@dharma-ai-labs/agent-fabric 0.2.49 → 0.2.50

package/dist/schemas/repository-role-metadata.schema.json

@@ -0,0 +1,82 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "dharma.repository-role-metadata/v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "organizationId", "observationId", "observedAt", "integrity", "scope", "operation", "stage", "role", "discovery", "sharedRepositoryReady", "communicationReady", "sourceFingerprintVerified", "currentAuthorizationVerified", "contactAuthority", "presence", "limitations"],
+  "properties": {
+    "schema": {"const": "dharma.repository-role-metadata/v1"},
+    "organizationId": {"$ref": "#/$defs/organization"},
+    "observationId": {"$ref": "#/$defs/uuid"},
+    "observedAt": {"type": "string", "format": "date-time", "maxLength": 24},
+    "integrity": {
+      "type": "object", "additionalProperties": false, "required": ["kind", "sha256"],
+      "properties": {"kind": {"const": "local_hash_not_signature"}, "sha256": {"$ref": "#/$defs/hash"}}
+    },
+    "scope": {
+      "type": "object", "additionalProperties": false,
+      "required": ["organizationId", "workspaceId", "repositoryBindingId", "repositoryAgentId", "endpointId", "sourceFingerprint"],
+      "properties": {
+        "organizationId": {"$ref": "#/$defs/organization"},
+        "workspaceId": {"$ref": "#/$defs/uuid"}, "repositoryBindingId": {"$ref": "#/$defs/uuid"},
+        "repositoryAgentId": {"$ref": "#/$defs/uuid"}, "endpointId": {"$ref": "#/$defs/uuid"},
+        "sourceFingerprint": {"$ref": "#/$defs/hash"}
+      }
+    },
+    "operation": {"enum": ["register", "discover"]},
+    "stage": {"const": "repository_role_observed"},
+    "role": {"anyOf": [{"type": "null"}, {"$ref": "#/$defs/role"}]},
+    "discovery": {"anyOf": [{"type": "null"}, {"$ref": "#/$defs/discovery"}]},
+    "sharedRepositoryReady": {"const": false}, "communicationReady": {"const": false},
+    "sourceFingerprintVerified": {"const": false}, "currentAuthorizationVerified": {"const": false},
+    "contactAuthority": {"const": false}, "presence": {"const": "unavailable"},
+    "limitations": {"const": ["source_fingerprint_unavailable", "current_authorization_not_independently_verified", "presence_unavailable", "contact_authority_unavailable"]}
+  },
+  "oneOf": [
+    {"properties": {"operation": {"const": "register"}, "role": {"$ref": "#/$defs/role"}, "discovery": {"type": "null"}}},
+    {"properties": {"operation": {"const": "discover"}, "role": {"type": "null"}, "discovery": {"$ref": "#/$defs/discovery"}}}
+  ],
+  "$defs": {
+    "uuid": {"type": "string", "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"},
+    "hash": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"},
+    "organization": {"type": "string", "pattern": "^[A-Za-z0-9_:-]{1,120}$(?![\\s\\S])"},
+    "categories": {
+      "type": "array", "minItems": 1, "maxItems": 16, "uniqueItems": true,
+      "items": {"type": "string", "maxLength": 64, "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$(?![\\s\\S])"}
+    },
+    "roleName": {"type": "string", "minLength": 1, "maxLength": 80, "pattern": "^(?!\\s)(?![\\s\\S]*[\\u0000-\\u001f\\u007f])[\\s\\S]*\\S$(?![\\s\\S])"},
+    "description": {"type": "string", "minLength": 1, "maxLength": 1024, "pattern": "^(?!\\s)(?![\\s\\S]*[\\u0000-\\u001f\\u007f])[\\s\\S]*\\S$(?![\\s\\S])"},
+    "revision": {"type": "integer", "minimum": 1, "maximum": 2147483647},
+    "role": {
+      "type": "object", "additionalProperties": false,
+      "required": ["organizationId", "workspaceId", "endpointId", "repositoryBindingId", "repositoryAgentId", "roleName", "questionCategories", "description", "revision"],
+      "properties": {
+        "organizationId": {"$ref": "#/$defs/organization"}, "workspaceId": {"$ref": "#/$defs/uuid"},
+        "endpointId": {"$ref": "#/$defs/uuid"}, "repositoryBindingId": {"$ref": "#/$defs/uuid"}, "repositoryAgentId": {"$ref": "#/$defs/uuid"},
+        "roleName": {"$ref": "#/$defs/roleName"}, "questionCategories": {"$ref": "#/$defs/categories"},
+        "description": {"$ref": "#/$defs/description"}, "revision": {"$ref": "#/$defs/revision"}
+      }
+    },
+    "peer": {
+      "type": "object", "additionalProperties": false,
+      "required": ["endpointId", "workspaceId", "provider", "roleName", "questionCategories", "description", "revision"],
+      "properties": {
+        "endpointId": {"$ref": "#/$defs/uuid"}, "workspaceId": {"$ref": "#/$defs/uuid"},
+        "provider": {"enum": ["codex", "claude", "agy", "hermes"]},
+        "roleName": {"$ref": "#/$defs/roleName"}, "questionCategories": {"$ref": "#/$defs/categories"},
+        "description": {"$ref": "#/$defs/description"}, "revision": {"$ref": "#/$defs/revision"}
+      }
+    },
+    "discovery": {
+      "type": "object", "additionalProperties": false,
+      "required": ["peers", "limit", "possiblyTruncated", "catalogComplete"],
+      "properties": {
+        "peers": {"type": "array", "maxItems": 50, "items": {"$ref": "#/$defs/peer"}},
+        "limit": {"const": 50}, "possiblyTruncated": {"type": "boolean"}, "catalogComplete": {"type": "boolean"}
+      },
+      "if": {"properties": {"peers": {"type": "array", "minItems": 50}}},
+      "then": {"properties": {"possiblyTruncated": {"const": true}, "catalogComplete": {"const": false}}},
+      "else": {"properties": {"possiblyTruncated": {"const": false}, "catalogComplete": {"const": true}}}
+    }
+  }
+}

