** Exports subpath a sandbox-owning layer package declares. */
+export declare const SANDBOX_HARNESS_EXPORT_SUBPATH = "./sandbox-harness";
+/** Marks a process that already runs inside a DoomPi sandbox. */
+export declare const DOOMPI_SANDBOX_ENV = "DOOMPI_SANDBOX";
+/** True inside a sandboxed session, which is how a provider refuses to nest. */
+export declare function insideSandbox(environment?: NodeJS.ProcessEnv): boolean;
+/** One sandboxed launch, owned end to end by the providing layer. */
+export interface SandboxLaunchRequest {
+  /** Repository the sandbox mounts and works against. */
+  repoRoot: string;
+  /** Working directory of the launch, expected to sit inside the mounted repository. */
+  cwd: string;
+  /**
+   * Harness arguments the in-sandbox launcher replays. Never contains the
+   * sandbox flag itself: a sandboxed launch must not provision another.
+   */
+  forwardArgs: string[];
+  /** Host environment the provider filters before any of it enters the sandbox. */
+  environment: NodeJS.ProcessEnv;
+  /** Receives one human-readable line per provisioning decision. */
+  onProgress?: (message: string) => void;
+}
+export interface SandboxHarnessModule {
+  /** Provisions the sandbox, runs the launch inside it, and reports the exit code. */
+  launchSandbox(request: SandboxLaunchRequest): Promise<number>;
+}
+/** Narrowing guard for a dynamically imported sandbox harness entry. */
+export declare function isSandboxHarnessModule(value: unknown): value is SandboxHarnessModule;
+//#endregion
+//# sourceMappingURL=sandboxHarness.d.cts.map

package/dist/schemas/sandboxHarness.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxHarness.d.cts","names":[],"sources":["../../src/schemas/sandboxHarness.ts"],"mappings":";;;;;;;;;;qBAUa;;qBAGA;;wBAKG,cAAc,cAAa,OAAO;;iBAKjC;;EAEf;;EAEA;;;;;EAKA;;EAEA,aAAa,OAAO;;EAEpB,cAAc;;iBAGC;;EAEf,cAAc,SAAS,uBAAuB;;;wBAIhC,uBAAuB,iBAAiB,SAAS"}

package/dist/schemas/sandboxHarness.d.mts

@@ -0,0 +1,39 @@
+//#region src/schemas/sandboxHarness.d.ts
+/**
+ * Sandbox harness contract.
+ *
+ * A layer package that owns sandboxed launches exports a module at the
+ * `./sandbox-harness` subpath. The harness resolves that module from the
+ * selected composition and delegates the whole launch to it, so core never
+ * depends on a concrete sandbox technology.
+ */
+/** Exports subpath a sandbox-owning layer package declares. */
+export declare const SANDBOX_HARNESS_EXPORT_SUBPATH = "./sandbox-harness";
+/** Marks a process that already runs inside a DoomPi sandbox. */
+export declare const DOOMPI_SANDBOX_ENV = "DOOMPI_SANDBOX";
+/** True inside a sandboxed session, which is how a provider refuses to nest. */
+export declare function insideSandbox(environment?: NodeJS.ProcessEnv): boolean;
+/** One sandboxed launch, owned end to end by the providing layer. */
+export interface SandboxLaunchRequest {
+  /** Repository the sandbox mounts and works against. */
+  repoRoot: string;
+  /** Working directory of the launch, expected to sit inside the mounted repository. */
+  cwd: string;
+  /**
+   * Harness arguments the in-sandbox launcher replays. Never contains the
+   * sandbox flag itself: a sandboxed launch must not provision another.
+   */
+  forwardArgs: string[];
+  /** Host environment the provider filters before any of it enters the sandbox. */
+  environment: NodeJS.ProcessEnv;
+  /** Receives one human-readable line per provisioning decision. */
+  onProgress?: (message: string) => void;
+}
+export interface SandboxHarnessModule {
+  /** Provisions the sandbox, runs the launch inside it, and reports the exit code. */
+  launchSandbox(request: SandboxLaunchRequest): Promise<number>;
+}
+/** Narrowing guard for a dynamically imported sandbox harness entry. */
+export declare function isSandboxHarnessModule(value: unknown): value is SandboxHarnessModule;
+//#endregion
+//# sourceMappingURL=sandboxHarness.d.mts.map

package/dist/schemas/sandboxHarness.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxHarness.d.mts","names":[],"sources":["../../src/schemas/sandboxHarness.ts"],"mappings":";;;;;;;;;;qBAUa;;qBAGA;;wBAKG,cAAc,cAAa,OAAO;;iBAKjC;;EAEf;;EAEA;;;;;EAKA;;EAEA,aAAa,OAAO;;EAEpB,cAAc;;iBAGC;;EAEf,cAAc,SAAS,uBAAuB;;;wBAIhC,uBAAuB,iBAAiB,SAAS"}

package/dist/schemas/sandboxHarness.mjs

@@ -0,0 +1,26 @@
+//#region src/schemas/sandboxHarness.ts
+/**
+* Sandbox harness contract.
+*
+* A layer package that owns sandboxed launches exports a module at the
+* `./sandbox-harness` subpath. The harness resolves that module from the
+* selected composition and delegates the whole launch to it, so core never
+* depends on a concrete sandbox technology.
+*/
+/** Exports subpath a sandbox-owning layer package declares. */
+const SANDBOX_HARNESS_EXPORT_SUBPATH = "./sandbox-harness";
+/** Marks a process that already runs inside a DoomPi sandbox. */
+const DOOMPI_SANDBOX_ENV = "DOOMPI_SANDBOX";
+const SANDBOX_FLAG = "1";
+/** True inside a sandboxed session, which is how a provider refuses to nest. */
+function insideSandbox(environment = process.env) {
+	return environment[DOOMPI_SANDBOX_ENV] === SANDBOX_FLAG;
+}
+/** Narrowing guard for a dynamically imported sandbox harness entry. */
+function isSandboxHarnessModule(value) {
+	return typeof value === "object" && value !== null && typeof value.launchSandbox === "function";
+}
+//#endregion
+export { DOOMPI_SANDBOX_ENV, SANDBOX_HARNESS_EXPORT_SUBPATH, insideSandbox, isSandboxHarnessModule };
+
+//# sourceMappingURL=sandboxHarness.mjs.map

package/dist/schemas/sandboxHarness.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxHarness.mjs","names":[],"sources":["../../src/schemas/sandboxHarness.ts"],"sourcesContent":["/**\n * Sandbox harness contract.\n *\n * A layer package that owns sandboxed launches exports a module at the\n * `./sandbox-harness` subpath. The harness resolves that module from the\n * selected composition and delegates the whole launch to it, so core never\n * depends on a concrete sandbox technology.\n */\n\n/** Exports subpath a sandbox-owning layer package declares. */\nexport const SANDBOX_HARNESS_EXPORT_SUBPATH = './sandbox-harness';\n\n/** Marks a process that already runs inside a DoomPi sandbox. */\nexport const DOOMPI_SANDBOX_ENV = 'DOOMPI_SANDBOX';\n\nconst SANDBOX_FLAG = '1';\n\n/** True inside a sandboxed session, which is how a provider refuses to nest. */\nexport function insideSandbox(environment: NodeJS.ProcessEnv = process.env): boolean {\n  return environment[DOOMPI_SANDBOX_ENV] === SANDBOX_FLAG;\n}\n\n/** One sandboxed launch, owned end to end by the providing layer. */\nexport interface SandboxLaunchRequest {\n  /** Repository the sandbox mounts and works against. */\n  repoRoot: string;\n  /** Working directory of the launch, expected to sit inside the mounted repository. */\n  cwd: string;\n  /**\n   * Harness arguments the in-sandbox launcher replays. Never contains the\n   * sandbox flag itself: a sandboxed launch must not provision another.\n   */\n  forwardArgs: string[];\n  /** Host environment the provider filters before any of it enters the sandbox. */\n  environment: NodeJS.ProcessEnv;\n  /** Receives one human-readable line per provisioning decision. */\n  onProgress?: (message: string) => void;\n}\n\nexport interface SandboxHarnessModule {\n  /** Provisions the sandbox, runs the launch inside it, and reports the exit code. */\n  launchSandbox(request: SandboxLaunchRequest): Promise<number>;\n}\n\n/** Narrowing guard for a dynamically imported sandbox harness entry. */\nexport function isSandboxHarnessModule(value: unknown): value is SandboxHarnessModule {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    typeof (value as { launchSandbox?: unknown }).launchSandbox === 'function'\n  );\n}\n"],"mappings":";;;;;;;;;;AAUA,MAAa,iCAAiC;;AAG9C,MAAa,qBAAqB;AAElC,MAAM,eAAe;;AAGrB,SAAgB,cAAc,cAAiC,QAAQ,KAAc;CACnF,OAAO,YAAY,wBAAwB;AAC7C;;AAyBA,SAAgB,uBAAuB,OAA+C;CACpF,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAAsC,kBAAkB;AAEpE"}

