@copilotkit/runtime 2.0.0-next.1 → 2.0.0-rc.0

package/dist/runtime/intelligence-platform/learning-management.mjs

@@ -0,0 +1,193 @@
+import { z } from "zod";
+
+//#region src/runtime/intelligence-platform/learning-management.ts
+/** Wire contracts for the project-key Learning API; keep aligned with Intelligence. */
+const learningContainerIdSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/);
+const learningContainerSchema = z.object({
+	id: learningContainerIdSchema,
+	name: z.string().min(1),
+	projectId: z.number().int().positive(),
+	promptContext: z.string().nullable(),
+	createdAt: z.string().datetime({ offset: true }),
+	updatedAt: z.string().datetime({ offset: true })
+});
+const learningContainerPageSchema = z.object({
+	containers: z.array(learningContainerSchema).max(500),
+	nextCursor: z.string().min(1).nullable()
+});
+/** Validates a stable identifier before constructing a request path. */
+function learningContainerPath(containerId) {
+	return `/api/v1/learning/containers/${encodeURIComponent(learningContainerIdSchema.parse(containerId))}`;
+}
+/** Reads a bounded JSON response while the request's signal governs stream cancellation. */
+async function readLearningJson(response, limit = 16 * 1024 * 1024, signal) {
+	if (!response.body) throw new Error("Missing Learning response body");
+	const reader = response.body.getReader();
+	const abort = () => {
+		reader.cancel(signal?.reason).catch(() => void 0);
+	};
+	signal?.addEventListener("abort", abort, { once: true });
+	if (signal?.aborted) abort();
+	const decoder = new TextDecoder();
+	let text = "";
+	let bytes = 0;
+	try {
+		while (true) {
+			signal?.throwIfAborted();
+			const next = await reader.read();
+			signal?.throwIfAborted();
+			if (next.done) break;
+			bytes += next.value.byteLength;
+			if (bytes > limit) {
+				await reader.cancel();
+				throw new Error("Learning response exceeds its size limit");
+			}
+			text += decoder.decode(next.value, { stream: true });
+		}
+		return JSON.parse(text + decoder.decode());
+	} finally {
+		signal?.removeEventListener("abort", abort);
+		reader.releaseLock();
+	}
+}
+const learningSha256Schema = z.string().regex(/^[a-f0-9]{64}$/u);
+const learningUuidSchema = z.string().uuid();
+const learningDateTimeSchema = z.string().datetime({ offset: true });
+/** One immutable file in a proposed Skill candidate bundle. */
+const learningSkillBundleFileSchema = z.object({
+	content: z.string(),
+	path: z.string().min(1).refine((path) => !path.startsWith("/") && !path.split("/").some((segment) => segment === ".."), "Bundle paths must be relative and may not traverse parent directories."),
+	sha256: learningSha256Schema
+});
+/** Complete Skill files attached to one review candidate. */
+const learningSkillBundleSchema = z.object({
+	files: z.array(learningSkillBundleFileSchema).min(1),
+	schemaVersion: z.literal(1)
+}).superRefine(({ files }, context) => {
+	const paths = /* @__PURE__ */ new Set();
+	for (const file of files) {
+		if (paths.has(file.path)) context.addIssue({
+			code: "custom",
+			message: `Duplicate bundle path: ${file.path}`,
+			path: ["files"]
+		});
+		paths.add(file.path);
+	}
+	if (!paths.has("SKILL.md")) context.addIssue({
+		code: "custom",
+		message: "A Skill bundle must contain SKILL.md.",
+		path: ["files"]
+	});
+});
+/** Review state and summary returned for one proposed Skill change. */
+const learningCandidateSchema = z.object({
+	bundleSha256: learningSha256Schema,
+	createdAt: learningDateTimeSchema,
+	description: z.string().min(1),
+	id: learningUuidSchema,
+	operation: z.enum([
+		"add",
+		"update",
+		"remove"
+	]),
+	publishedRegistryRevision: z.number().int().positive().nullable(),
+	publishedSkillId: learningUuidSchema.nullable(),
+	reason: z.string().min(1),
+	registryBaseRevision: z.number().int().nonnegative(),
+	reviewedAt: learningDateTimeSchema.nullable(),
+	runId: learningUuidSchema,
+	status: z.enum([
+		"pending_review",
+		"approved",
+		"rejected"
+	]),
+	subjectSha256: learningSha256Schema,
+	targetSkillId: learningUuidSchema.nullable(),
+	targetSkillRevision: z.number().int().positive().nullable(),
+	title: z.string().min(1)
+});
+/** Full proposed Skill change, including evidence and every bundle file. */
+const learningCandidateDetailSchema = learningCandidateSchema.extend({
+	bundle: learningSkillBundleSchema,
+	supportingInsights: z.array(z.object({
+		alias: z.string().min(1),
+		id: learningUuidSchema,
+		impact: z.string().min(1),
+		statement: z.string().min(1)
+	}))
+});
+/** Result returned after a human or agent reviews a Skill candidate. */
+const learningCandidateReviewSchema = z.object({
+	candidateId: learningUuidSchema,
+	operation: z.enum([
+		"add",
+		"update",
+		"remove"
+	]),
+	publishedRegistryRevision: z.number().int().positive().nullable(),
+	publishedSkillId: learningUuidSchema.nullable(),
+	status: z.enum(["approved", "rejected"])
+});
+const learningRunSchema = z.object({
+	id: z.string().uuid(),
+	learningContainerId: learningContainerIdSchema,
+	projectId: z.number().int().positive(),
+	status: z.enum([
+		"queued",
+		"freezing",
+		"batching",
+		"reducing",
+		"finalizing",
+		"succeeded",
+		"failed"
+	]),
+	triggerSource: z.enum(["automatic", "manual"]),
+	attemptCount: z.number().int().nonnegative(),
+	candidateCount: z.number().int().nonnegative().nullable(),
+	insightCount: z.number().int().nonnegative().nullable(),
+	evidenceThreadCount: z.number().int().nonnegative().nullable().optional(),
+	createdAt: learningDateTimeSchema,
+	updatedAt: learningDateTimeSchema,
+	startedAt: learningDateTimeSchema.nullable(),
+	completedAt: learningDateTimeSchema.nullable(),
+	failureCode: z.string().nullable(),
+	kubernetesJobName: z.string().nullable()
+});
+const unavailableSchema = z.enum(["snapshot-missing", "snapshot-unreadable"]).nullable();
+const learningInsightEvidenceSchema = z.union([z.object({
+	cited: z.array(z.object({
+		id: z.string(),
+		content: z.string(),
+		role: z.enum([
+			"assistant",
+			"tool",
+			"user"
+		])
+	})),
+	messageCount: z.number().int().nonnegative(),
+	threadId: z.string(),
+	threadName: z.string().nullable(),
+	threadPresent: z.boolean(),
+	unavailable: unavailableSchema
+}), z.object({
+	kind: z.literal("trajectory"),
+	trajectoryId: z.string().uuid(),
+	trajectoryPresent: z.boolean(),
+	eventCount: z.number().int().nonnegative(),
+	events: z.array(z.object({
+		seq: z.number().int().nonnegative(),
+		name: z.string(),
+		offsetMs: z.number(),
+		value: z.unknown(),
+		eventId: z.string().nullable()
+	})),
+	unavailable: unavailableSchema
+})]);
+/** Validates object IDs independently from container IDs; neither may alter the path. */
+function learningObjectId(id) {
+	return z.string().uuid().parse(id);
+}
+
+//#endregion
+export { learningCandidateDetailSchema, learningCandidateReviewSchema, learningCandidateSchema, learningContainerPageSchema, learningContainerPath, learningContainerSchema, learningInsightEvidenceSchema, learningObjectId, learningRunSchema, readLearningJson };
+//# sourceMappingURL=learning-management.mjs.map

