@canonical/pragma-cli 0.33.0 → 0.35.0

package/dist/src/kernel/runtime/refs/parseRef.js

@@ -0,0 +1,70 @@
+/**
+ * Parse a config `packs` declaration into a typed {@link PackageRef}.
+ *
+ * Ported from the v1 refs domain. Three resolution strategies, discriminated by
+ * `kind`: `npm` (a bare package name, resolved via `require.resolve`), `file`
+ * (a `file://` local path override), and `git` (a `git+<proto>://…#ref` shallow
+ * clone). The `source` string is kept verbatim so `sources status` reports
+ * exactly what the config declared.
+ */
+import { PragmaError } from "../../error/index.js";
+/**
+ * Parse a config `packs` declaration into a {@link PackageRef}.
+ *
+ * @param entry - A bare npm name, or a `{ name, source }` declaration.
+ * @returns The parsed reference (with the verbatim `source`).
+ * @throws PragmaError CONFIG_ERROR on an invalid `source`.
+ */
+export function parsePackDeclaration(entry) {
+    if (typeof entry === "string") {
+        return { kind: "npm", pkg: entry, source: entry };
+    }
+    const { name, source } = entry;
+    if (typeof name !== "string" || name.length === 0) {
+        throw PragmaError.configError('Pack declaration must have a non-empty "name".');
+    }
+    if (source === undefined) {
+        return { kind: "npm", pkg: name, source: name };
+    }
+    if (source.startsWith("file://")) {
+        const path = source.slice("file://".length);
+        if (path.length === 0) {
+            throw PragmaError.configError(`Invalid source for "${name}": file:// must be followed by a path.`);
+        }
+        return { kind: "file", pkg: name, path, source };
+    }
+    if (source.startsWith("git+")) {
+        const hashIdx = source.indexOf("#");
+        if (hashIdx === -1 || hashIdx === source.length - 1) {
+            throw PragmaError.configError(`Invalid source for "${name}": git URL must include a ref after #.`, {
+                recovery: {
+                    message: "Example: git+https://github.com/org/repo.git#main",
+                },
+            });
+        }
+        return {
+            kind: "git",
+            pkg: name,
+            url: source.slice("git+".length, hashIdx),
+            ref: source.slice(hashIdx + 1),
+            source,
+        };
+    }
+    throw PragmaError.configError(`Invalid source for "${name}": "${source}". Expected file://, git+https://, git+ssh://, or git+file://.`);
+}
+/**
+ * Strip any userinfo (`user:pass@` / `token@`) from a URL for display.
+ *
+ * A git source can inline credentials (`git+https://user:TOKEN@host/…`); those
+ * must never reach progress or error output, which lands in stderr logs and —
+ * via `toolError` — MCP-agent-visible responses. Applied only where a URL is
+ * interpolated for a human/agent; `PackageRef.url` keeps the credential verbatim
+ * so git can still authenticate.
+ *
+ * @param url - A URL that may carry userinfo before the host.
+ * @returns The URL with any leading `userinfo@` replaced by `***@`.
+ */
+export function redactUrl(url) {
+    return url.replace(/^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)[^/@]+@/, "$1***@");
+}
+//# sourceMappingURL=parseRef.js.map

package/dist/src/kernel/runtime/refs/parseRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseRef.js","sourceRoot":"","sources":["../../../../../src/kernel/runtime/refs/parseRef.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAmBnD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAsB;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,WAAW,CAAC,WAAW,CAC3B,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,WAAW,CAAC,WAAW,CAC3B,uBAAuB,IAAI,wCAAwC,CACpE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,OAAO,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,WAAW,CAAC,WAAW,CAC3B,uBAAuB,IAAI,wCAAwC,EACnE;gBACE,QAAQ,EAAE;oBACR,OAAO,EAAE,mDAAmD;iBAC7D;aACF,CACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;YACzC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;YAC9B,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,CAAC,WAAW,CAC3B,uBAAuB,IAAI,OAAO,MAAM,gEAAgE,CACzG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,wCAAwC,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC"}

