@ai-agent-forge/agent-forge 0.85.0

package/dist/profile/profile-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-migration.d.ts","sourceRoot":"","sources":["../../src/profile/profile-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,GAAG,OAAO,CAAC;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,wBAAwB,GACjC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,WAAW,wBAAwB;IACxC;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;KAAE,GAAG,sBAAsB,CAAC;IACpH;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KAC5B,GAAG,wBAAwB,CAAC;CAC7B;AAED,wBAAgB,4BAA4B,IAAI,wBAAwB,CA0DvE","sourcesContent":["/**\n * Profile migration / reload policy (2.7b) — the explicit session-reopen\n * policy over the 2.0b lock.\n *\n * Reload outcomes map one-to-one onto the lock verification: `current`\n * reopens silently; `migration_required` (profile version changed) and\n * `drift` (digest/capability mismatch at the same version) both require an\n * EXPLICIT authorized migration — nothing about the session history changes\n * until it succeeds. A failed migration leaves the previous lock and the\n * session history untouched; the old lock stays openable against its own\n * identity. Silent drift absorption is impossible by construction: every\n * non-current outcome must pass through `applyMigration` with an explicit\n * `authorizedBy`.\n */\nimport type { ProfileIdentityV1 } from \"./identity.ts\";\nimport { createProfileLock, type ProfileLockV1 } from \"./lock.ts\";\n\nexport interface ProfileMigrationPlanV1 {\n\treadonly status: \"current\" | \"migration_required\" | \"drift\";\n\treadonly fromProfileVersion: string;\n\treadonly toProfileVersion: string;\n\treadonly needsExplicitMigration: boolean;\n\treadonly reason?: string;\n}\n\nexport type ProfileMigrationResultV1 =\n\t| { readonly status: \"migrated\"; readonly lock: ProfileLockV1 }\n\t| { readonly status: \"current\"; readonly lock: ProfileLockV1 }\n\t| { readonly status: \"failed\"; readonly lock: ProfileLockV1; readonly reason: string };\n\nexport interface ProfileMigrationPolicyV1 {\n\t/**\n\t * Evaluates a reopen against the locked identity. Deterministic and free\n\t * of side effects: no lock is written, no history changes.\n\t */\n\tplanMigration(input: { readonly lock: ProfileLockV1; readonly current: ProfileIdentityV1 }): ProfileMigrationPlanV1;\n\t/**\n\t * The ONLY way a migrated lock comes into existence. Requires an explicit\n\t * authorizer; on any failure the previous lock survives unchanged.\n\t */\n\tapplyMigration(input: {\n\t\treadonly lock: ProfileLockV1;\n\t\treadonly current: ProfileIdentityV1;\n\t\treadonly authorizedBy: string;\n\t\treadonly now?: () => number;\n\t}): ProfileMigrationResultV1;\n}\n\nexport function createProfileMigrationPolicy(): ProfileMigrationPolicyV1 {\n\treturn {\n\t\tplanMigration({ lock, current }) {\n\t\t\tif (\n\t\t\t\tcurrent.manifestDigest === lock.identity.manifestDigest &&\n\t\t\t\tcurrent.profileVersion === lock.identity.profileVersion\n\t\t\t) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"current\",\n\t\t\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\t\t\ttoProfileVersion: current.profileVersion,\n\t\t\t\t\tneedsExplicitMigration: false,\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (current.profileVersion !== lock.identity.profileVersion) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"migration_required\",\n\t\t\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\t\t\ttoProfileVersion: current.profileVersion,\n\t\t\t\t\tneedsExplicitMigration: true,\n\t\t\t\t\treason: `Profile version changed from ${lock.identity.profileVersion} to ${current.profileVersion}`,\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tstatus: \"drift\",\n\t\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\t\ttoProfileVersion: current.profileVersion,\n\t\t\t\tneedsExplicitMigration: true,\n\t\t\t\treason: \"Resolved manifest digest differs from the locked profile identity\",\n\t\t\t};\n\t\t},\n\t\tapplyMigration({ lock, current, authorizedBy, now }) {\n\t\t\tif (authorizedBy.trim().length === 0) {\n\t\t\t\treturn { status: \"failed\", lock, reason: \"Migration requires a non-empty authorizedBy\" };\n\t\t\t}\n\t\t\tconst plan = this.planMigration({ lock, current });\n\t\t\tif (plan.status === \"current\") {\n\t\t\t\treturn { status: \"current\", lock };\n\t\t\t}\n\t\t\t// Simulate the swap: the new lock must verify against the incoming\n\t\t\t// identity before the old one is retired. Build first, verify second —\n\t\t\t// any throw below leaves the caller holding only the old lock.\n\t\t\tlet nextLock: ProfileLockV1;\n\t\t\ttry {\n\t\t\t\tnextLock = createProfileLock(current, {\n\t\t\t\t\tlockedBy: authorizedBy,\n\t\t\t\t\t...(now === undefined ? {} : { now }),\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\t// v8 ignore next -- createProfileLock 只抛 Error 对象\n\t\t\t\treturn { status: \"failed\", lock, reason: error instanceof Error ? error.message : String(error) };\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tstatus: \"migrated\",\n\t\t\t\tlock: nextLock,\n\t\t\t};\n\t\t},\n\t};\n}\n"]}

package/dist/profile/profile-migration.js

@@ -0,0 +1,60 @@
+import { createProfileLock } from "./lock.js";
+export function createProfileMigrationPolicy() {
+    return {
+        planMigration({ lock, current }) {
+            if (current.manifestDigest === lock.identity.manifestDigest &&
+                current.profileVersion === lock.identity.profileVersion) {
+                return {
+                    status: "current",
+                    fromProfileVersion: lock.identity.profileVersion,
+                    toProfileVersion: current.profileVersion,
+                    needsExplicitMigration: false,
+                };
+            }
+            if (current.profileVersion !== lock.identity.profileVersion) {
+                return {
+                    status: "migration_required",
+                    fromProfileVersion: lock.identity.profileVersion,
+                    toProfileVersion: current.profileVersion,
+                    needsExplicitMigration: true,
+                    reason: `Profile version changed from ${lock.identity.profileVersion} to ${current.profileVersion}`,
+                };
+            }
+            return {
+                status: "drift",
+                fromProfileVersion: lock.identity.profileVersion,
+                toProfileVersion: current.profileVersion,
+                needsExplicitMigration: true,
+                reason: "Resolved manifest digest differs from the locked profile identity",
+            };
+        },
+        applyMigration({ lock, current, authorizedBy, now }) {
+            if (authorizedBy.trim().length === 0) {
+                return { status: "failed", lock, reason: "Migration requires a non-empty authorizedBy" };
+            }
+            const plan = this.planMigration({ lock, current });
+            if (plan.status === "current") {
+                return { status: "current", lock };
+            }
+            // Simulate the swap: the new lock must verify against the incoming
+            // identity before the old one is retired. Build first, verify second —
+            // any throw below leaves the caller holding only the old lock.
+            let nextLock;
+            try {
+                nextLock = createProfileLock(current, {
+                    lockedBy: authorizedBy,
+                    ...(now === undefined ? {} : { now }),
+                });
+            }
+            catch (error) {
+                // v8 ignore next -- createProfileLock 只抛 Error 对象
+                return { status: "failed", lock, reason: error instanceof Error ? error.message : String(error) };
+            }
+            return {
+                status: "migrated",
+                lock: nextLock,
+            };
+        },
+    };
+}
+//# sourceMappingURL=profile-migration.js.map

