@blxzer/pactile 0.5.0

package/dist/pactile/adapters/cursor/index.js

@@ -0,0 +1,186 @@
+import { parseProjectionPlanV1, } from "@blxzer/pactile-core";
+import { fingerprintBytes, } from "../../projection/planner.js";
+/**
+ * Cursor leaves are optional. The shared `.agents/skills` projection is the
+ * default integration surface; these names describe only a deliberately
+ * selected Cursor-native overlay.
+ */
+export const CURSOR_PROJECTION_CAPABILITIES = [
+    "commands",
+    "rules",
+    "agents",
+    "hooks",
+    "mcp",
+];
+const encoder = new TextEncoder();
+const logicalId = /^[a-z][a-z0-9]*(?:[._:-][a-z0-9]+)*$/;
+const safeRelativePath = (value) => value.length > 0 &&
+    value.length <= 256 &&
+    !value.includes("\\") &&
+    !value.startsWith("/") &&
+    !value.split("/").includes("..") &&
+    ![...value].some((character) => character.charCodeAt(0) < 32);
+function diagnostic(status, code, capability) {
+    return { status, diagnostics: [{ code, capability }] };
+}
+function inferAction(shared) {
+    const actions = new Set(shared.operations.map((operation) => operation.action === "remove" || operation.action === "detach"
+        ? "detach"
+        : "attach"));
+    return actions.size === 1 ? [...actions][0] : "mixed";
+}
+function selectedCapabilities(request) {
+    const selected = request.composition ?? request.selectedCapabilities ?? [];
+    if (!Array.isArray(selected) ||
+        selected.length > CURSOR_PROJECTION_CAPABILITIES.length)
+        return null;
+    const result = [...selected];
+    if (new Set(result).size !== result.length ||
+        result.some((value) => !CURSOR_PROJECTION_CAPABILITIES.includes(value)))
+        return null;
+    return result.sort();
+}
+function validateIds(values) {
+    return (values.length <= 1024 &&
+        new Set(values).size === values.length &&
+        values.every((value) => logicalId.test(value)));
+}
+/**
+ * Build one Cursor transaction from a shared projection plus the explicitly
+ * selected native leaves. Hooks and MCP are host-native bindings: Pactile
+ * does not invent commands, copy registration files, or merge foreign native
+ * configuration. The ProjectionStore remains the only writer.
+ */
+export function buildCursorProjectionPlan(request) {
+    try {
+        const parsedShared = parseProjectionPlanV1(request.shared.plan);
+        if (!parsedShared.success ||
+            parsedShared.data.adapterId !== "adapter.cursor")
+            return diagnostic("review", "invalid-input", "adapter");
+        const selected = selectedCapabilities(request);
+        if (!selected)
+            return diagnostic("review", "invalid-input", "adapter");
+        const inferred = inferAction(parsedShared.data);
+        if (inferred === "mixed")
+            return diagnostic("review", "invalid-input", "adapter");
+        if (request.action !== undefined && request.action !== inferred)
+            return diagnostic("review", "invalid-input", "adapter");
+        const action = request.action ?? inferred;
+        if (action !== "attach" && action !== "detach")
+            return diagnostic("review", "invalid-input", "adapter");
+        for (const capability of selected) {
+            if (request.hostCapabilities[capability] !== true)
+                return diagnostic("unsupported", "unsupported-capability", capability);
+        }
+        const providerIds = [...(request.providerIds ?? [])];
+        const nativeMcp = [...(request.nativeBindings?.mcp ?? [])];
+        const nativeHooks = [...(request.nativeBindings?.hooks ?? [])];
+        if (!validateIds(providerIds) ||
+            !validateIds(nativeMcp) ||
+            !validateIds(nativeHooks) ||
+            (providerIds.length > 0 && !selected.includes("mcp")))
+            return diagnostic("review", "invalid-input", "adapter");
+        const mcpBindings = providerIds.length > 0 ? providerIds : nativeMcp;
+        const missingNative = [];
+        if (selected.includes("hooks") && nativeHooks.length === 0)
+            missingNative.push("hooks");
+        if (selected.includes("mcp") && mcpBindings.length === 0)
+            missingNative.push("mcp");
+        const surfaces = new Map();
+        for (const surface of request.surfaces ?? []) {
+            if (typeof surface.targetPath !== "string" ||
+                !safeRelativePath(surface.targetPath) ||
+                surfaces.has(surface.targetPath) ||
+                (surface.content !== null &&
+                    (typeof surface.content !== "string" ||
+                        surface.content.length > 16 * 1024 * 1024)))
+                return diagnostic("review", "invalid-input", "adapter");
+            surfaces.set(surface.targetPath, surface.content === null ? null : encoder.encode(surface.content));
+        }
+        const content = new Map();
+        const operations = [
+            ...parsedShared.data.operations,
+        ];