package/dist/schemas/skill-preparation-pointer-v1.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/skill-preparation-pointer/v1",
+  "title": "Local Pending Skill Preparation Pointer",
+  "description": "Private cache locator only, never activation authority. Payload reuse additionally requires independently fresh protected context and verified server selection, signature/expiry/integrity checks and a safe activation boundary. No replay or GC authority is established by this pointer.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "cacheId", "organizationId", "deviceId", "workspaceId", "repositoryAgentId", "repositoryBindingId", "provider", "policyHash", "rolloutId", "bundleId", "bundleHash", "metadataHash", "sourceDirectory", "preparedAt", "cachedAt", "activationAuthorized"],
+  "properties": {
+    "schema": { "const": "dharma.skill-preparation-pointer/v1" },
+    "cacheId": { "type": "string", "format": "uuid" },
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}(?![\\s\\S])" },
+    "deviceId": { "type": "string", "format": "uuid" },
+    "workspaceId": { "type": "string", "format": "uuid" },
+    "repositoryAgentId": { "type": "string", "format": "uuid" },
+    "repositoryBindingId": { "anyOf": [{ "type": "null" }, { "type": "string", "format": "uuid" }] },
+    "provider": { "enum": ["codex", "claude", "agy", "hermes"] },
+    "policyHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}(?![\\s\\S])" },
+    "rolloutId": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "bundleId": { "type": "string", "format": "uuid" },
+    "bundleHash": { "type": "string", "pattern": "^(sha256|blake3):[A-Fa-f0-9]{32,128}(?![\\s\\S])" },
+    "metadataHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}(?![\\s\\S])" },
+    "sourceDirectory": { "type": "string", "pattern": "^attempt-[A-Za-z0-9]{6}(?![\\s\\S])" },
+    "preparedAt": { "type": "string", "format": "date-time", "maxLength": 24 },
+    "cachedAt": { "type": "string", "format": "date-time", "maxLength": 24 },
+    "activationAuthorized": { "const": false }
+  }
+}

package/dist/schemas/skill-preparation-v1.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/skill-preparation/v1",
+  "title": "Local Pending Skill Preparation",
+  "description": "Private staging cache only. Restart activation requires fresh authorization, expiry, integrity and session-boundary checks. Runtime validation additionally checks scope equality and a 3 MiB serialized metadata limit.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "organizationId", "deviceId", "workspaceId", "repositoryAgentId", "repositoryBindingId", "provider", "policyHash", "rolloutId", "bundle", "repositoryPackage", "preparedAt", "activationAuthorized"],
+  "properties": {
+    "schema": { "const": "dharma.skill-preparation/v1" },
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}(?![\\s\\S])" },
+    "deviceId": { "type": "string", "format": "uuid" },
+    "workspaceId": { "type": "string", "format": "uuid" },
+    "repositoryAgentId": { "type": "string", "format": "uuid" },
+    "repositoryBindingId": { "anyOf": [{ "type": "null" }, { "type": "string", "format": "uuid" }] },
+    "provider": { "enum": ["codex", "claude", "agy", "hermes"] },
+    "policyHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}(?![\\s\\S])" },
+    "rolloutId": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "bundle": { "$ref": "https://schemas.dharma-ai.io/skill-bundle/v2" },
+    "repositoryPackage": {
+      "anyOf": [{ "type": "null" }, {
+        "type": "object", "additionalProperties": false, "required": ["envelope", "index"],
+        "properties": {
+          "envelope": { "$ref": "https://schemas.dharma-ai.io/repository-package-envelope/v1" },
+          "index": { "$ref": "https://schemas.dharma-ai.io/repository-package-transfer/v2" }
+        }
+      }]
+    },
+    "preparedAt": { "type": "string", "format": "date-time", "maxLength": 24 },
+    "activationAuthorized": { "const": false }
+  }
+}