package/dist/profile/profile-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-migration.js","sourceRoot":"","sources":["../../src/profile/profile-migration.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,iBAAiB,EAAsB,MAAM,WAAW,CAAC;AAiClE,MAAM,UAAU,4BAA4B,GAA6B;IACxE,OAAO;QACN,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAChC,IACC,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc;gBACvD,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,EACtD,CAAC;gBACF,OAAO;oBACN,MAAM,EAAE,SAAS;oBACjB,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;oBAChD,gBAAgB,EAAE,OAAO,CAAC,cAAc;oBACxC,sBAAsB,EAAE,KAAK;iBAC7B,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC7D,OAAO;oBACN,MAAM,EAAE,oBAAoB;oBAC5B,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;oBAChD,gBAAgB,EAAE,OAAO,CAAC,cAAc;oBACxC,sBAAsB,EAAE,IAAI;oBAC5B,MAAM,EAAE,gCAAgC,IAAI,CAAC,QAAQ,CAAC,cAAc,OAAO,OAAO,CAAC,cAAc,EAAE;iBACnG,CAAC;YACH,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAChD,gBAAgB,EAAE,OAAO,CAAC,cAAc;gBACxC,sBAAsB,EAAE,IAAI;gBAC5B,MAAM,EAAE,mEAAmE;aAC3E,CAAC;QAAA,CACF;QACD,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE;YACpD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;YAC1F,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACpC,CAAC;YACD,mEAAmE;YACnE,yEAAuE;YACvE,+DAA+D;YAC/D,IAAI,QAAuB,CAAC;YAC5B,IAAI,CAAC;gBACJ,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE;oBACrC,QAAQ,EAAE,YAAY;oBACtB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;iBACrC,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,0DAAkD;gBAClD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnG,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,QAAQ;aACd,CAAC;QAAA,CACF;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Profile migration / reload policy (2.7b) — the explicit session-reopen\n * policy over the 2.0b lock.\n *\n * Reload outcomes map one-to-one onto the lock verification: `current`\n * reopens silently; `migration_required` (profile version changed) and\n * `drift` (digest/capability mismatch at the same version) both require an\n * EXPLICIT authorized migration — nothing about the session history changes\n * until it succeeds. A failed migration leaves the previous lock and the\n * session history untouched; the old lock stays openable against its own\n * identity. Silent drift absorption is impossible by construction: every\n * non-current outcome must pass through `applyMigration` with an explicit\n * `authorizedBy`.\n */\nimport type { ProfileIdentityV1 } from \"./identity.ts\";\nimport { createProfileLock, type ProfileLockV1 } from \"./lock.ts\";\n\nexport interface ProfileMigrationPlanV1 {\n\treadonly status: \"current\" | \"migration_required\" | \"drift\";\n\treadonly fromProfileVersion: string;\n\treadonly toProfileVersion: string;\n\treadonly needsExplicitMigration: boolean;\n\treadonly reason?: string;\n}\n\nexport type ProfileMigrationResultV1 =\n\t| { readonly status: \"migrated\"; readonly lock: ProfileLockV1 }\n\t| { readonly status: \"current\"; readonly lock: ProfileLockV1 }\n\t| { readonly status: \"failed\"; readonly lock: ProfileLockV1; readonly reason: string };\n\nexport interface ProfileMigrationPolicyV1 {\n\t/**\n\t * Evaluates a reopen against the locked identity. Deterministic and free\n\t * of side effects: no lock is written, no history changes.\n\t */\n\tplanMigration(input: { readonly lock: ProfileLockV1; readonly current: ProfileIdentityV1 }): ProfileMigrationPlanV1;\n\t/**\n\t * The ONLY way a migrated lock comes into existence. Requires an explicit\n\t * authorizer; on any failure the previous lock survives unchanged.\n\t */\n\tapplyMigration(input: {\n\t\treadonly lock: ProfileLockV1;\n\t\treadonly current: ProfileIdentityV1;\n\t\treadonly authorizedBy: string;\n\t\treadonly now?: () => number;\n\t}): ProfileMigrationResultV1;\n}\n\nexport function createProfileMigrationPolicy(): ProfileMigrationPolicyV1 {\n\treturn {\n\t\tplanMigration({ lock, current }) {\n\t\t\tif (\n\t\t\t\tcurrent.manifestDigest === lock.identity.manifestDigest &&\n\t\t\t\tcurrent.profileVersion === lock.identity.profileVersion\n\t\t\t) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"current\",\n\t\t\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\t\t\ttoProfileVersion: current.profileVersion,\n\t\t\t\t\tneedsExplicitMigration: false,\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (current.profileVersion !== lock.identity.profileVersion) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"migration_required\",\n\t\t\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\t\t\ttoProfileVersion: current.profileVersion,\n\t\t\t\t\tneedsExplicitMigration: true,\n\t\t\t\t\treason: `Profile version changed from ${lock.identity.profileVersion} to ${current.profileVersion}`,\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tstatus: \"drift\",\n\t\t\t\tfromProfileVersion: lock.identity.profileVersion,\n\t\t\t\ttoProfileVersion: current.profileVersion,\n\t\t\t\tneedsExplicitMigration: true,\n\t\t\t\treason: \"Resolved manifest digest differs from the locked profile identity\",\n\t\t\t};\n\t\t},\n\t\tapplyMigration({ lock, current, authorizedBy, now }) {\n\t\t\tif (authorizedBy.trim().length === 0) {\n\t\t\t\treturn { status: \"failed\", lock, reason: \"Migration requires a non-empty authorizedBy\" };\n\t\t\t}\n\t\t\tconst plan = this.planMigration({ lock, current });\n\t\t\tif (plan.status === \"current\") {\n\t\t\t\treturn { status: \"current\", lock };\n\t\t\t}\n\t\t\t// Simulate the swap: the new lock must verify against the incoming\n\t\t\t// identity before the old one is retired. Build first, verify second —\n\t\t\t// any throw below leaves the caller holding only the old lock.\n\t\t\tlet nextLock: ProfileLockV1;\n\t\t\ttry {\n\t\t\t\tnextLock = createProfileLock(current, {\n\t\t\t\t\tlockedBy: authorizedBy,\n\t\t\t\t\t...(now === undefined ? {} : { now }),\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\t// v8 ignore next -- createProfileLock 只抛 Error 对象\n\t\t\t\treturn { status: \"failed\", lock, reason: error instanceof Error ? error.message : String(error) };\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tstatus: \"migrated\",\n\t\t\t\tlock: nextLock,\n\t\t\t};\n\t\t},\n\t};\n}\n"]}

package/dist/profile/profile-registry.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Profile registry (2.7a) — multi-source discovery, upgrades, and
+ * compatibility for profile manifests on top of the minimal 2.0a identity.
+ *
+ * Sources register profiles with a priority (lower number wins). Resolution
+ * is deterministic and replayable: filter candidates by the requested
+ * version range, pick the highest version, break same-version ties by
+ * source priority (the losing source is reported as superseded), and mark
+ * deprecated winners explicitly (visible, digest still supplied — callers
+ * decide whether to proceed). Builds on the minimal 2.0a identity/lock
+ * without extending them.
+ */
+export interface RegistryProfileEntryV1 {
+    readonly profileId: string;
+    readonly profileVersion: string;
+    readonly manifestDigest: string;
+    readonly deprecated?: string;
+}
+export interface RegistrySourceV1 {
+    readonly sourceId: string;
+    /** Lower priority number wins same-version ties. */
+    readonly priority: number;
+    readonly profiles: readonly RegistryProfileEntryV1[];
+}
+export interface ProfileVersionRangeV1 {
+    readonly min?: string;
+    readonly max?: string;
+}
+export type ProfileResolutionV1 = {
+    readonly status: "resolved";
+    readonly profileId: string;
+    readonly profileVersion: string;
+    readonly manifestDigest: string;
+    readonly sourceId: string;
+    readonly superseded: readonly {
+        readonly sourceId: string;
+        readonly profileVersion: string;
+    }[];
+} | {
+    readonly status: "deprecated";
+    readonly profileId: string;
+    readonly profileVersion: string;
+    readonly manifestDigest: string;
+    readonly sourceId: string;
+    readonly reason: string;
+} | {
+    readonly status: "not_found";
+    readonly profileId: string;
+};
+export interface ProfileRegistryV1 {
+    registerSource(source: RegistrySourceV1): void;
+    resolve(input: {
+        readonly profileId: string;
+        readonly versionRange?: ProfileVersionRangeV1;
+    }): ProfileResolutionV1;
+}
+export declare function createProfileRegistry(): ProfileRegistryV1;
+//# sourceMappingURL=profile-registry.d.ts.map

