@b-apm/core 0.1.0 → 0.2.0

package/dist/index.d.mts

@@ -48,7 +48,10 @@ type ObjectDependency = {
   version?: string;
   ref?: string;
   alias?: string;
-  skills?: unknown;
+  /** Consumer skill subset (validated string list; omit = all skills). */
+  skills?: string[];
+  /** Consumer per-dep target subset (mf-005 tokens; omit = all eligible targets). */
+  targets?: string[];
   [key: string]: unknown;
 };
 type DependencyEntry = string | ObjectDependency | BapmDependency;
@@ -96,10 +99,15 @@ type BapmManifest = {
    */
   targets?: string[] | TargetIntegrationMap;
   /**
-   * Bapm extension: non-empty list of mf-005 host ids to activate for
-   * materialize/MCP (multi) or compile (sole). Distinct from `target`/`targets`.
+   * Bapm extension: structured preset/target selection (normalized ActiveEntry[]).
+   * Distinct from `target`/`targets` preference maps.
    */
-  active?: string[];
+  active?: ActiveEntry[];
+  /**
+   * Named dependency bundles selectable via `active` preset entries.
+   * Base manifest only — rejected on `bapm.local.yml` overlay.
+   */
+  presets?: ManifestPreset[];
   /**
    * Optional bake / placeholder defaults (string map). Deep-merged from
    * `bapm.local.yml` when present (local keys win).
@@ -107,6 +115,25 @@ type BapmManifest = {
   env?: Record<string, string>;
   [key: string]: unknown;
 };
+/** Normalized structured `active` entry (preset or host target). */
+type ActiveEntry = {
+  kind: "preset" | "target";
+  id: string;
+  negate: boolean;
+};
+/** Named preset: optional deps + optional nested structured `active`. */
+type ManifestPreset = {
+  name: string;
+  dependencies?: DependencyLists;
+  devDependencies?: DependencyLists;
+  active?: ActiveEntry[];
+  [key: string]: unknown;
+};
+/** Result of expanding document `active` (+ nested preset `active`). */
+type ResolvedActive = {
+  presetIds: string[];
+  targetIds: string[];
+};
 type DiscoverManifestOptions = {
   /** Project root; defaults to `process.cwd()`. No parent walk-up. */
   cwd?: string;
@@ -162,7 +189,7 @@ declare const BAPM_LOCAL_MANIFEST_FILE = "bapm.local.yml";
 /** Unsupported dual-brand local overlay filename (v1 refuse). */
 declare const APM_LOCAL_MANIFEST_FILE = "apm.local.yml";
 type LocalOverlayFields = {
-  active?: string[];
+  active?: ActiveEntry[];
   target?: string | TargetIntegrationMap;
   targets?: string[] | TargetIntegrationMap;
   env?: Record<string, string>;
@@ -195,6 +222,73 @@ declare function parseManifestDocument(input: unknown): ParseManifestResult;
 /** Back-compat entry for already-loaded JS objects. */
 declare function parseManifest(input: unknown): BapmManifest;
 //#endregion
+//#region src/modules/Manifest/depSubset.d.ts
+/** Reject empty, traversal (`..`), and absolute/drive skill names. */
+declare function parseDepSkillSubset(value: unknown, path: string): string[];
+/** Reject empty lists and unknown mf-005 tokens. */
+declare function parseDepTargetSubset(value: unknown, path: string): string[];
+/**
+ * Apply subset validation onto an object-form entry when `skills` / `targets` are set.
+ * Returns a shallow copy with typed string lists (or omits keys when absent).
+ */
+declare function applyDepSubsetFields(obj: Record<string, unknown>, path: string): Record<string, unknown>;
+//#endregion
+//#region src/modules/Manifest/mergeApmDependency.d.ts
+/**
+ * Merge an incoming APM dependency update into a manifest document.
+ * Mutates neither the original document nor existing entries in place —
+ * returns a new document. Throws when a registry `id:` identity would be
+ * replaced by a git-shaped entry.
+ */
+declare function mergeApmDependencyUpdate(document: Record<string, unknown> | BapmManifest, incoming: unknown): BapmManifest;
+/** True when entry is registry object-form (`id:` or bare `registry:`). */
+declare function isRegistrySourced(entry: DependencyEntry): boolean;
+/** True when entry is git-shaped (object `git:` or canonical git string). */
+declare function isGitShaped(entry: DependencyEntry): boolean;
+/** Stable package identity for matching `id: owner/repo` ↔ string `owner/repo`. */
+declare function entryIdentity(entry: DependencyEntry): string | undefined;
+declare function registryOrPackageIdentity(entry: DependencyEntry): string | undefined;
+//#endregion
+//#region src/modules/Manifest/active.d.ts
+/**
+ * Parse structured `active` (list-of-maps or object form). Rejects legacy bare
+ * host-token lists, empty `[]`/`{}`, and scalars.
+ */
+declare function parseActiveField(value: unknown, pathPrefix?: string): ActiveEntry[];
+//#endregion
+//#region src/modules/Manifest/presets.d.ts
+type ValidateDependencyBlock = (value: unknown, field: string) => DependencyLists;
+/**
+ * Parse top-level `presets`: non-empty sequence of uniquely named mappings.
+ */
+declare function parsePresetsField(value: unknown, validateDependencyBlock: ValidateDependencyBlock, pathPrefix?: string): ManifestPreset[];
+//#endregion
+//#region src/modules/Manifest/resolveActive.d.ts
+/**
+ * Pure expansion: walk top-level (and nested preset) `active` with cycle detection.
+ * Excludes win over includes. Omitted `active` → empty sets.
+ */
+declare function resolveActive(doc: BapmManifest | Record<string, unknown>): ResolvedActive;
+/** Aliases for acceptance helper pickExport. */
+declare const expandActive: typeof resolveActive;
+declare const resolveManifestActive: typeof resolveActive;
+declare const resolveActiveSelection: typeof resolveActive;
+//#endregion
+//#region src/modules/Manifest/effectiveDirectDeps.d.ts
+type EffectiveDirectDeps = {
+  dependencies?: DependencyLists;
+  devDependencies?: DependencyLists;
+};
+/**
+ * Effective direct deps = base ∪ included presets (same-name conflict fail-closed).
+ */
+declare function effectiveDirectDeps(doc: BapmManifest | Record<string, unknown>, presetIds?: string[]): EffectiveDirectDeps;
+/** Apply effective deps onto a shallow copy of the manifest (resolve/install). */
+declare function withEffectiveDirectDeps(manifest: BapmManifest): BapmManifest;
+/** Aliases for acceptance helper pickExport. */
+declare const effectiveManifestDeps: typeof effectiveDirectDeps;
+declare const unionPresetDependencies: typeof effectiveDirectDeps;
+//#endregion
 //#region src/modules/Manifest/yaml-load.d.ts
 /**
  * Public YAML loader for Manifest consumers.
@@ -222,6 +316,7 @@ type WriteProducerManifestResult = {
 };
 /**
  * Serialize a manifest document to YAML (round-trip best-effort).
+ * Normalized `active` / nested preset `active` emit as list-of-maps.
  */
 declare function serializeManifest(document: BapmManifest | Record<string, unknown>): string;
 /**
@@ -248,8 +343,11 @@ type CreateMinimalManifestOptions = {
   target?: string;
   /** Multi host targets or object-map (mutually exclusive with `target`). */
   targets?: string[] | TargetIntegrationMap;
-  /** Optional active host ids for materialize/compile selection. */
-  active?: string[];
+  /**
+   * Structured `active` (object / list-of-maps / normalized ActiveEntry[]).
+   * Parsed via the same rules as document `active`.
+   */
+  active?: unknown;
   description?: string;
   author?: string;
   /**
@@ -426,7 +524,7 @@ type WriteLockfileOptions = {
 //#endregion
 //#region src/modules/Lockfile/errors.d.ts
 /** Typed diagnostics for lockfile discovery / YAML load / validate / write. */
-type LockfileErrorCode = "LOCKFILE_NOT_FOUND" | "LOCKFILE_DUAL_CONFLICT" | "LOCKFILE_MISSING_FILE" | "LOCKFILE_YAML_PARSE" | "LOCKFILE_YAML_SAFE_SUBSET" | "LOCKFILE_FORMAT" | "LOCKFILE_UNSUPPORTED_VERSION" | "LOCKFILE_VALIDATION";
+type LockfileErrorCode = "LOCKFILE_NOT_FOUND" | "LOCKFILE_DUAL_CONFLICT" | "LOCKFILE_MISSING_FILE" | "LOCKFILE_YAML_PARSE" | "LOCKFILE_YAML_SAFE_SUBSET" | "LOCKFILE_FORMAT" | "LOCKFILE_UNSUPPORTED_VERSION" | "LOCKFILE_VALIDATION" | "LOCKFILE_UNSUPPORTED_PERSONAL_BRAND" | "LOCKFILE_MERGE_CONFLICT";
 declare class LockfileError extends Error {
   readonly code: LockfileErrorCode;
   readonly path?: string;
@@ -467,6 +565,81 @@ declare function loadLockfileOrNull(options?: LoadLockfileOptions): LoadLockfile
  */
 declare function writeLockfile(document: LockfileInput, options?: WriteLockfileOptions): string;
 //#endregion
+//#region src/modules/Lockfile/effective.d.ts
+type LoadEffectiveLockfileOptions = LoadLockfileOptions & {
+  /** When true, missing shared is treated as empty (personal-only ok). */
+  allowMissingShared?: boolean;
+};
+/**
+ * Load shared + personal, refuse unsupported brand, merge into effective document.
+ * Throws LOCKFILE_NOT_FOUND only when both halves are absent (and allowMissingShared is false
+ * for the OrNull path — see `loadEffectiveLockfileOrNull`).
+ */
+declare function loadEffectiveLockfile(options?: LoadEffectiveLockfileOptions): LoadLockfileResult;
+/**
+ * Like `loadEffectiveLockfile`, but returns null when neither shared nor personal exists.
+ * Dual-conflict / unsupported personal brand / corrupt files still throw.
+ */
+declare function loadEffectiveLockfileOrNull(options?: LoadEffectiveLockfileOptions): LoadLockfileResult | null;
+/** Alias names for acceptance pickExport. */
+declare const loadMergedLockfile: typeof loadEffectiveLockfile;
+declare const mergeLoadLockfile: typeof loadEffectiveLockfile;
+declare const loadLockfileMerged: typeof loadEffectiveLockfile;
+//#endregion
+//#region src/modules/Lockfile/personal.d.ts
+declare const BAPM_PERSONAL_LOCK_FILE = "bapm.local.lock.yaml";
+declare const APM_PERSONAL_LOCK_FILE = "apm.local.lock.yaml";
+declare const PERSONAL_LOCK_SCOPE_KEY = "x-bapm-lock-scope";
+declare const PERSONAL_LOCK_SCOPE_VALUE = "local";
+type LoadPersonalLockfileOptions = LoadLockfileOptions;
+/**
+ * Load personal lock when present; otherwise null.