package/dist/runtime/intelligence-platform/learning-management.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"learning-management.mjs","names":[],"sources":["../../../src/runtime/intelligence-platform/learning-management.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/** Wire contracts for the project-key Learning API; keep aligned with Intelligence. */\nexport const learningContainerIdSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/);\nexport const learningContainerSchema = z.object({\n  id: learningContainerIdSchema,\n  name: z.string().min(1),\n  projectId: z.number().int().positive(),\n  promptContext: z.string().nullable(),\n  createdAt: z.string().datetime({ offset: true }),\n  updatedAt: z.string().datetime({ offset: true }),\n});\nexport const learningContainerPageSchema = z.object({\n  containers: z.array(learningContainerSchema).max(500),\n  nextCursor: z.string().min(1).nullable(),\n});\n/** Explicit wire types preserve required/null fields in declarations emitted with strictNullChecks disabled. */\nexport interface LearningContainer {\n  id: string;\n  name: string;\n  projectId: number;\n  promptContext: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\nexport interface LearningContainerPage {\n  containers: LearningContainer[];\n  nextCursor: string | null;\n}\nexport interface LearningRequestOptions {\n  readonly signal?: AbortSignal;\n}\nexport interface LearningContainerRequest extends LearningRequestOptions {\n  readonly containerId: string;\n}\n\n/** Validates a stable identifier before constructing a request path. */\nexport function learningContainerPath(containerId: string): string {\n  return `/api/v1/learning/containers/${encodeURIComponent(learningContainerIdSchema.parse(containerId))}`;\n}\n\n/** Reads a bounded JSON response while the request's signal governs stream cancellation. */\nexport async function readLearningJson(\n  response: Response,\n  limit = 16 * 1024 * 1024,\n  signal?: AbortSignal,\n): Promise<unknown> {\n  if (!response.body) throw new Error(\"Missing Learning response body\");\n  const reader = response.body.getReader();\n  const abort = () => {\n    void reader.cancel(signal?.reason).catch(() => undefined);\n  };\n  signal?.addEventListener(\"abort\", abort, { once: true });\n  if (signal?.aborted) abort();\n  const decoder = new TextDecoder();\n  let text = \"\";\n  let bytes = 0;\n  try {\n    while (true) {\n      signal?.throwIfAborted();\n      const next = await reader.read();\n      signal?.throwIfAborted();\n      if (next.done) break;\n      bytes += next.value.byteLength;\n      if (bytes > limit) {\n        await reader.cancel();\n        throw new Error(\"Learning response exceeds its size limit\");\n      }\n      text += decoder.decode(next.value, { stream: true });\n    }\n    return JSON.parse(text + decoder.decode());\n  } finally {\n    signal?.removeEventListener(\"abort\", abort);\n    reader.releaseLock();\n  }\n}\n\nconst learningSha256Schema = z.string().regex(/^[a-f0-9]{64}$/u);\nconst learningUuidSchema = z.string().uuid();\nconst learningDateTimeSchema = z.string().datetime({ offset: true });\n\n/** One immutable file in a proposed Skill candidate bundle. */\nexport const learningSkillBundleFileSchema = z.object({\n  content: z.string(),\n  path: z\n    .string()\n    .min(1)\n    .refine(\n      (path) =>\n        !path.startsWith(\"/\") &&\n        !path.split(\"/\").some((segment) => segment === \"..\"),\n      \"Bundle paths must be relative and may not traverse parent directories.\",\n    ),\n  sha256: learningSha256Schema,\n});\n\n/** Complete Skill files attached to one review candidate. */\nexport const learningSkillBundleSchema = z\n  .object({\n    files: z.array(learningSkillBundleFileSchema).min(1),\n    schemaVersion: z.literal(1),\n  })\n\n  .superRefine(({ files }, context) => {\n    const paths = new Set<string>();\n    for (const file of files) {\n      if (paths.has(file.path)) {\n        context.addIssue({\n          code: \"custom\",\n          message: `Duplicate bundle path: ${file.path}`,\n          path: [\"files\"],\n        });\n      }\n      paths.add(file.path);\n    }\n    if (!paths.has(\"SKILL.md\")) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"A Skill bundle must contain SKILL.md.\",\n        path: [\"files\"],\n      });\n    }\n  });\n\n/** Review state and summary returned for one proposed Skill change. */\nexport const learningCandidateSchema = z.object({\n  bundleSha256: learningSha256Schema,\n  createdAt: learningDateTimeSchema,\n  description: z.string().min(1),\n  id: learningUuidSchema,\n  operation: z.enum([\"add\", \"update\", \"remove\"]),\n  publishedRegistryRevision: z.number().int().positive().nullable(),\n  publishedSkillId: learningUuidSchema.nullable(),\n  reason: z.string().min(1),\n  registryBaseRevision: z.number().int().nonnegative(),\n  reviewedAt: learningDateTimeSchema.nullable(),\n  runId: learningUuidSchema,\n  status: z.enum([\"pending_review\", \"approved\", \"rejected\"]),\n  subjectSha256: learningSha256Schema,\n  targetSkillId: learningUuidSchema.nullable(),\n  targetSkillRevision: z.number().int().positive().nullable(),\n  title: z.string().min(1),\n});\n\n/** Full proposed Skill change, including evidence and every bundle file. */\nexport const learningCandidateDetailSchema = learningCandidateSchema.extend({\n  bundle: learningSkillBundleSchema,\n  supportingInsights: z.array(\n    z.object({\n      alias: z.string().min(1),\n      id: learningUuidSchema,\n      impact: z.string().min(1),\n      statement: z.string().min(1),\n    }),\n  ),\n});\n\n/** Result returned after a human or agent reviews a Skill candidate. */\nexport const learningCandidateReviewSchema = z.object({\n  candidateId: learningUuidSchema,\n  operation: z.enum([\"add\", \"update\", \"remove\"]),\n  publishedRegistryRevision: z.number().int().positive().nullable(),\n  publishedSkillId: learningUuidSchema.nullable(),\n  status: z.enum([\"approved\", \"rejected\"]),\n});\n\nexport interface LearningCandidate {\n  id: string;\n  bundleSha256: string;\n  createdAt: string;\n  description: string;\n  operation: \"add\" | \"update\" | \"remove\";\n  publishedRegistryRevision: number | null;\n  publishedSkillId: string | null;\n  reason: string;\n  registryBaseRevision: number;\n  reviewedAt: string | null;\n  runId: string;\n  status: \"pending_review\" | \"approved\" | \"rejected\";\n  subjectSha256: string;\n  targetSkillId: string | null;\n  targetSkillRevision: number | null;\n  title: string;\n}\nexport interface LearningCandidateDetail extends LearningCandidate {\n  bundle: {\n    schemaVersion: 1;\n    files: Array<{ path: string; content: string; sha256: string }>;\n  };\n  supportingInsights: Array<{\n    alias: string;\n    id: string;\n    impact: string;\n    statement: string;\n  }>;\n}\nexport interface LearningCandidateReview {\n  candidateId: string;\n  operation: \"add\" | \"update\" | \"remove\";\n  publishedRegistryRevision: number | null;\n  publishedSkillId: string | null;\n  status: \"approved\" | \"rejected\";\n}\nexport interface LearningCandidateRequest extends LearningContainerRequest {\n  readonly candidateId: string;\n}\n\nexport const learningRunSchema = z.object({\n  id: z.string().uuid(),\n  learningContainerId: learningContainerIdSchema,\n  projectId: z.number().int().positive(),\n  status: z.enum([\n    \"queued\",\n    \"freezing\",\n    \"batching\",\n    \"reducing\",\n    \"finalizing\",\n    \"succeeded\",\n    \"failed\",\n  ]),\n  triggerSource: z.enum([\"automatic\", \"manual\"]),\n  attemptCount: z.number().int().nonnegative(),\n  candidateCount: z.number().int().nonnegative().nullable(),\n  insightCount: z.number().int().nonnegative().nullable(),\n  evidenceThreadCount: z.number().int().nonnegative().nullable().optional(),\n  createdAt: learningDateTimeSchema,\n  updatedAt: learningDateTimeSchema,\n  startedAt: learningDateTimeSchema.nullable(),\n  completedAt: learningDateTimeSchema.nullable(),\n  failureCode: z.string().nullable(),\n  kubernetesJobName: z.string().nullable(),\n});\nexport interface LearningRun {\n  id: string;\n  learningContainerId: string;\n  projectId: number;\n  status:\n    | \"queued\"\n    | \"freezing\"\n    | \"batching\"\n    | \"reducing\"\n    | \"finalizing\"\n    | \"succeeded\"\n    | \"failed\";\n  triggerSource: \"automatic\" | \"manual\";\n  attemptCount: number;\n  candidateCount: number | null;\n  insightCount: number | null;\n  evidenceThreadCount?: number | null;\n  createdAt: string;\n  updatedAt: string;\n  startedAt: string | null;\n  completedAt: string | null;\n  failureCode: string | null;\n  kubernetesJobName: string | null;\n}\nconst unavailableSchema = z\n  .enum([\"snapshot-missing\", \"snapshot-unreadable\"])\n  .nullable();\nexport const learningInsightEvidenceSchema = z.union([\n  z.object({\n    cited: z.array(\n      z.object({\n        id: z.string(),\n        content: z.string(),\n        role: z.enum([\"assistant\", \"tool\", \"user\"]),\n      }),\n    ),\n    messageCount: z.number().int().nonnegative(),\n    threadId: z.string(),\n    threadName: z.string().nullable(),\n    threadPresent: z.boolean(),\n    unavailable: unavailableSchema,\n  }),\n  z.object({\n    kind: z.literal(\"trajectory\"),\n    trajectoryId: z.string().uuid(),\n    trajectoryPresent: z.boolean(),\n    eventCount: z.number().int().nonnegative(),\n    events: z.array(\n      z.object({\n        seq: z.number().int().nonnegative(),\n        name: z.string(),\n        offsetMs: z.number(),\n        value: z.unknown(),\n        eventId: z.string().nullable(),\n      }),\n    ),\n    unavailable: unavailableSchema,\n  }),\n]);\nexport type LearningInsightEvidence =\n  | {\n      cited: Array<{\n        id: string;\n        content: string;\n        role: \"assistant\" | \"tool\" | \"user\";\n      }>;\n      messageCount: number;\n      threadId: string;\n      threadName: string | null;\n      threadPresent: boolean;\n      unavailable: \"snapshot-missing\" | \"snapshot-unreadable\" | null;\n    }\n  | {\n      kind: \"trajectory\";\n      trajectoryId: string;\n      trajectoryPresent: boolean;\n      eventCount: number;\n      events: Array<{\n        seq: number;\n        name: string;\n        offsetMs: number;\n        value?: unknown;\n        eventId: string | null;\n      }>;\n      unavailable: \"snapshot-missing\" | \"snapshot-unreadable\" | null;\n    };\n\n/** Validates object IDs independently from container IDs; neither may alter the path. */\nexport function learningObjectId(id: string): string {\n  return z.string().uuid().parse(id);\n}\n"],"mappings":";;;;AAGA,MAAa,4BAA4B,EACtC,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,GAAG,CACP,MAAM,6BAA6B;AACtC,MAAa,0BAA0B,EAAE,OAAO;CAC9C,IAAI;CACJ,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;CACvB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CACtC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,MAAM,CAAC;CAChD,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,MAAM,CAAC;CACjD,CAAC;AACF,MAAa,8BAA8B,EAAE,OAAO;CAClD,YAAY,EAAE,MAAM,wBAAwB,CAAC,IAAI,IAAI;CACrD,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACzC,CAAC;;AAsBF,SAAgB,sBAAsB,aAA6B;AACjE,QAAO,+BAA+B,mBAAmB,0BAA0B,MAAM,YAAY,CAAC;;;AAIxG,eAAsB,iBACpB,UACA,QAAQ,KAAK,OAAO,MACpB,QACkB;AAClB,KAAI,CAAC,SAAS,KAAM,OAAM,IAAI,MAAM,iCAAiC;CACrE,MAAM,SAAS,SAAS,KAAK,WAAW;CACxC,MAAM,cAAc;AAClB,EAAK,OAAO,OAAO,QAAQ,OAAO,CAAC,YAAY,OAAU;;AAE3D,SAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACxD,KAAI,QAAQ,QAAS,QAAO;CAC5B,MAAM,UAAU,IAAI,aAAa;CACjC,IAAI,OAAO;CACX,IAAI,QAAQ;AACZ,KAAI;AACF,SAAO,MAAM;AACX,WAAQ,gBAAgB;GACxB,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,WAAQ,gBAAgB;AACxB,OAAI,KAAK,KAAM;AACf,YAAS,KAAK,MAAM;AACpB,OAAI,QAAQ,OAAO;AACjB,UAAM,OAAO,QAAQ;AACrB,UAAM,IAAI,MAAM,2CAA2C;;AAE7D,WAAQ,QAAQ,OAAO,KAAK,OAAO,EAAE,QAAQ,MAAM,CAAC;;AAEtD,SAAO,KAAK,MAAM,OAAO,QAAQ,QAAQ,CAAC;WAClC;AACR,UAAQ,oBAAoB,SAAS,MAAM;AAC3C,SAAO,aAAa;;;AAIxB,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,kBAAkB;AAChE,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM;AAC5C,MAAM,yBAAyB,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,MAAM,CAAC;;AAGpE,MAAa,gCAAgC,EAAE,OAAO;CACpD,SAAS,EAAE,QAAQ;CACnB,MAAM,EACH,QAAQ,CACR,IAAI,EAAE,CACN,QACE,SACC,CAAC,KAAK,WAAW,IAAI,IACrB,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,YAAY,YAAY,KAAK,EACtD,yEACD;CACH,QAAQ;CACT,CAAC;;AAGF,MAAa,4BAA4B,EACtC,OAAO;CACN,OAAO,EAAE,MAAM,8BAA8B,CAAC,IAAI,EAAE;CACpD,eAAe,EAAE,QAAQ,EAAE;CAC5B,CAAC,CAED,aAAa,EAAE,SAAS,YAAY;CACnC,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,MAAM,IAAI,KAAK,KAAK,CACtB,SAAQ,SAAS;GACf,MAAM;GACN,SAAS,0BAA0B,KAAK;GACxC,MAAM,CAAC,QAAQ;GAChB,CAAC;AAEJ,QAAM,IAAI,KAAK,KAAK;;AAEtB,KAAI,CAAC,MAAM,IAAI,WAAW,CACxB,SAAQ,SAAS;EACf,MAAM;EACN,SAAS;EACT,MAAM,CAAC,QAAQ;EAChB,CAAC;EAEJ;;AAGJ,MAAa,0BAA0B,EAAE,OAAO;CAC9C,cAAc;CACd,WAAW;CACX,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC9B,IAAI;CACJ,WAAW,EAAE,KAAK;EAAC;EAAO;EAAU;EAAS,CAAC;CAC9C,2BAA2B,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;CACjE,kBAAkB,mBAAmB,UAAU;CAC/C,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CACpD,YAAY,uBAAuB,UAAU;CAC7C,OAAO;CACP,QAAQ,EAAE,KAAK;EAAC;EAAkB;EAAY;EAAW,CAAC;CAC1D,eAAe;CACf,eAAe,mBAAmB,UAAU;CAC5C,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;CAC3D,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,CAAC;;AAGF,MAAa,gCAAgC,wBAAwB,OAAO;CAC1E,QAAQ;CACR,oBAAoB,EAAE,MACpB,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;EACxB,IAAI;EACJ,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;EACzB,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE;EAC7B,CAAC,CACH;CACF,CAAC;;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,aAAa;CACb,WAAW,EAAE,KAAK;EAAC;EAAO;EAAU;EAAS,CAAC;CAC9C,2BAA2B,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;CACjE,kBAAkB,mBAAmB,UAAU;CAC/C,QAAQ,EAAE,KAAK,CAAC,YAAY,WAAW,CAAC;CACzC,CAAC;AA2CF,MAAa,oBAAoB,EAAE,OAAO;CACxC,IAAI,EAAE,QAAQ,CAAC,MAAM;CACrB,qBAAqB;CACrB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CACtC,QAAQ,EAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,eAAe,EAAE,KAAK,CAAC,aAAa,SAAS,CAAC;CAC9C,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CAC5C,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU;CACzD,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU;CACvD,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU;CACzE,WAAW;CACX,WAAW;CACX,WAAW,uBAAuB,UAAU;CAC5C,aAAa,uBAAuB,UAAU;CAC9C,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACzC,CAAC;AAyBF,MAAM,oBAAoB,EACvB,KAAK,CAAC,oBAAoB,sBAAsB,CAAC,CACjD,UAAU;AACb,MAAa,gCAAgC,EAAE,MAAM,CACnD,EAAE,OAAO;CACP,OAAO,EAAE,MACP,EAAE,OAAO;EACP,IAAI,EAAE,QAAQ;EACd,SAAS,EAAE,QAAQ;EACnB,MAAM,EAAE,KAAK;GAAC;GAAa;GAAQ;GAAO,CAAC;EAC5C,CAAC,CACH;CACD,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CAC5C,UAAU,EAAE,QAAQ;CACpB,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,eAAe,EAAE,SAAS;CAC1B,aAAa;CACd,CAAC,EACF,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,aAAa;CAC7B,cAAc,EAAE,QAAQ,CAAC,MAAM;CAC/B,mBAAmB,EAAE,SAAS;CAC9B,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CAC1C,QAAQ,EAAE,MACR,EAAE,OAAO;EACP,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;EACnC,MAAM,EAAE,QAAQ;EAChB,UAAU,EAAE,QAAQ;EACpB,OAAO,EAAE,SAAS;EAClB,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC/B,CAAC,CACH;CACD,aAAa;CACd,CAAC,CACH,CAAC;;AA8BF,SAAgB,iBAAiB,IAAoB;AACnD,QAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG"}