package/dist/profile/profile-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-registry.d.ts","sourceRoot":"","sources":["../../src/profile/profile-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,mBAAmB,GAC5B;IACA,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9F,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACvB,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IACjC,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC/C,OAAO,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAA;KAAE,GAAG,mBAAmB,CAAC;CACnH;AAcD,wBAAgB,qBAAqB,IAAI,iBAAiB,CAmEzD","sourcesContent":["/**\n * Profile registry (2.7a) — multi-source discovery, upgrades, and\n * compatibility for profile manifests on top of the minimal 2.0a identity.\n *\n * Sources register profiles with a priority (lower number wins). Resolution\n * is deterministic and replayable: filter candidates by the requested\n * version range, pick the highest version, break same-version ties by\n * source priority (the losing source is reported as superseded), and mark\n * deprecated winners explicitly (visible, digest still supplied — callers\n * decide whether to proceed). Builds on the minimal 2.0a identity/lock\n * without extending them.\n */\nexport interface RegistryProfileEntryV1 {\n\treadonly profileId: string;\n\treadonly profileVersion: string;\n\treadonly manifestDigest: string;\n\treadonly deprecated?: string;\n}\n\nexport interface RegistrySourceV1 {\n\treadonly sourceId: string;\n\t/** Lower priority number wins same-version ties. */\n\treadonly priority: number;\n\treadonly profiles: readonly RegistryProfileEntryV1[];\n}\n\nexport interface ProfileVersionRangeV1 {\n\treadonly min?: string;\n\treadonly max?: string;\n}\n\nexport type ProfileResolutionV1 =\n\t| {\n\t\t\treadonly status: \"resolved\";\n\t\t\treadonly profileId: string;\n\t\t\treadonly profileVersion: string;\n\t\t\treadonly manifestDigest: string;\n\t\t\treadonly sourceId: string;\n\t\t\treadonly superseded: readonly { readonly sourceId: string; readonly profileVersion: string }[];\n\t  }\n\t| {\n\t\t\treadonly status: \"deprecated\";\n\t\t\treadonly profileId: string;\n\t\t\treadonly profileVersion: string;\n\t\t\treadonly manifestDigest: string;\n\t\t\treadonly sourceId: string;\n\t\t\treadonly reason: string;\n\t  }\n\t| { readonly status: \"not_found\"; readonly profileId: string };\n\nexport interface ProfileRegistryV1 {\n\tregisterSource(source: RegistrySourceV1): void;\n\tresolve(input: { readonly profileId: string; readonly versionRange?: ProfileVersionRangeV1 }): ProfileResolutionV1;\n}\n\n/** Segment-wise numeric semver comparison (\"1.2\" < \"1.10\" < \"2.0\"). */\nfunction compareVersions(a: string, b: string): number {\n\tconst pa = a.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst pb = b.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst length = Math.max(pa.length, pb.length);\n\tfor (let index = 0; index < length; index += 1) {\n\t\tconst diff = (pa[index] ?? 0) - (pb[index] ?? 0);\n\t\tif (diff !== 0) return diff;\n\t}\n\treturn 0;\n}\n\nexport function createProfileRegistry(): ProfileRegistryV1 {\n\tconst sources: RegistrySourceV1[] = [];\n\n\treturn {\n\t\tregisterSource(source) {\n\t\t\tif (sources.some((existing) => existing.sourceId === source.sourceId)) {\n\t\t\t\tthrow new Error(`Registry source already registered: ${source.sourceId}`);\n\t\t\t}\n\t\t\tsources.push(source);\n\t\t},\n\t\tresolve({ profileId, versionRange }) {\n\t\t\tconst candidates = sources\n\t\t\t\t.flatMap((source) =>\n\t\t\t\t\tsource.profiles\n\t\t\t\t\t\t.filter((profile) => profile.profileId === profileId)\n\t\t\t\t\t\t.map((profile) => ({ source, profile })),\n\t\t\t\t)\n\t\t\t\t.filter(({ profile }) => {\n\t\t\t\t\tif (versionRange?.min !== undefined && compareVersions(profile.profileVersion, versionRange.min) < 0) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\tif (versionRange?.max !== undefined && compareVersions(profile.profileVersion, versionRange.max) > 0) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t})\n\t\t\t\t.sort((a, b) => {\n\t\t\t\t\tconst versionDiff = compareVersions(b.profile.profileVersion, a.profile.profileVersion);\n\t\t\t\t\tif (versionDiff !== 0) return versionDiff;\n\t\t\t\t\treturn a.source.priority - b.source.priority;\n\t\t\t\t});\n\n\t\t\tif (candidates.length === 0) {\n\t\t\t\treturn { status: \"not_found\", profileId };\n\t\t\t}\n\n\t\t\tconst winner = candidates[0]!;\n\t\t\tif (winner.profile.deprecated !== undefined) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"deprecated\",\n\t\t\t\t\tprofileId,\n\t\t\t\t\tprofileVersion: winner.profile.profileVersion,\n\t\t\t\t\tmanifestDigest: winner.profile.manifestDigest,\n\t\t\t\t\tsourceId: winner.source.sourceId,\n\t\t\t\t\treason: winner.profile.deprecated,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst superseded = candidates\n\t\t\t\t.slice(1)\n\t\t\t\t.filter(\n\t\t\t\t\t(candidate) => compareVersions(candidate.profile.profileVersion, winner.profile.profileVersion) === 0,\n\t\t\t\t)\n\t\t\t\t.map((candidate) => ({\n\t\t\t\t\tsourceId: candidate.source.sourceId,\n\t\t\t\t\tprofileVersion: candidate.profile.profileVersion,\n\t\t\t\t}));\n\t\t\treturn {\n\t\t\t\tstatus: \"resolved\",\n\t\t\t\tprofileId,\n\t\t\t\tprofileVersion: winner.profile.profileVersion,\n\t\t\t\tmanifestDigest: winner.profile.manifestDigest,\n\t\t\t\tsourceId: winner.source.sourceId,\n\t\t\t\tsuperseded,\n\t\t\t};\n\t\t},\n\t};\n}\n"]}

package/dist/profile/profile-registry.js

@@ -0,0 +1,74 @@
+/** Segment-wise numeric semver comparison ("1.2" < "1.10" < "2.0"). */
+function compareVersions(a, b) {
+    const pa = a.split(".").map((part) => Number.parseInt(part, 10) || 0);
+    const pb = b.split(".").map((part) => Number.parseInt(part, 10) || 0);
+    const length = Math.max(pa.length, pb.length);
+    for (let index = 0; index < length; index += 1) {
+        const diff = (pa[index] ?? 0) - (pb[index] ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+export function createProfileRegistry() {
+    const sources = [];
+    return {
+        registerSource(source) {
+            if (sources.some((existing) => existing.sourceId === source.sourceId)) {
+                throw new Error(`Registry source already registered: ${source.sourceId}`);
+            }
+            sources.push(source);
+        },
+        resolve({ profileId, versionRange }) {
+            const candidates = sources
+                .flatMap((source) => source.profiles
+                .filter((profile) => profile.profileId === profileId)
+                .map((profile) => ({ source, profile })))
+                .filter(({ profile }) => {
+                if (versionRange?.min !== undefined && compareVersions(profile.profileVersion, versionRange.min) < 0) {
+                    return false;
+                }
+                if (versionRange?.max !== undefined && compareVersions(profile.profileVersion, versionRange.max) > 0) {
+                    return false;
+                }
+                return true;
+            })
+                .sort((a, b) => {
+                const versionDiff = compareVersions(b.profile.profileVersion, a.profile.profileVersion);
+                if (versionDiff !== 0)
+                    return versionDiff;
+                return a.source.priority - b.source.priority;
+            });
+            if (candidates.length === 0) {
+                return { status: "not_found", profileId };
+            }
+            const winner = candidates[0];
+            if (winner.profile.deprecated !== undefined) {
+                return {
+                    status: "deprecated",
+                    profileId,
+                    profileVersion: winner.profile.profileVersion,
+                    manifestDigest: winner.profile.manifestDigest,
+                    sourceId: winner.source.sourceId,
+                    reason: winner.profile.deprecated,
+                };
+            }
+            const superseded = candidates
+                .slice(1)
+                .filter((candidate) => compareVersions(candidate.profile.profileVersion, winner.profile.profileVersion) === 0)
+                .map((candidate) => ({
+                sourceId: candidate.source.sourceId,
+                profileVersion: candidate.profile.profileVersion,
+            }));
+            return {
+                status: "resolved",
+                profileId,
+                profileVersion: winner.profile.profileVersion,
+                manifestDigest: winner.profile.manifestDigest,
+                sourceId: winner.source.sourceId,
+                superseded,
+            };
+        },
+    };
+}
+//# sourceMappingURL=profile-registry.js.map