+ * Throws on unsupported brand, corrupt YAML, or validation errors.
+ */
+declare function loadPersonalLockfileOrNull(options?: LoadPersonalLockfileOptions): LoadLockfileResult | null;
+/** Alias for discover helpers used by acceptance pickExport. */
+declare function discoverPersonalLockfile(options?: LoadPersonalLockfileOptions): LoadLockfileResult | null;
+declare function isPersonalScopeDependency(dep: Record<string, unknown>): boolean;
+declare function stampPersonalScope<T extends Record<string, unknown>>(dep: T): T;
+//#endregion
+//#region src/modules/Lockfile/merge.d.ts
+type MergeLockDocumentsOptions = {
+  sharedPath?: string;
+  personalPath?: string;
+};
+/**
+ * Union dependencies by identity (`repo_url`) / package `name`.
+ * Fail closed when the same identity or name appears on both sides with conflicting content.
+ */
+declare function mergeLockDocuments(shared: LockfileInput | null | undefined, personal: LockfileInput | null | undefined, options?: MergeLockDocumentsOptions): LockfileDocument;
+//#endregion
+//#region src/modules/Lockfile/partition.d.ts
+type PartitionAndWriteOptions = WriteLockfileOptions & {
+  /** When true (default), ensure `.gitignore` covers personal lock if written. */
+  ensureGitignore?: boolean;
+};
+type PartitionAndWriteResult = {
+  sharedPath: string;
+  personalPath: string | null;
+  sharedDocument: LockfileDocument;
+  personalDocument: LockfileDocument | null;
+};
+type PartitionDocumentsResult = {
+  shared: LockfileDocument;
+  personal: LockfileDocument | null;
+};
+/**
+ * Split dependencies: personal-scope → personal doc; rest + inventory bags → shared.
+ */
+declare function partitionLockDocument(effective: LockfileInput): PartitionDocumentsResult;
+/**
+ * Write partitioned shared + personal locks. Empty personal → no create; clear/remove if stale.
+ */
+declare function partitionAndWriteLockfiles(effective: LockfileInput, options?: PartitionAndWriteOptions): PartitionAndWriteResult;
+/** @alias partitionAndWriteLockfiles — acceptance / design naming */
+declare function partitionAndWrite(effective: LockfileInput, options?: PartitionAndWriteOptions): PartitionAndWriteResult;
+declare function ensurePersonalLockGitignored(projectRoot: string): void;
+//#endregion
 //#region src/modules/Lockfile/parse.d.ts
 /**
  * Validate a pre-parsed JS value as an OpenAPM/APM lockfile document.
@@ -495,6 +668,19 @@ declare function serializeLockfile(document: LockfileInput): string;
  */
 declare function isSemanticallyEquivalent(a: LockfileInput, b: LockfileInput): boolean;
 //#endregion
+//#region src/modules/Lockfile/identity.d.ts
+/**
+ * Package identity normalization (APM `normalize_package_repo_url` subset).
+ * Used for materialization_repo_url identity checks and sort keys — not display.
+ */
+declare function normalizePackageRepoUrl(repoUrl: string, options?: {
+  source?: string;
+  host?: string;
+  registryPrefix?: string;
+}): string;
+/** Alias accepted by acceptance helpers. */
+declare const normalizeLockPackageRepoUrl: typeof normalizePackageRepoUrl;
+//#endregion
 //#region src/modules/Lockfile/treeSha256.d.ts
 type TreeSha256Violation = {
   entry: string;
@@ -540,7 +726,7 @@ declare const MAX_RESOLVE_DEPTH = 50;
 declare const DEFAULT_PARALLEL_DOWNLOADS = 4;
 //#endregion
 //#region src/modules/Resolver/errors.d.ts
-type ResolverErrorCode = "RESOLVE_NEST_REFUSED" | "RESOLVE_DEPTH_EXCEEDED" | "RESOLVE_CYCLE" | "RESOLVE_EMPTY_INTERSECTION" | "RESOLVE_REGISTRY_DEFERRED" | "RESOLVE_NO_MATCHING_TAG" | "RESOLVE_FAILED" | "LOCAL_PATH_ESCAPES_PROJECT_ROOT" | "LOCAL_ROOT_TRACKED" | "DOWNLOAD_FAILED" | "CLASSIFY_INVALID";
+type ResolverErrorCode = "RESOLVE_NEST_REFUSED" | "RESOLVE_DEPTH_EXCEEDED" | "RESOLVE_CYCLE" | "RESOLVE_EMPTY_INTERSECTION" | "RESOLVE_REGISTRY_DEFERRED" | "RESOLVE_NO_MATCHING_TAG" | "RESOLVE_VIRTUAL_PATH_INVALID" | "RESOLVE_FAILED" | "LOCAL_PATH_ESCAPES_PROJECT_ROOT" | "LOCAL_ROOT_TRACKED" | "DOWNLOAD_FAILED" | "CLASSIFY_INVALID";
 declare class ResolverError extends Error {
   readonly code: ResolverErrorCode;
   readonly details?: Record<string, unknown>;
@@ -597,6 +783,15 @@ type ClassifiedDependency = {
   pluginName?: string;
   marketplaceName?: string;
   versionSpec?: string;
+  /**
+   * True when this edge originated from bapm `local` discriminator (not OpenAPM `path:`).
+   * Drives personal lock partition.
+   */
+  personalLockScope?: boolean;
+  /** Consumer skill subset from object-form `skills:` (materialize-time only). */
+  skillSubset?: string[];
+  /** Consumer per-dep target subset from object-form `targets:`. */
+  targetSubset?: string[];
 };
 type ResolvedNode = {
   name: string;
@@ -607,6 +802,10 @@ type ResolvedNode = {
   /** Display / lock repo_url (host/path form without scheme when git). */
   repo_url?: string;
   path?: string;
+  /** Canonical POSIX virtual subpath inside a git package (APM monorepo form). */
+  virtualPath?: string;
+  /** Original clone URL (preserves local git sources that lock repo_url cannot). */
+  gitUrl?: string;
   resolved_commit?: string;
   /** Pin identity for lock emit / outdated tip (literal ref or picked tag). */
   resolved_ref?: string;
@@ -630,6 +829,15 @@ type ResolvedNode = {
   marketplace_plugin_name?: string;
   source_url?: string;
   source_digest?: string;
+  /**
+   * Personal lock scope: true when originating from bapm `local` discriminator.
+   * Emitted as `x-bapm-lock-scope: local` on lock rows.
+   */
+  personalLockScope?: boolean;
+  /** Consumer skill subset carried from classifying object-form entry. */
+  skillSubset?: string[];
+  /** Consumer per-dep target subset carried from classifying object-form entry. */
+  targetSubset?: string[];
 };
 type ResolveGraphResult = {
   nodes: ResolvedNode[];
@@ -867,6 +1075,8 @@ type PolicyCandidate = {
   kind?: string;
   path?: string;
   source?: string;
+  /** Git host for req-pl-018 case fold (default inferred / github.com). */
+  host?: string;
 };
 type PolicyDependencyInput = string | {
   name?: string;
@@ -877,6 +1087,7 @@ type PolicyDependencyInput = string | {
   depth?: number;
   path?: string;
   source?: string;
+  host?: string;
 };
 type EvaluatePolicyOptions = {
   policy: PolicyDocument;
@@ -1277,6 +1488,72 @@ declare function assertPolicyGateAllows(options?: PolicyGateExtendedOptions): Po
  */
 declare function redactPolicyRef(ref: string): string;
 //#endregion
+//#region src/common/repoIdentityCase.d.ts
+type RepoIdentityCaseOptions = {
+  host?: string | null;
+  source?: string | null;
+  registryPrefix?: string | null;
+  /** When true, treat as local (no path fold). */
+  isLocal?: boolean;
+  /** When true, treat as marketplace (no path fold). */
+  isMarketplace?: boolean;
+  /**
+   * Env lookup for GHES (`GITHUB_HOST`). Defaults to `process.env.GITHUB_HOST`.
+   * Injected in tests.
+   */
+  githubHostEnv?: string | null;
+};
+/** ASCII `A–Z` → `a–z` only (no Unicode / locale folding). */
+declare function asciiLower(s: string): string;
+/**
+ * Disclosed case-insensitive git hosts: github.com, *.ghe.com, literal GITHUB_HOST.
+ */
+declare function isCaseInsensitiveGitHost(host: string | null | undefined, options?: RepoIdentityCaseOptions): boolean;
+/**
+ * Whether repository-coordinate path casing is excluded from identity / match.
+ * Registry (+ registry prefix) always folds; local/marketplace never; else host rule.
+ */
+declare function isCaseInsensitivePackageIdentity(options?: RepoIdentityCaseOptions): boolean;
+/**
+ * Fold repository-coordinate segments under the disclosed case rule.
+ * Virtual path / segments after the repo-coord prefix stay byte-exact.
+ * For globs, foldable prefix stops before the first segment containing `**`.
+ */
+declare function foldRepoCoordinatePath(value: string, options?: RepoIdentityCaseOptions & {
+  isPattern?: boolean;
+}): string;
+/**
+ * Identity-boundary normalization of a package repo path (APM `normalize_package_repo_url`).
+ * Never use for display / filesystem paths.
+ */
+declare function normalizePackageRepoPath(repoUrl: string, options?: RepoIdentityCaseOptions): string;
+//#endregion
+//#region src/modules/Policy/match.d.ts
+type IdentityMatchOptions = RepoIdentityCaseOptions & {
+  /**
+   * Force fold on/off. When omitted, fold follows host/source disclosure rules
+   * (and defaults bare `owner/repo` to github.com).
+   */
+  caseFold?: boolean;
+};
+declare function identityMatchesPattern(identity: string, pattern: string, options?: IdentityMatchOptions): boolean;
+/**
+ * Exact require match (req-pl-018): `*` is literal; compare package portion
+ * before `#` under the same fold rule. No glob.
+ */
+declare function identitySatisfiesRequire(identity: string, requirePattern: string, options?: IdentityMatchOptions): boolean;
+/**
+ * pl-007/008: unbounded direct refs when require_pinned_constraint is true.