+        const observe = (targetPath) => surfaces.has(targetPath)
+            ? (surfaces.get(targetPath) ?? null)
+            : request.shared.observe(targetPath);
+        const addFile = (name, targetPath, body) => {
+            const bytes = encoder.encode(body);
+            const contentRef = `cursor.${name}.${fingerprintBytes(bytes).slice(7)}`;
+            content.set(contentRef, { bytes });
+            const current = observe(targetPath);
+            operations.push({
+                id: `cursor.${name}`,
+                resourceId: `cursor.${name}`,
+                claimantId: "adapter.cursor",
+                action: action === "attach" ? "ensure" : "remove",
+                control: "pactile-owned",
+                targetPath,
+                format: "text",
+                contentRef: action === "attach" ? contentRef : null,
+                desiredFingerprint: action === "attach" ? fingerprintBytes(bytes) : null,
+                expectedCurrentFingerprint: current === null ? null : fingerprintBytes(current),
+                externalAssetId: null,
+            });
+        };
+        const tileIds = parsedShared.data.operations
+            .map(({ resourceId }) => resourceId.match(/^shared\.skill\.([a-z0-9._:-]+)$/)?.[1])
+            .filter((value) => value !== undefined)
+            .sort();
+        const compositionLabel = [...new Set(tileIds)].join(", ") || "selected shared skills";
+        if (selected.includes("commands"))
+            addFile("command", ".cursor/commands/pactile.md", `# Pactile composition\n\nApply the selected shared Skills (${compositionLabel}) and honor their declared evidence, policy, and stop conditions. This file is a Cursor-native entry point; it does not install or invoke a provider.\n`);
+        if (selected.includes("rules"))
+            addFile("rule", ".cursor/rules/pactile.mdc", `---\ndescription: Pactile composition policy\nalwaysApply: true\n---\n\nThe active Pactile composition is ${compositionLabel}. Use only selected capabilities, preserve user-owned files, and stop on an unsupported or degraded requirement.\n`);
+        if (selected.includes("agents"))
+            addFile("agent", ".cursor/agents/pactile.md", `---\nname: pactile\ndescription: Execute the selected Pactile composition\n---\n\nCoordinate the selected Pactile composition (${compositionLabel}) through the host's native agent surface. Do not invent provider commands or copy credentials.\n`);
+        const addBinding = (kind, externalAssetId) => {
+            operations.push({
+                id: `cursor.${kind}.${externalAssetId}.${action}`,
+                resourceId: `cursor.native.${kind}.${externalAssetId}`,
+                claimantId: "adapter.cursor",
+                action: action === "attach" ? "bind" : "detach",
+                control: "borrowed",
+                targetPath: null,
+                format: "external-ref",
+                contentRef: null,
+                desiredFingerprint: null,
+                expectedCurrentFingerprint: null,
+                externalAssetId,
+            });
+        };
+        if (missingNative.length === 0) {
+            if (selected.includes("hooks"))
+                for (const id of nativeHooks)
+                    addBinding("hooks", id);
+            if (selected.includes("mcp"))
+                for (const id of mcpBindings)
+                    addBinding("mcp", id);
+        }
+        const plan = {
+            ...parsedShared.data,
+            id: `cursor.${parsedShared.data.generationId}`,
+            operations,
+        };
+        const inputs = {
+            ...request.shared,
+            plan,
+            observe,
+            resolveContent: (contentRef) => content.get(contentRef) ?? request.shared.resolveContent(contentRef),
+        };
+        if (missingNative.length > 0)
+            return {
+                status: "degraded",
+                inputs,
+                diagnostics: missingNative.map((capability) => ({
+                    code: "native-binding-required",
+                    capability,
+                })),
+            };
+        return { status: "ready", inputs, diagnostics: [] };
+    }
+    catch {
+        return diagnostic("review", "invalid-input", "adapter");