package/dist/src/kernel/runtime/refs/resolve.js

@@ -0,0 +1,332 @@
+/**
+ * Resolve a {@link PackageRef} to its pinned revision and RDF source contents.
+ *
+ * `file` reads the local path in place; `npm` resolves the installed package
+ * from the project's `node_modules`; `git` clones/fetches into the ref cache.
+ * A ref that is already a commit SHA resolves to exactly that commit, which is
+ * how a project pins a revision. Each package contributes its `definitions/**`
+ * and `data/**` TTL files plus any `stories/*.json` it ships, labelled by a
+ * stable `pkg/relative-path` so the pack's content hash is machine-independent.
+ * Reached only from the `sources update` Task body.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, join, relative } from "node:path";
+import { PragmaError } from "../../error/index.js";
+import { refsCacheDir } from "../paths.js";
+import { cloneRef, fetchRef, headCommit } from "./gitOps.js";
+import { redactUrl } from "./parseRef.js";
+/** The package subdirectories scanned for `.ttl` sources. */
+const TTL_DIRS = ["definitions", "data"];
+/** The package subdirectory whose immediate `*.json` children are read stories. */
+const STORIES_DIR = "stories";
+/** Sanitize a ref for use as a cache path segment. */
+const sanitize = (value) => value.replace(/[/\\:*?"<>|]/g, "_");
+/** A concise reason from a thrown subprocess/parse error: prefer captured
+ * stderr (git writes the real reason there under `stdio: "pipe"`), else the
+ * message. Used to name WHY a resolve failed without dumping a raw stack. */
+function errorDetail(error) {
+    if (error && typeof error === "object") {
+        const { stderr, message } = error;
+        if (stderr != null) {
+            const text = String(stderr).trim();
+            if (text)
+                return text;
+        }
+        if (typeof message === "string" && message.trim())
+            return message.trim();
+    }
+    return String(error);
+}
+/** Recursively collect `*.ttl` files under a directory (a manual walk — the
+ * node:fs globSync has mishandled `**` under a shipped runtime, so we avoid it). */
+function walkTtl(dir, base, label, out) {
+    if (!existsSync(dir))
+        return;
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        // Skip hidden entries (dot-prefixed): editor/partial/generated artifacts
+        // like `.modifier.dark.ttl`, and tooling dirs like `.git`, are never
+        // intended graph sources — and ingesting them ships malformed RDF into the
+        // build (a `.`-prefixed Turtle local name isn't even valid).
+        if (entry.name.startsWith("."))
+            continue;
+        const full = join(dir, entry.name);
+        // Resolve symlinks: pnpm / workspace trees link their sources, but
+        // `Dirent.isFile`/`isDirectory` are BOTH false for a symlink — so a
+        // symlinked `.ttl` was silently skipped (L6). Follow the link to recover a
+        // symlinked FILE, but NEVER recurse into a symlinked DIRECTORY: a symlink
+        // cycle (a link to an ancestor dir) would recurse without bound — a
+        // stack-overflow RangeError surfacing as an INTERNAL "report" — and a
+        // linked directory could pull `.ttl` from OUTSIDE the package root. Linking
+        // individual source files (all L6 needs) stays supported; a dangling link is
+        // skipped, not fatal.
+        let isDir = entry.isDirectory();
+        let isFile = entry.isFile();
+        if (entry.isSymbolicLink()) {
+            try {
+                isFile = statSync(full).isFile();
+                isDir = false;
+            }
+            catch {
+                continue;
+            }
+        }
+        if (isDir) {
+            walkTtl(full, base, label, out);
+        }
+        else if (isFile && entry.name.endsWith(".ttl")) {
+            out.push({
+                path: `${label}/${relative(base, full)}`,
+                content: readFileSync(full, "utf-8"),
+            });
+        }
+    }
+}
+/** Read a package's `definitions/**` and `data/**` TTL, with stable labels. */
+function readTtlSources(rootDir, label) {
+    const sources = [];
+    for (const sub of TTL_DIRS) {
+        walkTtl(join(rootDir, sub), rootDir, label, sources);
+    }
+    sources.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    return sources;
+}
+/**
+ * Read a package's `stories/*.json` as raw text, with stable labels.
+ *
+ * IMMEDIATE children only — the same discipline `skills/` uses, and recursion
+ * buys nothing. Hidden entries are skipped and a symlinked FILE is followed but
+ * a symlinked DIRECTORY is never recursed into, exactly as {@link walkTtl}
+ * argues. Sorted so the pack's content hash does not depend on readdir order.
+ *
+ * @param rootDir - The package root.
+ * @param label - The package name, used as the label prefix.
+ * @returns The labelled story files (`pkg/stories/name.json` + raw content).
+ * @note Impure — reads from disk.
+ */
+function readStorySources(rootDir, label) {
+    const dir = join(rootDir, STORIES_DIR);
+    if (!existsSync(dir))
+        return [];
+    const stories = [];
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        if (entry.name.startsWith(".") || !entry.name.endsWith(".json"))
+            continue;
+        const full = join(dir, entry.name);
+        let isFile = entry.isFile();
+        if (entry.isSymbolicLink()) {
+            try {
+                isFile = statSync(full).isFile();
+            }
+            catch {
+                continue;
+            }
+        }
+        if (!isFile)
+            continue;
+        stories.push({
+            path: `${label}/${STORIES_DIR}/${entry.name}`,
+            content: readFileSync(full, "utf-8"),
+        });
+    }
+    stories.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    return stories;
+}
+/**
+ * A Turtle/SPARQL prefix prologue declaration: `@prefix ex: <iri> .` or the
+ * keyword-form `PREFIX ex: <iri>`. Both are legal in Turtle 1.1; the keyword is
+ * case-insensitive and the leading `@` is optional, so `@?prefix` with the `i`
+ * flag covers every spelling. The label group requires at least one character,
+ * so the default-namespace form (`@prefix : <iri>`) is skipped — its `:local`
+ * tokens are not the named-prefix contract the index freezes.
+ */
+const PREFIX_DECL = /(?:^|\s)@?prefix\s+([^\s:]+):\s*<([^>]*)>/gi;
+/**
+ * Harvest a package's own `@prefix` / `PREFIX` declarations from its TTL text.
+ *
+ * ke's `createStore` does NOT fold parsed-Turtle prefixes into `store.prefixes`
+ * (TTL `@prefix` applies only within a file during parsing), so a package's
+ * namespaces are invisible to the index unless we lift them out of the source
+ * ourselves. The returned map (label → namespace IRI) is merged BELOW config
+ * precedence so the pack's own names compact to `pfx:Local` in the index.
+ *
+ * @param sources - The package's labelled RDF sources.
+ * @returns A prefix map of every named declaration found (last wins on clash).