+ * Pinned OK: 40-hex, v?semver tag, bounded range, registry source, local path.
+ */
+declare function isPinnedConstraint(args: {
+  ref?: string;
+  constraint?: string;
+  path?: string;
+  source?: string;
+  kind?: string;
+}): boolean;
+//#endregion
 //#region src/modules/Resolver/resolveAndLock.d.ts
 /**
  * Orchestrate: load manifest → resolve plan → policy gate → download → write lock.
@@ -1309,7 +1586,8 @@ declare function purgeModulesInstallPaths(args: PurgeInstallPathArgs): string[];
  * Minimum-safe repo identity for resolve/cache (req-rs-016).
  * - Host case folded to lowercase
  * - Trailing `.git` stripped
- * - Path case preserved (example/REPO ≠ example/repo)
+ * - Path case: ASCII-folded for disclosed case-insensitive hosts (github.com,
+ *   *.ghe.com, GITHUB_HOST); preserved for all other hosts
  * - Cache keys MUST NOT isolate solely by ref
  */
 declare function normalizeRepoIdentity(repoUrl: string): string;
@@ -1416,6 +1694,12 @@ type DiscoverPrimitivesOptions = {
   cwd?: string;
   /** Modules root; defaults to `<cwd>/apm_modules`. */
   modulesDir?: string;
+  /**
+   * Exact resolver package roots to scan. When set, discovery does not walk the
+   * modules tree, so git virtual-path packages are read from their subdirectory
+   * instead of the clone root.
+   */
+  packageRoots?: string[];
   /** Declaration order of dependency package names (pr-003). */
   declarationOrder?: string[];
 };
@@ -1485,6 +1769,12 @@ type AgentPluginManifest = {
   commands?: string[];
   /** Declared hook JSON paths relative to the plugin root. */
   hooks?: string[];
+  /**
+   * Exclusive skill declaration when present.
+   * Omit → conventional `skills/<name>/SKILL.md` discovery;
+   * `[]` → zero skills; non-empty → only resolved declared entries.
+   */
+  skills?: string[];
   extensions?: Record<string, Record<string, unknown>>;
 };
 type AgentPluginDiagnostic = {
@@ -1507,6 +1797,8 @@ type CreateAgentPluginManifestOptions = {
   repository?: string;
   license?: string;
   keywords?: string[];
+  /** Exclusive skill names/paths/containers when producing a portable plugin. */
+  skills?: string[];
   extensions?: Record<string, Record<string, unknown>>;
 };
 type WriteAgentPluginManifestOptions = CreateAgentPluginManifestOptions & {
@@ -1576,7 +1868,7 @@ type DiscoverAgentPluginMcpResult = LoadedAgentPluginManifest & {
 };
 //#endregion
 //#region src/modules/AgentPlugins/errors.d.ts
-type AgentPluginsErrorCode = "AGENT_PLUGIN_ROOT_INVALID" | "AGENT_PLUGIN_MANIFEST_INVALID" | "AGENT_PLUGIN_DECLARED_PATH_INVALID";
+type AgentPluginsErrorCode = "AGENT_PLUGIN_ROOT_INVALID" | "AGENT_PLUGIN_MANIFEST_INVALID" | "AGENT_PLUGIN_DECLARED_PATH_INVALID" | "AGENT_PLUGIN_SKILL_DECLARED_INVALID";
 declare class AgentPluginsError extends Error {
   readonly code: AgentPluginsErrorCode;
   readonly details?: Record<string, unknown>;
@@ -1596,8 +1888,11 @@ declare function validateAgentPluginManifest(value: unknown, manifestPath?: stri
 //#endregion
 //#region src/modules/AgentPlugins/discover.d.ts
 /**
- * Discover only immediate `skills/<name>/SKILL.md` entries and return complete,
- * containment-checked directories for portable import.
+ * Discover portable plugin skills.
+ *
+ * - Omit `plugin.json` `skills` → conventional immediate `skills/<name>/SKILL.md`.
+ * - `"skills": []` → zero skills; shadow diagnostic when conventional entries exist.
+ * - Non-empty list → exclusive fail-closed resolution (names / paths / container).
  */
 declare function discoverAgentPluginSkills(options: DiscoverAgentPluginSkillsOptions): DiscoverAgentPluginSkillsResult;
 //#endregion
@@ -1625,6 +1920,97 @@ declare function serializeAgentPluginManifest(manifest: AgentPluginManifest): st
  */
 declare function writeAgentPluginManifest(options: WriteAgentPluginManifestOptions): WrittenAgentPluginManifest;
 //#endregion
+//#region src/modules/CopilotNativeRegistration/errors.d.ts
+type CopilotNativeRegistrationErrorCode = "COPILOT_NATIVE_SETTINGS_INVALID" | "COPILOT_NATIVE_MARKETPLACE_COLLISION" | "COPILOT_NATIVE_PLUGIN_COLLISION" | "COPILOT_NATIVE_ADMISSION_INVALID" | "COPILOT_NATIVE_FAILED";
+declare class CopilotNativeRegistrationError extends Error {
+  readonly code: CopilotNativeRegistrationErrorCode;
+  readonly details?: Record<string, unknown>;
+  constructor(code: CopilotNativeRegistrationErrorCode, message: string, options?: {
+    details?: Record<string, unknown>;
+    cause?: unknown;
+  });
+}
+//#endregion
+//#region src/modules/CopilotNativeRegistration/types.d.ts
+type AdmittedCopilotNativePlugin = {
+  /** Portable plugin.json name (enable key prefix). */
+  pluginName: string;
+  /** Package / lock identity name. */
+  packageName: string;
+  /** Absolute package root under apm_modules (or source). */
+  packageRoot: string;
+  /** Repo-relative path under apm_modules/ for catalog entries. */
+  packagePathRel: string;
+  /** Resolver depth (1 = direct). */
+  depth: number;
+  identity?: string;
+};
+type CopilotNativeLedgerPlugin = {
+  packageName: string;
+  packagePath: string;
+  identity?: string;
+};
+type CopilotNativeLedger = {
+  version: number;
+  marketplaceId: string;
+  modulesPath: string;
+  ownedMarketplace: true;
+  plugins: Record<string, CopilotNativeLedgerPlugin>;
+};
+type RebuildCopilotNativeRegistrationOptions = {
+  cwd: string;
+  admitted: AdmittedCopilotNativePlugin[];
+  dryRun?: boolean;
+};
+type SyncCopilotNativeRegistrationOptions = {
+  cwd: string;
+  dryRun?: boolean;
+};
+//#endregion
+//#region src/modules/CopilotNativeRegistration/constants.d.ts
+/** Marketplace id / enable suffix aligned with APM Copilot projection. */
+declare const COPILOT_NATIVE_MARKETPLACE_ID = "apm";
+declare const COPILOT_NATIVE_ENABLE_SUFFIX = "@apm";
+/** Repository-relative modules root used in settings + catalog paths. */
+declare const COPILOT_NATIVE_MODULES_PATH = "apm_modules";
+declare const COPILOT_NATIVE_MARKETPLACE_REL: string;
+declare const COPILOT_NATIVE_LEDGER_REL: string;
+declare const COPILOT_NATIVE_SETTINGS_REL: string;
+//#endregion
+//#region src/modules/CopilotNativeRegistration/admit.d.ts
+/**
+ * Admit portable Agent Plugin roots from resolved nodes for Copilot native registration.
+ * Invalid plugin.json that claims the portable path fails closed.
+ * Same plugin name: direct (lower depth) wins; same precedence → collision.
+ */
+declare function admitCopilotNativePlugins(nodes: ResolvedNode[], options?: {
+  cwd?: string;
+}): AdmittedCopilotNativePlugin[];
+//#endregion
+//#region src/modules/CopilotNativeRegistration/rebuild.d.ts
+/**
+ * Rebuild or clear owned catalog/ledger/settings for the admitted set.
+ * Empty admitted set retires owned registration artifacts.
+ */
+declare function rebuildCopilotNativeRegistration(options: RebuildCopilotNativeRegistrationOptions): void;
+/**
+ * Sync registration from current lock + on-disk package roots (uninstall/prune).
+ */
+declare function syncCopilotNativeRegistrationFromLock(options: SyncCopilotNativeRegistrationOptions): void;
+/**
+ * Admit from install-time resolver nodes when Copilot is an effective target.
+ */
+declare function rebuildCopilotNativeRegistrationFromNodes(cwd: string, nodes: ResolvedNode[], options?: {
+  dryRun?: boolean;
+}): AdmittedCopilotNativePlugin[];
+//#endregion
+//#region src/modules/CopilotNativeRegistration/filter.d.ts
+/**
+ * Omit whole-plugin (portable) primitives for packages admitted to Copilot native
+ * registration so Copilot does not double-deploy loose skills/MCP.
+ */
+declare function filterPrimitivesForCopilotNative(primitives: AttributedPrimitive[], admittedPackageNames: ReadonlySet<string>): AttributedPrimitive[];
+//#endregion
 //#region src/modules/Install/types.d.ts
 type InstallOnlyMode = "apm" | "mcp";
 type RunInstallOptions = {
@@ -1743,6 +2129,24 @@ type RunInstallOptions = {
    * (`--trust-transitive-mcp`). Direct `dependencies.mcp` always eligible.
    */
   trustTransitiveMcp?: boolean;
+  /**
+   * Per-invocation bin deploy consent (`--trust-bin` / `--no-trust-bin`).
+   * `allow` | `deny` | `default` (neither flag). Overlay on ExecutableTrust type `bin`.
+   */
+  trustBin?: "allow" | "deny" | "default";
+  /**
+   * Explicit interactive signal for bin consent defaults. When unset, derived from
+   * CI / BAPM_NON_INTERACTIVE / frozen / stdin TTY.
+   */
+  isInteractive?: boolean;
+  /** Env overlay for CI / BAPM_NON_INTERACTIVE (defaults to `process.env`). */
+  env?: Record<string, string | undefined>;
+  /** Injectable stdin TTY for bin consent (defaults to `process.stdin.isTTY`). */
+  stdinIsTTY?: boolean;
+  /**
+   * Destination for gated dependency `bin/` materialize (default: `<cwd>/.agents/bin`).
+   */
+  binDeployRoot?: string;
   experimentalRegistries?: boolean;
   registryBaseUrl?: string;
   mirrorUrl?: string;
@@ -2517,11 +2921,19 @@ type SafeExtractZipResult = {
   filesExtracted: number;
   dest: string;
 };
+type SafeExtractZipOptions = {
+  /**
+   * `replace` (default): `dest` is a bapm-owned cache dir and is swapped for the archive tree.