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/pactile/adapters/cursor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pactile/adapters/cursor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAGtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,GAGjB,MAAM,6BAA6B,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,OAAO;IACP,QAAQ;IACR,OAAO;IACP,KAAK;CACG,CAAC;AAwDX,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAW,EAAE,CAClD,KAAK,CAAC,MAAM,GAAG,CAAC;IAChB,KAAK,CAAC,MAAM,IAAI,GAAG;IACnB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACrB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAChC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;AAEhE,SAAS,UAAU,CACjB,MAAgC,EAChC,IAAgD,EAChD,UAAkD;IAElD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAClB,MAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAClC,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;QAC5D,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,QAAQ,CACb,CACF,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAgC;IAEhC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAC3E,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxB,QAAQ,CAAC,MAAM,GAAG,8BAA8B,CAAC,MAAM;QAEvD,OAAO,IAAI,CAAC;IACd,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC7B,IACE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC;IACd,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB;IAC5C,OAAO,CACL,MAAM,CAAC,MAAM,IAAI,IAAI;QACrB,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChE,IACE,CAAC,YAAY,CAAC,OAAO;YACrB,YAAY,CAAC,IAAI,CAAC,SAAS,KAAK,gBAAgB;YAEhD,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,OAAO;YACtB,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAC7D,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;QAC1C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ;YAC5C,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAE1D,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,KAAK,IAAI;gBAC/C,OAAO,UAAU,CAAC,aAAa,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,IACE,CAAC,WAAW,CAAC,WAAW,CAAC;YACzB,CAAC,WAAW,CAAC,SAAS,CAAC;YACvB,CAAC,WAAW,CAAC,WAAW,CAAC;YACzB,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAErD,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAE1D,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,aAAa,GAAwB,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACxD,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACtD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,IACE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;gBACtC,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC;gBACrC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;gBAChC,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI;oBACvB,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;wBAClC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBAE/C,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YAC1D,QAAQ,CAAC,GAAG,CACV,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;QACrD,MAAM,UAAU,GAA4B;YAC1C,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU;SAChC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAqB,EAAE,CACxD,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YACtB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,CACd,IAAkC,EAClC,UAAkB,EAClB,IAAY,EACN,EAAE;YACR,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,UAAU,IAAI,EAAE;gBACpB,UAAU,EAAE,UAAU,IAAI,EAAE;gBAC5B,UAAU,EAAE,gBAAgB;gBAC5B,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;gBACjD,OAAO,EAAE,eAAe;gBACxB,UAAU;gBACV,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;gBACnD,kBAAkB,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;gBACxE,0BAA0B,EACxB,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBACrD,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU;aACzC,GAAG,CACF,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CACjB,UAAU,CAAC,KAAK,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC5D;aACA,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aACvD,IAAI,EAAE,CAAC;QACV,MAAM,gBAAgB,GACpB,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC;QAC/D,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC/B,OAAO,CACL,SAAS,EACT,6BAA6B,EAC7B,8DAA8D,gBAAgB,yJAAyJ,CACxO,CAAC;QACJ,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,OAAO,CACL,MAAM,EACN,2BAA2B,EAC3B,6GAA6G,gBAAgB,oHAAoH,CAClP,CAAC;QACJ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,OAAO,CACL,OAAO,EACP,2BAA2B,EAC3B,kIAAkI,gBAAgB,mGAAmG,CACtP,CAAC;QAEJ,MAAM,UAAU,GAAG,CACjB,IAAqB,EACrB,eAAuB,EACjB,EAAE;YACR,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,UAAU,IAAI,IAAI,eAAe,IAAI,MAAM,EAAE;gBACjD,UAAU,EAAE,iBAAiB,IAAI,IAAI,eAAe,EAAE;gBACtD,UAAU,EAAE,gBAAgB;gBAC5B,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBAC/C,OAAO,EAAE,UAAU;gBACnB,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,IAAI;gBAChB,kBAAkB,EAAE,IAAI;gBACxB,0BAA0B,EAAE,IAAI;gBAChC,eAAe;aAChB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,KAAK,MAAM,EAAE,IAAI,WAAW;oBAAE,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC1B,KAAK,MAAM,EAAE,IAAI,WAAW;oBAAE,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAqB;YAC7B,GAAG,YAAY,CAAC,IAAI;YACpB,EAAE,EAAE,UAAU,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE;YAC9C,UAAU;SACX,CAAC;QACF,MAAM,MAAM,GAAqB;YAC/B,GAAG,OAAO,CAAC,MAAM;YACjB,IAAI;YACJ,OAAO;YACP,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE,CAC7B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;SACvE,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC9C,IAAI,EAAE,yBAAkC;oBACxC,UAAU;iBACX,CAAC,CAAC;aACJ,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/pactile/adapters/index.d.ts

