@andrew.ng/symbion 0.1.0

package/node_modules/@symbion/core/dist/templates/matchAuthorFolders.js

@@ -0,0 +1,54 @@
+/**
+ * matchAuthorFolders — pure filter/match helper (PLAN §P2a). Given a GitHub
+ * repo's flattened tree listing + an author's `folders` mapping, returns the
+ * exact set of `{ bucket, relPath }` candidates to fetch content for. Pure
+ * data-in/data-out, fully unit-testable without any network call.
+ *
+ * Two supported shapes only (PLAN §P10.4 — not a generic glob engine):
+ * - "*.md": exactly one path segment below `folder.path`, ending in ".md".
+ *   Excludes any nested subfolder (e.g. `agents/sub/foo.md` does NOT match).
+ * - "*\/SKILL.md": exactly one path segment between `folder.path` and the
+ *   trailing literal filename "SKILL.md". Excludes helper files inside the
+ *   same item folder (e.g. `skills/foo/examples/bar.md`) and excludes a
+ *   missing/extra nesting level.
+ *
+ * Tree entries of `type !== "blob"` (directories) are never returned, even
+ * if their `path` happens to match a pattern textually.
+ */
+export function matchAuthorFolders(treeEntries, folders) {
+    const candidates = [];
+    for (const entry of treeEntries) {
+        if (entry.type !== "blob")
+            continue;
+        for (const folder of folders) {
+            const prefix = `${folder.path}/`;
+            if (!entry.path.startsWith(prefix))
+                continue;
+            const rest = entry.path.slice(prefix.length);
+            if (rest.length === 0)
+                continue;
+            if (folder.filePattern === "*.md") {
+                if (!rest.endsWith(".md"))
+                    continue;
+                // Exactly one path segment below the folder — no further "/" in rest.
+                if (rest.indexOf("/") !== -1)
+                    continue;
+                candidates.push({ bucket: folder.bucket, relPath: entry.path });
+            }
+            else {
+                // "*/SKILL.md": exactly one segment then the literal filename "SKILL.md".
+                const SUFFIX = "/SKILL.md";
+                if (!rest.endsWith(SUFFIX))
+                    continue;
+                const segment = rest.slice(0, rest.length - SUFFIX.length);
+                if (segment.length === 0)
+                    continue; // skills/SKILL.md (missing subfolder)
+                if (segment.indexOf("/") !== -1)
+                    continue; // skills/foo/bar/SKILL.md (nested 2 levels)
+                candidates.push({ bucket: folder.bucket, relPath: entry.path });
+            }
+        }
+    }
+    return candidates;
+}
+//# sourceMappingURL=matchAuthorFolders.js.map

package/node_modules/@symbion/core/dist/templates/matchAuthorFolders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchAuthorFolders.js","sourceRoot":"","sources":["../../src/templates/matchAuthorFolders.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAA8B,EAC9B,OAA8B;IAE9B,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAEhC,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACpC,sEAAsE;gBACtE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAAE,SAAS;gBACvC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,0EAA0E;gBAC1E,MAAM,MAAM,GAAG,WAAW,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS,CAAC,sCAAsC;gBAC1E,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAAE,SAAS,CAAC,4CAA4C;gBACvF,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/node_modules/@symbion/core/dist/templates/parseTemplate.d.ts