package/dist/runtime/intelligence-platform/skill-registry/archive.cjs

@@ -0,0 +1,131 @@
+const require_runtime = require('../../../_virtual/_rolldown/runtime.cjs');
+const require_errors = require('./errors.cjs');
+let yauzl = require("yauzl");
+
+//#region src/runtime/intelligence-platform/skill-registry/archive.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+const MAX_ARCHIVE_ENTRIES = 1e3;
+const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
+function safeRelativePath(path) {
+	return path.length > 0 && !/[\\\x00-\x1f\x7f]/.test(path) && !/^[a-z]:/i.test(path) && path.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+function readArchive(bytes, signal) {
+	return new Promise((resolve, reject) => {
+		let archive;
+		let stream;
+		let settled = false;
+		const finish = (error) => {
+			if (settled) return;
+			settled = true;
+			signal?.removeEventListener("abort", abort);
+			stream?.destroy();
+			archive?.close();
+			if (error !== void 0) reject(error);
+			else resolve(files);
+		};
+		const abort = () => finish(signal?.reason ?? require_errors.invalidSnapshot());
+		const files = /* @__PURE__ */ new Map();
+		const names = /* @__PURE__ */ new Set();
+		let decodedBytes = 0;
+		signal?.addEventListener("abort", abort, { once: true });
+		if (signal?.aborted) {
+			abort();
+			return;
+		}
+		(0, yauzl.fromBuffer)(bytes, {
+			lazyEntries: true,
+			decodeStrings: false,
+			validateEntrySizes: true,
+			autoClose: false
+		}, (error, zip) => {
+			if (error) {
+				finish(require_errors.invalidSnapshot(error));
+				return;
+			}
+			archive = zip;
+			if (settled) {
+				zip.close();
+				return;
+			}
+			zip.on("error", (cause) => finish(require_errors.invalidSnapshot(cause)));
+			zip.on("end", () => finish());
+			if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {
+				finish(require_errors.invalidSnapshot());
+				return;
+			}
+			zip.on("entry", (entry) => {
+				try {
+					const rawName = entry.fileName;
+					if (!Buffer.isBuffer(rawName)) throw require_errors.invalidSnapshot();
+					const name = new TextDecoder("utf-8", {
+						fatal: true,
+						ignoreBOM: true
+					}).decode(rawName);
+					const directory = name.endsWith("/");
+					if (!safeRelativePath(directory ? name.slice(0, -1) : name) || names.has(name)) throw require_errors.invalidSnapshot();
+					names.add(name);
+					const fileType = entry.externalFileAttributes >>> 16 & 61440;
+					if (fileType !== 0 && fileType !== (directory ? 16384 : 32768)) throw require_errors.invalidSnapshot();
+					if (entry.isEncrypted() || ![0, 8].includes(entry.compressionMethod)) throw require_errors.invalidSnapshot();
+					if (!Number.isSafeInteger(entry.uncompressedSize) || entry.uncompressedSize < 0) throw require_errors.invalidSnapshot();
+					decodedBytes += entry.uncompressedSize;
+					if (decodedBytes > MAX_SNAPSHOT_BYTES || directory && entry.uncompressedSize !== 0) throw require_errors.invalidSnapshot();
+					const local = entry.relativeOffsetOfLocalHeader;
+					if (local < 0 || local + 30 > bytes.length || bytes.readUInt32LE(local) !== 67324752) throw require_errors.invalidSnapshot();
+					if (bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag || bytes.readUInt16LE(local + 8) !== entry.compressionMethod) throw require_errors.invalidSnapshot();
+					const localNameLength = bytes.readUInt16LE(local + 26);
+					const localExtraLength = bytes.readUInt16LE(local + 28);
+					if (local + 30 + localNameLength + localExtraLength + entry.compressedSize > bytes.length || !bytes.subarray(local + 30, local + 30 + localNameLength).equals(rawName)) throw require_errors.invalidSnapshot();
+					if (!(entry.generalPurposeBitFlag & 8) && (bytes.readUInt32LE(local + 18) !== entry.compressedSize || bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)) throw require_errors.invalidSnapshot();
+					if (directory) {
+						zip.readEntry();
+						return;
+					}
+					zip.openReadStream(entry, (readError, readStream) => {
+						if (readError) {
+							finish(require_errors.invalidSnapshot(readError));
+							return;
+						}
+						stream = readStream;
+						if (settled) {
+							readStream.destroy();
+							return;
+						}
+						const chunks = [];
+						let size = 0;
+						readStream.on("error", (cause) => finish(require_errors.invalidSnapshot(cause)));
+						readStream.on("data", (chunk) => {
+							size += chunk.length;
+							if (size > entry.uncompressedSize || size > MAX_SNAPSHOT_BYTES) {
+								finish(require_errors.invalidSnapshot());
+								return;
+							}
+							chunks.push(chunk);
+						});
+						readStream.on("end", () => {
+							if (settled) return;
+							if (size !== entry.uncompressedSize) {
+								finish(require_errors.invalidSnapshot());
+								return;
+							}
+							files.set(name, Buffer.concat(chunks, size));
+							stream = void 0;
+							zip.readEntry();
+						});
+					});
+				} catch (cause) {
+					finish(require_errors.invalidSnapshot(cause));
+				}
+			});
+			zip.readEntry();
+		});
+	});
+}
+
+//#endregion
+exports.MAX_ARCHIVE_ENTRIES = MAX_ARCHIVE_ENTRIES;
+exports.MAX_SNAPSHOT_BYTES = MAX_SNAPSHOT_BYTES;
+exports.readArchive = readArchive;
+exports.safeRelativePath = safeRelativePath;
+//# sourceMappingURL=archive.cjs.map