package/dist/profile/profile-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-registry.js","sourceRoot":"","sources":["../../src/profile/profile-registry.ts"],"names":[],"mappings":"AAuDA,uEAAuE;AACvE,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS,EAAU;IACtD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,CAAC;AAAA,CACT;AAED,MAAM,UAAU,qBAAqB,GAAsB;IAC1D,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,OAAO;QACN,cAAc,CAAC,MAAM,EAAE;YACtB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAA,CACrB;QACD,OAAO,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE;YACpC,MAAM,UAAU,GAAG,OAAO;iBACxB,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnB,MAAM,CAAC,QAAQ;iBACb,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CACzC;iBACA,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;gBACxB,IAAI,YAAY,EAAE,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtG,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,YAAY,EAAE,GAAG,KAAK,SAAS,IAAI,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtG,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,IAAI,CAAC;YAAA,CACZ,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACxF,IAAI,WAAW,KAAK,CAAC;oBAAE,OAAO,WAAW,CAAC;gBAC1C,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAA,CAC7C,CAAC,CAAC;YAEJ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;YAC3C,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO;oBACN,MAAM,EAAE,YAAY;oBACpB,SAAS;oBACT,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;oBAC7C,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;oBAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;oBAChC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;iBACjC,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,UAAU;iBAC3B,KAAK,CAAC,CAAC,CAAC;iBACR,MAAM,CACN,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CACrG;iBACA,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACpB,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ;gBACnC,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,cAAc;aAChD,CAAC,CAAC,CAAC;YACL,OAAO;gBACN,MAAM,EAAE,UAAU;gBAClB,SAAS;gBACT,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;gBAC7C,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;gBAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;gBAChC,UAAU;aACV,CAAC;QAAA,CACF;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Profile registry (2.7a) — multi-source discovery, upgrades, and\n * compatibility for profile manifests on top of the minimal 2.0a identity.\n *\n * Sources register profiles with a priority (lower number wins). Resolution\n * is deterministic and replayable: filter candidates by the requested\n * version range, pick the highest version, break same-version ties by\n * source priority (the losing source is reported as superseded), and mark\n * deprecated winners explicitly (visible, digest still supplied — callers\n * decide whether to proceed). Builds on the minimal 2.0a identity/lock\n * without extending them.\n */\nexport interface RegistryProfileEntryV1 {\n\treadonly profileId: string;\n\treadonly profileVersion: string;\n\treadonly manifestDigest: string;\n\treadonly deprecated?: string;\n}\n\nexport interface RegistrySourceV1 {\n\treadonly sourceId: string;\n\t/** Lower priority number wins same-version ties. */\n\treadonly priority: number;\n\treadonly profiles: readonly RegistryProfileEntryV1[];\n}\n\nexport interface ProfileVersionRangeV1 {\n\treadonly min?: string;\n\treadonly max?: string;\n}\n\nexport type ProfileResolutionV1 =\n\t| {\n\t\t\treadonly status: \"resolved\";\n\t\t\treadonly profileId: string;\n\t\t\treadonly profileVersion: string;\n\t\t\treadonly manifestDigest: string;\n\t\t\treadonly sourceId: string;\n\t\t\treadonly superseded: readonly { readonly sourceId: string; readonly profileVersion: string }[];\n\t  }\n\t| {\n\t\t\treadonly status: \"deprecated\";\n\t\t\treadonly profileId: string;\n\t\t\treadonly profileVersion: string;\n\t\t\treadonly manifestDigest: string;\n\t\t\treadonly sourceId: string;\n\t\t\treadonly reason: string;\n\t  }\n\t| { readonly status: \"not_found\"; readonly profileId: string };\n\nexport interface ProfileRegistryV1 {\n\tregisterSource(source: RegistrySourceV1): void;\n\tresolve(input: { readonly profileId: string; readonly versionRange?: ProfileVersionRangeV1 }): ProfileResolutionV1;\n}\n\n/** Segment-wise numeric semver comparison (\"1.2\" < \"1.10\" < \"2.0\"). */\nfunction compareVersions(a: string, b: string): number {\n\tconst pa = a.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst pb = b.split(\".\").map((part) => Number.parseInt(part, 10) || 0);\n\tconst length = Math.max(pa.length, pb.length);\n\tfor (let index = 0; index < length; index += 1) {\n\t\tconst diff = (pa[index] ?? 0) - (pb[index] ?? 0);\n\t\tif (diff !== 0) return diff;\n\t}\n\treturn 0;\n}\n\nexport function createProfileRegistry(): ProfileRegistryV1 {\n\tconst sources: RegistrySourceV1[] = [];\n\n\treturn {\n\t\tregisterSource(source) {\n\t\t\tif (sources.some((existing) => existing.sourceId === source.sourceId)) {\n\t\t\t\tthrow new Error(`Registry source already registered: ${source.sourceId}`);\n\t\t\t}\n\t\t\tsources.push(source);\n\t\t},\n\t\tresolve({ profileId, versionRange }) {\n\t\t\tconst candidates = sources\n\t\t\t\t.flatMap((source) =>\n\t\t\t\t\tsource.profiles\n\t\t\t\t\t\t.filter((profile) => profile.profileId === profileId)\n\t\t\t\t\t\t.map((profile) => ({ source, profile })),\n\t\t\t\t)\n\t\t\t\t.filter(({ profile }) => {\n\t\t\t\t\tif (versionRange?.min !== undefined && compareVersions(profile.profileVersion, versionRange.min) < 0) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\tif (versionRange?.max !== undefined && compareVersions(profile.profileVersion, versionRange.max) > 0) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t})\n\t\t\t\t.sort((a, b) => {\n\t\t\t\t\tconst versionDiff = compareVersions(b.profile.profileVersion, a.profile.profileVersion);\n\t\t\t\t\tif (versionDiff !== 0) return versionDiff;\n\t\t\t\t\treturn a.source.priority - b.source.priority;\n\t\t\t\t});\n\n\t\t\tif (candidates.length === 0) {\n\t\t\t\treturn { status: \"not_found\", profileId };\n\t\t\t}\n\n\t\t\tconst winner = candidates[0]!;\n\t\t\tif (winner.profile.deprecated !== undefined) {\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"deprecated\",\n\t\t\t\t\tprofileId,\n\t\t\t\t\tprofileVersion: winner.profile.profileVersion,\n\t\t\t\t\tmanifestDigest: winner.profile.manifestDigest,\n\t\t\t\t\tsourceId: winner.source.sourceId,\n\t\t\t\t\treason: winner.profile.deprecated,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst superseded = candidates\n\t\t\t\t.slice(1)\n\t\t\t\t.filter(\n\t\t\t\t\t(candidate) => compareVersions(candidate.profile.profileVersion, winner.profile.profileVersion) === 0,\n\t\t\t\t)\n\t\t\t\t.map((candidate) => ({\n\t\t\t\t\tsourceId: candidate.source.sourceId,\n\t\t\t\t\tprofileVersion: candidate.profile.profileVersion,\n\t\t\t\t}));\n\t\t\treturn {\n\t\t\t\tstatus: \"resolved\",\n\t\t\t\tprofileId,\n\t\t\t\tprofileVersion: winner.profile.profileVersion,\n\t\t\t\tmanifestDigest: winner.profile.manifestDigest,\n\t\t\t\tsourceId: winner.source.sourceId,\n\t\t\t\tsuperseded,\n\t\t\t};\n\t\t},\n\t};\n}\n"]}

package/dist/profile/role-assembly.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Role assembly (2.2d) — builds a `RoleCatalogV1` plus a role-runner binding
+ * from registered role metadata, evaluates every role's REQUIRED capability
+ * dependencies against the available capability registry (2.5a structured
+ * `missing` diagnostics), and exposes the sorted roleId summary consumed by
+ * the code profile package assembly (2.7c). The same input always assembles
+ * identically; duplicate roleIds fail explicitly through the catalog.
+ */
+import type { AvailableCapabilityV1 } from "./dependency-wiring.ts";
+import { type RoleCatalogV1, type RoleMetadataV1 } from "./role-catalog.ts";
+import { type RoleMissingCapabilityV1, type RoleRunCallbackV1, type RoleRunnerV1 } from "./role-runner.ts";
+/** One registered role: catalog metadata plus an optional per-role run binding. */
+export interface RegisteredRoleMetaV1 {
+    readonly metadata: RoleMetadataV1;
+    /**
+     * Optional per-role run override. Run-binding precedence: per-role override
+     * → deterministic first-batch callback → explicit failure for roles
+     * without any first-batch callback.
+     */
+    readonly run?: RoleRunCallbackV1;
+}
+/** Aggregated required-dependency diagnostics across all assembled roles. */
+export interface RoleAssemblyDiagnosticsV1 {
+    readonly status: "satisfied" | "missing";
+    readonly missing: readonly RoleMissingCapabilityV1[];
+}
+/** Assembled role mount: catalog + runner binding + identity summary + diagnostics. */
+export interface RoleAssemblyV1 {
+    readonly catalog: RoleCatalogV1;
+    readonly runner: RoleRunnerV1;
+    /** Sorted registered roleId summary (package identity/diagnostics surface). */
+    readonly roleIds: readonly string[];
+    readonly capabilityDiagnostics: RoleAssemblyDiagnosticsV1;
+}
+/** Data-only role mount summary carried by a ready code profile package. */
+export interface MountedRoleSummaryV1 {
+    readonly roleIds: readonly string[];
+    readonly capabilityDiagnostics: RoleAssemblyDiagnosticsV1;
+}
+/** Assembles registered role metadata into a catalog + runner binding object. */
+export declare function assembleRoles(input: {
+    readonly roles: readonly RegisteredRoleMetaV1[];
+    readonly availableCapabilities: readonly AvailableCapabilityV1[];
+    /** Owner stamped onto produced child definitions (see `createRoleRunner`). */
+    readonly owner?: string;
+}): RoleAssemblyV1;
+//# sourceMappingURL=role-assembly.d.ts.map