+ */
+export function harvestPrefixes(sources) {
+    const prefixes = {};
+    for (const { content } of sources) {
+        for (const match of content.matchAll(PREFIX_DECL)) {
+            const [, label, iri] = match;
+            if (label !== undefined && iri !== undefined)
+                prefixes[label] = iri;
+        }
+    }
+    return prefixes;
+}
+/**
+ * Detect `@prefix` label clashes across a set of sources.
+ *
+ * {@link harvestPrefixes} resolves clashes last-wins (Turtle's own rule),
+ * silently compacting the losing package's URIs to the wrong prefix (or to full
+ * IRIs). This surfaces the clashes so `sources update` can warn (A5): a label
+ * bound to two or more distinct IRIs. Harmless same-label/same-IRI
+ * redeclarations (the common case) are NOT clashes. Result is sorted by label
+ * so the warnings are deterministic.
+ *
+ * @param sources - The packages' labelled RDF sources.
+ * @returns One entry per clashing label, each with its distinct IRIs.
+ */
+export function detectPrefixClashes(sources) {
+    const byLabel = new Map();
+    for (const { content } of sources) {
+        for (const match of content.matchAll(PREFIX_DECL)) {
+            const [, label, iri] = match;
+            if (label === undefined || iri === undefined)
+                continue;
+            const iris = byLabel.get(label) ?? [];
+            if (!iris.includes(iri))
+                iris.push(iri);
+            byLabel.set(label, iris);
+        }
+    }
+    const clashes = [];
+    for (const [label, iris] of byLabel) {
+        if (iris.length > 1)
+            clashes.push({ label, iris });
+    }
+    clashes.sort((a, b) => (a.label < b.label ? -1 : a.label > b.label ? 1 : 0));
+    return clashes;
+}
+/**
+ * Locate a package's `package.json` from the project.
+ *
+ * The direct `require.resolve("<pkg>/package.json")` throws
+ * `ERR_PACKAGE_PATH_NOT_EXPORTED` for a package whose `exports` map does not
+ * expose `./package.json` (common with modern packages) — which would be
+ * misreported as "not installed". So on failure it falls back to resolving the
+ * package entry and walking up to the `package.json` whose `name` matches.
+ *
+ * @param require - A `createRequire` bound to the project directory.
+ * @param pkg - The package name.
+ * @returns The absolute `package.json` path, or `undefined` when not installed.
+ */
+export function resolvePackageJson(require, pkg) {
+    try {
+        return require.resolve(`${pkg}/package.json`);
+    }
+    catch {
+        // `exports` may not expose ./package.json — resolve the entry and walk up.
+    }
+    let current;
+    try {
+        current = dirname(require.resolve(pkg));
+    }
+    catch {
+        return undefined;
+    }
+    for (let depth = 0; depth < 64; depth++) {
+        const candidate = join(current, "package.json");
+        if (existsSync(candidate)) {
+            try {
+                const parsed = JSON.parse(readFileSync(candidate, "utf-8"));
+                if (parsed.name === pkg)
+                    return candidate;
+            }
+            catch {
+                // Unreadable or non-JSON — keep walking up.
+            }
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return undefined;
+}
+/**
+ * Resolve a package reference to its revision and RDF sources.
+ *
+ * @param ref - The parsed package reference.
+ * @param options - The project directory an `npm` ref resolves from.
+ * @returns The resolved package.
+ * @throws PragmaError on a missing file path or unresolvable npm package.
+ * @note Impure — may clone/fetch git, reads TTL from disk.
+ */
+export async function resolvePackage(ref, options) {
+    switch (ref.kind) {
+        case "file": {
+            if (!existsSync(ref.path)) {
+                throw PragmaError.configError(`Package "${ref.pkg}" path not found: ${ref.path}.`);
+            }
+            return {
+                name: ref.pkg,
+                source: ref.source,
+                resolved: ref.path,
+                root: ref.path,
+                sources: readTtlSources(ref.path, ref.pkg),
+                stories: readStorySources(ref.path, ref.pkg),
+            };
+        }
+        case "npm": {
+            const require = createRequire(join(options.cwd, "noop.js"));
+            const pkgJsonPath = resolvePackageJson(require, ref.pkg);
+            if (pkgJsonPath === undefined) {
+                throw PragmaError.configError(`Package "${ref.pkg}" is not installed. Add it to the project.`);
+            }
+            const dir = dirname(pkgJsonPath);
+            let version;
+            try {
+                version =
+                    JSON.parse(readFileSync(pkgJsonPath, "utf-8")).version ??
+                        "0.0.0";
+            }
+            catch (error) {
+                // A malformed `package.json` for an otherwise-installed package: name it
+                // as a data error, not an INTERNAL_ERROR "report this issue".
+                throw PragmaError.configError(`Package "${ref.pkg}" has an invalid package.json (${pkgJsonPath}): ${errorDetail(error)}`);
+            }
+            return {
+                name: ref.pkg,
+                source: ref.source,
+                resolved: version,
+                root: dir,
+                sources: readTtlSources(dir, ref.pkg),
+                stories: readStorySources(dir, ref.pkg),
+            };
+        }
+        case "git": {
+            const dir = join(refsCacheDir(), sanitize(ref.pkg), sanitize(ref.ref));
+            let resolved;
+            try {
+                if (existsSync(dir)) {
+                    resolved = fetchRef(ref.url, ref.ref, dir);
+                }
+                else {
+                    cloneRef(ref.url, ref.ref, dir);
+                    resolved = headCommit(dir);
+                }
+            }
+            catch (error) {
+                // A git clone/fetch/checkout failed — an unreachable remote, a moved or
+                // deleted ref, an auth/credential problem, or a pinned SHA that has been
+                // force-pushed away. Name the package + ref with git's own reason so it
+                // reads as a fixable data error, not INTERNAL_ERROR.
+                throw PragmaError.configError(`Cannot resolve "${ref.pkg}" from ${redactUrl(ref.url)}#${ref.ref}: ${errorDetail(error)}`, {
+                    recovery: {
+                        message: "Check the git URL and ref, your network, and your git credentials, then re-run the update.",
+                    },
+                });
+            }
+            return {
+                name: ref.pkg,
+                source: ref.source,
+                resolved,
+                root: dir,
+                sources: readTtlSources(dir, ref.pkg),
+                stories: readStorySources(dir, ref.pkg),
+            };
+        }
+    }
+}
+//# sourceMappingURL=resolve.js.map