@@ -0,0 +1,42 @@
+/** Three-valued kind for the template GALLERY only — deliberately separate from
+ *  `ArtifactKind` ("agent" | "command"), which stays unchanged (PLAN §5 assumption #5).
+ *  Do not conflate these two types: one is the persisted IR's artifact kind, the
+ *  other is the template gallery's display/eligibility category. */
+export type TemplateKind = "agent" | "command" | "skill";
+export interface ParsedTemplateContent {
+    kind: TemplateKind;
+    /**
+     * Frontmatter `name` for agent/skill templates. Deliberately ABSENT for
+     * command templates — matching the existing IR convention (see
+     * render/frontmatter.ts `artifactToFrontmatterFields` and parse/scan.ts's
+     * documented contract): command name is always derived from the filename
+     * (here: the manifest's template id slug), never frontmatter. Callers that
+     * need a display name for a command template must derive it themselves
+     * (the manifest loader does this from `source.mod.id`).
+     */
+    name?: string;
+    description: string;
+    tools?: string[];
+    body: string;
+}
+export type ParseTemplateResult = {
+    ok: true;
+    parsed: ParsedTemplateContent;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * parseTemplateMarkdown — parses ONE bundled template file's raw text
+ * (frontmatter + body) into a ParsedTemplateContent. Pure, throws never —
+ * same "skip with reason" discipline as parseClaudeDir/parseClaudeFile.
+ *
+ * `expectedKind` comes from the template's manifest folder (skills/agents/commands),
+ * not re-derived from content, so a misplaced file fails loudly via a mismatch
+ * reason rather than silently filing under the wrong section.
+ *
+ * Reuses the existing `parseFrontmatter` primitive from render/frontmatter.ts —
+ * no second YAML-ish parser invented for this smaller, marker-free shape.
+ */
+export declare function parseTemplateMarkdown(raw: string, expectedKind: TemplateKind): ParseTemplateResult;
+//# sourceMappingURL=parseTemplate.d.ts.map

package/node_modules/@symbion/core/dist/templates/parseTemplate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseTemplate.d.ts","sourceRoot":"","sources":["../../src/templates/parseTemplate.ts"],"names":[],"mappings":"AAEA;;;oEAGoE;AACpE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,YAAY,CAAC;IACnB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIlC;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,mBAAmB,CA4ClG"}

package/node_modules/@symbion/core/dist/templates/parseTemplate.js

@@ -0,0 +1,56 @@
+import { parseFrontmatter } from "../render/frontmatter.js";
+const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/;
+/**
+ * parseTemplateMarkdown — parses ONE bundled template file's raw text
+ * (frontmatter + body) into a ParsedTemplateContent. Pure, throws never —
+ * same "skip with reason" discipline as parseClaudeDir/parseClaudeFile.
+ *
+ * `expectedKind` comes from the template's manifest folder (skills/agents/commands),
+ * not re-derived from content, so a misplaced file fails loudly via a mismatch
+ * reason rather than silently filing under the wrong section.
+ *
+ * Reuses the existing `parseFrontmatter` primitive from render/frontmatter.ts —
+ * no second YAML-ish parser invented for this smaller, marker-free shape.
+ */
+export function parseTemplateMarkdown(raw, expectedKind) {
+    const match = FRONTMATTER_RE.exec(raw);
+    if (!match) {
+        return { ok: false, reason: "File thiếu frontmatter (--- ... ---)." };
+    }
+    const [, fmRaw, bodyRaw] = match;
+    let fm;
+    try {
+        fm = parseFrontmatter(fmRaw ?? "");
+    }
+    catch (err) {
+        return { ok: false, reason: err.message };
+    }
+    // Only agent (and skill) templates require frontmatter `name`. Command
+    // templates never carry `name` in frontmatter — the command's name is
+    // always derived from its filename/manifest id, per the existing IR
+    // convention (render/frontmatter.ts, parse/scan.ts). Requiring it here for
+    // commands would reject every correctly-authored command template.
+    if (expectedKind === "agent" && (!fm.name || fm.name.trim().length === 0)) {
+        return { ok: false, reason: "Frontmatter thiếu 'name'." };
+    }
+    if (!fm.description || fm.description.trim().length === 0) {
+        return { ok: false, reason: "Frontmatter thiếu 'description'." };
+    }
+    const body = (bodyRaw ?? "").replace(/\n+$/, "").replace(/^\n+/, "");
+    if (body.length === 0) {
+        return { ok: false, reason: "Body (nội dung sau frontmatter) trống." };
+    }
+    const parsed = {
+        kind: expectedKind,
+        description: fm.description.trim(),
+        body,
+    };
+    if (fm.name && fm.name.trim().length > 0) {
+        parsed.name = fm.name.trim();
+    }
+    if (expectedKind === "agent" && fm.tools && fm.tools.length > 0) {
+        parsed.tools = fm.tools;
+    }
+    return { ok: true, parsed };
+}
+//# sourceMappingURL=parseTemplate.js.map

package/node_modules/@symbion/core/dist/templates/parseTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseTemplate.js","sourceRoot":"","sources":["../../src/templates/parseTemplate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA6B5D,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,YAA0B;IAC3E,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAEjC,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,YAAY,KAAK,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAA0B;QACpC,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;QAClC,IAAI;KACL,CAAC;IACF,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,YAAY,KAAK,OAAO,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/node_modules/@symbion/core/dist/templates/templateListItem.d.ts