package/dist/runtime/intelligence-platform/skill-registry/archive.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.cjs","names":["invalidSnapshot"],"sources":["../../../../src/runtime/intelligence-platform/skill-registry/archive.ts"],"sourcesContent":["import { fromBuffer } from \"yauzl\";\nimport type { Entry, ZipFile } from \"yauzl\";\nimport type { Readable } from \"node:stream\";\nimport { invalidSnapshot } from \"./errors\";\n\n/** Internal corruption bounds, including manifest and directory entries. */\nexport const MAX_ARCHIVE_ENTRIES = 1_000;\nexport const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;\n\nexport function safeRelativePath(path: string): boolean {\n  return (\n    path.length > 0 &&\n    // Reject control bytes in archive paths, including NUL and DEL.\n    // eslint-disable-next-line no-control-regex\n    !/[\\\\\\x00-\\x1f\\x7f]/.test(path) &&\n    !/^[a-z]:/i.test(path) &&\n    path\n      .split(\"/\")\n      .every((part) => part !== \"\" && part !== \".\" && part !== \"..\")\n  );\n}\n\n/** Decode only the listed ZIP namespace. No filesystem is involved. */\nexport function readArchive(\n  bytes: Buffer,\n  signal?: AbortSignal,\n): Promise<Map<string, Buffer>> {\n  return new Promise((resolve, reject) => {\n    let archive: ZipFile | undefined;\n    let stream: Readable | undefined;\n    let settled = false;\n    const finish = (error?: unknown) => {\n      if (settled) return;\n      settled = true;\n      signal?.removeEventListener(\"abort\", abort);\n      stream?.destroy();\n      archive?.close();\n      if (error !== undefined) reject(error);\n      else resolve(files);\n    };\n    const abort = () => finish(signal?.reason ?? invalidSnapshot());\n    const files = new Map<string, Buffer>();\n    const names = new Set<string>();\n    let decodedBytes = 0;\n    signal?.addEventListener(\"abort\", abort, { once: true });\n    if (signal?.aborted) {\n      abort();\n      return;\n    }\n    fromBuffer(\n      bytes,\n      {\n        lazyEntries: true,\n        decodeStrings: false,\n        validateEntrySizes: true,\n        autoClose: false,\n      },\n      (error, zip) => {\n        if (error) {\n          finish(invalidSnapshot(error));\n          return;\n        }\n        archive = zip;\n        if (settled) {\n          zip.close();\n          return;\n        }\n        zip.on(\"error\", (cause: unknown) => finish(invalidSnapshot(cause)));\n        zip.on(\"end\", () => finish());\n        if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {\n          finish(invalidSnapshot());\n          return;\n        }\n        zip.on(\"entry\", (entry: Entry) => {\n          try {\n            // decodeStrings:false preserves raw UTF-8 names instead of normalizing\n            // backslashes or consulting alternate Unicode-path extra fields.\n            const rawName: unknown = entry.fileName;\n            if (!Buffer.isBuffer(rawName)) throw invalidSnapshot();\n            const name = new TextDecoder(\"utf-8\", {\n              fatal: true,\n              ignoreBOM: true,\n            }).decode(rawName);\n            const directory = name.endsWith(\"/\");\n            if (\n              !safeRelativePath(directory ? name.slice(0, -1) : name) ||\n              names.has(name)\n            )\n              throw invalidSnapshot();\n            names.add(name);\n            const fileType = (entry.externalFileAttributes >>> 16) & 0o170000;\n            if (\n              fileType !== 0 &&\n              fileType !== (directory ? 0o040000 : 0o100000)\n            )\n              throw invalidSnapshot();\n            if (\n              entry.isEncrypted() ||\n              ![0, 8].includes(entry.compressionMethod)\n            )\n              throw invalidSnapshot();\n            if (\n              !Number.isSafeInteger(entry.uncompressedSize) ||\n              entry.uncompressedSize < 0\n            )\n              throw invalidSnapshot();\n            decodedBytes += entry.uncompressedSize;\n            if (\n              decodedBytes > MAX_SNAPSHOT_BYTES ||\n              (directory && entry.uncompressedSize !== 0)\n            )\n              throw invalidSnapshot();\n            // Require the central directory and the local entry to name the same\n            // bytes. ZIP data descriptors may leave local sizes unset.\n            const local = entry.relativeOffsetOfLocalHeader;\n            if (\n              local < 0 ||\n              local + 30 > bytes.length ||\n              bytes.readUInt32LE(local) !== 0x04034b50\n            )\n              throw invalidSnapshot();\n            if (\n              bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag ||\n              bytes.readUInt16LE(local + 8) !== entry.compressionMethod\n            )\n              throw invalidSnapshot();\n            const localNameLength = bytes.readUInt16LE(local + 26);\n            const localExtraLength = bytes.readUInt16LE(local + 28);\n            const dataStart = local + 30 + localNameLength + localExtraLength;\n            if (\n              dataStart + entry.compressedSize > bytes.length ||\n              !bytes\n                .subarray(local + 30, local + 30 + localNameLength)\n                .equals(rawName)\n            )\n              throw invalidSnapshot();\n            if (\n              !(entry.generalPurposeBitFlag & 8) &&\n              (bytes.readUInt32LE(local + 18) !== entry.compressedSize ||\n                bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)\n            )\n              throw invalidSnapshot();\n            if (directory) {\n              zip.readEntry();\n              return;\n            }\n            zip.openReadStream(entry, (readError, readStream) => {\n              if (readError) {\n                finish(invalidSnapshot(readError));\n                return;\n              }\n              stream = readStream;\n              if (settled) {\n                readStream.destroy();\n                return;\n              }\n              const chunks: Buffer[] = [];\n              let size = 0;\n              readStream.on(\"error\", (cause: unknown) =>\n                finish(invalidSnapshot(cause)),\n              );\n              readStream.on(\"data\", (chunk: Buffer) => {\n                size += chunk.length;\n                if (\n                  size > entry.uncompressedSize ||\n                  size > MAX_SNAPSHOT_BYTES\n                ) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                chunks.push(chunk);\n              });\n              readStream.on(\"end\", () => {\n                if (settled) return;\n                if (size !== entry.uncompressedSize) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                files.set(name, Buffer.concat(chunks, size));\n                stream = undefined;\n                zip.readEntry();\n              });\n            });\n          } catch (cause) {\n            finish(invalidSnapshot(cause));\n          }\n        });\n        zip.readEntry();\n      },\n    );\n  });\n}\n"],"mappings":";;;;;;AAMA,MAAa,sBAAsB;AACnC,MAAa,qBAAqB,KAAK,OAAO;AAE9C,SAAgB,iBAAiB,MAAuB;AACtD,QACE,KAAK,SAAS,KAGd,CAAC,oBAAoB,KAAK,KAAK,IAC/B,CAAC,WAAW,KAAK,KAAK,IACtB,KACG,MAAM,IAAI,CACV,OAAO,SAAS,SAAS,MAAM,SAAS,OAAO,SAAS,KAAK;;;AAKpE,SAAgB,YACd,OACA,QAC8B;AAC9B,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EACd,MAAM,UAAU,UAAoB;AAClC,OAAI,QAAS;AACb,aAAU;AACV,WAAQ,oBAAoB,SAAS,MAAM;AAC3C,WAAQ,SAAS;AACjB,YAAS,OAAO;AAChB,OAAI,UAAU,OAAW,QAAO,MAAM;OACjC,SAAQ,MAAM;;EAErB,MAAM,cAAc,OAAO,QAAQ,UAAUA,gCAAiB,CAAC;EAC/D,MAAM,wBAAQ,IAAI,KAAqB;EACvC,MAAM,wBAAQ,IAAI,KAAa;EAC/B,IAAI,eAAe;AACnB,UAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACxD,MAAI,QAAQ,SAAS;AACnB,UAAO;AACP;;AAEF,wBACE,OACA;GACE,aAAa;GACb,eAAe;GACf,oBAAoB;GACpB,WAAW;GACZ,GACA,OAAO,QAAQ;AACd,OAAI,OAAO;AACT,WAAOA,+BAAgB,MAAM,CAAC;AAC9B;;AAEF,aAAU;AACV,OAAI,SAAS;AACX,QAAI,OAAO;AACX;;AAEF,OAAI,GAAG,UAAU,UAAmB,OAAOA,+BAAgB,MAAM,CAAC,CAAC;AACnE,OAAI,GAAG,aAAa,QAAQ,CAAC;AAC7B,OAAI,IAAI,aAAa,qBAAqB;AACxC,WAAOA,gCAAiB,CAAC;AACzB;;AAEF,OAAI,GAAG,UAAU,UAAiB;AAChC,QAAI;KAGF,MAAM,UAAmB,MAAM;AAC/B,SAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,OAAMA,gCAAiB;KACtD,MAAM,OAAO,IAAI,YAAY,SAAS;MACpC,OAAO;MACP,WAAW;MACZ,CAAC,CAAC,OAAO,QAAQ;KAClB,MAAM,YAAY,KAAK,SAAS,IAAI;AACpC,SACE,CAAC,iBAAiB,YAAY,KAAK,MAAM,GAAG,GAAG,GAAG,KAAK,IACvD,MAAM,IAAI,KAAK,CAEf,OAAMA,gCAAiB;AACzB,WAAM,IAAI,KAAK;KACf,MAAM,WAAY,MAAM,2BAA2B,KAAM;AACzD,SACE,aAAa,KACb,cAAc,YAAY,QAAW,OAErC,OAAMA,gCAAiB;AACzB,SACE,MAAM,aAAa,IACnB,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,MAAM,kBAAkB,CAEzC,OAAMA,gCAAiB;AACzB,SACE,CAAC,OAAO,cAAc,MAAM,iBAAiB,IAC7C,MAAM,mBAAmB,EAEzB,OAAMA,gCAAiB;AACzB,qBAAgB,MAAM;AACtB,SACE,eAAe,sBACd,aAAa,MAAM,qBAAqB,EAEzC,OAAMA,gCAAiB;KAGzB,MAAM,QAAQ,MAAM;AACpB,SACE,QAAQ,KACR,QAAQ,KAAK,MAAM,UACnB,MAAM,aAAa,MAAM,KAAK,SAE9B,OAAMA,gCAAiB;AACzB,SACE,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,yBACxC,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,kBAExC,OAAMA,gCAAiB;KACzB,MAAM,kBAAkB,MAAM,aAAa,QAAQ,GAAG;KACtD,MAAM,mBAAmB,MAAM,aAAa,QAAQ,GAAG;AAEvD,SADkB,QAAQ,KAAK,kBAAkB,mBAEnC,MAAM,iBAAiB,MAAM,UACzC,CAAC,MACE,SAAS,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,CAClD,OAAO,QAAQ,CAElB,OAAMA,gCAAiB;AACzB,SACE,EAAE,MAAM,wBAAwB,OAC/B,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBACxC,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBAE3C,OAAMA,gCAAiB;AACzB,SAAI,WAAW;AACb,UAAI,WAAW;AACf;;AAEF,SAAI,eAAe,QAAQ,WAAW,eAAe;AACnD,UAAI,WAAW;AACb,cAAOA,+BAAgB,UAAU,CAAC;AAClC;;AAEF,eAAS;AACT,UAAI,SAAS;AACX,kBAAW,SAAS;AACpB;;MAEF,MAAM,SAAmB,EAAE;MAC3B,IAAI,OAAO;AACX,iBAAW,GAAG,UAAU,UACtB,OAAOA,+BAAgB,MAAM,CAAC,CAC/B;AACD,iBAAW,GAAG,SAAS,UAAkB;AACvC,eAAQ,MAAM;AACd,WACE,OAAO,MAAM,oBACb,OAAO,oBACP;AACA,eAAOA,gCAAiB,CAAC;AACzB;;AAEF,cAAO,KAAK,MAAM;QAClB;AACF,iBAAW,GAAG,aAAa;AACzB,WAAI,QAAS;AACb,WAAI,SAAS,MAAM,kBAAkB;AACnC,eAAOA,gCAAiB,CAAC;AACzB;;AAEF,aAAM,IAAI,MAAM,OAAO,OAAO,QAAQ,KAAK,CAAC;AAC5C,gBAAS;AACT,WAAI,WAAW;QACf;OACF;aACK,OAAO;AACd,YAAOA,+BAAgB,MAAM,CAAC;;KAEhC;AACF,OAAI,WAAW;IAElB;GACD"}