package/dist/src/kernel/runtime/refs/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../../../src/kernel/runtime/refs/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAmB,SAAS,EAAE,MAAM,eAAe,CAAC;AA+B3D,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAEzC,mFAAmF;AACnF,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B,sDAAsD;AACtD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAEhF;;6EAE6E;AAC7E,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAG3B,CAAC;QACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;oFACoF;AACpF,SAAS,OAAO,CACd,GAAW,EACX,IAAY,EACZ,KAAa,EACb,GAAwC;IAExC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAC7B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,yEAAyE;QACzE,qEAAqE;QACrE,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,mEAAmE;QACnE,oEAAoE;QACpE,2EAA2E;QAC3E,0EAA0E;QAC1E,oEAAoE;QACpE,sEAAsE;QACtE,4EAA4E;QAC5E,6EAA6E;QAC7E,sBAAsB;QACtB,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjC,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;gBACxC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,cAAc,CACrB,OAAe,EACf,KAAa;IAEb,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,KAAa;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,GAAG,KAAK,IAAI,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE;YAC7C,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;SACrC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,6CAA6C,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAgD;IAEhD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAgD;IAEhD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAyC,EACzC,GAAW;IAEX,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAEzD,CAAC;gBACF,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;oBAAE,OAAO,SAAS,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,OAAuB;IAEvB,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,WAAW,CAAC,WAAW,CAC3B,YAAY,GAAG,CAAC,GAAG,qBAAqB,GAAG,CAAC,IAAI,GAAG,CACpD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,GAAG;gBACb,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,IAAI;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;gBAC1C,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;aAC7C,CAAC;QACJ,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,WAAW,CAAC,WAAW,CAC3B,YAAY,GAAG,CAAC,GAAG,4CAA4C,CAChE,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;YACjC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO;oBACJ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,OAAkB;wBAClE,OAAO,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,yEAAyE;gBACzE,8DAA8D;gBAC9D,MAAM,WAAW,CAAC,WAAW,CAC3B,YAAY,GAAG,CAAC,GAAG,kCAAkC,WAAW,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,CAC3F,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,GAAG;gBACb,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;gBACrC,OAAO,EAAE,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;aACxC,CAAC;QACJ,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpB,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAChC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,yEAAyE;gBACzE,wEAAwE;gBACxE,qDAAqD;gBACrD,MAAM,WAAW,CAAC,WAAW,CAC3B,mBAAmB,GAAG,CAAC,GAAG,UAAU,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,EAC1F;oBACE,QAAQ,EAAE;wBACR,OAAO,EACL,4FAA4F;qBAC/F;iBACF,CACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,GAAG;gBACb,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;gBACrC,OAAO,EAAE,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;aACxC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/kernel/runtime/resolveSources.js