package/dist/schemas/serverBundle.cjs

@@ -0,0 +1,79 @@
+//#region src/schemas/serverBundle.ts
+const DOOM_SERVER_BUNDLE_VERSION = 2;
+const DOOM_SERVER_BUNDLE_FILE = "server.bundle.json";
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function text(value, field) {
+	if (typeof value !== "string" || value.trim() === "" || value.includes("\0")) throw new Error(`Invalid server bundle ${field}`);
+	return value;
+}
+function relativeFile(value, field) {
+	const file = text(value, field);
+	const segments = file.slice(2).split("/");
+	if (!file.startsWith("./") || /[\\%?#]/u.test(file) || segments.some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error(`Invalid server bundle ${field}: expected a contained ./file path`);
+	return file;
+}
+/** Validate the entire descriptor before any package code is imported. */
+function parseDoomServerBundle(value) {
+	if (!record(value) || value.version !== 2) throw new Error("Unsupported server bundle version");
+	const generation = text(value.generation, "generation");
+	const fingerprint = text(value.fingerprint, "fingerprint");
+	if (!/^[a-f0-9]{64}$/u.test(fingerprint)) throw new Error("Invalid server bundle fingerprint");
+	if (!Array.isArray(value.entries)) throw new Error("Invalid server bundle entries");
+	const names = /* @__PURE__ */ new Set();
+	const entries = value.entries.map((candidate) => {
+		if (!record(candidate)) throw new Error("Invalid server bundle entry");
+		const packageName = text(candidate.packageName, "packageName");
+		if (names.has(packageName)) throw new Error(`Duplicate server bundle package: ${packageName}`);
+		names.add(packageName);
+		const entry = relativeFile(candidate.entry, `${packageName} entry`);
+		const module = relativeFile(candidate.module, `${packageName} module`);
+		if (!module.endsWith(".mjs")) throw new Error(`Invalid server bundle ${packageName} module: expected .mjs`);
+		if (!Array.isArray(candidate.scopes) || candidate.scopes.length === 0 || candidate.scopes.some((scope) => scope !== "session" && scope !== "global" && scope !== "workspace") || new Set(candidate.scopes).size !== candidate.scopes.length) throw new Error(`Invalid server bundle ${packageName} scopes`);
+		if (!Array.isArray(candidate.owners) || candidate.owners.length === 0) throw new Error(`Invalid server bundle ${packageName} owners`);
+		const ownership = /* @__PURE__ */ new Set();
+		const owners = candidate.owners.map((owner) => {
+			if (!record(owner)) throw new Error(`Invalid server bundle ${packageName} owner`);
+			const majorMode = text(owner.majorMode, `${packageName} majorMode`);
+			const layer = text(owner.layer, `${packageName} layer`);
+			const key = JSON.stringify([majorMode, layer]);
+			if (ownership.has(key)) throw new Error(`Duplicate server bundle ${packageName} owner`);
+			ownership.add(key);
+			return {
+				majorMode,
+				layer
+			};
+		});
+		if (typeof candidate.required !== "boolean") throw new Error(`Invalid server bundle ${packageName} required`);
+		return {
+			packageName,
+			entry,
+			module,
+			scopes: candidate.scopes,
+			owners,
+			required: candidate.required
+		};
+	});
+	let contracts;
+	if (value.contracts !== void 0) {
+		if (!record(value.contracts) || typeof value.contracts.sha256 !== "string" || !/^[a-f0-9]{64}$/u.test(value.contracts.sha256)) throw new Error("Invalid server bundle contracts");
+		contracts = {
+			file: relativeFile(value.contracts.file, "contracts file"),
+			sha256: value.contracts.sha256
+		};
+	}
+	return {
+		version: 2,
+		generation,
+		fingerprint,
+		entries,
+		...contracts ? { contracts } : {}
+	};
+}
+//#endregion
+exports.DOOM_SERVER_BUNDLE_FILE = DOOM_SERVER_BUNDLE_FILE;
+exports.DOOM_SERVER_BUNDLE_VERSION = DOOM_SERVER_BUNDLE_VERSION;
+exports.parseDoomServerBundle = parseDoomServerBundle;
+
+//# sourceMappingURL=serverBundle.cjs.map