+   * `merge`: `dest` holds user files; members are added in place, nothing else is touched,
+   * and a member that would overwrite different bytes fails closed before any write.
+   */
+  mode?: "replace" | "merge";
+};
 /**
- * Fail-closed extract into `dest` via same-filesystem staging + rename.
- * On any error, staging is removed and `dest` is not left as a half-write from this call.
+ * Fail-closed extract into `dest`. See {@link SafeExtractZipOptions} for modes.
+ * On any error, `dest` is not left as a half-write from this call.
  */
-declare function safeExtractZip(bytes: Uint8Array, dest: string): SafeExtractZipResult;
+declare function safeExtractZip(bytes: Uint8Array, dest: string, options?: SafeExtractZipOptions): SafeExtractZipResult;
 //#endregion
 //#region src/modules/Pack/checkRelease.d.ts
 /**
@@ -2541,6 +2953,39 @@ declare const runCheckRelease: typeof checkReleaseTag;
 declare function isSecretPackPath(relativePath: string): boolean;
 declare function describeSecretRefuse(relativePath: string): string;
 //#endregion
+//#region src/modules/Pack/bapmIgnore.d.ts
+declare const BAPM_IGNORE_FILE = ".bapmignore";
+type BapmIgnoreRules = {
+  /** True when `relativePath` (project-root, `/` separators) should be omitted. */
+  ignores(relativePath: string): boolean;
+};
+/**
+ * Load project-root `.bapmignore`.
+ * Missing file → empty rules (no-op). Unreadable / non-file → fail closed.
+ */
+declare function loadBapmIgnore(cwd: string): BapmIgnoreRules;
+declare function isBapmIgnored(relativePath: string, rules: BapmIgnoreRules): boolean;
+/** Whether a directory path should be pruned from the walk. */
+declare function isBapmIgnoredDir(relativePath: string, rules: BapmIgnoreRules): boolean;
+//#endregion
+//#region src/modules/Pack/collect.d.ts
+type PackFileEntry = {
+  /** Path relative to project root using `/` separators. */
+  relativePath: string;
+  absolutePath: string;
+  bytes: Uint8Array;
+};
+/**
+ * Collect packable project files: manifest, lock, primitives, sources.
+ * Excludes `.git`, `node_modules`, prior `*.zip` artifacts, and `.bapmignore` matches.
+ * Fails closed when a secret-pattern path would be included (sc-007).
+ */
+declare function collectPackFiles(cwd: string): PackFileEntry[];
+declare function assertProjectHasContent(entries: PackFileEntry[], options?: {
+  agentPlugins?: boolean;
+}): void;
+declare function defaultArchiveName(name: string, version: string): string;
+//#endregion
 //#region src/modules/Auth/types.d.ts
 /**
  * Shared Auth types — OpenAPM §10.3 credential host-class / resolve / git child env.
@@ -2818,6 +3263,57 @@ declare function userGrantsToSurface(grants: UserExecutableGrants, opts?: {
   present?: boolean;
 }): ExecutableGrantSurface;
 //#endregion
+//#region src/modules/ExecutableTrust/binConsent.d.ts
+type TrustBinMode = "allow" | "deny" | "default";
+type ResolveBinDeployConsentOptions = {
+  packageName: string;
+  /** Invocation consent: `--trust-bin` → allow, `--no-trust-bin` → deny, neither → default. */
+  trustBin?: TrustBinMode;
+  /**
+   * Explicit interactive signal (tests / callers). When unset, derived from
+   * CI / BAPM_NON_INTERACTIVE / frozen / stdin TTY (D2).
+   */
+  isInteractive?: boolean;
+  frozen?: boolean;
+  env?: Record<string, string | undefined>;
+  /** Injectable stdin TTY; defaults to `process.stdin.isTTY`. */
+  stdinIsTTY?: boolean;
+  orgExecutables?: OrgExecutables | null;
+  projectSurface?: GrantSurfaceInput;
+  userSurface?: GrantSurfaceInput;
+  grantSurface?: GrantSurfaceInput;
+  /** Precomputed ladder decision (skips resolveExecutableTrust). */
+  ladder?: ExecutableTrustDecision;
+};
+type BinDeployConsentDecision = {
+  deploy: boolean;
+  withhold: boolean;
+  warn: boolean;
+  allowed: boolean;
+  outcome: "deploy" | "withhold" | "skip";
+  ladderOutcome: ExecutableTrustDecision["outcome"];
+  packageName: string;
+  executableType: "bin";
+  reason?: string;
+  trustBin: TrustBinMode;
+  interactive: boolean;
+};
+/**
+ * Effective bin-deploy decision: ExecutableTrust deny-wins for `bin`, then
+ * invocation overlay. Flags cannot invent allow when the ladder denies/withholds.
+ */
+declare function resolveBinDeployConsent(options: ResolveBinDeployConsentOptions): BinDeployConsentDecision;
+/** Alias preferred by design / acceptance discovery. */
+declare const resolveEffectiveBinDeploy: typeof resolveBinDeployConsent;
+declare const evaluateBinDeployConsent: typeof resolveBinDeployConsent;
+declare function normalizeTrustBin(value: unknown): TrustBinMode;
+declare function resolveIsInteractive(options: {
+  isInteractive?: boolean;
+  frozen?: boolean;
+  env?: Record<string, string | undefined>;
+  stdinIsTTY?: boolean;
+}): boolean;
+//#endregion
 //#region src/modules/ExecutableTrust/evaluate.d.ts
 /**
  * True when the consuming project declared a grant surface
@@ -2893,8 +3389,10 @@ type ApplyMcpInventoryOptions = {
     packageName?: string;
     [key: string]: unknown;
   }>;
-  configPath: string;
-  targetId: string;
+  /** Target that received the config. Omit to refresh `mcp_servers` without inventing target inventory. */
+  targetId?: string;
+  /** Host config path; only written together with `targetId`. */
+  configPath?: string;
 };
 //#endregion
 //#region src/modules/Mcp/bake.d.ts
@@ -2960,6 +3458,14 @@ declare function collectMcpServers(options: CollectMcpServersOptions): CollectMc
 /**
  * Populate lock top-level `mcp_*` fields from configured servers.
  * Preserves unknown / `x-*` keys already on the document.
+ *
+ * Without `targetId` + `configPath`, only `mcp_servers` (and provenance for the
+ * current servers) is refreshed; existing target inventory is left untouched.
+ * Passing an empty `servers` list therefore scrubs stale server declarations
+ * without inventing a target entry.
+ *
+ * Maps are built with `Map` + `Object.fromEntries` so server names such as
+ * `toString` / `constructor` never resolve through `Object.prototype`.
  */
 declare function applyMcpInventoryToLock(options: ApplyMcpInventoryOptions): LockfileDocument;
 //#endregion
@@ -3184,7 +3690,8 @@ declare function resolveRegistryToken(options?: {
  * Build flat registry publish zip: `apm.yml` at root + `.apm/**` (+ optional docs).
  * Does NOT call M7 pack product API — zip I/O only via fflate.
  * Wire `apm.yml` is serialized from the **dual-read base** only (no `bapm.local.yml` merge).
- * Never includes personal overlay `bapm.local.yml` as a zip member.
+ * Never includes personal overlay `bapm.local.yml` or personal lock `bapm.local.lock.yaml`.
+ * Applies project-root `.bapmignore` to optional docs and `.apm/**` members.
  */
 declare function buildPublishArchive(options?: BuildPublishArchiveOptions): BuildPublishArchiveResult;
 //#endregion
@@ -3414,6 +3921,11 @@ type MarketplaceAuthoringOwner = string | {
 type MarketplaceAuthoringBuild = {
   tagPattern?: string;
 };
+/** Release-time version-alignment strategies for `pack --check-versions`. */
+type MarketplaceVersioningStrategy = "lockstep" | "tag_pattern" | "per_package";
+type MarketplaceAuthoringVersioning = {
+  strategy: MarketplaceVersioningStrategy;
+};
 type MarketplaceAuthoringOutputs = Record<string, unknown>;
 type PackageEntry = {
   name: string;
@@ -3449,7 +3961,11 @@ type MarketplaceAuthoringConfig = {
   claude?: unknown;
   codex?: unknown;
   metadata?: Record<string, unknown>;
-  versioning?: unknown;
+  /**
+   * Present after authoring load (defaults to `{ strategy: "lockstep" }` when omitted in YAML).
+   * Callers that construct configs by hand may omit it; gates treat missing as lockstep.
+   */
+  versioning?: MarketplaceAuthoringVersioning;
   packages: PackageEntry[];
 };
 type LoadMarketplaceFromBapmYmlOptions = {
@@ -3647,6 +4163,63 @@ declare function migrateMarketplaceYml(options?: MigrateMarketplaceYmlOptions):
 declare const migrateLegacyMarketplaceYml: typeof migrateMarketplaceYml;
 declare const runMarketplaceMigrate: typeof migrateMarketplaceYml;
 //#endregion
+//#region src/modules/Marketplace/modules/VersionCheck/types.d.ts
+type PackageVersionRow = {
+  path: string;
+  version: string | null;
+  ok: boolean;
+  reason: string;
+  error?: string;
+  rendered_tag?: string | null;
+};
+type VersionAlignmentReport = {
+  strategy: MarketplaceVersioningStrategy;
+  expected: string | null;
+  ok: boolean;
+  packages: PackageVersionRow[];
+};
+type CheckVersionAlignmentOptions = {
+  config: MarketplaceAuthoringConfig;
+  cwd?: string;
+  projectRoot?: string;
+  root?: string;
+};
+type LocalVersionStatus = "ok" | "no_apm_yml" | "invalid_yaml" | "invalid_yaml_manifest" | "missing_version" | "invalid_plugin_json" | "missing_plugin_version" | "invalid_plugin_version";
+type LocalVersionRead = {
+  version: string | null;
+  status: LocalVersionStatus;
+};
+//#endregion
+//#region src/modules/Marketplace/modules/VersionCheck/findPluginJson.d.ts
+/** APM `find_plugin_json` location order (first existing wins). */
+declare const PLUGIN_JSON_CANDIDATES: readonly ["plugin.json", ".github/plugin/plugin.json", ".claude-plugin/plugin.json", ".cursor-plugin/plugin.json"];
+declare function findPluginJson(packageRoot: string): string | undefined;
+//#endregion
+//#region src/modules/Marketplace/modules/VersionCheck/renderTag.d.ts
+/** Expand `{name}` and `{version}` placeholders (APM `render_tag` parity). */
+declare function renderTag(pattern: string, name: string, version: string): string;
+//#endregion
+//#region src/modules/Marketplace/modules/VersionCheck/readLocalVersion.d.ts
+declare const MAX_PLUGIN_JSON_BYTES: number;
+/**
+ * Read local package version: dual-read OpenAPM YAML authoritative; else plugin.json.