package/dist/runtime/intelligence-platform/skill-registry/archive.d.cts

@@ -0,0 +1,10 @@
+//#region src/runtime/intelligence-platform/skill-registry/archive.d.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+declare const MAX_ARCHIVE_ENTRIES = 1000;
+declare const MAX_SNAPSHOT_BYTES: number;
+declare function safeRelativePath(path: string): boolean;
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+declare function readArchive(bytes: Buffer, signal?: AbortSignal): Promise<Map<string, Buffer>>;
+//#endregion
+export { MAX_ARCHIVE_ENTRIES, MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath };
+//# sourceMappingURL=archive.d.cts.map

package/dist/runtime/intelligence-platform/skill-registry/archive.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.cts","names":[],"sources":["../../../../src/runtime/intelligence-platform/skill-registry/archive.ts"],"mappings":";;cAMa,mBAAA;AAAA,cACA,kBAAA;AAAA,iBAEG,gBAAA,CAAiB,IAAA;;iBAcjB,WAAA,CACd,KAAA,EAAO,MAAA,EACP,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,GAAA,SAAY,MAAA"}

package/dist/runtime/intelligence-platform/skill-registry/archive.d.mts

@@ -0,0 +1,10 @@
+//#region src/runtime/intelligence-platform/skill-registry/archive.d.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+declare const MAX_ARCHIVE_ENTRIES = 1000;
+declare const MAX_SNAPSHOT_BYTES: number;
+declare function safeRelativePath(path: string): boolean;
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+declare function readArchive(bytes: Buffer, signal?: AbortSignal): Promise<Map<string, Buffer>>;
+//#endregion
+export { MAX_ARCHIVE_ENTRIES, MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath };
+//# sourceMappingURL=archive.d.mts.map

package/dist/runtime/intelligence-platform/skill-registry/archive.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.mts","names":[],"sources":["../../../../src/runtime/intelligence-platform/skill-registry/archive.ts"],"mappings":";;cAMa,mBAAA;AAAA,cACA,kBAAA;AAAA,iBAEG,gBAAA,CAAiB,IAAA;;iBAcjB,WAAA,CACd,KAAA,EAAO,MAAA,EACP,MAAA,GAAS,WAAA,GACR,OAAA,CAAQ,GAAA,SAAY,MAAA"}

package/dist/runtime/intelligence-platform/skill-registry/archive.mjs

@@ -0,0 +1,127 @@
+import { invalidSnapshot } from "./errors.mjs";
+import { fromBuffer } from "yauzl";
+
+//#region src/runtime/intelligence-platform/skill-registry/archive.ts
+/** Internal corruption bounds, including manifest and directory entries. */
+const MAX_ARCHIVE_ENTRIES = 1e3;
+const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
+function safeRelativePath(path) {
+	return path.length > 0 && !/[\\\x00-\x1f\x7f]/.test(path) && !/^[a-z]:/i.test(path) && path.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+/** Decode only the listed ZIP namespace. No filesystem is involved. */
+function readArchive(bytes, signal) {
+	return new Promise((resolve, reject) => {
+		let archive;
+		let stream;
+		let settled = false;
+		const finish = (error) => {
+			if (settled) return;
+			settled = true;
+			signal?.removeEventListener("abort", abort);
+			stream?.destroy();
+			archive?.close();
+			if (error !== void 0) reject(error);
+			else resolve(files);
+		};
+		const abort = () => finish(signal?.reason ?? invalidSnapshot());
+		const files = /* @__PURE__ */ new Map();
+		const names = /* @__PURE__ */ new Set();
+		let decodedBytes = 0;
+		signal?.addEventListener("abort", abort, { once: true });
+		if (signal?.aborted) {
+			abort();
+			return;
+		}
+		fromBuffer(bytes, {
+			lazyEntries: true,
+			decodeStrings: false,
+			validateEntrySizes: true,
+			autoClose: false
+		}, (error, zip) => {
+			if (error) {
+				finish(invalidSnapshot(error));
+				return;
+			}
+			archive = zip;
+			if (settled) {
+				zip.close();
+				return;
+			}
+			zip.on("error", (cause) => finish(invalidSnapshot(cause)));
+			zip.on("end", () => finish());
+			if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {
+				finish(invalidSnapshot());
+				return;
+			}
+			zip.on("entry", (entry) => {
+				try {
+					const rawName = entry.fileName;
+					if (!Buffer.isBuffer(rawName)) throw invalidSnapshot();
+					const name = new TextDecoder("utf-8", {
+						fatal: true,
+						ignoreBOM: true
+					}).decode(rawName);
+					const directory = name.endsWith("/");
+					if (!safeRelativePath(directory ? name.slice(0, -1) : name) || names.has(name)) throw invalidSnapshot();
+					names.add(name);
+					const fileType = entry.externalFileAttributes >>> 16 & 61440;
+					if (fileType !== 0 && fileType !== (directory ? 16384 : 32768)) throw invalidSnapshot();
+					if (entry.isEncrypted() || ![0, 8].includes(entry.compressionMethod)) throw invalidSnapshot();
+					if (!Number.isSafeInteger(entry.uncompressedSize) || entry.uncompressedSize < 0) throw invalidSnapshot();
+					decodedBytes += entry.uncompressedSize;
+					if (decodedBytes > MAX_SNAPSHOT_BYTES || directory && entry.uncompressedSize !== 0) throw invalidSnapshot();
+					const local = entry.relativeOffsetOfLocalHeader;
+					if (local < 0 || local + 30 > bytes.length || bytes.readUInt32LE(local) !== 67324752) throw invalidSnapshot();
+					if (bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag || bytes.readUInt16LE(local + 8) !== entry.compressionMethod) throw invalidSnapshot();
+					const localNameLength = bytes.readUInt16LE(local + 26);
+					const localExtraLength = bytes.readUInt16LE(local + 28);
+					if (local + 30 + localNameLength + localExtraLength + entry.compressedSize > bytes.length || !bytes.subarray(local + 30, local + 30 + localNameLength).equals(rawName)) throw invalidSnapshot();
+					if (!(entry.generalPurposeBitFlag & 8) && (bytes.readUInt32LE(local + 18) !== entry.compressedSize || bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)) throw invalidSnapshot();
+					if (directory) {
+						zip.readEntry();
+						return;
+					}
+					zip.openReadStream(entry, (readError, readStream) => {
+						if (readError) {
+							finish(invalidSnapshot(readError));
+							return;
+						}
+						stream = readStream;
+						if (settled) {
+							readStream.destroy();
+							return;
+						}
+						const chunks = [];
+						let size = 0;
+						readStream.on("error", (cause) => finish(invalidSnapshot(cause)));
+						readStream.on("data", (chunk) => {
+							size += chunk.length;
+							if (size > entry.uncompressedSize || size > MAX_SNAPSHOT_BYTES) {
+								finish(invalidSnapshot());
+								return;
+							}
+							chunks.push(chunk);
+						});
+						readStream.on("end", () => {
+							if (settled) return;
+							if (size !== entry.uncompressedSize) {
+								finish(invalidSnapshot());
+								return;
+							}
+							files.set(name, Buffer.concat(chunks, size));
+							stream = void 0;
+							zip.readEntry();
+						});
+					});
+				} catch (cause) {
+					finish(invalidSnapshot(cause));
+				}
+			});
+			zip.readEntry();
+		});
+	});
+}
+
+//#endregion
+export { MAX_ARCHIVE_ENTRIES, MAX_SNAPSHOT_BYTES, readArchive, safeRelativePath };
+//# sourceMappingURL=archive.mjs.map