package/dist/profile/role-assembly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-assembly.d.ts","sourceRoot":"","sources":["../../src/profile/role-assembly.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAqB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAEN,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAGjB,MAAM,kBAAkB,CAAC;AAE1B,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,6EAA6E;AAC7E,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACrD;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;CAC1D;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;CAC1D;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjE,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,cAAc,CA4BjB","sourcesContent":["/**\n * Role assembly (2.2d) — builds a `RoleCatalogV1` plus a role-runner binding\n * from registered role metadata, evaluates every role's REQUIRED capability\n * dependencies against the available capability registry (2.5a structured\n * `missing` diagnostics), and exposes the sorted roleId summary consumed by\n * the code profile package assembly (2.7c). The same input always assembles\n * identically; duplicate roleIds fail explicitly through the catalog.\n */\nimport type { AvailableCapabilityV1 } from \"./dependency-wiring.ts\";\nimport { createRoleCatalog, type RoleCatalogV1, type RoleMetadataV1 } from \"./role-catalog.ts\";\nimport {\n\tcreateRoleRunner,\n\ttype RoleMissingCapabilityV1,\n\ttype RoleRunCallbackV1,\n\ttype RoleRunnerV1,\n\ttype RoleRunResolverV1,\n\trunFirstBatchRole,\n} from \"./role-runner.ts\";\n\n/** One registered role: catalog metadata plus an optional per-role run binding. */\nexport interface RegisteredRoleMetaV1 {\n\treadonly metadata: RoleMetadataV1;\n\t/**\n\t * Optional per-role run override. Run-binding precedence: per-role override\n\t * → deterministic first-batch callback → explicit failure for roles\n\t * without any first-batch callback.\n\t */\n\treadonly run?: RoleRunCallbackV1;\n}\n\n/** Aggregated required-dependency diagnostics across all assembled roles. */\nexport interface RoleAssemblyDiagnosticsV1 {\n\treadonly status: \"satisfied\" | \"missing\";\n\treadonly missing: readonly RoleMissingCapabilityV1[];\n}\n\n/** Assembled role mount: catalog + runner binding + identity summary + diagnostics. */\nexport interface RoleAssemblyV1 {\n\treadonly catalog: RoleCatalogV1;\n\treadonly runner: RoleRunnerV1;\n\t/** Sorted registered roleId summary (package identity/diagnostics surface). */\n\treadonly roleIds: readonly string[];\n\treadonly capabilityDiagnostics: RoleAssemblyDiagnosticsV1;\n}\n\n/** Data-only role mount summary carried by a ready code profile package. */\nexport interface MountedRoleSummaryV1 {\n\treadonly roleIds: readonly string[];\n\treadonly capabilityDiagnostics: RoleAssemblyDiagnosticsV1;\n}\n\n/** Assembles registered role metadata into a catalog + runner binding object. */\nexport function assembleRoles(input: {\n\treadonly roles: readonly RegisteredRoleMetaV1[];\n\treadonly availableCapabilities: readonly AvailableCapabilityV1[];\n\t/** Owner stamped onto produced child definitions (see `createRoleRunner`). */\n\treadonly owner?: string;\n}): RoleAssemblyV1 {\n\tconst catalog = createRoleCatalog(input.roles.map((role) => role.metadata));\n\tconst overrides = new Map<string, RoleRunCallbackV1>(\n\t\tinput.roles.flatMap((role) => (role.run ? [[role.metadata.roleId, role.run] as const] : [])),\n\t);\n\tconst runner = createRoleRunner({\n\t\tcatalog,\n\t\t...(input.owner === undefined ? {} : { owner: input.owner }),\n\t\t...(overrides.size > 0\n\t\t\t? {\n\t\t\t\t\trun: ((roleId, runInput, context) => {\n\t\t\t\t\t\tconst override = overrides.get(roleId);\n\t\t\t\t\t\treturn override ? override(runInput, context) : runFirstBatchRole(roleId, runInput, context);\n\t\t\t\t\t}) satisfies RoleRunResolverV1,\n\t\t\t\t}\n\t\t\t: {}),\n\t});\n\tconst roleIds = catalog.list().map((role) => role.roleId);\n\tconst missing = roleIds.flatMap((roleId) => runner.checkCapabilities(roleId, input.availableCapabilities).missing);\n\treturn Object.freeze({\n\t\tcatalog,\n\t\trunner,\n\t\troleIds: Object.freeze([...roleIds]),\n\t\tcapabilityDiagnostics: Object.freeze({\n\t\t\tstatus: missing.length > 0 ? \"missing\" : \"satisfied\",\n\t\t\tmissing: Object.freeze(missing),\n\t\t}),\n\t});\n}\n"]}

package/dist/profile/role-assembly.js

@@ -0,0 +1,31 @@
+import { createRoleCatalog } from "./role-catalog.js";
+import { createRoleRunner, runFirstBatchRole, } from "./role-runner.js";
+/** Assembles registered role metadata into a catalog + runner binding object. */
+export function assembleRoles(input) {
+    const catalog = createRoleCatalog(input.roles.map((role) => role.metadata));
+    const overrides = new Map(input.roles.flatMap((role) => (role.run ? [[role.metadata.roleId, role.run]] : [])));
+    const runner = createRoleRunner({
+        catalog,
+        ...(input.owner === undefined ? {} : { owner: input.owner }),
+        ...(overrides.size > 0
+            ? {
+                run: ((roleId, runInput, context) => {
+                    const override = overrides.get(roleId);
+                    return override ? override(runInput, context) : runFirstBatchRole(roleId, runInput, context);
+                }),
+            }
+            : {}),
+    });
+    const roleIds = catalog.list().map((role) => role.roleId);
+    const missing = roleIds.flatMap((roleId) => runner.checkCapabilities(roleId, input.availableCapabilities).missing);
+    return Object.freeze({
+        catalog,
+        runner,
+        roleIds: Object.freeze([...roleIds]),
+        capabilityDiagnostics: Object.freeze({
+            status: missing.length > 0 ? "missing" : "satisfied",
+            missing: Object.freeze(missing),
+        }),
+    });
+}
+//# sourceMappingURL=role-assembly.js.map

package/dist/profile/role-assembly.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-assembly.js","sourceRoot":"","sources":["../../src/profile/role-assembly.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,iBAAiB,EAA2C,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EACN,gBAAgB,EAKhB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC;AAkC1B,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,KAK7B,EAAkB;IAClB,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CACxB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5F,CAAC;IACF,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC/B,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5D,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;YACrB,CAAC,CAAC;gBACA,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;oBACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACvC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAAA,CAC7F,CAA6B;aAC9B;YACF,CAAC,CAAC,EAAE,CAAC;KACN,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;YACpD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;SAC/B,CAAC;KACF,CAAC,CAAC;AAAA,CACH","sourcesContent":["/**\n * Role assembly (2.2d) — builds a `RoleCatalogV1` plus a role-runner binding\n * from registered role metadata, evaluates every role's REQUIRED capability\n * dependencies against the available capability registry (2.5a structured\n * `missing` diagnostics), and exposes the sorted roleId summary consumed by\n * the code profile package assembly (2.7c). The same input always assembles\n * identically; duplicate roleIds fail explicitly through the catalog.\n */\nimport type { AvailableCapabilityV1 } from \"./dependency-wiring.ts\";\nimport { createRoleCatalog, type RoleCatalogV1, type RoleMetadataV1 } from \"./role-catalog.ts\";\nimport {\n\tcreateRoleRunner,\n\ttype RoleMissingCapabilityV1,\n\ttype RoleRunCallbackV1,\n\ttype RoleRunnerV1,\n\ttype RoleRunResolverV1,\n\trunFirstBatchRole,\n} from \"./role-runner.ts\";\n\n/** One registered role: catalog metadata plus an optional per-role run binding. */\nexport interface RegisteredRoleMetaV1 {\n\treadonly metadata: RoleMetadataV1;\n\t/**\n\t * Optional per-role run override. Run-binding precedence: per-role override\n\t * → deterministic first-batch callback → explicit failure for roles\n\t * without any first-batch callback.\n\t */\n\treadonly run?: RoleRunCallbackV1;\n}\n\n/** Aggregated required-dependency diagnostics across all assembled roles. */\nexport interface RoleAssemblyDiagnosticsV1 {\n\treadonly status: \"satisfied\" | \"missing\";\n\treadonly missing: readonly RoleMissingCapabilityV1[];\n}\n\n/** Assembled role mount: catalog + runner binding + identity summary + diagnostics. */\nexport interface RoleAssemblyV1 {\n\treadonly catalog: RoleCatalogV1;\n\treadonly runner: RoleRunnerV1;\n\t/** Sorted registered roleId summary (package identity/diagnostics surface). */\n\treadonly roleIds: readonly string[];\n\treadonly capabilityDiagnostics: RoleAssemblyDiagnosticsV1;\n}\n\n/** Data-only role mount summary carried by a ready code profile package. */\nexport interface MountedRoleSummaryV1 {\n\treadonly roleIds: readonly string[];\n\treadonly capabilityDiagnostics: RoleAssemblyDiagnosticsV1;\n}\n\n/** Assembles registered role metadata into a catalog + runner binding object. */\nexport function assembleRoles(input: {\n\treadonly roles: readonly RegisteredRoleMetaV1[];\n\treadonly availableCapabilities: readonly AvailableCapabilityV1[];\n\t/** Owner stamped onto produced child definitions (see `createRoleRunner`). */\n\treadonly owner?: string;\n}): RoleAssemblyV1 {\n\tconst catalog = createRoleCatalog(input.roles.map((role) => role.metadata));\n\tconst overrides = new Map<string, RoleRunCallbackV1>(\n\t\tinput.roles.flatMap((role) => (role.run ? [[role.metadata.roleId, role.run] as const] : [])),\n\t);\n\tconst runner = createRoleRunner({\n\t\tcatalog,\n\t\t...(input.owner === undefined ? {} : { owner: input.owner }),\n\t\t...(overrides.size > 0\n\t\t\t? {\n\t\t\t\t\trun: ((roleId, runInput, context) => {\n\t\t\t\t\t\tconst override = overrides.get(roleId);\n\t\t\t\t\t\treturn override ? override(runInput, context) : runFirstBatchRole(roleId, runInput, context);\n\t\t\t\t\t}) satisfies RoleRunResolverV1,\n\t\t\t\t}\n\t\t\t: {}),\n\t});\n\tconst roleIds = catalog.list().map((role) => role.roleId);\n\tconst missing = roleIds.flatMap((roleId) => runner.checkCapabilities(roleId, input.availableCapabilities).missing);\n\treturn Object.freeze({\n\t\tcatalog,\n\t\trunner,\n\t\troleIds: Object.freeze([...roleIds]),\n\t\tcapabilityDiagnostics: Object.freeze({\n\t\t\tstatus: missing.length > 0 ? \"missing\" : \"satisfied\",\n\t\t\tmissing: Object.freeze(missing),\n\t\t}),\n\t});\n}\n"]}