+ * Prefered manifest present ⇒ no plugin.json fallback (APM fail-closed).
+ */
+declare function readLocalVersion(projectRoot: string, relSource: string): LocalVersionRead;
+//#endregion
+//#region src/modules/Marketplace/modules/VersionCheck/checkVersionAlignment.d.ts
+/**
+ * Marketplace local-package version-alignment gate (APM `check_version_alignment`).
+ * Pure / no network — distinct from `checkReleaseTag`.
+ */
+declare function checkVersionAlignment(options: CheckVersionAlignmentOptions): VersionAlignmentReport;
+/** Human-readable diagnostics (APM `VersionAlignmentReport.error_messages`). */
+declare function versionAlignmentErrorMessages(report: VersionAlignmentReport): string[];
+/** Aliases for acceptance soft-resolve. */
+declare const checkMarketplaceVersionAlignment: typeof checkVersionAlignment;
+declare const runVersionAlignmentCheck: typeof checkVersionAlignment;
+declare const checkVersions: typeof checkVersionAlignment;
+//#endregion
 //#region src/modules/Marketplace/types.d.ts
 /** Shared option bags for Marketplace public APIs. */
 type MarketplaceConfigOptions = {
@@ -4045,4 +4618,4 @@ declare function getVersion(): string;
 //#region src/app/publicApi.d.ts
 declare const BAPM_NAME = "bapm";
 //#endregion
-export { AGENT_PLUGIN_MANIFEST_SCHEMA_V1, APM_LOCAL_MANIFEST_FILE, APM_LOCK_FILE, APM_MANIFEST_FILE, APM_MODULES_DIR, APM_POLICY_FILE, type AgentPluginAuthor, type AgentPluginDeclaredPath, type AgentPluginDiagnostic, type AgentPluginManifest, type AgentPluginMcpServer, type AgentPluginSkill, AgentPluginsError, type AgentPluginsErrorCode, type AnnotatedTagCandidate, type ApplyMcpInventoryOptions, type AttributedPrimitive, type AuditCiCheck, type AuditCiCheckName, type AuditCiFormat, type AuditCiResult, type AuditCiStructuredReport, type AuditCiSummary, BAPM_LOCAL_MANIFEST_FILE, BAPM_LOCK_FILE, BAPM_MANIFEST_FILE, BAPM_NAME, BAPM_POLICY_FILE, type BakeMcpStringMapOptions, type BakeableMcpServer, type BapmDependency, type BapmManifest, type BuildGitChildEnvOptions, type BuildMarketplaceOutputsOptions, type BuildMarketplaceOutputsResult, type BuildPublishArchiveOptions, type BuildPublishArchiveResult, CACHE_TTL_SECONDS, CANONICAL_TARGET_TOKENS, CYCLONEDX_SPEC_VERSION, type CacheCleanOptions, type CacheCleanResult, type CacheInfoOptions, type CacheInfoResult, type CheckMarketplaceAuthoringResult, type CheckReleaseTagOptions, type CheckReleaseTagResult, type CheckSelfUpdateOptions, type CheckSelfUpdateResult, type ClassifiedDependency, type CollectMcpServersOptions, type CollectMcpServersResult, type CollectedMcpServer, type CompileAgentsMdOptions, type CompileAgentsMdResult, type CompileAttributionEntry, type CreateAgentPluginManifestOptions, type CreateMinimalManifestOptions, type CreatePluginJsonOptions, type CreateRegistryClientOptions, DEFAULT_LOCAL_ROOT, DEFAULT_PARALLEL_CHECKS, DEFAULT_PARALLEL_DOWNLOADS, DEFAULT_POLICY_PROVIDERS, DEPLOYED_HASH_ALGO, type DependencyEntry, type DependencyKind, type DependencyLists, type DeployedHashViolation, type DepsListResult, type DepsTreeResult, type DepsWhyError, type DepsWhyPackage, type DepsWhyPath, type DepsWhyPathNode, type DepsWhyResult, type DetectAuthoringConfigSourceResult, type DiscoverAgentPluginDeclaredPathsResult, type DiscoverAgentPluginMcpOptions, type DiscoverAgentPluginMcpResult, type DiscoverAgentPluginSkillsOptions, type DiscoverAgentPluginSkillsResult, type DiscoverLockfileOptions, type DiscoverManifestOptions, type DiscoverPolicyOptions, type DiscoverPrimitivesOptions, type DiscoveredLockfile, type DiscoveredManifest, type DiscoveredPolicy, type DoctorCheck, type DoctorResult, type DownloadArgs, type DownloadPackageSpec, type DownloadPackagesOptions, type Downloader, EXPERIMENTAL_REGISTRIES_ENV, type EditorResult, type EnforceFrozenOptions, type EvaluateExecutableTrustOptions, type EvaluatePolicyOptions, type EvaluatePolicyResult, type EvaluateRequiredPackagePresenceOptions, type EvaluateRequiredPackagePresenceResult, type ExecutableGrantEntry, type ExecutableGrantSurface, type ExecutableTrustDecision, type ExecutableTrustOutcome, type ExportSbomFailure, type ExportSbomOptions, type ExportSbomResult, type ExportSbomSuccess, type ExtractPackArchiveOptions, type ExtractPackArchiveResult, FIXED_EPOCH_TIMESTAMP, FORMAT_CYCLONEDX, FORMAT_SPDX, type FakeTag, type FetchWithRedirectAuthDropInit, type FindPathOptions, type FindPathResult, type GitRemote, type GrantSurfaceInput, IMPLEMENTATION_DEFAULT_HOST, InstallError, type InstallErrorCode, type InstallOptions, type InstallResult, type InventoryDep, KIND_EXPRESSION, KIND_ID, KIND_NAMED, type LicenseClass, type LicenseKind, type LoadAgentPluginManifestOptions, type LoadLockfileOptions, type LoadLockfileResult, type LoadManifestOptions, type LoadManifestResult, type LoadMarketplaceResult, type LoadPolicyOptions, type LoadPolicyResult, type LoadedAgentPluginManifest, type LockFilename, type LockedDependency, type LockfileDocument, LockfileError, type LockfileErrorCode, type LockfileInput, type LsRemoteFn, type LsRemoteResult, MARKETPLACE_PATHS, MAX_MARKETPLACE_JSON_BYTES, MAX_RESOLVE_DEPTH, MAX_SAFE_ENTRIES, MAX_SAFE_UNCOMPRESSED_BYTES, ManifestError, type ManifestErrorCode, type ManifestFilename, type ManifestWarning, type MarketplaceAuthoringConfig, MarketplaceAuthoringError, type MarketplaceConcreteDep, type MarketplaceConfigOptions, MarketplaceError, MarketplaceFetchError, type MarketplaceFetchOptions, type MarketplaceHostClass, type MarketplaceManifest, MarketplaceNotFoundError, type MarketplaceOutputFormat, type MarketplaceOutputWritten, MarketplacePackOutputsError, type MarketplacePlugin, MarketplacePluginNotFoundError, type MarketplacePluginResolution, type MarketplaceProvenance, MarketplaceSource, type MarketplaceSourceInit, type MarketplaceSourceKind, MarketplaceUnsupportedSourceError, McpEnvBakeError, type MigrateMarketplaceYmlResult, type ObjectDependency, type OrgExecutables, OutdatedError, type OutdatedErrorCode, type OutdatedResult, type OutdatedRow, PLATFORM_TOKEN_ENV_NAMES, POLICY_DISCOVERY_PROVIDERS, POLICY_EXTENDS_MAX_DEPTH, POLICY_PROVIDER_GITHUB_OWNER_DOTGITHUB, POLICY_PROVIDER_LOCAL, PackError, type PackErrorCode, type PackageEntry, type ParseExecutableGrantsOptions, type ParseMarketplaceFilterResult, type ParsePolicyResult, type ParsedMarketplaceRef, type PluginJsonAuthor, type PluginJsonDocument, type PolicyCandidate, type PolicyDependencies, type PolicyDependencyInput, type PolicyDocument, type PolicyEnforcement, PolicyError, type PolicyErrorCode, type PolicyExecutables, type PolicyGateOptions, type PolicyGateResult, type PolicyStatusOptions, type PolicyStatusOutcome, type PolicyStatusReport, type PolicyStatusRuleCounts, type PolicyViolation, type PolicyWarning, type PrimitiveConflictDiagnostic, type PrimitiveSource, type PrimitiveType, PrimitivesError, type PrimitivesErrorCode, type ProviderHostClass, PruneError, type PruneErrorCode, type PruneResult, type PurgeInstallPathArgs, type RegistryAliasEntry, type RegistryAliasMap, type RegistryClient, type RegistryEntry, RegistryError, type RegistryErrorCode, type RegistryHttpRequest, type RegistryHttpResponse, type RegistryHttpTransport, type RegistryVersionInfo, type RequiredPackagePresenceDiagnostic, type RequiredPackageTrustOutcome, type ResolveAndLockOptions, type ResolveAndLockResult, type ResolveCredentialsOptions, type ResolveDependencyGraphOptions, type ResolveEffectiveFrozenOptions, type ResolveEffectiveOutputPathOptions, type ResolveExecutableTrustOptions, type ResolveGraphResult, type ResolveMarketplacePackagesOptions, type ResolveMarketplacePackagesResult, type ResolveMarketplacePluginOptions, type ResolvePorts, type ResolvePrimitiveConflictsOptions, type ResolvePrimitiveConflictsResult, type ResolvedCredentials, type ResolvedDeployedFile, type ResolvedMarketplaceToken, type ResolvedNode, type ResolvedPackage, ResolverError, type ResolverErrorCode, type ReverseIndex, type RunAuditCiOptions, type RunDepsOptions, type RunDoctorOptions, type RunInstallOptions, type RunOutdatedOptions, type RunPackOptions, type RunPackResult, type RunPruneOptions, type RunUninstallOptions, type RunUpdateOptions, SPDX_VERSION, SUPPORTED_FORMATS, SafeExtractError, type SameCredentialHostClassOptions, type SaveUserExecutableGrantsOptions, type SbomFormat, type SourceValidationResult, TARGET_ALIAS_TOKENS, type TagLister, type TargetIntegrationMap, type TreeSha256Violation, UninstallError, type UninstallErrorCode, type UninstallResult, UpdateError, type UpdateErrorCode, type UpdatePlanEntry, type UpdateResult, type UserExecutableGrants, type UserExecutableStoreOptions, VENDOR_TARGET_RE, type ValidationResult, type ViewError, type ViewIdentity, type ViewPackageOptions, type ViewPackageResult, WORKSPACE_OWNER_KEY, type