package/dist/schemas/serverBundle.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverBundle.cjs","names":[],"sources":["../../src/schemas/serverBundle.ts"],"sourcesContent":["import type { DoomApiScope } from './packageApi';\n\nexport const DOOM_SERVER_BUNDLE_VERSION = 2;\nexport const DOOM_SERVER_BUNDLE_FILE = 'server.bundle.json';\n\n/** Every occurrence that can activate a package in this repository. */\nexport interface DoomServerBundleOwner {\n  readonly majorMode: string;\n  readonly layer: string;\n}\n\nexport interface DoomServerBundleEntry {\n  readonly packageName: string;\n  /** The declared package-relative source entry, retained for attribution. */\n  readonly entry: string;\n  /** Generation-local built module, relative to the descriptor directory. */\n  readonly module: string;\n  readonly scopes: readonly DoomApiScope[];\n  readonly owners: readonly DoomServerBundleOwner[];\n  readonly required: boolean;\n}\n\n/** Ordered candidates, never an instruction to activate every package. */\nexport interface DoomServerBundle {\n  readonly version: typeof DOOM_SERVER_BUNDLE_VERSION;\n  readonly generation: string;\n  readonly fingerprint: string;\n  readonly entries: readonly DoomServerBundleEntry[];\n  readonly contracts?: { readonly file: string; readonly sha256: string };\n}\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction text(value: unknown, field: string): string {\n  if (typeof value !== 'string' || value.trim() === '' || value.includes('\\0')) {\n    throw new Error(`Invalid server bundle ${field}`);\n  }\n  return value;\n}\n\nfunction relativeFile(value: unknown, field: string): string {\n  const file = text(value, field);\n  const segments = file.slice(2).split('/');\n  if (\n    !file.startsWith('./') ||\n    /[\\\\%?#]/u.test(file) ||\n    segments.some((segment) => segment === '' || segment === '.' || segment === '..')\n  ) {\n    throw new Error(`Invalid server bundle ${field}: expected a contained ./file path`);\n  }\n  return file;\n}\n\n/** Validate the entire descriptor before any package code is imported. */\nexport function parseDoomServerBundle(value: unknown): DoomServerBundle {\n  if (!record(value) || value.version !== DOOM_SERVER_BUNDLE_VERSION) {\n    throw new Error('Unsupported server bundle version');\n  }\n  const generation = text(value.generation, 'generation');\n  const fingerprint = text(value.fingerprint, 'fingerprint');\n  if (!/^[a-f0-9]{64}$/u.test(fingerprint)) throw new Error('Invalid server bundle fingerprint');\n  if (!Array.isArray(value.entries)) throw new Error('Invalid server bundle entries');\n  const names = new Set<string>();\n  const entries = value.entries.map((candidate: unknown): DoomServerBundleEntry => {\n    if (!record(candidate)) throw new Error('Invalid server bundle entry');\n    const packageName = text(candidate.packageName, 'packageName');\n    if (names.has(packageName)) throw new Error(`Duplicate server bundle package: ${packageName}`);\n    names.add(packageName);\n    const entry = relativeFile(candidate.entry, `${packageName} entry`);\n    const module = relativeFile(candidate.module, `${packageName} module`);\n    if (!module.endsWith('.mjs')) throw new Error(`Invalid server bundle ${packageName} module: expected .mjs`);\n    if (\n      !Array.isArray(candidate.scopes) ||\n      candidate.scopes.length === 0 ||\n      candidate.scopes.some((scope) => scope !== 'session' && scope !== 'global' && scope !== 'workspace') ||\n      new Set(candidate.scopes).size !== candidate.scopes.length\n    ) {\n      throw new Error(`Invalid server bundle ${packageName} scopes`);\n    }\n    if (!Array.isArray(candidate.owners) || candidate.owners.length === 0) {\n      throw new Error(`Invalid server bundle ${packageName} owners`);\n    }\n    const ownership = new Set<string>();\n    const owners = candidate.owners.map((owner: unknown): DoomServerBundleOwner => {\n      if (!record(owner)) throw new Error(`Invalid server bundle ${packageName} owner`);\n      const majorMode = text(owner.majorMode, `${packageName} majorMode`);\n      const layer = text(owner.layer, `${packageName} layer`);\n      const key = JSON.stringify([majorMode, layer]);\n      if (ownership.has(key)) throw new Error(`Duplicate server bundle ${packageName} owner`);\n      ownership.add(key);\n      return { majorMode, layer };\n    });\n    if (typeof candidate.required !== 'boolean') throw new Error(`Invalid server bundle ${packageName} required`);\n    return { packageName, entry, module, scopes: candidate.scopes, owners, required: candidate.required };\n  });\n  let contracts: DoomServerBundle['contracts'];\n  if (value.contracts !== undefined) {\n    if (\n      !record(value.contracts) ||\n      typeof value.contracts.sha256 !== 'string' ||\n      !/^[a-f0-9]{64}$/u.test(value.contracts.sha256)\n    )\n      throw new Error('Invalid server bundle contracts');\n    contracts = { file: relativeFile(value.contracts.file, 'contracts file'), sha256: value.contracts.sha256 };\n  }\n  return { version: DOOM_SERVER_BUNDLE_VERSION, generation, fingerprint, entries, ...(contracts ? { contracts } : {}) };\n}\n"],"mappings":";AAEA,MAAa,6BAA6B;AAC1C,MAAa,0BAA0B;AA4BvC,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,KAAK,OAAgB,OAAuB;CACnD,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,MAAM,MAAM,SAAS,IAAI,GACzE,MAAM,IAAI,MAAM,yBAAyB,OAAO;CAElD,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,OAAuB;CAC3D,MAAM,OAAO,KAAK,OAAO,KAAK;CAC9B,MAAM,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG;CACxC,IACE,CAAC,KAAK,WAAW,IAAI,KACrB,WAAW,KAAK,IAAI,KACpB,SAAS,MAAM,YAAY,YAAY,MAAM,YAAY,OAAO,YAAY,IAAI,GAEhF,MAAM,IAAI,MAAM,yBAAyB,MAAM,mCAAmC;CAEpF,OAAO;AACT;;AAGA,SAAgB,sBAAsB,OAAkC;CACtE,IAAI,CAAC,OAAO,KAAK,KAAK,MAAM,YAAA,GAC1B,MAAM,IAAI,MAAM,mCAAmC;CAErD,MAAM,aAAa,KAAK,MAAM,YAAY,YAAY;CACtD,MAAM,cAAc,KAAK,MAAM,aAAa,aAAa;CACzD,IAAI,CAAC,kBAAkB,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,mCAAmC;CAC7F,IAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,+BAA+B;CAClF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,UAAU,MAAM,QAAQ,KAAK,cAA8C;EAC/E,IAAI,CAAC,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,6BAA6B;EACrE,MAAM,cAAc,KAAK,UAAU,aAAa,aAAa;EAC7D,IAAI,MAAM,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,oCAAoC,aAAa;EAC7F,MAAM,IAAI,WAAW;EACrB,MAAM,QAAQ,aAAa,UAAU,OAAO,GAAG,YAAY,OAAO;EAClE,MAAM,SAAS,aAAa,UAAU,QAAQ,GAAG,YAAY,QAAQ;EACrE,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,yBAAyB,YAAY,uBAAuB;EAC1G,IACE,CAAC,MAAM,QAAQ,UAAU,MAAM,KAC/B,UAAU,OAAO,WAAW,KAC5B,UAAU,OAAO,MAAM,UAAU,UAAU,aAAa,UAAU,YAAY,UAAU,WAAW,KACnG,IAAI,IAAI,UAAU,MAAM,CAAC,CAAC,SAAS,UAAU,OAAO,QAEpD,MAAM,IAAI,MAAM,yBAAyB,YAAY,QAAQ;EAE/D,IAAI,CAAC,MAAM,QAAQ,UAAU,MAAM,KAAK,UAAU,OAAO,WAAW,GAClE,MAAM,IAAI,MAAM,yBAAyB,YAAY,QAAQ;EAE/D,MAAM,4BAAY,IAAI,IAAY;EAClC,MAAM,SAAS,UAAU,OAAO,KAAK,UAA0C;GAC7E,IAAI,CAAC,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,yBAAyB,YAAY,OAAO;GAChF,MAAM,YAAY,KAAK,MAAM,WAAW,GAAG,YAAY,WAAW;GAClE,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG,YAAY,OAAO;GACtD,MAAM,MAAM,KAAK,UAAU,CAAC,WAAW,KAAK,CAAC;GAC7C,IAAI,UAAU,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,2BAA2B,YAAY,OAAO;GACtF,UAAU,IAAI,GAAG;GACjB,OAAO;IAAE;IAAW;GAAM;EAC5B,CAAC;EACD,IAAI,OAAO,UAAU,aAAa,WAAW,MAAM,IAAI,MAAM,yBAAyB,YAAY,UAAU;EAC5G,OAAO;GAAE;GAAa;GAAO;GAAQ,QAAQ,UAAU;GAAQ;GAAQ,UAAU,UAAU;EAAS;CACtG,CAAC;CACD,IAAI;CACJ,IAAI,MAAM,cAAc,KAAA,GAAW;EACjC,IACE,CAAC,OAAO,MAAM,SAAS,KACvB,OAAO,MAAM,UAAU,WAAW,YAClC,CAAC,kBAAkB,KAAK,MAAM,UAAU,MAAM,GAE9C,MAAM,IAAI,MAAM,iCAAiC;EACnD,YAAY;GAAE,MAAM,aAAa,MAAM,UAAU,MAAM,gBAAgB;GAAG,QAAQ,MAAM,UAAU;EAAO;CAC3G;CACA,OAAO;EAAE,SAAA;EAAqC;EAAY;EAAa;EAAS,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;CAAG;AACtH"}