package/dist/profile/role-catalog.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Role metadata catalog (2.2a).
+ *
+ * Role metadata is DISCOVERY data, not a security policy: roleId, input/output
+ * schema references, capability dependencies, writable memory scopes,
+ * concurrency, and completion criteria are all discoverable through the
+ * catalog. Registered roles are validated and served as detached, frozen
+ * snapshots.
+ */
+/** Memory scopes a role may write to (aligned with the 1C.1b store scopes). */
+export type RoleWritableScopeV1 = "session" | "cycle" | "long-term";
+export interface RoleCapabilityDependencyV1 {
+    readonly capabilityId: string;
+    readonly capabilityVersion: number;
+    /** Required dependencies fail role activation when missing. */
+    readonly required: boolean;
+}
+/** Versioned input/output schema reference (schema bodies live with the domain plugin). */
+export interface RoleIOSchemaRefV1 {
+    readonly schemaId: string;
+    readonly schemaVersion: number;
+}
+export interface RoleMetadataV1 {
+    readonly roleId: string;
+    readonly title: string;
+    readonly input: RoleIOSchemaRefV1;
+    readonly output: RoleIOSchemaRefV1;
+    readonly capabilityDependencies: readonly RoleCapabilityDependencyV1[];
+    readonly writableScopes: readonly RoleWritableScopeV1[];
+    readonly concurrency: "single" | "parallel";
+    readonly completionCriteria: string;
+}
+export interface RoleCatalogV1 {
+    register(metadata: RoleMetadataV1): RoleMetadataV1;
+    get(roleId: string): RoleMetadataV1 | undefined;
+    list(): readonly RoleMetadataV1[];
+    /** Roles declaring the given capability as a dependency (required or optional). */
+    findByCapability(capabilityId: string): readonly RoleMetadataV1[];
+}
+/** Validates role metadata and returns a detached, frozen snapshot. */
+export declare function validateRoleMetadataV1(value: unknown): RoleMetadataV1;
+/** Discoverable role catalog: register, get, list (sorted), find by capability. */
+export declare function createRoleCatalog(initial?: readonly RoleMetadataV1[]): RoleCatalogV1;
+//# sourceMappingURL=role-catalog.d.ts.map

package/dist/profile/role-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-catalog.d.ts","sourceRoot":"","sources":["../../src/profile/role-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,+EAA+E;AAC/E,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAEpE,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC3B;AAED,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACvE,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,CAAC;IACnD,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAChD,IAAI,IAAI,SAAS,cAAc,EAAE,CAAC;IAClC,mFAAmF;IACnF,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAAC;CAClE;AAwBD,uEAAuE;AACvE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CA0ErE;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,SAAS,cAAc,EAAO,GAAG,aAAa,CA4BxF","sourcesContent":["/**\n * Role metadata catalog (2.2a).\n *\n * Role metadata is DISCOVERY data, not a security policy: roleId, input/output\n * schema references, capability dependencies, writable memory scopes,\n * concurrency, and completion criteria are all discoverable through the\n * catalog. Registered roles are validated and served as detached, frozen\n * snapshots.\n */\n\n/** Memory scopes a role may write to (aligned with the 1C.1b store scopes). */\nexport type RoleWritableScopeV1 = \"session\" | \"cycle\" | \"long-term\";\n\nexport interface RoleCapabilityDependencyV1 {\n\treadonly capabilityId: string;\n\treadonly capabilityVersion: number;\n\t/** Required dependencies fail role activation when missing. */\n\treadonly required: boolean;\n}\n\n/** Versioned input/output schema reference (schema bodies live with the domain plugin). */\nexport interface RoleIOSchemaRefV1 {\n\treadonly schemaId: string;\n\treadonly schemaVersion: number;\n}\n\nexport interface RoleMetadataV1 {\n\treadonly roleId: string;\n\treadonly title: string;\n\treadonly input: RoleIOSchemaRefV1;\n\treadonly output: RoleIOSchemaRefV1;\n\treadonly capabilityDependencies: readonly RoleCapabilityDependencyV1[];\n\treadonly writableScopes: readonly RoleWritableScopeV1[];\n\treadonly concurrency: \"single\" | \"parallel\";\n\treadonly completionCriteria: string;\n}\n\nexport interface RoleCatalogV1 {\n\tregister(metadata: RoleMetadataV1): RoleMetadataV1;\n\tget(roleId: string): RoleMetadataV1 | undefined;\n\tlist(): readonly RoleMetadataV1[];\n\t/** Roles declaring the given capability as a dependency (required or optional). */\n\tfindByCapability(capabilityId: string): readonly RoleMetadataV1[];\n}\n\nconst WRITABLE_SCOPES: readonly RoleWritableScopeV1[] = [\"session\", \"cycle\", \"long-term\"];\n\nfunction assertNonEmptyString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) throw new Error(`${label} must be a non-empty string`);\n}\n\nfunction assertIOSchemaRef(value: unknown, label: string): RoleIOSchemaRefV1 {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(`${label} must be a plain object`);\n\t}\n\tconst record = value as Record<string, unknown>;\n\tassertNonEmptyString(record.schemaId, `${label}.schemaId`);\n\tif (\n\t\ttypeof record.schemaVersion !== \"number\" ||\n\t\t!Number.isSafeInteger(record.schemaVersion) ||\n\t\trecord.schemaVersion < 1\n\t) {\n\t\tthrow new Error(`${label}.schemaVersion must be a positive safe integer`);\n\t}\n\treturn Object.freeze({ schemaId: record.schemaId, schemaVersion: record.schemaVersion });\n}\n\n/** Validates role metadata and returns a detached, frozen snapshot. */\nexport function validateRoleMetadataV1(value: unknown): RoleMetadataV1 {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Role metadata must be a plain object\");\n\t}\n\tconst record = value as Record<string, unknown>;\n\tconst required = [\n\t\t\"roleId\",\n\t\t\"title\",\n\t\t\"input\",\n\t\t\"output\",\n\t\t\"capabilityDependencies\",\n\t\t\"writableScopes\",\n\t\t\"concurrency\",\n\t\t\"completionCriteria\",\n\t];\n\tfor (const key of required) {\n\t\tif (!(key in record)) throw new Error(`Role metadata is missing required field: ${key}`);\n\t}\n\tconst unsupported = Object.keys(record)\n\t\t.filter((key) => !required.includes(key))\n\t\t.sort();\n\tif (unsupported.length > 0) throw new Error(`Role metadata has unsupported fields: ${unsupported.join(\", \")}`);\n\n\tassertNonEmptyString(record.roleId, \"Role metadata.roleId\");\n\tassertNonEmptyString(record.title, \"Role metadata.title\");\n\tconst input = assertIOSchemaRef(record.input, \"Role metadata.input\");\n\tconst output = assertIOSchemaRef(record.output, \"Role metadata.output\");\n\n\tif (!Array.isArray(record.capabilityDependencies)) {\n\t\tthrow new Error(\"Role metadata.capabilityDependencies must be an array\");\n\t}\n\tconst capabilityDependencies = record.capabilityDependencies.map((item, index) => {\n\t\tconst depLabel = `Role metadata.capabilityDependencies[${index}]`;\n\t\tif (item === null || typeof item !== \"object\" || Array.isArray(item)) {\n\t\t\tthrow new Error(`${depLabel} must be a plain object`);\n\t\t}\n\t\tconst dep = item as Record<string, unknown>;\n\t\tassertNonEmptyString(dep.capabilityId, `${depLabel}.capabilityId`);\n\t\tif (\n\t\t\ttypeof dep.capabilityVersion !== \"number\" ||\n\t\t\t!Number.isSafeInteger(dep.capabilityVersion) ||\n\t\t\tdep.capabilityVersion < 1\n\t\t) {\n\t\t\tthrow new Error(`${depLabel}.capabilityVersion must be a positive safe integer`);\n\t\t}\n\t\tif (typeof dep.required !== \"boolean\") throw new Error(`${depLabel}.required must be boolean`);\n\t\treturn Object.freeze({\n\t\t\tcapabilityId: dep.capabilityId,\n\t\t\tcapabilityVersion: dep.capabilityVersion,\n\t\t\trequired: dep.required,\n\t\t});\n\t});\n\n\tif (!Array.isArray(record.writableScopes)) throw new Error(\"Role metadata.writableScopes must be an array\");\n\tfor (const [index, scope] of record.writableScopes.entries()) {\n\t\tif (!WRITABLE_SCOPES.includes(scope as RoleWritableScopeV1)) {\n\t\t\tthrow new Error(`Role metadata.writableScopes[${index}] is invalid`);\n\t\t}\n\t}\n\tassertNonEmptyString(record.completionCriteria, \"Role metadata.completionCriteria\");\n\tif (record.concurrency !== \"single\" && record.concurrency !== \"parallel\") {\n\t\tthrow new Error(\"Role metadata.concurrency is invalid\");\n\t}\n\n\treturn Object.freeze({\n\t\troleId: record.roleId,\n\t\ttitle: record.title,\n\t\tinput,\n\t\toutput,\n\t\tcapabilityDependencies: Object.freeze(capabilityDependencies),\n\t\twritableScopes: Object.freeze([...(record.writableScopes as readonly RoleWritableScopeV1[])]),\n\t\tconcurrency: record.concurrency as RoleMetadataV1[\"concurrency\"],\n\t\tcompletionCriteria: record.completionCriteria,\n\t});\n}\n\n/** Discoverable role catalog: register, get, list (sorted), find by capability. */\nexport function createRoleCatalog(initial: readonly RoleMetadataV1[] = []): RoleCatalogV1 {\n\tconst roles = new Map<string, RoleMetadataV1>();\n\tfor (const metadata of initial) {\n\t\tconst validated = validateRoleMetadataV1(metadata);\n\t\tif (roles.has(validated.roleId)) throw new Error(`Role already registered: ${validated.roleId}`);\n\t\troles.set(validated.roleId, validated);\n\t}\n\treturn {\n\t\tregister(metadata) {\n\t\t\tconst validated = validateRoleMetadataV1(metadata);\n\t\t\tif (roles.has(validated.roleId)) throw new Error(`Role already registered: ${validated.roleId}`);\n\t\t\troles.set(validated.roleId, validated);\n\t\t\treturn validated;\n\t\t},\n\t\tget(roleId) {\n\t\t\treturn roles.get(roleId);\n\t\t},\n\t\tlist() {\n\t\t\treturn Object.freeze([...roles.values()].sort((left, right) => left.roleId.localeCompare(right.roleId)));\n\t\t},\n\t\tfindByCapability(capabilityId) {\n\t\t\treturn Object.freeze(\n\t\t\t\t[...roles.values()].filter((role) =>\n\t\t\t\t\trole.capabilityDependencies.some((dependency) => dependency.capabilityId === capabilityId),\n\t\t\t\t),\n\t\t\t);\n\t\t},\n\t};\n}\n"]}