WriteAgentPluginManifestOptions, type WriteLockfileOptions, type WriteManifestOptions, type WritePluginJsonOptions, type WriteProducerManifestOptions, type WriteProducerManifestResult, type WrittenAgentPluginManifest, _formatOrigin, abbreviateSha, addMarketplace, addMarketplacePackage, applyDeployedHashesToLock, applyMcpInventoryToLock, assertExperimentalRegistriesEnabled, assertPolicyGateAllows, assertSafeZipCentralDirectory, atomicWriteMarketplaceJson, auditCi, authHeadersForHost, authHeadersForResolved, authHostClassOf, autoDetectMarketplacePath, bakeMcpServerMaps, bakeMcpStringMap, bakeMcpStringValue, buildAliasCredentialClassMap, buildFindReverseIndex, buildGitChildEnv, buildHardenedGitEnv, buildMarketplaceOutputs, buildPluginJson, buildPublishArchive, buildPurl, buildRegistryPublishZip, buildReverseIndex, build_reverse_index, cacheClean, cacheInfo, cacheKeyForSource, checkAuthoringMarketplace, checkDoctor, checkExecutableTrust, checkMarketplaceAuthoring, checkOutdated, checkRelease, checkReleaseTag, checkSelfUpdate, classifyDeclaredLicense, classifyDependencyRef, classifyExecutableTrust, classifyMarketplaceHost, classifyMarketplaceHostKind, classifyProviderHostClass, classifyRequiredPackagePresence, cleanModulesCache, cleanupOrphanDeployedFiles, clearMarketplaceCache, collectAdoHosts, collectDeployedHashViolations, collectDeployedHashes, collectLocalSourcePaths, collectMcpServers, collectTreeSha256Violations, compareSelfUpdate, compileAgentsMd, compileProject, componentName, componentVersion, computeCanonicalTreeSha256, createAgentPluginManifest, createDefaultDownloader, createDefaultGitRemote, createDefaultTagLister, createFetchTransport, createGitChildEnv, createMarketplaceAuthoringTemplate, createMarketplaceManifest, createMarketplacePlugin, createMarketplaceSource, createMinimalManifest, createMinimalManifestDocument, createPackageRegistryClient, createPeelAwareTagLister, createPluginJson, createPluginJsonDocument, createPublishArchive, createRegistryClient, createRegistryHttpClient, credentialHostClass, credentialHostClassForHost, credentialHostClassOf, credentialHostClassesEqual, declaredTargetIds, declaredTargetIntegrationMap, defaultPolicyProviders, depsList, depsTree, depsWhy, describeSecretRefuse, detectAuthoringConfigSource, digestsEqual, discoverAgentPluginDeclaredPaths, discoverAgentPluginMcp, discoverAgentPluginSkills, discoverLocalPolicyPath, discoverLockfilePath, discoverManifestPath, discoverPolicyPath, discoverPolicyProviders, discoverPolicyWithProviders, discoverPrimitives, doctor, downloadPackages, downloadUrl, effectiveLocalPath, effectiveProviderClassForHost, emitAgentsMd, emitManifest, emitMarketplacePackOutputs, emitPluginJson, enforceFrozen, ensureBapmConfigDir, ensureLocalRootUntracked, ensureLocalSourcesUntracked, ensureMarketplacePathWithin, evaluateExecutableTrust, evaluateInstallPolicy, evaluateMcpExecutableTrust, evaluatePolicy, evaluatePolicyRules, evaluateRequireLockPresence, evaluateRequiredPackagePresence, evaluateRequiredPackagesFromLock, experimentalRegistriesRemediation, exportSbom, extractPack, extractPackArchive, fetchAndMaterializeRegistry, fetchLatestCliVersion, fetchMarketplace, fetchRedirectAuthDrop, fetchWithCredentialHostClassRedirects, fetchWithRedirectAuthDrop, findDeployedPath, findLatestAnnotatedTag, findOwnerLabel, findPath, formatAuditCiJson, formatAuditCiSarif, formatFindOrigin, formatFindOwnerLabel, formatOrigin, formatOwnerLabel, formatSourceOrigin, formatTreeSha256Violation, formatUnsupportedMessage, formatsEnabledInConfig, gateExecutableMcp, getBapmConfigDir, getCacheInfo, getMarketplace, getVersion, gitChildEnvForHost, githubApiBaseForHost, hasGrantSurface, hashFileAt, hashFileBytes, hostClassForCredentials, hostClassForPolicy, hostClassOf, hostsShareCredentialClass, identityToCacheDir, initMarketplaceAuthoring, installProject, isCiEnvTruthy, isExemptInsecureHost, isExperimentalRegistriesEnabled, isFullRevisionPin, isGitSourcedLockEntry, isPolicyDisabled, isSecretPackPath, isSemanticallyEquivalent, isUnlockedMarketplaceHost, isValidMarketplaceAuthoringSource, isValidPluginName, isValidProjectName, isValidTargetToken, listDeps, listGitRemotes, listMarketplaces, loadAgentPluginManifest, loadBaseManifest, loadEffectiveManifest, loadExecutableUserGrants, loadLockfile, loadLockfileOrNull, loadManifest, loadMarketplaceAuthoringConfig, loadMarketplaceFromBapmYml, loadMarketplaceFromLegacyYml, loadPolicy, loadUserExecutableGrants, loadUserExecutables, loadYamlDocument, localRootGitignorePattern, localView, locateGitPackageTree, lookup, lookupFindPath, lookupInIndex, lookupReverseIndex, marketplaceCacheDir, marketplaceKindFromHostClass, marketplacesJsonPath, materializeRegistryArchive, materializeRegistryNodes, mayAttachGitCredential, mergeLocalOverlay, mergePolicies, mergePolicy, mergePolicyChain, mergePolicyDocuments, migrateLegacyMarketplaceYml, migrateMarketplaceYml, modulesCacheInfo, modulesRegistryDest, normalizeFindPath, normalizeFormat, normalizeMarketplacePathOverrides, normalizeRepoIdentity, outdated, ownerLabel, packArchive, packProject, packPublishArchive, packageBasenameFromRepo, packageOwnerKey, parseExecutableGrants, parseLocalOverlayDocument, parseLockfile, parseLockfileDocument, parseManifest, parseManifestDocument, parseMarketplaceFilter, parseMarketplaceJson, parseMarketplaceRef, parsePackageId, parsePolicy, parsePolicyDocument, parseZipCentralDirectory, persistUserExecutableGrant, pickHighestInIntersection, pickHighestSatisfyingTag, pickRegistryVersion, pickTightestRange, policyHostClass, prune, pruneModules, purgeModulesInstallPaths, readMarketplaceCache, readUserExecutableGrants, redactPolicyRef, redirectSafeFetch, registryRepoUrl, removeMarketplace, removeMarketplacePackage, renderInitMarketplaceBlock, renderMarketplaceBlock, repoBasename, repoOwnerRepo, resolveAndLock, resolveAuthCredentialsForHost, resolveAuthTokenForHost, resolveAuthoringPackages, resolveConflicts, resolveCredentialsForHost, resolveDependencyGraph, resolveEffectiveFrozen, resolveEffectiveOutputPath, resolveExecutableTrust, resolveExtends, resolveHostClass, resolveHostCredentials, resolveLocalFilesystemPath, resolveMarketplaceOutputPath, resolveMarketplacePackPackages, resolveMarketplacePackages, resolveMarketplacePlugin, resolveMarketplaceTokenForHost, resolvePackageQuery, resolvePolicyChain, resolvePolicyExtends, resolvePrimitiveConflicts, resolveProjectRemote, resolveRegistryBaseUrl, resolveRegistryToken, resolveTokenForHost, resolveUserConfigRoot, rewriteDownloadBase, runAudit, runAuditCi, runCheckRelease, runCompile, runDepsList, runDepsTree, runDepsWhy, runDoctor, runFind, runFindPath, runInstall, runMarketplaceAuthoringCheck, runMarketplaceBuilder, runMarketplaceMigrate, runOutdated, runPack, runPolicyDiscovery, runPolicyGate, runPolicyStatus, runPrune, runSelfUpdateCheck, runUninstall, runUpdate, runView, safeExtractZip, safeResolveUnderCwd, sameCredentialHostClass, sanitizeCacheName, saveExecutableUserGrants, saveUserExecutableGrants, saveUserExecutables, scrubUrl, selectGitRemoteForPolicy, selectOutputFormats, selectProjectRemote, selectProviderClassForHost, serializeAgentPluginManifest, serializeLockfile, serializeManifest, serializeMarketplaceJson, serializePluginJson, serializeSbom, setMarketplacePackage, sha256Digest, sha256Hex, summarizeChecks, toLockRepoUrl, toStructuredReport, treeDeps, treeSha256Equal, tryLoadMarketplaceAuthoring, uninstall, uninstallPackages, unpackArchive, updateProject, urlNamesRemoteManifest, userConfigJsonPath, userGrantsToSurface, validateAgentPluginManifest, validateManifestEnv, validateMarketplace, validateMarketplaceAuthoringSource, validatePluginName, validateProjectName, verifyArchiveDigest, verifyDeployedFileHashes, viewLocalPackage, viewPackage, whyDeps, writeAgentPluginManifest, writeLockfile, writeManifest, writeManifestValidated, writeMarketplaceCache, writeMarketplacePackOutputs, writePluginJson, writePluginJsonFile, writeProducerManifest, writeUserExecutableGrants };