package/dist/runtime/intelligence-platform/skill-registry/archive.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.mjs","names":[],"sources":["../../../../src/runtime/intelligence-platform/skill-registry/archive.ts"],"sourcesContent":["import { fromBuffer } from \"yauzl\";\nimport type { Entry, ZipFile } from \"yauzl\";\nimport type { Readable } from \"node:stream\";\nimport { invalidSnapshot } from \"./errors\";\n\n/** Internal corruption bounds, including manifest and directory entries. */\nexport const MAX_ARCHIVE_ENTRIES = 1_000;\nexport const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;\n\nexport function safeRelativePath(path: string): boolean {\n  return (\n    path.length > 0 &&\n    // Reject control bytes in archive paths, including NUL and DEL.\n    // eslint-disable-next-line no-control-regex\n    !/[\\\\\\x00-\\x1f\\x7f]/.test(path) &&\n    !/^[a-z]:/i.test(path) &&\n    path\n      .split(\"/\")\n      .every((part) => part !== \"\" && part !== \".\" && part !== \"..\")\n  );\n}\n\n/** Decode only the listed ZIP namespace. No filesystem is involved. */\nexport function readArchive(\n  bytes: Buffer,\n  signal?: AbortSignal,\n): Promise<Map<string, Buffer>> {\n  return new Promise((resolve, reject) => {\n    let archive: ZipFile | undefined;\n    let stream: Readable | undefined;\n    let settled = false;\n    const finish = (error?: unknown) => {\n      if (settled) return;\n      settled = true;\n      signal?.removeEventListener(\"abort\", abort);\n      stream?.destroy();\n      archive?.close();\n      if (error !== undefined) reject(error);\n      else resolve(files);\n    };\n    const abort = () => finish(signal?.reason ?? invalidSnapshot());\n    const files = new Map<string, Buffer>();\n    const names = new Set<string>();\n    let decodedBytes = 0;\n    signal?.addEventListener(\"abort\", abort, { once: true });\n    if (signal?.aborted) {\n      abort();\n      return;\n    }\n    fromBuffer(\n      bytes,\n      {\n        lazyEntries: true,\n        decodeStrings: false,\n        validateEntrySizes: true,\n        autoClose: false,\n      },\n      (error, zip) => {\n        if (error) {\n          finish(invalidSnapshot(error));\n          return;\n        }\n        archive = zip;\n        if (settled) {\n          zip.close();\n          return;\n        }\n        zip.on(\"error\", (cause: unknown) => finish(invalidSnapshot(cause)));\n        zip.on(\"end\", () => finish());\n        if (zip.entryCount > MAX_ARCHIVE_ENTRIES) {\n          finish(invalidSnapshot());\n          return;\n        }\n        zip.on(\"entry\", (entry: Entry) => {\n          try {\n            // decodeStrings:false preserves raw UTF-8 names instead of normalizing\n            // backslashes or consulting alternate Unicode-path extra fields.\n            const rawName: unknown = entry.fileName;\n            if (!Buffer.isBuffer(rawName)) throw invalidSnapshot();\n            const name = new TextDecoder(\"utf-8\", {\n              fatal: true,\n              ignoreBOM: true,\n            }).decode(rawName);\n            const directory = name.endsWith(\"/\");\n            if (\n              !safeRelativePath(directory ? name.slice(0, -1) : name) ||\n              names.has(name)\n            )\n              throw invalidSnapshot();\n            names.add(name);\n            const fileType = (entry.externalFileAttributes >>> 16) & 0o170000;\n            if (\n              fileType !== 0 &&\n              fileType !== (directory ? 0o040000 : 0o100000)\n            )\n              throw invalidSnapshot();\n            if (\n              entry.isEncrypted() ||\n              ![0, 8].includes(entry.compressionMethod)\n            )\n              throw invalidSnapshot();\n            if (\n              !Number.isSafeInteger(entry.uncompressedSize) ||\n              entry.uncompressedSize < 0\n            )\n              throw invalidSnapshot();\n            decodedBytes += entry.uncompressedSize;\n            if (\n              decodedBytes > MAX_SNAPSHOT_BYTES ||\n              (directory && entry.uncompressedSize !== 0)\n            )\n              throw invalidSnapshot();\n            // Require the central directory and the local entry to name the same\n            // bytes. ZIP data descriptors may leave local sizes unset.\n            const local = entry.relativeOffsetOfLocalHeader;\n            if (\n              local < 0 ||\n              local + 30 > bytes.length ||\n              bytes.readUInt32LE(local) !== 0x04034b50\n            )\n              throw invalidSnapshot();\n            if (\n              bytes.readUInt16LE(local + 6) !== entry.generalPurposeBitFlag ||\n              bytes.readUInt16LE(local + 8) !== entry.compressionMethod\n            )\n              throw invalidSnapshot();\n            const localNameLength = bytes.readUInt16LE(local + 26);\n            const localExtraLength = bytes.readUInt16LE(local + 28);\n            const dataStart = local + 30 + localNameLength + localExtraLength;\n            if (\n              dataStart + entry.compressedSize > bytes.length ||\n              !bytes\n                .subarray(local + 30, local + 30 + localNameLength)\n                .equals(rawName)\n            )\n              throw invalidSnapshot();\n            if (\n              !(entry.generalPurposeBitFlag & 8) &&\n              (bytes.readUInt32LE(local + 18) !== entry.compressedSize ||\n                bytes.readUInt32LE(local + 22) !== entry.uncompressedSize)\n            )\n              throw invalidSnapshot();\n            if (directory) {\n              zip.readEntry();\n              return;\n            }\n            zip.openReadStream(entry, (readError, readStream) => {\n              if (readError) {\n                finish(invalidSnapshot(readError));\n                return;\n              }\n              stream = readStream;\n              if (settled) {\n                readStream.destroy();\n                return;\n              }\n              const chunks: Buffer[] = [];\n              let size = 0;\n              readStream.on(\"error\", (cause: unknown) =>\n                finish(invalidSnapshot(cause)),\n              );\n              readStream.on(\"data\", (chunk: Buffer) => {\n                size += chunk.length;\n                if (\n                  size > entry.uncompressedSize ||\n                  size > MAX_SNAPSHOT_BYTES\n                ) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                chunks.push(chunk);\n              });\n              readStream.on(\"end\", () => {\n                if (settled) return;\n                if (size !== entry.uncompressedSize) {\n                  finish(invalidSnapshot());\n                  return;\n                }\n                files.set(name, Buffer.concat(chunks, size));\n                stream = undefined;\n                zip.readEntry();\n              });\n            });\n          } catch (cause) {\n            finish(invalidSnapshot(cause));\n          }\n        });\n        zip.readEntry();\n      },\n    );\n  });\n}\n"],"mappings":";;;;;AAMA,MAAa,sBAAsB;AACnC,MAAa,qBAAqB,KAAK,OAAO;AAE9C,SAAgB,iBAAiB,MAAuB;AACtD,QACE,KAAK,SAAS,KAGd,CAAC,oBAAoB,KAAK,KAAK,IAC/B,CAAC,WAAW,KAAK,KAAK,IACtB,KACG,MAAM,IAAI,CACV,OAAO,SAAS,SAAS,MAAM,SAAS,OAAO,SAAS,KAAK;;;AAKpE,SAAgB,YACd,OACA,QAC8B;AAC9B,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI;EACJ,IAAI;EACJ,IAAI,UAAU;EACd,MAAM,UAAU,UAAoB;AAClC,OAAI,QAAS;AACb,aAAU;AACV,WAAQ,oBAAoB,SAAS,MAAM;AAC3C,WAAQ,SAAS;AACjB,YAAS,OAAO;AAChB,OAAI,UAAU,OAAW,QAAO,MAAM;OACjC,SAAQ,MAAM;;EAErB,MAAM,cAAc,OAAO,QAAQ,UAAU,iBAAiB,CAAC;EAC/D,MAAM,wBAAQ,IAAI,KAAqB;EACvC,MAAM,wBAAQ,IAAI,KAAa;EAC/B,IAAI,eAAe;AACnB,UAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AACxD,MAAI,QAAQ,SAAS;AACnB,UAAO;AACP;;AAEF,aACE,OACA;GACE,aAAa;GACb,eAAe;GACf,oBAAoB;GACpB,WAAW;GACZ,GACA,OAAO,QAAQ;AACd,OAAI,OAAO;AACT,WAAO,gBAAgB,MAAM,CAAC;AAC9B;;AAEF,aAAU;AACV,OAAI,SAAS;AACX,QAAI,OAAO;AACX;;AAEF,OAAI,GAAG,UAAU,UAAmB,OAAO,gBAAgB,MAAM,CAAC,CAAC;AACnE,OAAI,GAAG,aAAa,QAAQ,CAAC;AAC7B,OAAI,IAAI,aAAa,qBAAqB;AACxC,WAAO,iBAAiB,CAAC;AACzB;;AAEF,OAAI,GAAG,UAAU,UAAiB;AAChC,QAAI;KAGF,MAAM,UAAmB,MAAM;AAC/B,SAAI,CAAC,OAAO,SAAS,QAAQ,CAAE,OAAM,iBAAiB;KACtD,MAAM,OAAO,IAAI,YAAY,SAAS;MACpC,OAAO;MACP,WAAW;MACZ,CAAC,CAAC,OAAO,QAAQ;KAClB,MAAM,YAAY,KAAK,SAAS,IAAI;AACpC,SACE,CAAC,iBAAiB,YAAY,KAAK,MAAM,GAAG,GAAG,GAAG,KAAK,IACvD,MAAM,IAAI,KAAK,CAEf,OAAM,iBAAiB;AACzB,WAAM,IAAI,KAAK;KACf,MAAM,WAAY,MAAM,2BAA2B,KAAM;AACzD,SACE,aAAa,KACb,cAAc,YAAY,QAAW,OAErC,OAAM,iBAAiB;AACzB,SACE,MAAM,aAAa,IACnB,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,MAAM,kBAAkB,CAEzC,OAAM,iBAAiB;AACzB,SACE,CAAC,OAAO,cAAc,MAAM,iBAAiB,IAC7C,MAAM,mBAAmB,EAEzB,OAAM,iBAAiB;AACzB,qBAAgB,MAAM;AACtB,SACE,eAAe,sBACd,aAAa,MAAM,qBAAqB,EAEzC,OAAM,iBAAiB;KAGzB,MAAM,QAAQ,MAAM;AACpB,SACE,QAAQ,KACR,QAAQ,KAAK,MAAM,UACnB,MAAM,aAAa,MAAM,KAAK,SAE9B,OAAM,iBAAiB;AACzB,SACE,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,yBACxC,MAAM,aAAa,QAAQ,EAAE,KAAK,MAAM,kBAExC,OAAM,iBAAiB;KACzB,MAAM,kBAAkB,MAAM,aAAa,QAAQ,GAAG;KACtD,MAAM,mBAAmB,MAAM,aAAa,QAAQ,GAAG;AAEvD,SADkB,QAAQ,KAAK,kBAAkB,mBAEnC,MAAM,iBAAiB,MAAM,UACzC,CAAC,MACE,SAAS,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,CAClD,OAAO,QAAQ,CAElB,OAAM,iBAAiB;AACzB,SACE,EAAE,MAAM,wBAAwB,OAC/B,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBACxC,MAAM,aAAa,QAAQ,GAAG,KAAK,MAAM,kBAE3C,OAAM,iBAAiB;AACzB,SAAI,WAAW;AACb,UAAI,WAAW;AACf;;AAEF,SAAI,eAAe,QAAQ,WAAW,eAAe;AACnD,UAAI,WAAW;AACb,cAAO,gBAAgB,UAAU,CAAC;AAClC;;AAEF,eAAS;AACT,UAAI,SAAS;AACX,kBAAW,SAAS;AACpB;;MAEF,MAAM,SAAmB,EAAE;MAC3B,IAAI,OAAO;AACX,iBAAW,GAAG,UAAU,UACtB,OAAO,gBAAgB,MAAM,CAAC,CAC/B;AACD,iBAAW,GAAG,SAAS,UAAkB;AACvC,eAAQ,MAAM;AACd,WACE,OAAO,MAAM,oBACb,OAAO,oBACP;AACA,eAAO,iBAAiB,CAAC;AACzB;;AAEF,cAAO,KAAK,MAAM;QAClB;AACF,iBAAW,GAAG,aAAa;AACzB,WAAI,QAAS;AACb,WAAI,SAAS,MAAM,kBAAkB;AACnC,eAAO,iBAAiB,CAAC;AACzB;;AAEF,aAAM,IAAI,MAAM,OAAO,OAAO,QAAQ,KAAK,CAAC;AAC5C,gBAAS;AACT,WAAI,WAAW;QACf;OACF;aACK,OAAO;AACd,YAAO,gBAAgB,MAAM,CAAC;;KAEhC;AACF,OAAI,WAAW;IAElB;GACD"}