package/dist/profile/role-catalog.js

@@ -0,0 +1,130 @@
+/**
+ * Role metadata catalog (2.2a).
+ *
+ * Role metadata is DISCOVERY data, not a security policy: roleId, input/output
+ * schema references, capability dependencies, writable memory scopes,
+ * concurrency, and completion criteria are all discoverable through the
+ * catalog. Registered roles are validated and served as detached, frozen
+ * snapshots.
+ */
+const WRITABLE_SCOPES = ["session", "cycle", "long-term"];
+function assertNonEmptyString(value, label) {
+    if (typeof value !== "string" || value.trim().length === 0)
+        throw new Error(`${label} must be a non-empty string`);
+}
+function assertIOSchemaRef(value, label) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`${label} must be a plain object`);
+    }
+    const record = value;
+    assertNonEmptyString(record.schemaId, `${label}.schemaId`);
+    if (typeof record.schemaVersion !== "number" ||
+        !Number.isSafeInteger(record.schemaVersion) ||
+        record.schemaVersion < 1) {
+        throw new Error(`${label}.schemaVersion must be a positive safe integer`);
+    }
+    return Object.freeze({ schemaId: record.schemaId, schemaVersion: record.schemaVersion });
+}
+/** Validates role metadata and returns a detached, frozen snapshot. */
+export function validateRoleMetadataV1(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("Role metadata must be a plain object");
+    }
+    const record = value;
+    const required = [
+        "roleId",
+        "title",
+        "input",
+        "output",
+        "capabilityDependencies",
+        "writableScopes",
+        "concurrency",
+        "completionCriteria",
+    ];
+    for (const key of required) {
+        if (!(key in record))
+            throw new Error(`Role metadata is missing required field: ${key}`);
+    }
+    const unsupported = Object.keys(record)
+        .filter((key) => !required.includes(key))
+        .sort();
+    if (unsupported.length > 0)
+        throw new Error(`Role metadata has unsupported fields: ${unsupported.join(", ")}`);
+    assertNonEmptyString(record.roleId, "Role metadata.roleId");
+    assertNonEmptyString(record.title, "Role metadata.title");
+    const input = assertIOSchemaRef(record.input, "Role metadata.input");
+    const output = assertIOSchemaRef(record.output, "Role metadata.output");
+    if (!Array.isArray(record.capabilityDependencies)) {
+        throw new Error("Role metadata.capabilityDependencies must be an array");
+    }
+    const capabilityDependencies = record.capabilityDependencies.map((item, index) => {
+        const depLabel = `Role metadata.capabilityDependencies[${index}]`;
+        if (item === null || typeof item !== "object" || Array.isArray(item)) {
+            throw new Error(`${depLabel} must be a plain object`);
+        }
+        const dep = item;
+        assertNonEmptyString(dep.capabilityId, `${depLabel}.capabilityId`);
+        if (typeof dep.capabilityVersion !== "number" ||
+            !Number.isSafeInteger(dep.capabilityVersion) ||
+            dep.capabilityVersion < 1) {
+            throw new Error(`${depLabel}.capabilityVersion must be a positive safe integer`);
+        }
+        if (typeof dep.required !== "boolean")
+            throw new Error(`${depLabel}.required must be boolean`);
+        return Object.freeze({
+            capabilityId: dep.capabilityId,
+            capabilityVersion: dep.capabilityVersion,
+            required: dep.required,
+        });
+    });
+    if (!Array.isArray(record.writableScopes))
+        throw new Error("Role metadata.writableScopes must be an array");
+    for (const [index, scope] of record.writableScopes.entries()) {
+        if (!WRITABLE_SCOPES.includes(scope)) {
+            throw new Error(`Role metadata.writableScopes[${index}] is invalid`);
+        }
+    }
+    assertNonEmptyString(record.completionCriteria, "Role metadata.completionCriteria");
+    if (record.concurrency !== "single" && record.concurrency !== "parallel") {
+        throw new Error("Role metadata.concurrency is invalid");
+    }
+    return Object.freeze({
+        roleId: record.roleId,
+        title: record.title,
+        input,
+        output,
+        capabilityDependencies: Object.freeze(capabilityDependencies),
+        writableScopes: Object.freeze([...record.writableScopes]),
+        concurrency: record.concurrency,
+        completionCriteria: record.completionCriteria,
+    });
+}
+/** Discoverable role catalog: register, get, list (sorted), find by capability. */
+export function createRoleCatalog(initial = []) {
+    const roles = new Map();
+    for (const metadata of initial) {
+        const validated = validateRoleMetadataV1(metadata);
+        if (roles.has(validated.roleId))
+            throw new Error(`Role already registered: ${validated.roleId}`);
+        roles.set(validated.roleId, validated);
+    }
+    return {
+        register(metadata) {
+            const validated = validateRoleMetadataV1(metadata);
+            if (roles.has(validated.roleId))
+                throw new Error(`Role already registered: ${validated.roleId}`);
+            roles.set(validated.roleId, validated);
+            return validated;
+        },
+        get(roleId) {
+            return roles.get(roleId);
+        },
+        list() {
+            return Object.freeze([...roles.values()].sort((left, right) => left.roleId.localeCompare(right.roleId)));
+        },
+        findByCapability(capabilityId) {
+            return Object.freeze([...roles.values()].filter((role) => role.capabilityDependencies.some((dependency) => dependency.capabilityId === capabilityId)));
+        },
+    };
+}
+//# sourceMappingURL=role-catalog.js.map