+export { AGENT_PLUGIN_MANIFEST_SCHEMA_V1, APM_LOCAL_MANIFEST_FILE, APM_LOCK_FILE, APM_MANIFEST_FILE, APM_MODULES_DIR, APM_PERSONAL_LOCK_FILE, APM_POLICY_FILE, type ActiveEntry, type AdmittedCopilotNativePlugin, type AgentPluginAuthor, type AgentPluginDeclaredPath, type AgentPluginDiagnostic, type AgentPluginManifest, type AgentPluginMcpServer, type AgentPluginSkill, AgentPluginsError, type AgentPluginsErrorCode, type AnnotatedTagCandidate, type ApplyMcpInventoryOptions, type AttributedPrimitive, type AuditCiCheck, type AuditCiCheckName, type AuditCiFormat, type AuditCiResult, type AuditCiStructuredReport, type AuditCiSummary, BAPM_IGNORE_FILE, BAPM_LOCAL_MANIFEST_FILE, BAPM_LOCK_FILE, BAPM_MANIFEST_FILE, BAPM_NAME, BAPM_PERSONAL_LOCK_FILE, BAPM_POLICY_FILE, type BakeMcpStringMapOptions, type BakeableMcpServer, type BapmDependency, type BapmIgnoreRules, type BapmManifest, type BinDeployConsentDecision, type BuildGitChildEnvOptions, type BuildMarketplaceOutputsOptions, type BuildMarketplaceOutputsResult, type BuildPublishArchiveOptions, type BuildPublishArchiveResult, CACHE_TTL_SECONDS, CANONICAL_TARGET_TOKENS, COPILOT_NATIVE_ENABLE_SUFFIX, COPILOT_NATIVE_LEDGER_REL, COPILOT_NATIVE_MARKETPLACE_ID, COPILOT_NATIVE_MARKETPLACE_REL, COPILOT_NATIVE_MODULES_PATH, COPILOT_NATIVE_SETTINGS_REL, CYCLONEDX_SPEC_VERSION, type CacheCleanOptions, type CacheCleanResult, type CacheInfoOptions, type CacheInfoResult, type CheckMarketplaceAuthoringResult, type CheckReleaseTagOptions, type CheckReleaseTagResult, type CheckSelfUpdateOptions, type CheckSelfUpdateResult, type CheckVersionAlignmentOptions, type ClassifiedDependency, type CollectMcpServersOptions, type CollectMcpServersResult, type CollectedMcpServer, type CompileAgentsMdOptions, type CompileAgentsMdResult, type CompileAttributionEntry, type CopilotNativeLedger, type CopilotNativeLedgerPlugin, CopilotNativeRegistrationError, type CopilotNativeRegistrationErrorCode, type CreateAgentPluginManifestOptions, type CreateMinimalManifestOptions, type CreatePluginJsonOptions, type CreateRegistryClientOptions, DEFAULT_LOCAL_ROOT, DEFAULT_PARALLEL_CHECKS, DEFAULT_PARALLEL_DOWNLOADS, DEFAULT_POLICY_PROVIDERS, DEPLOYED_HASH_ALGO, type DependencyEntry, type DependencyKind, type DependencyLists, type DeployedHashViolation, type DepsListResult, type DepsTreeResult, type DepsWhyError, type DepsWhyPackage, type DepsWhyPath, type DepsWhyPathNode, type DepsWhyResult, type DetectAuthoringConfigSourceResult, type DiscoverAgentPluginDeclaredPathsResult, type DiscoverAgentPluginMcpOptions, type DiscoverAgentPluginMcpResult, type DiscoverAgentPluginSkillsOptions, type DiscoverAgentPluginSkillsResult, type DiscoverLockfileOptions, type DiscoverManifestOptions, type DiscoverPolicyOptions, type DiscoverPrimitivesOptions, type DiscoveredLockfile, type DiscoveredManifest, type DiscoveredPolicy, type DoctorCheck, type DoctorResult, type DownloadArgs, type DownloadPackageSpec, type DownloadPackagesOptions, type Downloader, EXPERIMENTAL_REGISTRIES_ENV, type EditorResult, type EffectiveDirectDeps, type EnforceFrozenOptions, type EvaluateExecutableTrustOptions, type EvaluatePolicyOptions, type EvaluatePolicyResult, type EvaluateRequiredPackagePresenceOptions, type EvaluateRequiredPackagePresenceResult, type ExecutableGrantEntry, type ExecutableGrantSurface, type ExecutableTrustDecision, type ExecutableTrustOutcome, type ExportSbomFailure, type ExportSbomOptions, type ExportSbomResult, type ExportSbomSuccess, type ExtractPackArchiveOptions, type ExtractPackArchiveResult, FIXED_EPOCH_TIMESTAMP, FORMAT_CYCLONEDX, FORMAT_SPDX, type FakeTag, type FetchWithRedirectAuthDropInit, type FindPathOptions, type FindPathResult, type GitRemote, type GrantSurfaceInput, IMPLEMENTATION_DEFAULT_HOST, InstallError, type InstallErrorCode, type InstallOptions, type InstallResult, type InventoryDep, KIND_EXPRESSION, KIND_ID, KIND_NAMED, type LicenseClass, type LicenseKind, type LoadAgentPluginManifestOptions, type LoadLockfileOptions, type LoadLockfileResult, type LoadManifestOptions, type LoadManifestResult, type LoadMarketplaceResult, type LoadPolicyOptions, type LoadPolicyResult, type LoadedAgentPluginManifest, type LocalVersionRead, type LocalVersionStatus, type LockFilename, type LockedDependency, type LockfileDocument, LockfileError, type LockfileErrorCode, type LockfileInput, type LsRemoteFn, type LsRemoteResult, MARKETPLACE_PATHS, MAX_MARKETPLACE_JSON_BYTES, MAX_PLUGIN_JSON_BYTES, MAX_RESOLVE_DEPTH, MAX_SAFE_ENTRIES, MAX_SAFE_UNCOMPRESSED_BYTES, ManifestError, type ManifestErrorCode, type ManifestFilename, type ManifestPreset, type ManifestWarning, type MarketplaceAuthoringConfig, MarketplaceAuthoringError, type MarketplaceAuthoringVersioning, type MarketplaceConcreteDep, type MarketplaceConfigOptions, MarketplaceError, MarketplaceFetchError, type MarketplaceFetchOptions, type MarketplaceHostClass, type MarketplaceManifest, MarketplaceNotFoundError, type MarketplaceOutputFormat, type MarketplaceOutputWritten, MarketplacePackOutputsError, type MarketplacePlugin, MarketplacePluginNotFoundError, type MarketplacePluginResolution, type MarketplaceProvenance, MarketplaceSource, type MarketplaceSourceInit, type MarketplaceSourceKind, MarketplaceUnsupportedSourceError, type MarketplaceVersioningStrategy, McpEnvBakeError, type MigrateMarketplaceYmlResult, type ObjectDependency, type OrgExecutables, OutdatedError, type OutdatedErrorCode, type OutdatedResult, type OutdatedRow, PERSONAL_LOCK_SCOPE_KEY, PERSONAL_LOCK_SCOPE_VALUE, PLATFORM_TOKEN_ENV_NAMES, PLUGIN_JSON_CANDIDATES, POLICY_DISCOVERY_PROVIDERS, POLICY_EXTENDS_MAX_DEPTH, POLICY_PROVIDER_GITHUB_OWNER_DOTGITHUB, POLICY_PROVIDER_LOCAL, PackError, type PackErrorCode, type PackFileEntry, type PackageEntry, type PackageVersionRow, type ParseExecutableGrantsOptions, type ParseMarketplaceFilterResult, type ParsePolicyResult, type ParsedMarketplaceRef, type PluginJsonAuthor, type PluginJsonDocument, type PolicyCandidate, type PolicyDependencies, type PolicyDependencyInput, type PolicyDocument, type PolicyEnforcement, PolicyError, type PolicyErrorCode, type PolicyExecutables, type PolicyGateOptions, type PolicyGateResult, type PolicyStatusOptions, type PolicyStatusOutcome, type PolicyStatusReport, type PolicyStatusRuleCounts, type PolicyViolation, type PolicyWarning, type PrimitiveConflictDiagnostic, type PrimitiveSource, type PrimitiveType, PrimitivesError, type PrimitivesErrorCode, type ProviderHostClass, PruneError, type PruneErrorCode, type PruneResult, type PurgeInstallPathArgs, type RebuildCopilotNativeRegistrationOptions, type RegistryAliasEntry, type RegistryAliasMap, type RegistryClient, type RegistryEntry, RegistryError, type RegistryErrorCode, type RegistryHttpRequest, type RegistryHttpResponse, type RegistryHttpTransport, type RegistryVersionInfo, type RequiredPackagePresenceDiagnostic, type RequiredPackageTrustOutcome, type ResolveAndLockOptions, type ResolveAndLockResult, type ResolveBinDeployConsentOptions, type ResolveCredentialsOptions, type ResolveDependencyGraphOptions, type ResolveEffectiveFrozenOptions, type ResolveEffectiveOutputPathOptions, type ResolveExecutableTrustOptions, type ResolveGraphResult, type ResolveMarketplacePackagesOptions, type ResolveMarketplacePackagesResult, type ResolveMarketplacePluginOptions, type ResolvePorts, type ResolvePrimitiveConflictsOptions, type ResolvePrimitiveConflictsResult, type ResolvedActive, type ResolvedCredentials, type ResolvedDeployedFile, type ResolvedMarketplaceToken, type ResolvedNode, type ResolvedPackage, ResolverError, type ResolverErrorCode, type ReverseIndex, type RunAuditCiOptions, type RunDepsOptions, type RunDoctorOptions, type RunInstallOptions, type RunOutdatedOptions, type RunPackOptions, type RunPackResult, type RunPruneOptions, type RunUninstallOptions, type RunUpdateOptions, SPDX_VERSION, SUPPORTED_FORMATS, SafeExtractError, type SameCredentialHostClassOptions, type SaveUserExecutableGrantsOptions, type SbomFormat, type SourceValidationResult, type SyncCopilotNativeRegistrationOptions, TARGET_ALIAS_TOKENS, type TagLister, type TargetIntegrationMap, type TreeSha256Violation, type TrustBinMode, UninstallError, type UninstallErrorCode, type UninstallResult, UpdateError, type UpdateErrorCode, type UpdatePlanEntry, type UpdateResult, type UserExecutableGrants, type UserExecutableStoreOptions, VENDOR_TARGET_RE, type ValidationResult, type VersionAlignmentReport, type ViewError, type ViewIdentity, type ViewPackageOptions, type ViewPackageResult, WORKSPACE_OWNER_KEY, type WriteAgentPluginManifestOptions, type WriteLockfileOptions, type WriteManifestOptions, type WritePluginJsonOptions, type WriteProducerManifestOptions, type WriteProducerManifestResult, type