@@ -0,0 +1,62 @@
+/**
+ * The store-boot decision table — storeless, and the single place the boot
+ * strategy is decided. No other module re-derives it: `sources status`, `info`,
+ * `doctor`, and the native MCP prompt/resource surfaces all switch on what this
+ * returns (`readPackIndex` takes the decision rather than resolving a pack of
+ * its own). The one module that cannot is the shell-completion fast path, which
+ * is denied the config evaluator and so implements the pointer half only — it
+ * says so, and it answers with completion candidates, never content.
+ *
+ * Boot never touches the network. From the project's active-pack pointer (the
+ * content hash `sources update` last built here) and the resolved config:
+ *
+ * | pointer | pack complete | packs origin | → decision            |
+ * |---------|---------------|--------------|-----------------------|
+ * | yes     | yes           | —            | load the built pack   |
+ * | yes     | no            | —            | STORE_UNAVAILABLE     |
+ * | no      | —             | default      | embedded fallback     |
+ * | no      | —             | configured   | STORE_UNAVAILABLE     |
+ *
+ * A configured-but-unbuilt store (or a pointer whose pack the cache lost)
+ * surfaces STORE_UNAVAILABLE with a single recovery: `pragma sources update`.
+ * "packs origin default" means the user has not pinned their own packs —
+ * a fresh install — so the embedded pack answers reads offline. A project that
+ * DID configure its own packs is never quietly served the distribution's graph.
+ */
+import { existsSync } from "node:fs";
+import { packIsComplete } from "./graphpack/manifest.js";
+import { packDir, readActivePack } from "./paths.js";
+/**
+ * Decide how (or whether) to boot the store — without any network or store I/O.
+ *
+ * @param layers - The resolved config layers (for the `packs` origin).
+ * @param cwd - The project directory (for the active-pack pointer).
+ * @returns The boot decision.
+ * @note Impure — reads the pointer and probes the pack cache.
+ */
+export function resolveSources(layers, cwd) {
+    const contentHash = readActivePack(cwd);
+    if (contentHash !== undefined) {
+        const dir = packDir(contentHash);
+        if (packIsComplete(dir))
+            return { kind: "pack", dir, contentHash };
+        // Two different things, and the recovery text is the only thing a user has
+        // to go on: the cache evicted the pack, or the directory is there but does
+        // not hold a whole pack — the state EVERY install upgraded past the
+        // four-file pack lands in, where "missing" is plainly contradicted by `ls`.
+        return {
+            kind: "unavailable",
+            reason: existsSync(dir)
+                ? "the built pack is incomplete — an older or torn build"
+                : "the built pack is missing from the cache",
+        };
+    }
+    if (layers.origins.packs === "default") {
+        return { kind: "embedded" };
+    }
+    return {
+        kind: "unavailable",
+        reason: "packs are configured but the store has not been built",
+    };
+}
+//# sourceMappingURL=resolveSources.js.map