@@ -0,0 +1,39 @@
+import type { TemplateKind } from "./parseTemplate.js";
+/**
+ * TemplateListItem — the shared shape both the bundled (Symbion) gallery and
+ * the live-fetched (GitHub-backed) author paths produce, consumed identically
+ * by TemplateCard/TemplateSection/TemplatePreviewModal regardless of source
+ * (templates-authors-STATE.md PLAN §P2, FR4: "the modal doesn't need to know
+ * or care where that string came from").
+ *
+ * Moved here (was previously hand-declared in
+ * apps/web/src/data/templates/manifest.ts) so apps/daemon's
+ * fetchAuthorTemplates handler and apps/web's bundled-manifest loader share
+ * the exact same type, not a hand-duplicated shape — PLAN §P9.
+ */
+export interface TemplateListItem {
+    /**
+     * stable slug, used as sourceTemplateId on Apply. Format differs by author
+     * (PLAN §P5): Symbion-bundled items keep their pre-existing
+     * "agent:code-reviewer" shape (unchanged, not retrofixed); GitHub-backed
+     * items use "{authorId}:{repoRelativePath}", e.g.
+     * "ecc:agents/code-reviewer.md". Opaque to the daemon either way — never
+     * parsed/interpreted server-side, only stored verbatim.
+     */
+    id: string;
+    kind: TemplateKind;
+    /** becomes CanonicalArtifact.name on Apply. */
+    name: string;
+    /** one-line, shown on card + becomes CanonicalArtifact.description. */
+    description: string;
+    tools?: string[];
+    /** exact bytes of the .md-equivalent source — what "Copy markdown" copies verbatim. */
+    raw: string;
+    /** "symbion" | "ecc" | future AUTHOR_REGISTRY ids. */
+    authorId: string;
+    /** denormalized for the UI, avoids a registry lookup in every card. */
+    authorDisplayName: string;
+    /** present iff this item's author source kind === "github", e.g. "affaan-m/ecc". */
+    authorRepoLabel?: string;
+}
+//# sourceMappingURL=templateListItem.d.ts.map

package/node_modules/@symbion/core/dist/templates/templateListItem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateListItem.d.ts","sourceRoot":"","sources":["../../src/templates/templateListItem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/node_modules/@symbion/core/dist/templates/templateListItem.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=templateListItem.js.map

package/node_modules/@symbion/core/dist/templates/templateListItem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateListItem.js","sourceRoot":"","sources":["../../src/templates/templateListItem.ts"],"names":[],"mappings":""}

package/node_modules/@symbion/core/dist/util/sha256.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Pure-JS SHA-256 implementation. No Node `crypto` import — keeps `packages/core`
+ * free of Node-only APIs so it can run in any JS runtime (browser, daemon, tests).
+ *
+ * Reference: FIPS 180-4. Implementation kept dependency-free and deterministic.
+ */
+/** Compute SHA-256 of a UTF-8 string; returns lowercase hex digest. */
+export declare function sha256Hex(input: string): string;
+//# sourceMappingURL=sha256.d.ts.map

package/node_modules/@symbion/core/dist/util/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../../src/util/sha256.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+BH,uEAAuE;AACvE,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAwE/C"}