package/dist/runtime/intelligence-platform/skill-registry/config.cjs

@@ -0,0 +1,65 @@
+const require_learned_skills = require('../learned-skills.cjs');
+const require_client = require('../client.cjs');
+
+//#region src/runtime/intelligence-platform/skill-registry/config.ts
+/** Resolve once. Never retain the options object, environment, or a second key. */
+function resolveRegistryConfig(options = {}, environment = process.env) {
+	try {
+		const multiple = options.containers !== void 0;
+		if (multiple && (options.containerId !== void 0 || options.revision !== void 0)) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+		const containerId = multiple ? void 0 : options.containerId ?? environment.CPK_INTELLIGENCE_LEARNING_CONTAINER_ID;
+		const revision = multiple ? void 0 : options.revision ?? environment.CPK_INTELLIGENCE_SKILLS_REVISION;
+		let containers;
+		if (multiple) {
+			if (!Array.isArray(options.containers) || options.containers.length === 0 || options.containers.length > 50) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+			const seen = /* @__PURE__ */ new Set();
+			containers = Object.freeze(options.containers.map((source) => {
+				if (!source || typeof source.id !== "string" || !source.id.trim() || /[\u0000-\u001f\u007f]/.test(source.id) || seen.has(source.id) || source.revision !== void 0 && (typeof source.revision !== "string" || !source.revision.trim())) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+				encodeURIComponent(source.id);
+				seen.add(source.id);
+				return Object.freeze({
+					id: source.id,
+					...source.revision !== void 0 ? { revision: source.revision } : {}
+				});
+			}));
+		}
+		const freshnessWindowMs = options.freshnessWindowMs ?? 5e3;
+		const requestTimeoutMs = options.requestTimeoutMs ?? 5e3;
+		const debug = options.debug ?? false;
+		if (!multiple && (typeof containerId !== "string" || !containerId.trim()) || revision !== void 0 && (typeof revision !== "string" || revision.length === 0) || !Number.isSafeInteger(freshnessWindowMs) || freshnessWindowMs < 0 || !Number.isSafeInteger(requestTimeoutMs) || requestTimeoutMs < 1 || requestTimeoutMs > 2147483647 || typeof debug !== "boolean") throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+		let client = options.client;
+		if (client !== void 0) {
+			if (!client || typeof (multiple ? client.getLearnedSkillsSnapshots : client.getLearnedSkillsSnapshot) !== "function") throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+		} else {
+			const apiKey = options.apiKey ?? environment.CPK_INTELLIGENCE_API_KEY;
+			const apiUrl = options.apiUrl ?? environment.INTELLIGENCE_API_URL;
+			if (typeof apiKey !== "string" || !apiKey.trim()) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+			if (apiUrl?.trim()) {
+				const url = new URL(apiUrl);
+				if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false);
+			}
+			client = new require_client.CopilotKitIntelligence({
+				apiKey,
+				...apiUrl !== void 0 ? { apiUrl } : {},
+				...apiUrl?.trim() ? { wsUrl: "wss://realtime.intelligence.copilotkit.ai" } : {}
+			});
+		}
+		return Object.freeze({
+			client,
+			...containers ? { containers } : {
+				containerId,
+				...revision !== void 0 ? { revision } : {}
+			},
+			freshnessWindowMs,
+			requestTimeoutMs,
+			debug
+		});
+	} catch (error) {
+		if (error instanceof require_learned_skills.LearnedSkillsError) throw error;
+		throw new require_learned_skills.LearnedSkillsError("INVALID_CONFIG", false, error);
+	}
+}
+
+//#endregion
+exports.resolveRegistryConfig = resolveRegistryConfig;
+//# sourceMappingURL=config.cjs.map