@@ -0,0 +1,4 @@
+/** Platform leaf adapters. Each adapter emits a declarative M1 plan only. */
+export * from "./cursor/index.js";
+export * from "./codex/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/pactile/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/pactile/adapters/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/pactile/adapters/index.js

@@ -0,0 +1,4 @@
+/** Platform leaf adapters. Each adapter emits a declarative M1 plan only. */
+export * from "./cursor/index.js";
+export * from "./codex/index.js";
+//# sourceMappingURL=index.js.map

package/dist/pactile/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/pactile/adapters/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC"}

package/dist/pactile/adoption/bindings.d.ts

@@ -0,0 +1,20 @@
+import { type CapabilityBindingV1, type InstallHintV1 } from "@blxzer/pactile-core";
+import { type AdoptionDiagnostic } from "./safety.js";
+export interface InstallHintResult {
+    readonly hint: InstallHintV1 | null;
+    readonly diagnostics: readonly AdoptionDiagnostic[];
+}
+/** Symbolic factory: no package names, commands, URLs, or authentication actions. */
+export declare function createInstallHint(input: unknown): InstallHintResult;
+export interface BindingProposal {
+    readonly binding: CapabilityBindingV1 | null;
+    readonly installHint: InstallHintV1 | null;
+    readonly diagnostics: readonly AdoptionDiagnostic[];
+}
+/** Caller explicitly selects a complete asset reference, not an ambiguous name.
+ * Unknown/degraded assets are not probed or made ready by adoption. Control and
+ * deletion are derived here; callers cannot acquire external ownership via flags.
+ * This function returns a proposal only; it does not persist a binding or claim.
+ */
+export declare function planBinding(input: unknown): BindingProposal;
+//# sourceMappingURL=bindings.d.ts.map

package/dist/pactile/adoption/bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../src/pactile/adoption/bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,mBAAmB,EACxB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAQL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACrD;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAqBnE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACrD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CA4E3D"}