package/dist/schemas/serverBundle.d.cts

@@ -0,0 +1,34 @@
+import { DoomApiScope } from "./packageApi.cjs";
+//#region src/schemas/serverBundle.d.ts
+export declare const DOOM_SERVER_BUNDLE_VERSION = 2;
+export declare const DOOM_SERVER_BUNDLE_FILE = "server.bundle.json";
+/** Every occurrence that can activate a package in this repository. */
+export interface DoomServerBundleOwner {
+  readonly majorMode: string;
+  readonly layer: string;
+}
+export interface DoomServerBundleEntry {
+  readonly packageName: string;
+  /** The declared package-relative source entry, retained for attribution. */
+  readonly entry: string;
+  /** Generation-local built module, relative to the descriptor directory. */
+  readonly module: string;
+  readonly scopes: readonly DoomApiScope[];
+  readonly owners: readonly DoomServerBundleOwner[];
+  readonly required: boolean;
+}
+/** Ordered candidates, never an instruction to activate every package. */
+export interface DoomServerBundle {
+  readonly version: typeof DOOM_SERVER_BUNDLE_VERSION;
+  readonly generation: string;
+  readonly fingerprint: string;
+  readonly entries: readonly DoomServerBundleEntry[];
+  readonly contracts?: {
+    readonly file: string;
+    readonly sha256: string;
+  };
+}
+/** Validate the entire descriptor before any package code is imported. */
+export declare function parseDoomServerBundle(value: unknown): DoomServerBundle;
+//#endregion
+//# sourceMappingURL=serverBundle.d.cts.map

package/dist/schemas/serverBundle.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverBundle.d.cts","names":[],"sources":["../../src/schemas/serverBundle.ts"],"mappings":";;qBAEa;qBACA;;iBAGI;WACN;WACA;;iBAGM;WACN;;WAEA;;WAEA;WACA,iBAAiB;WACjB,iBAAiB;WACjB;;;iBAIM;WACN,gBAAgB;WAChB;WACA;WACA,kBAAkB;WAClB;aAAuB;aAAuB;;;;wBA4BzC,sBAAsB,iBAAiB"}

package/dist/schemas/serverBundle.d.mts

@@ -0,0 +1,34 @@
+import { DoomApiScope } from "./packageApi.mjs";
+//#region src/schemas/serverBundle.d.ts
+export declare const DOOM_SERVER_BUNDLE_VERSION = 2;
+export declare const DOOM_SERVER_BUNDLE_FILE = "server.bundle.json";
+/** Every occurrence that can activate a package in this repository. */
+export interface DoomServerBundleOwner {
+  readonly majorMode: string;
+  readonly layer: string;
+}
+export interface DoomServerBundleEntry {
+  readonly packageName: string;
+  /** The declared package-relative source entry, retained for attribution. */
+  readonly entry: string;
+  /** Generation-local built module, relative to the descriptor directory. */
+  readonly module: string;
+  readonly scopes: readonly DoomApiScope[];
+  readonly owners: readonly DoomServerBundleOwner[];
+  readonly required: boolean;
+}
+/** Ordered candidates, never an instruction to activate every package. */
+export interface DoomServerBundle {
+  readonly version: typeof DOOM_SERVER_BUNDLE_VERSION;
+  readonly generation: string;
+  readonly fingerprint: string;
+  readonly entries: readonly DoomServerBundleEntry[];
+  readonly contracts?: {
+    readonly file: string;
+    readonly sha256: string;
+  };
+}
+/** Validate the entire descriptor before any package code is imported. */
+export declare function parseDoomServerBundle(value: unknown): DoomServerBundle;
+//#endregion
+//# sourceMappingURL=serverBundle.d.mts.map

package/dist/schemas/serverBundle.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverBundle.d.mts","names":[],"sources":["../../src/schemas/serverBundle.ts"],"mappings":";;qBAEa;qBACA;;iBAGI;WACN;WACA;;iBAGM;WACN;;WAEA;;WAEA;WACA,iBAAiB;WACjB,iBAAiB;WACjB;;;iBAIM;WACN,gBAAgB;WAChB;WACA;WACA,kBAAkB;WAClB;aAAuB;aAAuB;;;;wBA4BzC,sBAAsB,iBAAiB"}

package/dist/schemas/serverBundle.mjs

@@ -0,0 +1,77 @@
+//#region src/schemas/serverBundle.ts
+const DOOM_SERVER_BUNDLE_VERSION = 2;
+const DOOM_SERVER_BUNDLE_FILE = "server.bundle.json";
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function text(value, field) {
+	if (typeof value !== "string" || value.trim() === "" || value.includes("\0")) throw new Error(`Invalid server bundle ${field}`);
+	return value;
+}
+function relativeFile(value, field) {
+	const file = text(value, field);
+	const segments = file.slice(2).split("/");
+	if (!file.startsWith("./") || /[\\%?#]/u.test(file) || segments.some((segment) => segment === "" || segment === "." || segment === "..")) throw new Error(`Invalid server bundle ${field}: expected a contained ./file path`);
+	return file;
+}
+/** Validate the entire descriptor before any package code is imported. */
+function parseDoomServerBundle(value) {
+	if (!record(value) || value.version !== 2) throw new Error("Unsupported server bundle version");
+	const generation = text(value.generation, "generation");
+	const fingerprint = text(value.fingerprint, "fingerprint");
+	if (!/^[a-f0-9]{64}$/u.test(fingerprint)) throw new Error("Invalid server bundle fingerprint");
+	if (!Array.isArray(value.entries)) throw new Error("Invalid server bundle entries");
+	const names = /* @__PURE__ */ new Set();
+	const entries = value.entries.map((candidate) => {
+		if (!record(candidate)) throw new Error("Invalid server bundle entry");
+		const packageName = text(candidate.packageName, "packageName");
+		if (names.has(packageName)) throw new Error(`Duplicate server bundle package: ${packageName}`);
+		names.add(packageName);
+		const entry = relativeFile(candidate.entry, `${packageName} entry`);
+		const module = relativeFile(candidate.module, `${packageName} module`);
+		if (!module.endsWith(".mjs")) throw new Error(`Invalid server bundle ${packageName} module: expected .mjs`);
+		if (!Array.isArray(candidate.scopes) || candidate.scopes.length === 0 || candidate.scopes.some((scope) => scope !== "session" && scope !== "global" && scope !== "workspace") || new Set(candidate.scopes).size !== candidate.scopes.length) throw new Error(`Invalid server bundle ${packageName} scopes`);
+		if (!Array.isArray(candidate.owners) || candidate.owners.length === 0) throw new Error(`Invalid server bundle ${packageName} owners`);
+		const ownership = /* @__PURE__ */ new Set();
+		const owners = candidate.owners.map((owner) => {
+			if (!record(owner)) throw new Error(`Invalid server bundle ${packageName} owner`);
+			const majorMode = text(owner.majorMode, `${packageName} majorMode`);
+			const layer = text(owner.layer, `${packageName} layer`);
+			const key = JSON.stringify([majorMode, layer]);
+			if (ownership.has(key)) throw new Error(`Duplicate server bundle ${packageName} owner`);
+			ownership.add(key);
+			return {
+				majorMode,
+				layer
+			};
+		});
+		if (typeof candidate.required !== "boolean") throw new Error(`Invalid server bundle ${packageName} required`);
+		return {
+			packageName,
+			entry,
+			module,
+			scopes: candidate.scopes,
+			owners,
+			required: candidate.required
+		};
+	});
+	let contracts;
+	if (value.contracts !== void 0) {
+		if (!record(value.contracts) || typeof value.contracts.sha256 !== "string" || !/^[a-f0-9]{64}$/u.test(value.contracts.sha256)) throw new Error("Invalid server bundle contracts");
+		contracts = {
+			file: relativeFile(value.contracts.file, "contracts file"),
+			sha256: value.contracts.sha256
+		};
+	}
+	return {
+		version: 2,
+		generation,
+		fingerprint,
+		entries,
+		...contracts ? { contracts } : {}
+	};
+}
+//#endregion
+export { DOOM_SERVER_BUNDLE_FILE, DOOM_SERVER_BUNDLE_VERSION, parseDoomServerBundle };
+
+//# sourceMappingURL=serverBundle.mjs.map