package/dist/src/kernel/runtime/resolveSources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSources.js","sourceRoot":"","sources":["../../../../src/kernel/runtime/resolveSources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAYrD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,GAAW;IAEX,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QACnE,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,4EAA4E;QAC5E,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC;gBACrB,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,0CAA0C;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,uDAAuD;KAChE,CAAC;AACJ,CAAC"}

package/dist/src/kernel/runtime/store.js

@@ -0,0 +1,75 @@
+/**
+ * The lazy store — the ONE guarded factory the storeless-guarantee spy targets.
+ *
+ * `get()` dynamic-imports the heavy session loader, so constructing a runtime —
+ * or importing any capability — never pulls ke/ke-graphql/oxigraph. The
+ * dispatcher calls `get()` only for `capability.needsStore` verbs, which is what
+ * makes the storeless guarantee hold by construction: a storeless verb has no
+ * path to the store factory, so `booted` stays false.
+ *
+ * Memoization WITH invalidation — the store is long-lived (the MCP server boots
+ * ONE runtime for its whole lifetime and shares it across every tool call), not
+ * one-shot:
+ *
+ * - A SUCCESSFUL boot is memoized (the session is immutable until invalidated).
+ *   A REJECTED boot is NOT: a cold store throws STORE_UNAVAILABLE from the
+ *   loader, and `get()` clears the memo before re-throwing so a later `get()`
+ *   retries from scratch. This matters precisely because the server is
+ *   long-lived: an agent that hits STORE_UNAVAILABLE can run `sources update`
+ *   (which builds the pack on disk) and retry — something DID change to make the
+ *   retry succeed, so memoizing the rejection would strand the session forever.
+ *   For a one-shot CLI (a single `get()` per process) clearing the memo on
+ *   failure is a harmless no-op.
+ * - `invalidate()` drops the memoized session so the next `get()` re-boots
+ *   against the current on-disk pack. Because boot reads config through
+ *   `ctx.loadConfig` (which is itself memoized upstream), invalidating the store
+ *   must also drop that config memo — otherwise a re-boot would reuse stale
+ *   config. `onInvalidate` is the hook the runtime wires for exactly that (it
+ *   clears the boot-level `configPromise`). The MCP projector calls
+ *   `invalidate()` after every real mutation so a `config_set`/`sources update`
+ *   becomes visible to the next read tool.
+ */
+/**
+ * Create a lazy store handle.
+ *
+ * @param ctx - The working directory, memoized config loader, and optional
+ *   invalidation hook.
+ * @returns The lazy store: a `get()` that memoizes a successful boot (never a
+ *   rejection), a `booted` flag, and an `invalidate()` reset.
+ */
+export function createLazyStore(ctx) {
+    let session;
+    let booted = false;
+    return {
+        get booted() {
+            return booted;
+        },
+        get() {
+            if (session === undefined) {
+                session = (async () => {
+                    try {
+                        const { loadStoreSession } = await import("./loadSession.js");
+                        const loaded = await loadStoreSession(ctx);
+                        booted = true;
+                        return loaded;
+                    }
+                    catch (err) {
+                        // Clear the memo BEFORE the rejection propagates (inside the async
+                        // IIFE, so there is no window where a concurrent caller adopts the
+                        // rejected promise): the next `get()` retries a fresh boot, which a
+                        // `sources update` between calls can make succeed.
+                        session = undefined;
+                        throw err;
+                    }
+                })();
+            }
+            return session;
+        },
+        invalidate() {
+            session = undefined;
+            booted = false;
+            ctx.onInvalidate?.();
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/src/kernel/runtime/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../src/kernel/runtime/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAiBH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAqB;IACnD,IAAI,OAA0C,CAAC;IAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,OAAO;QACL,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;oBACpB,IAAI,CAAC;wBACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;wBAC9D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;wBAC3C,MAAM,GAAG,IAAI,CAAC;wBACd,OAAO,MAAM,CAAC;oBAChB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,mEAAmE;wBACnE,mEAAmE;wBACnE,oEAAoE;wBACpE,mDAAmD;wBACnD,OAAO,GAAG,SAAS,CAAC;wBACpB,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,UAAU;YACR,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM,GAAG,KAAK,CAAC;YACf,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/kernel/runtime/storeReadiness.js