package/node_modules/@symbion/core/dist/util/sha256.js

@@ -0,0 +1,91 @@
+/**
+ * Pure-JS SHA-256 implementation. No Node `crypto` import — keeps `packages/core`
+ * free of Node-only APIs so it can run in any JS runtime (browser, daemon, tests).
+ *
+ * Reference: FIPS 180-4. Implementation kept dependency-free and deterministic.
+ */
+const K = [
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1,
+    0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
+    0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786,
+    0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147,
+    0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13,
+    0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b,
+    0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a,
+    0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208,
+    0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+];
+const H0 = [
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a,
+    0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+];
+function rotr(x, n) {
+    return (x >>> n) | (x << (32 - n));
+}
+function toUtf8Bytes(str) {
+    // Minimal UTF-8 encoder (avoids relying on TextEncoder availability assumptions,
+    // though TextEncoder is standard in Node 18+/browsers — used here for simplicity).
+    return new TextEncoder().encode(str);
+}
+/** Compute SHA-256 of a UTF-8 string; returns lowercase hex digest. */
+export function sha256Hex(input) {
+    const msg = toUtf8Bytes(input);
+    const bitLen = msg.length * 8;
+    // Padding: append 0x80, then zeros, then 64-bit big-endian length, to multiple of 64 bytes.
+    const padLen = (((msg.length + 8) >> 6) + 1) << 6;
+    const padded = new Uint8Array(padLen);
+    padded.set(msg);
+    padded[msg.length] = 0x80;
+    // 64-bit length (we only ever hash << 2^53 bytes; high 32 bits effectively 0 for our use)
+    const view = new DataView(padded.buffer);
+    view.setUint32(padLen - 4, bitLen >>> 0, false);
+    view.setUint32(padLen - 8, Math.floor(bitLen / 0x100000000), false);
+    let [h0, h1, h2, h3, h4, h5, h6, h7] = H0;
+    const w = new Int32Array(64);
+    for (let offset = 0; offset < padded.length; offset += 64) {
+        for (let i = 0; i < 16; i++) {
+            w[i] =
+                (padded[offset + i * 4] << 24) |
+                    (padded[offset + i * 4 + 1] << 16) |
+                    (padded[offset + i * 4 + 2] << 8) |
+                    padded[offset + i * 4 + 3];
+        }
+        for (let i = 16; i < 64; i++) {
+            const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ (w[i - 15] >>> 3);
+            const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ (w[i - 2] >>> 10);
+            w[i] = (w[i - 16] + s0 + w[i - 7] + s1) | 0;
+        }
+        let a = h0, b = h1, c = h2, d = h3, e = h4, f = h5, g = h6, h = h7;
+        for (let i = 0; i < 64; i++) {
+            const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+            const ch = (e & f) ^ (~e & g);
+            const temp1 = (h + S1 + ch + K[i] + w[i]) | 0;
+            const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+            const maj = (a & b) ^ (a & c) ^ (b & c);
+            const temp2 = (S0 + maj) | 0;
+            h = g;
+            g = f;
+            f = e;
+            e = (d + temp1) | 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (temp1 + temp2) | 0;
+        }
+        h0 = (h0 + a) | 0;
+        h1 = (h1 + b) | 0;
+        h2 = (h2 + c) | 0;
+        h3 = (h3 + d) | 0;
+        h4 = (h4 + e) | 0;
+        h5 = (h5 + f) | 0;
+        h6 = (h6 + g) | 0;
+        h7 = (h7 + h) | 0;
+    }
+    const out = [h0, h1, h2, h3, h4, h5, h6, h7]
+        .map((x) => (x >>> 0).toString(16).padStart(8, "0"))
+        .join("");
+    return out;
+}
+//# sourceMappingURL=sha256.js.map

package/node_modules/@symbion/core/dist/util/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../../src/util/sha256.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,GAAsB;IAC3B,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IACtE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/C,CAAC;AAEF,MAAM,EAAE,GAAsB;IAC5B,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9C,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/C,CAAC;AAEF,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,iFAAiF;IACjF,mFAAmF;IACnF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAE9B,4FAA4F;IAC5F,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1B,0FAA0F;IAC1F,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;IAEpE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IAE1C,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC,CAAC;gBACF,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC;oBAC/B,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC;oBACnC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC;oBAClC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAE,CAAC;QAChC,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,GAAG,EAAG,EACT,CAAC,GAAG,EAAG,EACP,CAAC,GAAG,EAAG,EACP,CAAC,GAAG,EAAG,EACP,CAAC,GAAG,EAAG,EACP,CAAC,GAAG,EAAG,EACP,CAAC,GAAG,EAAG,EACP,CAAC,GAAG,EAAG,CAAC;QAEV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAE7B,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,EAAE,GAAG,CAAC,EAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACpD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@symbion/core/dist/version/semver.d.ts