package/dist/schemas/serverBundle.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverBundle.mjs","names":[],"sources":["../../src/schemas/serverBundle.ts"],"sourcesContent":["import type { DoomApiScope } from './packageApi';\n\nexport const DOOM_SERVER_BUNDLE_VERSION = 2;\nexport const DOOM_SERVER_BUNDLE_FILE = 'server.bundle.json';\n\n/** Every occurrence that can activate a package in this repository. */\nexport interface DoomServerBundleOwner {\n  readonly majorMode: string;\n  readonly layer: string;\n}\n\nexport interface DoomServerBundleEntry {\n  readonly packageName: string;\n  /** The declared package-relative source entry, retained for attribution. */\n  readonly entry: string;\n  /** Generation-local built module, relative to the descriptor directory. */\n  readonly module: string;\n  readonly scopes: readonly DoomApiScope[];\n  readonly owners: readonly DoomServerBundleOwner[];\n  readonly required: boolean;\n}\n\n/** Ordered candidates, never an instruction to activate every package. */\nexport interface DoomServerBundle {\n  readonly version: typeof DOOM_SERVER_BUNDLE_VERSION;\n  readonly generation: string;\n  readonly fingerprint: string;\n  readonly entries: readonly DoomServerBundleEntry[];\n  readonly contracts?: { readonly file: string; readonly sha256: string };\n}\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction text(value: unknown, field: string): string {\n  if (typeof value !== 'string' || value.trim() === '' || value.includes('\\0')) {\n    throw new Error(`Invalid server bundle ${field}`);\n  }\n  return value;\n}\n\nfunction relativeFile(value: unknown, field: string): string {\n  const file = text(value, field);\n  const segments = file.slice(2).split('/');\n  if (\n    !file.startsWith('./') ||\n    /[\\\\%?#]/u.test(file) ||\n    segments.some((segment) => segment === '' || segment === '.' || segment === '..')\n  ) {\n    throw new Error(`Invalid server bundle ${field}: expected a contained ./file path`);\n  }\n  return file;\n}\n\n/** Validate the entire descriptor before any package code is imported. */\nexport function parseDoomServerBundle(value: unknown): DoomServerBundle {\n  if (!record(value) || value.version !== DOOM_SERVER_BUNDLE_VERSION) {\n    throw new Error('Unsupported server bundle version');\n  }\n  const generation = text(value.generation, 'generation');\n  const fingerprint = text(value.fingerprint, 'fingerprint');\n  if (!/^[a-f0-9]{64}$/u.test(fingerprint)) throw new Error('Invalid server bundle fingerprint');\n  if (!Array.isArray(value.entries)) throw new Error('Invalid server bundle entries');\n  const names = new Set<string>();\n  const entries = value.entries.map((candidate: unknown): DoomServerBundleEntry => {\n    if (!record(candidate)) throw new Error('Invalid server bundle entry');\n    const packageName = text(candidate.packageName, 'packageName');\n    if (names.has(packageName)) throw new Error(`Duplicate server bundle package: ${packageName}`);\n    names.add(packageName);\n    const entry = relativeFile(candidate.entry, `${packageName} entry`);\n    const module = relativeFile(candidate.module, `${packageName} module`);\n    if (!module.endsWith('.mjs')) throw new Error(`Invalid server bundle ${packageName} module: expected .mjs`);\n    if (\n      !Array.isArray(candidate.scopes) ||\n      candidate.scopes.length === 0 ||\n      candidate.scopes.some((scope) => scope !== 'session' && scope !== 'global' && scope !== 'workspace') ||\n      new Set(candidate.scopes).size !== candidate.scopes.length\n    ) {\n      throw new Error(`Invalid server bundle ${packageName} scopes`);\n    }\n    if (!Array.isArray(candidate.owners) || candidate.owners.length === 0) {\n      throw new Error(`Invalid server bundle ${packageName} owners`);\n    }\n    const ownership = new Set<string>();\n    const owners = candidate.owners.map((owner: unknown): DoomServerBundleOwner => {\n      if (!record(owner)) throw new Error(`Invalid server bundle ${packageName} owner`);\n      const majorMode = text(owner.majorMode, `${packageName} majorMode`);\n      const layer = text(owner.layer, `${packageName} layer`);\n      const key = JSON.stringify([majorMode, layer]);\n      if (ownership.has(key)) throw new Error(`Duplicate server bundle ${packageName} owner`);\n      ownership.add(key);\n      return { majorMode, layer };\n    });\n    if (typeof candidate.required !== 'boolean') throw new Error(`Invalid server bundle ${packageName} required`);\n    return { packageName, entry, module, scopes: candidate.scopes, owners, required: candidate.required };\n  });\n  let contracts: DoomServerBundle['contracts'];\n  if (value.contracts !== undefined) {\n    if (\n      !record(value.contracts) ||\n      typeof value.contracts.sha256 !== 'string' ||\n      !/^[a-f0-9]{64}$/u.test(value.contracts.sha256)\n    )\n      throw new Error('Invalid server bundle contracts');\n    contracts = { file: relativeFile(value.contracts.file, 'contracts file'), sha256: value.contracts.sha256 };\n  }\n  return { version: DOOM_SERVER_BUNDLE_VERSION, generation, fingerprint, entries, ...(contracts ? { contracts } : {}) };\n}\n"],"mappings":";AAEA,MAAa,6BAA6B;AAC1C,MAAa,0BAA0B;AA4BvC,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,KAAK,OAAgB,OAAuB;CACnD,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,MAAM,MAAM,SAAS,IAAI,GACzE,MAAM,IAAI,MAAM,yBAAyB,OAAO;CAElD,OAAO;AACT;AAEA,SAAS,aAAa,OAAgB,OAAuB;CAC3D,MAAM,OAAO,KAAK,OAAO,KAAK;CAC9B,MAAM,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG;CACxC,IACE,CAAC,KAAK,WAAW,IAAI,KACrB,WAAW,KAAK,IAAI,KACpB,SAAS,MAAM,YAAY,YAAY,MAAM,YAAY,OAAO,YAAY,IAAI,GAEhF,MAAM,IAAI,MAAM,yBAAyB,MAAM,mCAAmC;CAEpF,OAAO;AACT;;AAGA,SAAgB,sBAAsB,OAAkC;CACtE,IAAI,CAAC,OAAO,KAAK,KAAK,MAAM,YAAA,GAC1B,MAAM,IAAI,MAAM,mCAAmC;CAErD,MAAM,aAAa,KAAK,MAAM,YAAY,YAAY;CACtD,MAAM,cAAc,KAAK,MAAM,aAAa,aAAa;CACzD,IAAI,CAAC,kBAAkB,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,mCAAmC;CAC7F,IAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,+BAA+B;CAClF,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,UAAU,MAAM,QAAQ,KAAK,cAA8C;EAC/E,IAAI,CAAC,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,6BAA6B;EACrE,MAAM,cAAc,KAAK,UAAU,aAAa,aAAa;EAC7D,IAAI,MAAM,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,oCAAoC,aAAa;EAC7F,MAAM,IAAI,WAAW;EACrB,MAAM,QAAQ,aAAa,UAAU,OAAO,GAAG,YAAY,OAAO;EAClE,MAAM,SAAS,aAAa,UAAU,QAAQ,GAAG,YAAY,QAAQ;EACrE,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,yBAAyB,YAAY,uBAAuB;EAC1G,IACE,CAAC,MAAM,QAAQ,UAAU,MAAM,KAC/B,UAAU,OAAO,WAAW,KAC5B,UAAU,OAAO,MAAM,UAAU,UAAU,aAAa,UAAU,YAAY,UAAU,WAAW,KACnG,IAAI,IAAI,UAAU,MAAM,CAAC,CAAC,SAAS,UAAU,OAAO,QAEpD,MAAM,IAAI,MAAM,yBAAyB,YAAY,QAAQ;EAE/D,IAAI,CAAC,MAAM,QAAQ,UAAU,MAAM,KAAK,UAAU,OAAO,WAAW,GAClE,MAAM,IAAI,MAAM,yBAAyB,YAAY,QAAQ;EAE/D,MAAM,4BAAY,IAAI,IAAY;EAClC,MAAM,SAAS,UAAU,OAAO,KAAK,UAA0C;GAC7E,IAAI,CAAC,OAAO,KAAK,GAAG,MAAM,IAAI,MAAM,yBAAyB,YAAY,OAAO;GAChF,MAAM,YAAY,KAAK,MAAM,WAAW,GAAG,YAAY,WAAW;GAClE,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG,YAAY,OAAO;GACtD,MAAM,MAAM,KAAK,UAAU,CAAC,WAAW,KAAK,CAAC;GAC7C,IAAI,UAAU,IAAI,GAAG,GAAG,MAAM,IAAI,MAAM,2BAA2B,YAAY,OAAO;GACtF,UAAU,IAAI,GAAG;GACjB,OAAO;IAAE;IAAW;GAAM;EAC5B,CAAC;EACD,IAAI,OAAO,UAAU,aAAa,WAAW,MAAM,IAAI,MAAM,yBAAyB,YAAY,UAAU;EAC5G,OAAO;GAAE;GAAa;GAAO;GAAQ,QAAQ,UAAU;GAAQ;GAAQ,UAAU,UAAU;EAAS;CACtG,CAAC;CACD,IAAI;CACJ,IAAI,MAAM,cAAc,KAAA,GAAW;EACjC,IACE,CAAC,OAAO,MAAM,SAAS,KACvB,OAAO,MAAM,UAAU,WAAW,YAClC,CAAC,kBAAkB,KAAK,MAAM,UAAU,MAAM,GAE9C,MAAM,IAAI,MAAM,iCAAiC;EACnD,YAAY;GAAE,MAAM,aAAa,MAAM,UAAU,MAAM,gBAAgB;GAAG,QAAQ,MAAM,UAAU;EAAO;CAC3G;CACA,OAAO;EAAE,SAAA;EAAqC;EAAY;EAAa;EAAS,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;CAAG;AACtH"}