@@ -0,0 +1,51 @@
+/**
+ * The STORELESS store-readiness check — the ONE source of the cold-store
+ * `STORE_UNAVAILABLE` error (its message AND its `pragma sources update` /
+ * `sources_update` recovery), shared by the lazy store boot ({@link
+ * loadStoreSession}) and the native MCP discovery surfaces (the `prompts/*`
+ * provider, the `pragma:{+uri}` resource browser).
+ *
+ * A cold store must present the SAME diagnostic on every surface: an agent that
+ * lists prompts over the `prompt_list` tool (store-backed, so its `needsStore`
+ * pre-check throws) and one that lists them over native `prompts/list` must see
+ * the identical `STORE_UNAVAILABLE` + `sources_update` recovery, not one error
+ * and one silently-empty list. Centralizing the construction here is what keeps
+ * those surfaces from drifting apart.
+ *
+ * It reaches only {@link resolveSources} (a pointer + config probe — no store,
+ * no ke), so a caller on the storeless fast path can pre-check availability
+ * without ever booting the store.
+ */
+import { cliRecovery, PragmaError } from "../error/index.js";
+import { resolveSources } from "./resolveSources.js";
+/**
+ * Build the canonical cold-store `STORE_UNAVAILABLE` error: the reason plus the
+ * single `pragma sources update` recovery that also names the `sources_update`
+ * tool an agent calls (then retries — PR9's C1 cold-store retry succeeds).
+ *
+ * @param reason - The boot decision's reason (e.g. "the built pack is missing
+ *   from the cache").
+ * @returns The structured STORE_UNAVAILABLE error.
+ */
+export function storeUnavailable(reason) {
+    return PragmaError.storeUnavailable(`${reason}.`, {
+        recovery: cliRecovery("sources update", "Build the local store from the configured packs.", { tool: "sources_update" }),
+    });
+}
+/**
+ * The STORE_UNAVAILABLE error to surface when the store cannot boot from the
+ * current config and active-pack pointer, or `undefined` when a store read may
+ * proceed. STORELESS —
+ * probes the decision table only, never constructs the store.
+ *
+ * @param layers - The resolved config layers.
+ * @param cwd - The project directory the boot resolves against.
+ * @returns The error to surface cold, or `undefined` when the store is available.
+ */
+export function checkStoreAvailable(layers, cwd) {
+    const decision = resolveSources(layers, cwd);
+    return decision.kind === "unavailable"
+        ? storeUnavailable(decision.reason)
+        : undefined;
+}
+//# sourceMappingURL=storeReadiness.js.map

package/dist/src/kernel/runtime/storeReadiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storeReadiness.js","sourceRoot":"","sources":["../../../../src/kernel/runtime/storeReadiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,WAAW,CAAC,gBAAgB,CAAC,GAAG,MAAM,GAAG,EAAE;QAChD,QAAQ,EAAE,WAAW,CACnB,gBAAgB,EAChB,kDAAkD,EAClD,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAC3B;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAoB,EACpB,GAAW;IAEX,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC,IAAI,KAAK,aAAa;QACpC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/src/kernel/runtime/types.js

@@ -0,0 +1,11 @@
+/**
+ * Runtime context shapes threaded through the kernel.
+ *
+ * The grammar (`VerbSpec.run`) receives a {@link PragmaRuntime}; the CLI and
+ * MCP projectors build one per invocation. The interface grows one field-group
+ * per PR as each layer lands — global flags with the CLI projector, resolved
+ * config + provenance with the config layer — so a verb only ever sees fields
+ * that are actually populated by the time it runs.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/kernel/runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel/runtime/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}