package/dist/pactile/adoption/bindings.js

@@ -0,0 +1,99 @@
+import { CAPABILITY_BINDING_MODES_V1, EXTERNAL_ASSET_KINDS_V1, INSTALL_HINT_MECHANISMS_V1, PACTILE_INTENTS_V1, parseCapabilityBindingV1, parseInstallHintV1, } from "@blxzer/pactile-core";
+import { assetIdentity, sanitizeAssetRef } from "./inventory.js";
+import { digest, field, items, logicalId, member, optionalBoolean, order, } from "./safety.js";
+/** Symbolic factory: no package names, commands, URLs, or authentication actions. */
+export function createInstallHint(input) {
+    try {
+        const kind = member(field(input, "kind"), EXTERNAL_ASSET_KINDS_V1);
+        const mechanism = member(field(input, "mechanism"), INSTALL_HINT_MECHANISMS_V1);
+        const requiresAuthentication = optionalBoolean(field(input, "requiresAuthentication")) ?? false;
+        const parsed = parseInstallHintV1({
+            schemaVersion: 1,
+            mechanism,
+            label: `install.${kind}`,
+            reference: `${mechanism === "manual" ? "docs" : mechanism}://install/${kind}`,
+            requiresAuthentication,
+        });
+        if (parsed.success)
+            return { hint: parsed.data, diagnostics: [] };
+    }
+    catch {
+        /* All boundary errors become fixed diagnostics, never raw exceptions. */
+    }
+    return { hint: null, diagnostics: [{ code: "invalid-input", path: "hint" }] };
+}
+/** Caller explicitly selects a complete asset reference, not an ambiguous name.
+ * Unknown/degraded assets are not probed or made ready by adoption. Control and
+ * deletion are derived here; callers cannot acquire external ownership via flags.
+ * This function returns a proposal only; it does not persist a binding or claim.
+ */
+export function planBinding(input) {
+    try {
+        const asset = sanitizeAssetRef(field(input, "asset"));
+        const capabilityId = logicalId(field(input, "capabilityId"));
+        const rawProvider = field(input, "providerId");
+        const providerId = rawProvider === undefined || rawProvider === null
+            ? null
+            : logicalId(rawProvider);
+        const intents = [
+            ...new Set(items(field(input, "intents")).map((value) => member(value, PACTILE_INTENTS_V1))),
+        ].sort(order);
+        const rawMode = field(input, "mode");
+        const mode = rawMode === undefined
+            ? asset.source === "pactile-bundled"
+                ? "composed"
+                : asset.source === "host-native"
+                    ? "native"
+                    : "adopted"
+            : member(rawMode, CAPABILITY_BINDING_MODES_V1);
+        const owned = mode === "composed" &&
+            asset.owner.kind === "pactile" &&
+            (asset.source === "pactile-bundled" ||
+                asset.source === "project-vendored");
+        const parsed = parseCapabilityBindingV1({
+            schemaVersion: 1,
+            id: `binding.${digest([assetIdentity(asset), capabilityId, providerId, intents, mode])}`,
+            capabilityId,
+            mode,
+            control: owned ? "pactile-owned" : "borrowed",
+            deleteBoundary: owned ? "remove-when-unclaimed" : "preserve",
+            asset,
+            intents,
+            providerId,
+        });
+        // A missing-only proposal is not a CapabilityBindingV1. Retain every M0
+        // validation rule except its sole missing MCP provider requirement: no
+        // binding or placeholder provider is returned before installation exists.
+        if (asset.readiness === "missing" &&
+            intents.length > 0 &&
+            (parsed.success ||
+                (asset.kind === "mcp" &&
+                    providerId === null &&
+                    parsed.issues.length === 1 &&
+                    parsed.issues[0].code === "required" &&
+                    parsed.issues[0].path === "$.providerId")))
+            return {
+                binding: null,
+                installHint: asset.installHint,
+                diagnostics: [],
+            };
+        if (parsed.success && intents.length > 0) {
+            if (asset.readiness !== "ready")
+                return {
+                    binding: null,
+                    installHint: null,
+                    diagnostics: [{ code: "unavailable", path: "binding" }],
+                };
+            return { binding: parsed.data, installHint: null, diagnostics: [] };
+        }
+    }
+    catch {
+        /* Never echo the rejected asset, caller id, or decoder diagnostic. */
+    }
+    return {
+        binding: null,
+        installHint: null,
+        diagnostics: [{ code: "invalid-binding", path: "binding" }],
+    };
+}
+//# sourceMappingURL=bindings.js.map