package/dist/schemas/serverFacet.cjs

@@ -0,0 +1,102 @@
+//#region src/schemas/serverFacet.ts
+/** The host a server facet contributes to. */
+const DOOM_SERVER_HOST_SERVICE = "doom/server-host";
+function readDoomServerHost(context) {
+	return context.get(DOOM_SERVER_HOST_SERVICE);
+}
+function requireDoomServerHost(context) {
+	const service = readDoomServerHost(context);
+	if (!service) throw new Error("The Doom server host is unavailable. Start a Doom server first.");
+	return service;
+}
+/** The package.json field a package declares its server facet under. */
+const DOOM_SERVER_FACET_MANIFEST_FIELD = "doompiServer";
+/** The default export a facet module must provide, so a host can install it. */
+const DOOM_SERVER_FACET_EXPORT = "default";
+/** Capture schema inference before heterogeneous methods enter a contribution array. */
+function defineServerMethod(definition, handler) {
+	return { register: (host) => host.registerMethod(definition, handler) };
+}
+var DoomServerFacetManifestError = class extends Error {
+	constructor(packageDir, message) {
+		super(`${DOOM_SERVER_FACET_MANIFEST_FIELD} manifest in ${packageDir}: ${message}`);
+		this.name = "DoomServerFacetManifestError";
+	}
+};
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Narrows a module's default export, so a broken package is a notice rather than a crash. */
+function isDoomServerFacet(value) {
+	return isRecord(value) && typeof value.apply === "function";
+}
+function normalizePath(packageDir, field, value) {
+	if (typeof value !== "string" || !value.startsWith("./") || value.includes("..")) throw new DoomServerFacetManifestError(packageDir, `${field} must be a package-relative ./path with no '..'.`);
+	return value;
+}
+function normalizeScopes(packageDir, value) {
+	if (value === void 0) throw new DoomServerFacetManifestError(packageDir, "scopes must be declared explicitly.");
+	if (!Array.isArray(value) || value.length === 0) throw new DoomServerFacetManifestError(packageDir, "scopes must name 'global', 'workspace', or 'session'.");
+	const scopes = [];
+	for (const scope of value) {
+		if (scope !== "session" && scope !== "global" && scope !== "workspace") throw new DoomServerFacetManifestError(packageDir, `Unknown scope '${String(scope)}'; resync for the three-level host.`);
+		if (!scopes.includes(scope)) scopes.push(scope);
+	}
+	return scopes;
+}
+/**
+* Validates one package.json's `doompiServer` block.
+*
+* `dist` is required because a host imports the built entry the package ships,
+* never its source.
+*/
+function declaredServerFacetsOf(packageDir, manifest) {
+	const declared = manifest[DOOM_SERVER_FACET_MANIFEST_FIELD];
+	if (declared === void 0) return [];
+	if (!isRecord(declared)) throw new DoomServerFacetManifestError(packageDir, "the block must be an object naming entry and dist.");
+	const entry = normalizePath(packageDir, "entry", declared.entry);
+	if (declared.dist === void 0) throw new DoomServerFacetManifestError(packageDir, "dist is required: a host imports the built entry the package ships, never its source.");
+	const dist = normalizePath(packageDir, "dist", declared.dist);
+	if (declared.required !== void 0 && typeof declared.required !== "boolean") throw new DoomServerFacetManifestError(packageDir, "required must be a boolean.");
+	return [{
+		packageName: typeof manifest.name === "string" ? manifest.name : packageDir,
+		packageDir,
+		entry,
+		dist,
+		scopes: normalizeScopes(packageDir, declared.scopes),
+		...typeof declared.required === "boolean" ? { required: declared.required } : {}
+	}];
+}
+/**
+* The deterministic order hosts install in. A package appears once: the first
+* directory claiming a package name keeps it and the later one is dropped with
+* a notice, so a duplicated install never installs a facet twice.
+*/
+function orderServerFacets(facets, onNotice = () => void 0) {
+	const sorted = [...facets].sort((left, right) => left.packageName.localeCompare(right.packageName) || left.packageDir.localeCompare(right.packageDir));
+	const owners = /* @__PURE__ */ new Map();
+	const kept = [];
+	for (const facet of sorted) {
+		const holder = owners.get(facet.packageName);
+		if (holder !== void 0) {
+			onNotice(`server facet '${facet.packageName}' from ${facet.packageDir} is skipped: ${holder.packageDir} already claims it.`);
+			continue;
+		}
+		owners.set(facet.packageName, facet);
+		kept.push(facet);
+	}
+	return kept;
+}
+//#endregion
+exports.DOOM_SERVER_FACET_EXPORT = DOOM_SERVER_FACET_EXPORT;
+exports.DOOM_SERVER_FACET_MANIFEST_FIELD = DOOM_SERVER_FACET_MANIFEST_FIELD;
+exports.DOOM_SERVER_HOST_SERVICE = DOOM_SERVER_HOST_SERVICE;
+exports.DoomServerFacetManifestError = DoomServerFacetManifestError;
+exports.declaredServerFacetsOf = declaredServerFacetsOf;
+exports.defineServerMethod = defineServerMethod;
+exports.isDoomServerFacet = isDoomServerFacet;
+exports.orderServerFacets = orderServerFacets;
+exports.readDoomServerHost = readDoomServerHost;
+exports.requireDoomServerHost = requireDoomServerHost;
+
+//# sourceMappingURL=serverFacet.cjs.map