package/dist/runtime/intelligence-platform/skill-registry/config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.cjs","names":["SkillDeliveryError","CopilotKitIntelligence"],"sources":["../../../../src/runtime/intelligence-platform/skill-registry/config.ts"],"sourcesContent":["import { CopilotKitIntelligence } from \"../client\";\nimport { SkillDeliveryError } from \"./errors\";\n\nexport interface SkillRegistryCommonOptions {\n  client?: CopilotKitIntelligence;\n  apiKey?: string;\n  apiUrl?: string;\n  freshnessWindowMs?: number;\n  requestTimeoutMs?: number;\n  debug?: boolean;\n}\n/** One published container and an optional exact revision pin. */\nexport interface SkillRegistryContainer {\n  readonly id: string;\n  readonly revision?: string;\n}\n\n/** Legacy selection and explicit multi-container selection cannot be combined. */\nexport type SkillRegistryOptions = SkillRegistryCommonOptions &\n  (\n    | { containerId?: string; revision?: string; containers?: never }\n    | {\n        containers: readonly SkillRegistryContainer[];\n        containerId?: never;\n        revision?: never;\n      }\n  );\n\ninterface RegistryCommonConfig {\n  readonly client: CopilotKitIntelligence;\n  readonly freshnessWindowMs: number;\n  readonly requestTimeoutMs: number;\n  readonly debug: boolean;\n}\n\nexport type SingleContainerConfig = RegistryCommonConfig & {\n  readonly containerId: string;\n  readonly revision?: string;\n  readonly containers?: never;\n};\n\nexport type RegistryConfig =\n  | SingleContainerConfig\n  | (RegistryCommonConfig & {\n      readonly containers: readonly SkillRegistryContainer[];\n      readonly containerId?: never;\n      readonly revision?: never;\n    });\n\n/** Resolve once. Never retain the options object, environment, or a second key. */\nexport function resolveRegistryConfig(\n  options: SkillRegistryOptions = {},\n  environment: NodeJS.ProcessEnv = process.env,\n): RegistryConfig {\n  try {\n    const multiple = options.containers !== undefined;\n    if (\n      multiple &&\n      (options.containerId !== undefined || options.revision !== undefined)\n    ) {\n      throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n    }\n    const containerId = multiple\n      ? undefined\n      : (options.containerId ??\n        environment.CPK_INTELLIGENCE_LEARNING_CONTAINER_ID);\n    const revision = multiple\n      ? undefined\n      : (options.revision ?? environment.CPK_INTELLIGENCE_SKILLS_REVISION);\n    let containers: readonly SkillRegistryContainer[] | undefined;\n    if (multiple) {\n      if (\n        !Array.isArray(options.containers) ||\n        options.containers.length === 0 ||\n        options.containers.length > 50\n      ) {\n        throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n      }\n      const seen = new Set<string>();\n      containers = Object.freeze(\n        options.containers.map((source) => {\n          if (\n            !source ||\n            typeof source.id !== \"string\" ||\n            !source.id.trim() ||\n            // Reject control characters in caller-provided container IDs.\n            // eslint-disable-next-line no-control-regex\n            /[\\u0000-\\u001f\\u007f]/.test(source.id) ||\n            seen.has(source.id) ||\n            (source.revision !== undefined &&\n              (typeof source.revision !== \"string\" || !source.revision.trim()))\n          ) {\n            throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n          }\n          // Reject malformed Unicode before constructing a qualified tool name.\n          encodeURIComponent(source.id);\n          seen.add(source.id);\n          return Object.freeze({\n            id: source.id,\n            ...(source.revision !== undefined\n              ? { revision: source.revision }\n              : {}),\n          });\n        }),\n      );\n    }\n    const freshnessWindowMs = options.freshnessWindowMs ?? 5_000;\n    const requestTimeoutMs = options.requestTimeoutMs ?? 5_000;\n    const debug = options.debug ?? false;\n    if (\n      (!multiple && (typeof containerId !== \"string\" || !containerId.trim())) ||\n      (revision !== undefined &&\n        (typeof revision !== \"string\" || revision.length === 0)) ||\n      !Number.isSafeInteger(freshnessWindowMs) ||\n      freshnessWindowMs < 0 ||\n      !Number.isSafeInteger(requestTimeoutMs) ||\n      requestTimeoutMs < 1 ||\n      requestTimeoutMs > 2_147_483_647 ||\n      typeof debug !== \"boolean\"\n    )\n      throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n    let client = options.client;\n    if (client !== undefined) {\n      if (\n        !client ||\n        typeof (multiple\n          ? client.getLearnedSkillsSnapshots\n          : client.getLearnedSkillsSnapshot) !== \"function\"\n      )\n        throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n    } else {\n      const apiKey = options.apiKey ?? environment.CPK_INTELLIGENCE_API_KEY;\n      const apiUrl = options.apiUrl ?? environment.INTELLIGENCE_API_URL;\n      if (typeof apiKey !== \"string\" || !apiKey.trim())\n        throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n      if (apiUrl?.trim()) {\n        const url = new URL(apiUrl);\n        if (\n          ![\"http:\", \"https:\"].includes(url.protocol) ||\n          url.username ||\n          url.password ||\n          url.search ||\n          url.hash\n        )\n          throw new SkillDeliveryError(\"INVALID_CONFIG\", false);\n      }\n      client = new CopilotKitIntelligence({\n        apiKey,\n        ...(apiUrl !== undefined ? { apiUrl } : {}),\n        // This private helper client uses REST only. Explicitly retain the\n        // canonical websocket default to prevent an irrelevant host warning.\n        ...(apiUrl?.trim()\n          ? { wsUrl: \"wss://realtime.intelligence.copilotkit.ai\" }\n          : {}),\n      });\n    }\n    return Object.freeze({\n      client,\n      ...(containers\n        ? { containers }\n        : {\n            containerId: containerId!,\n            ...(revision !== undefined ? { revision } : {}),\n          }),\n      freshnessWindowMs,\n      requestTimeoutMs,\n      debug,\n    });\n  } catch (error) {\n    if (error instanceof SkillDeliveryError) throw error;\n    throw new SkillDeliveryError(\"INVALID_CONFIG\", false, error);\n  }\n}\n"],"mappings":";;;;;AAkDA,SAAgB,sBACd,UAAgC,EAAE,EAClC,cAAiC,QAAQ,KACzB;AAChB,KAAI;EACF,MAAM,WAAW,QAAQ,eAAe;AACxC,MACE,aACC,QAAQ,gBAAgB,UAAa,QAAQ,aAAa,QAE3D,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;EAEvD,MAAM,cAAc,WAChB,SACC,QAAQ,eACT,YAAY;EAChB,MAAM,WAAW,WACb,SACC,QAAQ,YAAY,YAAY;EACrC,IAAI;AACJ,MAAI,UAAU;AACZ,OACE,CAAC,MAAM,QAAQ,QAAQ,WAAW,IAClC,QAAQ,WAAW,WAAW,KAC9B,QAAQ,WAAW,SAAS,GAE5B,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;GAEvD,MAAM,uBAAO,IAAI,KAAa;AAC9B,gBAAa,OAAO,OAClB,QAAQ,WAAW,KAAK,WAAW;AACjC,QACE,CAAC,UACD,OAAO,OAAO,OAAO,YACrB,CAAC,OAAO,GAAG,MAAM,IAGjB,wBAAwB,KAAK,OAAO,GAAG,IACvC,KAAK,IAAI,OAAO,GAAG,IAClB,OAAO,aAAa,WAClB,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,SAAS,MAAM,EAEjE,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;AAGvD,uBAAmB,OAAO,GAAG;AAC7B,SAAK,IAAI,OAAO,GAAG;AACnB,WAAO,OAAO,OAAO;KACnB,IAAI,OAAO;KACX,GAAI,OAAO,aAAa,SACpB,EAAE,UAAU,OAAO,UAAU,GAC7B,EAAE;KACP,CAAC;KACF,CACH;;EAEH,MAAM,oBAAoB,QAAQ,qBAAqB;EACvD,MAAM,mBAAmB,QAAQ,oBAAoB;EACrD,MAAM,QAAQ,QAAQ,SAAS;AAC/B,MACG,CAAC,aAAa,OAAO,gBAAgB,YAAY,CAAC,YAAY,MAAM,KACpE,aAAa,WACX,OAAO,aAAa,YAAY,SAAS,WAAW,MACvD,CAAC,OAAO,cAAc,kBAAkB,IACxC,oBAAoB,KACpB,CAAC,OAAO,cAAc,iBAAiB,IACvC,mBAAmB,KACnB,mBAAmB,cACnB,OAAO,UAAU,UAEjB,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;EACvD,IAAI,SAAS,QAAQ;AACrB,MAAI,WAAW,QACb;OACE,CAAC,UACD,QAAQ,WACJ,OAAO,4BACP,OAAO,8BAA8B,WAEzC,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;SAClD;GACL,MAAM,SAAS,QAAQ,UAAU,YAAY;GAC7C,MAAM,SAAS,QAAQ,UAAU,YAAY;AAC7C,OAAI,OAAO,WAAW,YAAY,CAAC,OAAO,MAAM,CAC9C,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;AACvD,OAAI,QAAQ,MAAM,EAAE;IAClB,MAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,QACE,CAAC,CAAC,SAAS,SAAS,CAAC,SAAS,IAAI,SAAS,IAC3C,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,KAEJ,OAAM,IAAIA,0CAAmB,kBAAkB,MAAM;;AAEzD,YAAS,IAAIC,sCAAuB;IAClC;IACA,GAAI,WAAW,SAAY,EAAE,QAAQ,GAAG,EAAE;IAG1C,GAAI,QAAQ,MAAM,GACd,EAAE,OAAO,6CAA6C,GACtD,EAAE;IACP,CAAC;;AAEJ,SAAO,OAAO,OAAO;GACnB;GACA,GAAI,aACA,EAAE,YAAY,GACd;IACe;IACb,GAAI,aAAa,SAAY,EAAE,UAAU,GAAG,EAAE;IAC/C;GACL;GACA;GACA;GACD,CAAC;UACK,OAAO;AACd,MAAI,iBAAiBD,0CAAoB,OAAM;AAC/C,QAAM,IAAIA,0CAAmB,kBAAkB,OAAO,MAAM"}