package/dist/pactile/adoption/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../../src/pactile/adoption/bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EACL,MAAM,EACN,KAAK,EACL,KAAK,EACL,SAAS,EACT,MAAM,EACN,eAAe,EACf,KAAK,GAEN,MAAM,aAAa,CAAC;AAOrB,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,CACtB,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,EACzB,0BAA0B,CAC3B,CAAC;QACF,MAAM,sBAAsB,GAC1B,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,IAAI,KAAK,CAAC;QACnE,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,aAAa,EAAE,CAAC;YAChB,SAAS;YACT,KAAK,EAAE,WAAW,IAAI,EAAE;YACxB,SAAS,EAAE,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,cAAc,IAAI,EAAE;YAC7E,sBAAsB;SACvB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,UAAU,GACd,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI;YAC/C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG;YACd,GAAG,IAAI,GAAG,CACR,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAClC,CACF;SACF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GACR,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB;gBAClC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa;oBAC9B,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,SAAS;YACf,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QACnD,MAAM,KAAK,GACT,IAAI,KAAK,UAAU;YACnB,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAC9B,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB;gBACjC,KAAK,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,wBAAwB,CAAC;YACtC,aAAa,EAAE,CAAC;YAChB,EAAE,EAAE,WAAW,MAAM,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE;YACxF,YAAY;YACZ,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU;YAC7C,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU;YAC5D,KAAK;YACL,OAAO;YACP,UAAU;SACX,CAAC,CAAC;QACH,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,IACE,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,OAAO,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,MAAM,CAAC,OAAO;gBACb,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK;oBACnB,UAAU,KAAK,IAAI;oBACnB,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;oBAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;oBACpC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YAE9C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;gBAC7B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,IAAI;oBACjB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;iBACxD,CAAC;YACJ,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC"}

package/dist/pactile/adoption/discovery.d.ts

@@ -0,0 +1,8 @@
+import { type InventoryResult } from "./inventory.js";
+/** Explicit roots: [{path, context}], entries: [{rootId, relativePath, metadata,
+ * linkTarget?}]. `metadata` is a caller-supplied public Skill manifest/frontmatter
+ * snapshot, never SKILL.md text. No roots or entries are inferred from cwd/HOME.
+ * The only filesystem operation is lstat on named lexical ancestors/entries.
+ */
+export declare function discoverSkillEntries(input: unknown): Promise<InventoryResult>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/pactile/adoption/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/pactile/adoption/discovery.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAsGxB;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,eAAe,CAAC,CAkF1B"}