WrittenAgentPluginManifest, _formatOrigin, abbreviateSha, addMarketplace, addMarketplacePackage, admitCopilotNativePlugins, applyDepSubsetFields, applyDeployedHashesToLock, applyMcpInventoryToLock, asciiLower, assertExperimentalRegistriesEnabled, assertPolicyGateAllows, assertProjectHasContent, assertSafeZipCentralDirectory, atomicWriteMarketplaceJson, auditCi, authHeadersForHost, authHeadersForResolved, authHostClassOf, autoDetectMarketplacePath, bakeMcpServerMaps, bakeMcpStringMap, bakeMcpStringValue, buildAliasCredentialClassMap, buildFindReverseIndex, buildGitChildEnv, buildHardenedGitEnv, buildMarketplaceOutputs, buildPluginJson, buildPublishArchive, buildPurl, buildRegistryPublishZip, buildReverseIndex, build_reverse_index, cacheClean, cacheInfo, cacheKeyForSource, checkAuthoringMarketplace, checkDoctor, checkExecutableTrust, checkMarketplaceAuthoring, checkMarketplaceVersionAlignment, checkOutdated, checkRelease, checkReleaseTag, checkSelfUpdate, checkVersionAlignment, checkVersions, classifyDeclaredLicense, classifyDependencyRef, classifyExecutableTrust, classifyMarketplaceHost, classifyMarketplaceHostKind, classifyProviderHostClass, classifyRequiredPackagePresence, cleanModulesCache, cleanupOrphanDeployedFiles, clearMarketplaceCache, collectAdoHosts, collectDeployedHashViolations, collectDeployedHashes, collectLocalSourcePaths, collectMcpServers, collectPackFiles, collectTreeSha256Violations, compareSelfUpdate, compileAgentsMd, compileProject, componentName, componentVersion, computeCanonicalTreeSha256, createAgentPluginManifest, createDefaultDownloader, createDefaultGitRemote, createDefaultTagLister, createFetchTransport, createGitChildEnv, createMarketplaceAuthoringTemplate, createMarketplaceManifest, createMarketplacePlugin, createMarketplaceSource, createMinimalManifest, createMinimalManifestDocument, createPackageRegistryClient, createPeelAwareTagLister, createPluginJson, createPluginJsonDocument, createPublishArchive, createRegistryClient, createRegistryHttpClient, credentialHostClass, credentialHostClassForHost, credentialHostClassOf, credentialHostClassesEqual, declaredTargetIds, declaredTargetIntegrationMap, defaultArchiveName, defaultPolicyProviders, depsList, depsTree, depsWhy, describeSecretRefuse, detectAuthoringConfigSource, digestsEqual, discoverAgentPluginDeclaredPaths, discoverAgentPluginMcp, discoverAgentPluginSkills, discoverLocalPolicyPath, discoverLockfilePath, discoverManifestPath, discoverPersonalLockfile, discoverPolicyPath, discoverPolicyProviders, discoverPolicyWithProviders, discoverPrimitives, doctor, downloadPackages, downloadUrl, effectiveDirectDeps, effectiveLocalPath, effectiveManifestDeps, effectiveProviderClassForHost, emitAgentsMd, emitManifest, emitMarketplacePackOutputs, emitPluginJson, enforceFrozen, ensureBapmConfigDir, ensureLocalRootUntracked, ensureLocalSourcesUntracked, ensureMarketplacePathWithin, ensurePersonalLockGitignored, entryIdentity, evaluateBinDeployConsent, evaluateExecutableTrust, evaluateInstallPolicy, evaluateMcpExecutableTrust, evaluatePolicy, evaluatePolicyRules, evaluateRequireLockPresence, evaluateRequiredPackagePresence, evaluateRequiredPackagesFromLock, expandActive, experimentalRegistriesRemediation, exportSbom, extractPack, extractPackArchive, fetchAndMaterializeRegistry, fetchLatestCliVersion, fetchMarketplace, fetchRedirectAuthDrop, fetchWithCredentialHostClassRedirects, fetchWithRedirectAuthDrop, filterPrimitivesForCopilotNative, findDeployedPath, findLatestAnnotatedTag, findOwnerLabel, findPath, findPluginJson, foldRepoCoordinatePath, formatAuditCiJson, formatAuditCiSarif, formatFindOrigin, formatFindOwnerLabel, formatOrigin, formatOwnerLabel, formatSourceOrigin, formatTreeSha256Violation, formatUnsupportedMessage, formatsEnabledInConfig, gateExecutableMcp, getBapmConfigDir, getCacheInfo, getMarketplace, getVersion, gitChildEnvForHost, githubApiBaseForHost, hasGrantSurface, hashFileAt, hashFileBytes, hostClassForCredentials, hostClassForPolicy, hostClassOf, hostsShareCredentialClass, identityMatchesPattern, identitySatisfiesRequire, identityToCacheDir, initMarketplaceAuthoring, installProject, isBapmIgnored, isBapmIgnoredDir, isCaseInsensitiveGitHost, isCaseInsensitivePackageIdentity, isCiEnvTruthy, isExemptInsecureHost, isExperimentalRegistriesEnabled, isFullRevisionPin, isGitShaped, isGitSourcedLockEntry, isPersonalScopeDependency, isPinnedConstraint, isPolicyDisabled, isRegistrySourced, isSecretPackPath, isSemanticallyEquivalent, isUnlockedMarketplaceHost, isValidMarketplaceAuthoringSource, isValidPluginName, isValidProjectName, isValidTargetToken, listDeps, listGitRemotes, listMarketplaces, loadAgentPluginManifest, loadBapmIgnore, loadBaseManifest, loadEffectiveLockfile, loadEffectiveLockfileOrNull, loadEffectiveManifest, loadExecutableUserGrants, loadPersonalLockfileOrNull as loadLocalLockfileOrNull, loadPersonalLockfileOrNull, loadLockfile, loadLockfileMerged, loadLockfileOrNull, loadManifest, loadMarketplaceAuthoringConfig, loadMarketplaceFromBapmYml, loadMarketplaceFromLegacyYml, loadMergedLockfile, loadPolicy, loadUserExecutableGrants, loadUserExecutables, loadYamlDocument, localRootGitignorePattern, localView, locateGitPackageTree, lookup, lookupFindPath, lookupInIndex, lookupReverseIndex, marketplaceCacheDir, marketplaceKindFromHostClass, marketplacesJsonPath, materializeRegistryArchive, materializeRegistryNodes, mayAttachGitCredential, mergeApmDependencyUpdate, mergeLoadLockfile, mergeLocalOverlay, mergeLockDocuments, mergeLockDocuments as mergeLockfileDocuments, mergeLockDocuments as mergeLockfiles, mergePolicies, mergePolicy, mergePolicyChain, mergePolicyDocuments, migrateLegacyMarketplaceYml, migrateMarketplaceYml, modulesCacheInfo, modulesRegistryDest, normalizeFindPath, normalizeFormat, normalizeLockPackageRepoUrl, normalizeMarketplacePathOverrides, normalizePackageRepoPath, normalizePackageRepoUrl, normalizeRepoIdentity, normalizeTrustBin, outdated, ownerLabel, packArchive, packProject, packPublishArchive, packageBasenameFromRepo, packageOwnerKey, parseActiveField, parseDepSkillSubset, parseDepTargetSubset, parseExecutableGrants, parseLocalOverlayDocument, parseLockfile, parseLockfileDocument, parseManifest, parseManifestDocument, parseMarketplaceFilter, parseMarketplaceJson, parseMarketplaceRef, parsePackageId, parsePolicy, parsePolicyDocument, parsePresetsField, parseZipCentralDirectory, partitionAndWrite, partitionAndWriteLockfiles, partitionLockDocument, persistUserExecutableGrant, pickHighestInIntersection, pickHighestSatisfyingTag, pickRegistryVersion, pickTightestRange, policyHostClass, prune, pruneModules, purgeModulesInstallPaths, readLocalVersion, readMarketplaceCache, readUserExecutableGrants, rebuildCopilotNativeRegistration, rebuildCopilotNativeRegistrationFromNodes, redactPolicyRef, redirectSafeFetch, registryOrPackageIdentity, registryRepoUrl, removeMarketplace, removeMarketplacePackage, renderInitMarketplaceBlock, renderMarketplaceBlock, renderTag, repoBasename, repoOwnerRepo, resolveActive, resolveActiveSelection, resolveAndLock, resolveAuthCredentialsForHost, resolveAuthTokenForHost, resolveAuthoringPackages, resolveBinDeployConsent, resolveConflicts, resolveCredentialsForHost, resolveDependencyGraph, resolveEffectiveBinDeploy, resolveEffectiveFrozen, resolveEffectiveOutputPath, resolveExecutableTrust, resolveExtends, resolveHostClass, resolveHostCredentials, resolveIsInteractive, resolveLocalFilesystemPath, resolveManifestActive, resolveMarketplaceOutputPath, resolveMarketplacePackPackages, resolveMarketplacePackages, resolveMarketplacePlugin, resolveMarketplaceTokenForHost, resolvePackageQuery, resolvePolicyChain, resolvePolicyExtends, resolvePrimitiveConflicts, resolveProjectRemote, resolveRegistryBaseUrl, resolveRegistryToken, resolveTokenForHost, resolveUserConfigRoot, rewriteDownloadBase, runAudit, runAuditCi, runCheckRelease, runCompile, runDepsList, runDepsTree, runDepsWhy, runDoctor, runFind, runFindPath, runInstall, runMarketplaceAuthoringCheck, runMarketplaceBuilder, runMarketplaceMigrate, runOutdated, runPack, runPolicyDiscovery, runPolicyGate, runPolicyStatus, runPrune, runSelfUpdateCheck, runUninstall, runUpdate, runVersionAlignmentCheck, runView, safeExtractZip, safeResolveUnderCwd, sameCredentialHostClass, sanitizeCacheName, saveExecutableUserGrants, saveUserExecutableGrants, saveUserExecutables, scrubUrl, selectGitRemoteForPolicy, selectOutputFormats, selectProjectRemote, selectProviderClassForHost, serializeAgentPluginManifest, serializeLockfile, serializeManifest, serializeMarketplaceJson, serializePluginJson, serializeSbom, setMarketplacePackage, sha256Digest, sha256Hex, stampPersonalScope, summarizeChecks, syncCopilotNativeRegistrationFromLock, toLockRepoUrl, toStructuredReport, treeDeps, treeSha256Equal, tryLoadMarketplaceAuthoring, uninstall, uninstallPackages, unionPresetDependencies, unpackArchive, updateProject, urlNamesRemoteManifest, userConfigJsonPath, userGrantsToSurface, validateAgentPluginManifest, validateManifestEnv, validateMarketplace, validateMarketplaceAuthoringSource, validatePluginName, validateProjectName, verifyArchiveDigest, verifyDeployedFileHashes, versionAlignmentErrorMessages, viewLocalPackage, viewPackage, whyDeps, withEffectiveDirectDeps, writeAgentPluginManifest, writeLockfile, writeManifest, writeManifestValidated, writeMarketplaceCache, writeMarketplacePackOutputs, writePluginJson, writePluginJsonFile, writeProducerManifest, writeUserExecutableGrants };