package/dist/profile/role-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-catalog.js","sourceRoot":"","sources":["../../src/profile/role-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAqCH,MAAM,eAAe,GAAmC,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAE1F,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAA2B;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;AAAA,CACnH;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAAqB;IAC5E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IAC3D,IACC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,CAAC,aAAa,GAAG,CAAC,EACvB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;AAAA,CACzF;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAkB;IACtE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG;QAChB,QAAQ;QACR,OAAO;QACP,OAAO;QACP,QAAQ;QACR,wBAAwB;QACxB,gBAAgB;QAChB,aAAa;QACb,oBAAoB;KACpB,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SACrC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACxC,IAAI,EAAE,CAAC;IACT,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE/G,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC5D,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAExE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjF,MAAM,QAAQ,GAAG,wCAAwC,KAAK,GAAG,CAAC;QAClE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC;QACnE,IACC,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YACzC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC5C,GAAG,CAAC,iBAAiB,GAAG,CAAC,EACxB,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oDAAoD,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2BAA2B,CAAC,CAAC;QAC/F,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;IAAA,CACH,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC5G,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAA4B,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,cAAc,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IACD,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK;QACL,MAAM;QACN,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAC7D,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAI,MAAM,CAAC,cAAiD,CAAC,CAAC;QAC7F,WAAW,EAAE,MAAM,CAAC,WAA4C;QAChE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;KAC7C,CAAC,CAAC;AAAA,CACH;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,OAAO,GAA8B,EAAE,EAAiB;IACzF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACjG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACN,QAAQ,CAAC,QAAQ,EAAE;YAClB,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACjG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACvC,OAAO,SAAS,CAAC;QAAA,CACjB;QACD,GAAG,CAAC,MAAM,EAAE;YACX,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAA,CACzB;QACD,IAAI,GAAG;YACN,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAA,CACzG;QACD,gBAAgB,CAAC,YAAY,EAAE;YAC9B,OAAO,MAAM,CAAC,MAAM,CACnB,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,KAAK,YAAY,CAAC,CAC1F,CACD,CAAC;QAAA,CACF;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Role metadata catalog (2.2a).\n *\n * Role metadata is DISCOVERY data, not a security policy: roleId, input/output\n * schema references, capability dependencies, writable memory scopes,\n * concurrency, and completion criteria are all discoverable through the\n * catalog. Registered roles are validated and served as detached, frozen\n * snapshots.\n */\n\n/** Memory scopes a role may write to (aligned with the 1C.1b store scopes). */\nexport type RoleWritableScopeV1 = \"session\" | \"cycle\" | \"long-term\";\n\nexport interface RoleCapabilityDependencyV1 {\n\treadonly capabilityId: string;\n\treadonly capabilityVersion: number;\n\t/** Required dependencies fail role activation when missing. */\n\treadonly required: boolean;\n}\n\n/** Versioned input/output schema reference (schema bodies live with the domain plugin). */\nexport interface RoleIOSchemaRefV1 {\n\treadonly schemaId: string;\n\treadonly schemaVersion: number;\n}\n\nexport interface RoleMetadataV1 {\n\treadonly roleId: string;\n\treadonly title: string;\n\treadonly input: RoleIOSchemaRefV1;\n\treadonly output: RoleIOSchemaRefV1;\n\treadonly capabilityDependencies: readonly RoleCapabilityDependencyV1[];\n\treadonly writableScopes: readonly RoleWritableScopeV1[];\n\treadonly concurrency: \"single\" | \"parallel\";\n\treadonly completionCriteria: string;\n}\n\nexport interface RoleCatalogV1 {\n\tregister(metadata: RoleMetadataV1): RoleMetadataV1;\n\tget(roleId: string): RoleMetadataV1 | undefined;\n\tlist(): readonly RoleMetadataV1[];\n\t/** Roles declaring the given capability as a dependency (required or optional). */\n\tfindByCapability(capabilityId: string): readonly RoleMetadataV1[];\n}\n\nconst WRITABLE_SCOPES: readonly RoleWritableScopeV1[] = [\"session\", \"cycle\", \"long-term\"];\n\nfunction assertNonEmptyString(value: unknown, label: string): asserts value is string {\n\tif (typeof value !== \"string\" || value.trim().length === 0) throw new Error(`${label} must be a non-empty string`);\n}\n\nfunction assertIOSchemaRef(value: unknown, label: string): RoleIOSchemaRefV1 {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(`${label} must be a plain object`);\n\t}\n\tconst record = value as Record<string, unknown>;\n\tassertNonEmptyString(record.schemaId, `${label}.schemaId`);\n\tif (\n\t\ttypeof record.schemaVersion !== \"number\" ||\n\t\t!Number.isSafeInteger(record.schemaVersion) ||\n\t\trecord.schemaVersion < 1\n\t) {\n\t\tthrow new Error(`${label}.schemaVersion must be a positive safe integer`);\n\t}\n\treturn Object.freeze({ schemaId: record.schemaId, schemaVersion: record.schemaVersion });\n}\n\n/** Validates role metadata and returns a detached, frozen snapshot. */\nexport function validateRoleMetadataV1(value: unknown): RoleMetadataV1 {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Role metadata must be a plain object\");\n\t}\n\tconst record = value as Record<string, unknown>;\n\tconst required = [\n\t\t\"roleId\",\n\t\t\"title\",\n\t\t\"input\",\n\t\t\"output\",\n\t\t\"capabilityDependencies\",\n\t\t\"writableScopes\",\n\t\t\"concurrency\",\n\t\t\"completionCriteria\",\n\t];\n\tfor (const key of required) {\n\t\tif (!(key in record)) throw new Error(`Role metadata is missing required field: ${key}`);\n\t}\n\tconst unsupported = Object.keys(record)\n\t\t.filter((key) => !required.includes(key))\n\t\t.sort();\n\tif (unsupported.length > 0) throw new Error(`Role metadata has unsupported fields: ${unsupported.join(\", \")}`);\n\n\tassertNonEmptyString(record.roleId, \"Role metadata.roleId\");\n\tassertNonEmptyString(record.title, \"Role metadata.title\");\n\tconst input = assertIOSchemaRef(record.input, \"Role metadata.input\");\n\tconst output = assertIOSchemaRef(record.output, \"Role metadata.output\");\n\n\tif (!Array.isArray(record.capabilityDependencies)) {\n\t\tthrow new Error(\"Role metadata.capabilityDependencies must be an array\");\n\t}\n\tconst capabilityDependencies = record.capabilityDependencies.map((item, index) => {\n\t\tconst depLabel = `Role metadata.capabilityDependencies[${index}]`;\n\t\tif (item === null || typeof item !== \"object\" || Array.isArray(item)) {\n\t\t\tthrow new Error(`${depLabel} must be a plain object`);\n\t\t}\n\t\tconst dep = item as Record<string, unknown>;\n\t\tassertNonEmptyString(dep.capabilityId, `${depLabel}.capabilityId`);\n\t\tif (\n\t\t\ttypeof dep.capabilityVersion !== \"number\" ||\n\t\t\t!Number.isSafeInteger(dep.capabilityVersion) ||\n\t\t\tdep.capabilityVersion < 1\n\t\t) {\n\t\t\tthrow new Error(`${depLabel}.capabilityVersion must be a positive safe integer`);\n\t\t}\n\t\tif (typeof dep.required !== \"boolean\") throw new Error(`${depLabel}.required must be boolean`);\n\t\treturn Object.freeze({\n\t\t\tcapabilityId: dep.capabilityId,\n\t\t\tcapabilityVersion: dep.capabilityVersion,\n\t\t\trequired: dep.required,\n\t\t});\n\t});\n\n\tif (!Array.isArray(record.writableScopes)) throw new Error(\"Role metadata.writableScopes must be an array\");\n\tfor (const [index, scope] of record.writableScopes.entries()) {\n\t\tif (!WRITABLE_SCOPES.includes(scope as RoleWritableScopeV1)) {\n\t\t\tthrow new Error(`Role metadata.writableScopes[${index}] is invalid`);\n\t\t}\n\t}\n\tassertNonEmptyString(record.completionCriteria, \"Role metadata.completionCriteria\");\n\tif (record.concurrency !== \"single\" && record.concurrency !== \"parallel\") {\n\t\tthrow new Error(\"Role metadata.concurrency is invalid\");\n\t}\n\n\treturn Object.freeze({\n\t\troleId: record.roleId,\n\t\ttitle: record.title,\n\t\tinput,\n\t\toutput,\n\t\tcapabilityDependencies: Object.freeze(capabilityDependencies),\n\t\twritableScopes: Object.freeze([...(record.writableScopes as readonly RoleWritableScopeV1[])]),\n\t\tconcurrency: record.concurrency as RoleMetadataV1[\"concurrency\"],\n\t\tcompletionCriteria: record.completionCriteria,\n\t});\n}\n\n/** Discoverable role catalog: register, get, list (sorted), find by capability. */\nexport function createRoleCatalog(initial: readonly RoleMetadataV1[] = []): RoleCatalogV1 {\n\tconst roles = new Map<string, RoleMetadataV1>();\n\tfor (const metadata of initial) {\n\t\tconst validated = validateRoleMetadataV1(metadata);\n\t\tif (roles.has(validated.roleId)) throw new Error(`Role already registered: ${validated.roleId}`);\n\t\troles.set(validated.roleId, validated);\n\t}\n\treturn {\n\t\tregister(metadata) {\n\t\t\tconst validated = validateRoleMetadataV1(metadata);\n\t\t\tif (roles.has(validated.roleId)) throw new Error(`Role already registered: ${validated.roleId}`);\n\t\t\troles.set(validated.roleId, validated);\n\t\t\treturn validated;\n\t\t},\n\t\tget(roleId) {\n\t\t\treturn roles.get(roleId);\n\t\t},\n\t\tlist() {\n\t\t\treturn Object.freeze([...roles.values()].sort((left, right) => left.roleId.localeCompare(right.roleId)));\n\t\t},\n\t\tfindByCapability(capabilityId) {\n\t\t\treturn Object.freeze(\n\t\t\t\t[...roles.values()].filter((role) =>\n\t\t\t\t\trole.capabilityDependencies.some((dependency) => dependency.capabilityId === capabilityId),\n\t\t\t\t),\n\t\t\t);\n\t\t},\n\t};\n}\n"]}