package/dist/pactile/adoption/discovery.js

@@ -0,0 +1,159 @@
+import { lstat } from "node:fs/promises";
+import path from "node:path";
+import { buildInventory, parseContext, sanitizeCandidate, } from "./inventory.js";
+import { diagnostic, diagnostics, digest, fail, field, items, logicalId, } from "./safety.js";
+function absolutePath(value) {
+    if (typeof value !== "string" ||
+        value.length > 4096 ||
+        /[\0\r\n]/.test(value) ||
+        value.startsWith("\\\\") ||
+        value.startsWith("//") ||
+        !path.isAbsolute(value))
+        fail("outside-allowlist", "roots");
+    // A drive-relative root on Windows (\foo), UNC, and whole-volume roots are not grants.
+    if (process.platform === "win32" && !/^[a-z]:[\\/]/i.test(value))
+        fail("outside-allowlist", "roots");
+    const resolved = path.resolve(value);
+    if (resolved === path.parse(resolved).root)
+        fail("outside-allowlist", "roots");
+    return resolved;
+}
+function relativeEntry(value) {
+    if (typeof value !== "string" ||
+        value.length > 1024 ||
+        /[:\0\r\n]/.test(value))
+        fail("outside-allowlist", "entries");
+    const normalized = value.replaceAll("\\", "/").normalize("NFC");
+    if (normalized
+        .split("/")
+        .some((part) => !part ||
+        part === "." ||
+        part === ".." ||
+        part.endsWith(".") ||
+        part.endsWith(" ")))
+        fail("outside-allowlist", "entries");
+    return normalized;
+}
+function within(root, target) {
+    const relative = path.relative(root, target);
+    return (!path.isAbsolute(relative) &&
+        relative !== ".." &&
+        !relative.startsWith(`..${path.sep}`));
+}
+/** Inspect each lexical ancestor before the next lstat. Never realpath/readlink,
+ * recurse, stat a link target, or open a Skill file. The caller supplies approved
+ * manifest/frontmatter snapshots separately. Link metadata is advisory, not permission
+ * to follow: even in-bound links stay unknown. Concurrently replaced directories
+ * are not trusted input; this metadata-only port does not open or copy content.
+ */
+async function inspect(target) {
+    const volume = path.parse(target).root;
+    let current = volume;
+    const parts = path.relative(volume, target).split(path.sep);
+    for (let index = 0; index < parts.length; index++) {
+        current = path.join(current, parts[index]);
+        try {
+            const metadata = await lstat(current);
+            if (metadata.isSymbolicLink())
+                return "link";
+            if (index < parts.length - 1 && !metadata.isDirectory())
+                fail("unavailable", "entries");
+            if (index === parts.length - 1 &&
+                !metadata.isFile() &&
+                !metadata.isDirectory())
+                fail("unavailable", "entries");
+        }
+        catch (error) {
+            if (field(error, "code") === "ENOENT")
+                return "missing";
+            fail("unavailable", "entries");
+        }
+    }
+    return "present";
+}
+/** Explicit roots: [{path, context}], entries: [{rootId, relativePath, metadata,
+ * linkTarget?}]. `metadata` is a caller-supplied public Skill manifest/frontmatter
+ * snapshot, never SKILL.md text. No roots or entries are inferred from cwd/HOME.
+ * The only filesystem operation is lstat on named lexical ancestors/entries.
+ */
+export async function discoverSkillEntries(input) {
+    const assets = [];
+    const problems = [];
+    try {
+        const roots = new Map();
+        for (const value of items(field(input, "roots"))) {
+            const root = {
+                path: absolutePath(field(value, "path")),
+                context: parseContext(field(value, "context")),
+            };
+            const previous = roots.get(root.context.rootId);
+            if (previous &&
+                (previous.path !== root.path ||
+                    JSON.stringify(previous.context) !== JSON.stringify(root.context)))
+                fail("invalid-context", "roots");
+            roots.set(root.context.rootId, root);
+        }
+        for (const value of items(field(input, "entries"))) {
+            try {
+                const root = roots.get(logicalId(field(value, "rootId")));
+                if (!root)
+                    fail("outside-allowlist", "entries");
+                const relative = relativeEntry(field(value, "relativePath"));
+                const target = path.resolve(root.path, relative);
+                if (!within(root.path, target))
+                    fail("outside-allowlist", "entries");
+                const metadata = field(value, "metadata");
+                // Explicit field projection occurs before hashing or constructing diagnostics.
+                // A caller's mistaken body/env/header properties are never accessed.
+                const candidate = sanitizeCandidate(root.context, {
+                    id: field(metadata, "id"),
+                    kind: "skill",
+                    locatorToken: `entry.${digest(relative)}`,
+                    enabled: field(metadata, "enabled"),
+                    present: undefined,
+                    publicFingerprint: field(metadata, "publicFingerprint"),
+                });
+                const state = await inspect(target);
+                if (state === "link") {
+                    const rawTarget = field(value, "linkTarget");
+                    if (rawTarget !== undefined) {
+                        const declaredTarget = absolutePath(rawTarget);
+                        if (![...roots.values()].some((approved) => within(approved.path, declaredTarget)))
+                            fail("outside-allowlist", "entries");
+                    }
+                    assets.push({
+                        ...candidate,
+                        readiness: "unknown",
+                        fingerprint: null,
+                    });
+                    problems.push({ code: "link-not-followed", path: "entries" });
+                }
+                else {
+                    assets.push(sanitizeCandidate(root.context, {
+                        id: candidate.id,
+                        kind: "skill",
+                        locatorToken: `entry.${digest(relative)}`,
+                        enabled: field(metadata, "enabled"),
+                        present: state === "present",
+                        publicFingerprint: field(metadata, "publicFingerprint"),
+                    }));
+                }
+            }
+            catch (error) {
+                problems.push(diagnostic(error, "invalid-asset", "entries"));
+            }
+        }
+        const inventory = buildInventory(assets);
+        return {
+            assets: inventory.assets,
+            diagnostics: diagnostics([...problems, ...inventory.diagnostics]),
+        };
+    }
+    catch (error) {
+        return {
+            assets: [],
+            diagnostics: [diagnostic(error, "invalid-input", "input")],
+        };
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/pactile/adoption/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/pactile/adoption/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,iBAAiB,GAGlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,EACV,WAAW,EACX,MAAM,EACN,IAAI,EACJ,KAAK,EACL,KAAK,EACL,SAAS,GAEV,MAAM,aAAa,CAAC;AAOrB,SAAS,YAAY,CAAC,KAAc;IAClC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,IAAI;QACnB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACxB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAEvB,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACrC,uFAAuF;IACvF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9D,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;QACxC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,IAAI;QACnB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAEvB,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChE,IACE,UAAU;SACP,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI;QACL,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,IAAI;QACb,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CACrB;QAEH,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,CACL,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1B,QAAQ,KAAK,IAAI;QACjB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CACtC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CACpB,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IACvC,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,cAAc,EAAE;gBAAE,OAAO,MAAM,CAAC;YAC7C,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACrD,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YACjC,IACE,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBAC1B,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAClB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAEvB,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACxD,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAc;IAEd,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACxC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;aAC/C,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,IACE,QAAQ;gBACR,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;oBAC1B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAEpE,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;oBAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC1C,+EAA+E;gBAC/E,qEAAqE;gBACrE,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE;oBAChD,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;oBACzB,IAAI,EAAE,OAAO;oBACb,YAAY,EAAE,SAAS,MAAM,CAAC,QAAQ,CAAC,EAAE;oBACzC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;oBACnC,OAAO,EAAE,SAAS;oBAClB,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC;iBACxD,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;oBACrB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBAC7C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;wBAC/C,IACE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CACtC;4BAED,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;oBACzC,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC;wBACV,GAAG,SAAS;wBACZ,SAAS,EAAE,SAAS;wBACpB,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;oBACH,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE;wBAC9B,EAAE,EAAE,SAAS,CAAC,EAAE;wBAChB,IAAI,EAAE,OAAO;wBACb,YAAY,EAAE,SAAS,MAAM,CAAC,QAAQ,CAAC,EAAE;wBACzC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;wBACnC,OAAO,EAAE,KAAK,KAAK,SAAS;wBAC5B,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,mBAAmB,CAAC;qBACxD,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,WAAW,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;SAClE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/pactile/adoption/inventory.d.ts