package/dist/schemas/serverFacet.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverFacet.cjs","names":[],"sources":["../../src/schemas/serverFacet.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\n/**\n * The server facet a package installs into a headless host.\n *\n * A package already ships a Pi extension facet for the agent process. This is\n * the second facet: one cordis plugin that a session server or the cockpit hub\n * installs, through which the package contributes its HTTP surface and any\n * behaviour that has to run outside the agent.\n *\n * A facet is installed and disposed like every other Doom contribution. It\n * registers its API from inside that lifecycle, so server behaviour has a clear\n * owner and disposer.\n */\nimport type { Static, TSchema } from 'typebox';\n\nimport type { DoomHeadlessHostService, DoomHeadlessToolRestriction } from './headless';\nimport type { DoomHeadlessTool, DoomHeadlessCommand } from './headless';\nimport type { DoomHubChannel } from './hubChannel';\nimport type { DoomApi, DoomApiContext, DoomApiScope } from './packageApi';\nimport type { DoomPluginTool, DoomPluginCommand } from './pluginContributions';\nimport type { DoomPluginCaller, DoomPluginMethod } from './pluginProtocol';\nimport type { DoomToolRestrictionDefinition } from './toolSurface';\n\n/** The host a server facet contributes to. */\nexport const DOOM_SERVER_HOST_SERVICE = 'doom/server-host';\n\nexport interface DoomServerRegistration {\n  /** Whether the API was mounted. A refused registration is a no-op handle. */\n  readonly mounted?: boolean;\n  /** Unmount the surface and close its handler. Idempotent. */\n  dispose(): void;\n}\n\n/**\n * What a facet is handed when it installs.\n *\n * `scope` is fixed for the life of the host: a session server never becomes a\n * hub. A facet that only makes sense in one scope returns early in the other\n * rather than declaring itself twice.\n */\nexport interface DoomServerHostService {\n  readonly scope: DoomApiScope;\n  /** Identity and host-lent capabilities, the same record an API is started with. */\n  readonly context: DoomApiContext;\n  /**\n   * Mount an API under its own base path. A base path already claimed by an\n   * earlier facet is refused with a notice and a no-op handle. The same\n   * failure posture applies when the API cannot start or the host is disposed.\n   */\n  registerApi(api: DoomApi): DoomServerRegistration;\n  /** Register a live event source under this host's lifecycle. */\n  registerChannel(channel: DoomHubChannel): DoomServerRegistration;\n  /** Mount a typed call at this host's exact scope. */\n  registerMethod<TInput extends TSchema, TOutput extends TSchema>(\n    definition: DoomPluginMethod<TInput, TOutput>,\n    handler: (input: Static<TInput>, caller: DoomPluginCaller) => Static<TOutput> | Promise<Static<TOutput>>,\n  ): DoomServerRegistration;\n  /** Base paths currently mounted, in mount order. */\n  mounted(): readonly string[];\n  /** Channel frame types currently mounted, in mount order. */\n  mountedChannels(): readonly string[];\n}\n\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'doom/server-host': DoomServerHostService;\n  }\n}\n\nexport function readDoomServerHost(context: Context): DoomServerHostService | undefined {\n  return context.get(DOOM_SERVER_HOST_SERVICE) as DoomServerHostService | undefined;\n}\n\nexport function requireDoomServerHost(context: Context): DoomServerHostService {\n  const service = readDoomServerHost(context);\n  if (!service) throw new Error('The Doom server host is unavailable. Start a Doom server first.');\n  return service;\n}\n\n/** The package.json field a package declares its server facet under. */\nexport const DOOM_SERVER_FACET_MANIFEST_FIELD = 'doompiServer';\n\n/** The default export a facet module must provide, so a host can install it. */\nexport const DOOM_SERVER_FACET_EXPORT = 'default';\n\n/**\n * One package's server contributions, as a Cordis object plugin.\n *\n * The object form rather than a bare function, because it is the only shape\n * that declares its own `inject`. That matters to a host: a plugin carrying\n * its dependencies is a single fiber, so `fiber.await()` settles once `apply`\n * has run, and the host can decide whether to open a listener from a mount\n * table it knows is complete. A function facet calling `ctx.inject` inside\n * itself mounts a child fiber that the host has no handle on.\n *\n * A returned function is the disposer, run when the host's root unwinds.\n */\nexport interface DoomServerFacet {\n  readonly inject?: readonly string[];\n  apply(context: Context): void | (() => void | Promise<void>) | Promise<void | (() => void | Promise<void>)>;\n}\n\n/** One instance belongs to one mounted server scope. */\nexport interface DoomServerPluginContext {\n  readonly context: Context;\n  readonly host: DoomServerHostService;\n  readonly agent?: DoomHeadlessHostService;\n  readonly signal: AbortSignal;\n}\n\nexport interface DoomServerMethod {\n  register(host: DoomServerHostService): DoomServerRegistration;\n}\n\n/** Capture schema inference before heterogeneous methods enter a contribution array. */\nexport function defineServerMethod<TInput extends TSchema, TOutput extends TSchema>(\n  definition: DoomPluginMethod<TInput, TOutput>,\n  handler: (input: Static<TInput>, caller: DoomPluginCaller) => Static<TOutput> | Promise<Static<TOutput>>,\n): DoomServerMethod {\n  return { register: (host) => host.registerMethod(definition, handler) };\n}\n\nexport interface DoomServerPluginScope {\n  readonly services?: readonly Parameters<Context['plugin']>[0][];\n  readonly channels?: readonly (() => DoomHubChannel)[];\n  readonly api?: readonly DoomApi[];\n  readonly methods?: readonly DoomServerMethod[];\n  readonly onStart?: (context: DoomServerPluginContext) => void | Promise<void>;\n  readonly onStop?: (context: DoomServerPluginContext) => void | Promise<void>;\n  readonly onDispose?: (context: DoomServerPluginContext) => void | Promise<void>;\n}\n\nexport interface DoomServerSessionPlugin extends DoomServerPluginScope {\n  readonly tools?: readonly (DoomHeadlessTool | DoomPluginTool)[];\n  readonly commands?: readonly (DoomHeadlessCommand | DoomPluginCommand)[];\n  readonly resources?: readonly Parameters<DoomHeadlessHostService['registerResource']>[0][];\n  readonly hooks?: readonly Parameters<DoomHeadlessHostService['registerHook']>[0][];\n  readonly toolRestrictions?: readonly (\n    | DoomHeadlessToolRestriction\n    | DoomToolRestrictionDefinition<() => DoomHeadlessToolRestriction>\n  )[];\n  readonly activities?: readonly Parameters<DoomHeadlessHostService['registerActivity']>[0][];\n}\n\ntype ScopeDeclaration<TScope> = TScope | ((context: DoomServerPluginContext) => TScope | Promise<TScope>);\n// Explicitly forbid session contributions even when a factory returns an inferred object.