@@ -0,0 +1,18 @@
+export type BumpKind = "patch" | "minor" | "major";
+export interface ParsedVersion {
+    major: number;
+    minor: number;
+    patch: number;
+}
+export declare function validateVersion(version: string): boolean;
+/** Parses "vMAJOR.MINOR.PATCH" into a numeric tuple, or null if malformed.
+ *  Shared by daemon/web/core so version comparisons never degrade into
+ *  naive string comparison (e.g. "v0.10.0" < "v0.2.0" lexicographically
+ *  but not numerically). */
+export declare function parseVersion(version: string): ParsedVersion | null;
+/** Numeric comparison: negative if a < b, 0 if equal, positive if a > b.
+ *  Malformed versions sort as lower than any valid version. */
+export declare function compareVersions(a: string, b: string): number;
+/** bump("v0.2.0","patch"|"minor"|"major") -> "v0.2.1" / "v0.3.0" / "v1.0.0". Throws on malformed input. */
+export declare function bump(version: string, kind: BumpKind): string;
+//# sourceMappingURL=semver.d.ts.map

package/node_modules/@symbion/core/dist/version/semver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../src/version/semver.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;4BAG4B;AAC5B,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAIlE;AAED;+DAC+D;AAC/D,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAS5D;AAED,2GAA2G;AAC3G,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAmB5D"}

package/node_modules/@symbion/core/dist/version/semver.js

@@ -0,0 +1,53 @@
+const VERSION_RE = /^v(\d+)\.(\d+)\.(\d+)$/;
+export function validateVersion(version) {
+    return VERSION_RE.test(version);
+}
+/** Parses "vMAJOR.MINOR.PATCH" into a numeric tuple, or null if malformed.
+ *  Shared by daemon/web/core so version comparisons never degrade into
+ *  naive string comparison (e.g. "v0.10.0" < "v0.2.0" lexicographically
+ *  but not numerically). */
+export function parseVersion(version) {
+    const match = VERSION_RE.exec(version);
+    if (!match)
+        return null;
+    return { major: Number(match[1]), minor: Number(match[2]), patch: Number(match[3]) };
+}
+/** Numeric comparison: negative if a < b, 0 if equal, positive if a > b.
+ *  Malformed versions sort as lower than any valid version. */
+export function compareVersions(a, b) {
+    const pa = parseVersion(a);
+    const pb = parseVersion(b);
+    if (!pa && !pb)
+        return 0;
+    if (!pa)
+        return -1;
+    if (!pb)
+        return 1;
+    if (pa.major !== pb.major)
+        return pa.major - pb.major;
+    if (pa.minor !== pb.minor)
+        return pa.minor - pb.minor;
+    return pa.patch - pb.patch;
+}
+/** bump("v0.2.0","patch"|"minor"|"major") -> "v0.2.1" / "v0.3.0" / "v1.0.0". Throws on malformed input. */
+export function bump(version, kind) {
+    const match = VERSION_RE.exec(version);
+    if (!match) {
+        throw new Error(`Phiên bản không hợp lệ: "${version}" (cần dạng vMAJOR.MINOR.PATCH).`);
+    }
+    let [major, minor, patch] = [Number(match[1]), Number(match[2]), Number(match[3])];
+    if (kind === "patch") {
+        patch += 1;
+    }
+    else if (kind === "minor") {
+        minor += 1;
+        patch = 0;
+    }
+    else {
+        major += 1;
+        minor = 0;
+        patch = 0;
+    }
+    return `v${major}.${minor}.${patch}`;
+}
+//# sourceMappingURL=semver.js.map

package/node_modules/@symbion/core/dist/version/semver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/version/semver.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAU5C,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;4BAG4B;AAC5B,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvF,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;IACtD,IAAI,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;IACtD,OAAO,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;AAC7B,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,IAAc;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,kCAAkC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,GAAG,CAAC,CAAC;QACV,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;IAED,OAAO,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC"}

package/node_modules/@symbion/core/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@symbion/core",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "sideEffects": false,
+  "dependencies": {
+    "yaml": "^2.9.0"
+  }
+}