@@ -0,0 +1,28 @@
+import { type ExternalAssetRefV1, type ExternalAssetOwnerV1, type ExternalAssetSourceV1, type ExternalAssetScopeV1 } from "@blxzer/pactile-core";
+import { type AdoptionDiagnostic } from "./safety.js";
+/** Caller grants one named namespace; this is not an implicit HOME/host scan. */
+export interface DiscoveryContext {
+    readonly hostId: string;
+    readonly rootId: string;
+    readonly source: ExternalAssetSourceV1;
+    readonly scope: ExternalAssetScopeV1;
+    readonly owner: ExternalAssetOwnerV1;
+}
+export interface InventoryResult {
+    readonly assets: readonly ExternalAssetRefV1[];
+    readonly diagnostics: readonly AdoptionDiagnostic[];
+}
+export declare function parseContext(value: unknown): DiscoveryContext;
+/** A metadata snapshot is NOT a parsed Skill document or a host config dump.
+ * Known fields: id, kind, locatorToken, present, enabled, transport, tools,
+ * publicFingerprint, requiresAuthentication. Body/env/headers/commands are never read.
+ * MCP transport/tools affect the public metadata fingerprint only, not M0 shape.
+ */
+export declare function sanitizeCandidate(context: DiscoveryContext, value: unknown): ExternalAssetRefV1;
+export declare function assetIdentity(asset: ExternalAssetRefV1): string;
+/** Caller supplied M0 refs also cross the sanitizer; never pass raw records to errors. */
+export declare function sanitizeAssetRef(value: unknown): ExternalAssetRefV1;
+/** Pure merge for independently granted snapshots. Keeps scope and multi-host identity. */
+export declare function buildInventory(value: unknown): InventoryResult;
+export declare function discoverSnapshot(input: unknown): InventoryResult;
+//# sourceMappingURL=inventory.d.ts.map

package/dist/pactile/adoption/inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../../src/pactile/adoption/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAWL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACrD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA4B7D;AAyBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,OAAO,GACb,kBAAkB,CAoDpB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAU/D;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA6DnE;AAwCD,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAkB9D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CA2BhE"}