\ntype NonSessionScope = DoomServerPluginScope & {\n  readonly [K in Exclude<keyof DoomServerSessionPlugin, keyof DoomServerPluginScope>]?: never;\n};\nexport interface DoomServerPluginDefinition {\n  readonly name: string;\n  readonly inject?: readonly string[];\n  readonly global?: ScopeDeclaration<NonSessionScope>;\n  readonly workspace?: ScopeDeclaration<NonSessionScope>;\n  readonly session?: ScopeDeclaration<DoomServerSessionPlugin>;\n}\n\n/** One package's validated declaration. */\nexport interface DeclaredServerFacet {\n  packageName: string;\n  packageDir: string;\n  /** Package-relative ./path to the source entry. */\n  entry: string;\n  /** Package-relative ./path to the built entry, which is what a host imports. */\n  dist: string;\n  /** Scopes this facet is installed into; both when the package names neither. */\n  scopes: readonly DoomApiScope[];\n  /** A selected host cannot be ready without this package's runtime capability. */\n  required?: boolean;\n}\n\nexport class DoomServerFacetManifestError extends Error {\n  constructor(packageDir: string, message: string) {\n    super(`${DOOM_SERVER_FACET_MANIFEST_FIELD} manifest in ${packageDir}: ${message}`);\n    this.name = 'DoomServerFacetManifestError';\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** Narrows a module's default export, so a broken package is a notice rather than a crash. */\nexport function isDoomServerFacet(value: unknown): value is DoomServerFacet {\n  return isRecord(value) && typeof value.apply === 'function';\n}\n\nfunction normalizePath(packageDir: string, field: string, value: unknown): string {\n  if (typeof value !== 'string' || !value.startsWith('./') || value.includes('..')) {\n    throw new DoomServerFacetManifestError(packageDir, `${field} must be a package-relative ./path with no '..'.`);\n  }\n  return value;\n}\n\nfunction normalizeScopes(packageDir: string, value: unknown): readonly DoomApiScope[] {\n  if (value === undefined) throw new DoomServerFacetManifestError(packageDir, 'scopes must be declared explicitly.');\n  if (!Array.isArray(value) || value.length === 0) {\n    throw new DoomServerFacetManifestError(packageDir, \"scopes must name 'global', 'workspace', or 'session'.\");\n  }\n  const scopes: DoomApiScope[] = [];\n  for (const scope of value) {\n    if (scope !== 'session' && scope !== 'global' && scope !== 'workspace') {\n      throw new DoomServerFacetManifestError(\n        packageDir,\n        `Unknown scope '${String(scope)}'; resync for the three-level host.`,\n      );\n    }\n    if (!scopes.includes(scope)) scopes.push(scope);\n  }\n  return scopes;\n}\n\n/**\n * Validates one package.json's `doompiServer` block.\n *\n * `dist` is required because a host imports the built entry the package ships,\n * never its source.\n */\nexport function declaredServerFacetsOf(packageDir: string, manifest: Record<string, unknown>): DeclaredServerFacet[] {\n  const declared = manifest[DOOM_SERVER_FACET_MANIFEST_FIELD];\n  if (declared === undefined) return [];\n  if (!isRecord(declared)) {\n    throw new DoomServerFacetManifestError(packageDir, 'the block must be an object naming entry and dist.');\n  }\n  const entry = normalizePath(packageDir, 'entry', declared.entry);\n  if (declared.dist === undefined) {\n    throw new DoomServerFacetManifestError(\n      packageDir,\n      'dist is required: a host imports the built entry the package ships, never its source.',\n    );\n  }\n  const dist = normalizePath(packageDir, 'dist', declared.dist);\n  if (declared.required !== undefined && typeof declared.required !== 'boolean') {\n    throw new DoomServerFacetManifestError(packageDir, 'required must be a boolean.');\n  }\n  return [\n    {\n      packageName: typeof manifest.name === 'string' ? manifest.name : packageDir,\n      packageDir,\n      entry,\n      dist,\n      scopes: normalizeScopes(packageDir, declared.scopes),\n      ...(typeof declared.required === 'boolean' ? { required: declared.required } : {}),\n    },\n  ];\n}\n\n/**\n * The deterministic order hosts install in. A package appears once: the first\n * directory claiming a package name keeps it and the later one is dropped with\n * a notice, so a duplicated install never installs a facet twice.\n */\nexport function orderServerFacets(\n  facets: readonly DeclaredServerFacet[],\n  onNotice: (message: string) => void = () => undefined,\n): DeclaredServerFacet[] {\n  const sorted = [...facets].sort(\n    (left, right) =>\n      left.packageName.localeCompare(right.packageName) || left.packageDir.localeCompare(right.packageDir),\n  );\n  const owners = new Map<string, DeclaredServerFacet>();\n  const kept: DeclaredServerFacet[] = [];\n  for (const facet of sorted) {\n    const holder = owners.get(facet.packageName);\n    if (holder !== undefined) {\n      onNotice(\n        `server facet '${facet.packageName}' from ${facet.packageDir} is skipped: ${holder.packageDir} already claims it.`,\n      );\n      continue;\n    }\n    owners.set(facet.packageName, facet);\n    kept.push(facet);\n  }\n  return kept;\n}\n"],"mappings":";;AAwBA,MAAa,2BAA2B;AA6CxC,SAAgB,mBAAmB,SAAqD;CACtF,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,sBAAsB,SAAyC;CAC7E,MAAM,UAAU,mBAAmB,OAAO;CAC1C,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,iEAAiE;CAC/F,OAAO;AACT;;AAGA,MAAa,mCAAmC;;AAGhD,MAAa,2BAA2B;;AAgCxC,SAAgB,mBACd,YACA,SACkB;CAClB,OAAO,EAAE,WAAW,SAAS,KAAK,eAAe,YAAY,OAAO,EAAE;AACxE;AAmDA,IAAa,+BAAb,cAAkD,MAAM;CACtD,YAAY,YAAoB,SAAiB;EAC/C,MAAM,GAAG,iCAAiC,eAAe,WAAW,IAAI,SAAS;EACjF,KAAK,OAAO;CACd;AACF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;;AAGA,SAAgB,kBAAkB,OAA0C;CAC1E,OAAO,SAAS,KAAK,KAAK,OAAO,MAAM,UAAU;AACnD;AAEA,SAAS,cAAc,YAAoB,OAAe,OAAwB;CAChF,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,IAAI,GAC7E,MAAM,IAAI,6BAA6B,YAAY,GAAG,MAAM,iDAAiD;CAE/G,OAAO;AACT;AAEA,SAAS,gBAAgB,YAAoB,OAAyC;CACpF,IAAI,UAAU,KAAA,GAAW,MAAM,IAAI,6BAA6B,YAAY,qCAAqC;CACjH,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAC5C,MAAM,IAAI,6BAA6B,YAAY,uDAAuD;CAE5G,MAAM,SAAyB,CAAC;CAChC,KAAK,MAAM,SAAS,OAAO;EACzB,IAAI,UAAU,aAAa,UAAU,YAAY,UAAU,aACzD,MAAM,IAAI,6BACR,YACA,kBAAkB,OAAO,KAAK,EAAE,oCAClC;EAEF,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,OAAO,KAAK,KAAK;CAChD;CACA,OAAO;AACT;;;;;;;AAQA,SAAgB,uBAAuB,YAAoB,UAA0D;CACnH,MAAM,WAAW,SAAS;CAC1B,IAAI,aAAa,KAAA,GAAW,OAAO,CAAC;CACpC,IAAI,CAAC,SAAS,QAAQ,GACpB,MAAM,IAAI,6BAA6B,YAAY,oDAAoD;CAEzG,MAAM,QAAQ,cAAc,YAAY,SAAS,SAAS,KAAK;CAC/D,IAAI,SAAS,SAAS,KAAA,GACpB,MAAM,IAAI,6BACR,YACA,uFACF;CAEF,MAAM,OAAO,cAAc,YAAY,QAAQ,SAAS,IAAI;CAC5D,IAAI,SAAS,aAAa,KAAA,KAAa,OAAO,SAAS,aAAa,WAClE,MAAM,IAAI,6BAA6B,YAAY,6BAA6B;CAElF,OAAO,CACL;EACE,aAAa,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO;EACjE;EACA;EACA;EACA,QAAQ,gBAAgB,YAAY,SAAS,MAAM;EACnD,GAAI,OAAO,SAAS,aAAa,YAAY,EAAE,UAAU,SAAS,SAAS,IAAI,CAAC;CAClF,CACF;AACF;;;;;;AAOA,SAAgB,kBACd,QACA,iBAA4C,KAAA,GACrB;CACvB,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,MACxB,MAAM,UACL,KAAK,YAAY,cAAc,MAAM,WAAW,KAAK,KAAK,WAAW,cAAc,MAAM,UAAU,CACvG;CACA,MAAM,yBAAS,IAAI,IAAiC;CACpD,MAAM,OAA8B,CAAC;CACrC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,SAAS,OAAO,IAAI,MAAM,WAAW;EAC3C,IAAI,WAAW,KAAA,GAAW;GACxB,SACE,iBAAiB,MAAM,YAAY,SAAS,MAAM,WAAW,eAAe,OAAO,WAAW,oBAChG;GACA;EACF;EACA,OAAO,IAAI,MAAM,aAAa,KAAK;EACnC,KAAK,KAAK,KAAK;CACjB;CACA,OAAO;AACT"}