package/dist/skillPollResponse.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skillPollResponse.test.d.ts.map

package/dist/skillPollResponse.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillPollResponse.test.d.ts","sourceRoot":"","sources":["../src/skillPollResponse.test.ts"],"names":[],"mappings":""}

package/dist/skillPollResponse.test.js

@@ -0,0 +1,37 @@
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import test from 'node:test';
+import { parseSkillRolloutResponse } from './index.js';
+for (const [name, response] of [
+    ['missing success', { organizationId: 'org_test', rollout: null }],
+    ['failed response', { ok: false, organizationId: 'org_test', rollout: null }],
+    ['missing organization', { ok: true, rollout: null }],
+    ['foreign organization', { ok: true, organizationId: 'org_other', rollout: null }],
+    ['missing rollout', { ok: true, organizationId: 'org_test' }],
+    ['undefined rollout', { ok: true, organizationId: 'org_test', rollout: undefined }],
+    ['false rollout', { ok: true, organizationId: 'org_test', rollout: false }],
+    ['zero rollout', { ok: true, organizationId: 'org_test', rollout: 0 }],
+    ['empty string rollout', { ok: true, organizationId: 'org_test', rollout: '' }],
+    ['array rollout', { ok: true, organizationId: 'org_test', rollout: [] }],
+    ['empty rollout ID', { ok: true, organizationId: 'org_test', rollout: { id: '', bundle: {} } }],
+    ['array bundle', { ok: true, organizationId: 'org_test', rollout: { id: 'rollout', bundle: [] } }],
+    ['null bundle', { ok: true, organizationId: 'org_test', rollout: { id: 'rollout', bundle: null } }],
+]) {
+    test(`skill poll rejects ${name}`, () => assert.throws(() => parseSkillRolloutResponse(response, 'org_test')));
+}
+test('skill poll accepts explicit same-organization no-update only', () => {
+    assert.equal(parseSkillRolloutResponse({ ok: true, organizationId: 'org_test', rollout: null }, 'org_test'), null);
+});
+test('skill poll retains package envelope for subsequent signature validation', () => {
+    const rollout = { id: 'rollout', bundle: { bundleId: 'bundle' }, repositoryPackage: { schema: 'envelope' } };
+    assert.equal(parseSkillRolloutResponse({ ok: true, organizationId: 'org_test', rollout }, 'org_test'), rollout);
+});
+test('actual skill synchronization parses the authenticated poll before no-update or materialization', async () => {
+    const source = await readFile(new URL('../src/index.ts', import.meta.url), 'utf8');
+    const sync = source.slice(source.indexOf('export async function prepareSkillUpdate('), source.indexOf('async function skillSync('));
+    assert.match(sync, /const rollout = parseSkillRolloutResponse\(response, config\.organizationId\);/);
+    assert.ok(sync.indexOf('await fabric.pollSkill(') < sync.indexOf('parseSkillRolloutResponse('));
+    assert.ok(sync.indexOf('parseSkillRolloutResponse(') < sync.indexOf('if (!rollout)'));
+    assert.ok(sync.indexOf('parseSkillRolloutResponse(') < sync.indexOf('verifySkillBundle('));
+});
+//# sourceMappingURL=skillPollResponse.test.js.map

package/dist/skillPollResponse.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillPollResponse.test.js","sourceRoot":"","sources":["../src/skillPollResponse.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI;IAC7B,CAAC,iBAAiB,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7D,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACnF,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC/E,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;IAC/F,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;IAClG,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;CAC3F,EAAE,CAAC;IACX,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC7G,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;AAClH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;IAChH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,2CAA2C,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACpI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,gFAAgF,CAAC,CAAC;IACrG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IACtF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC"}

package/dist/skillPreparation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skillPreparation.test.d.ts.map

package/dist/skillPreparation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillPreparation.test.d.ts","sourceRoot":"","sources":["../src/skillPreparation.test.ts"],"names":[],"mappings":""}

package/dist/skillPreparation.test.js

@@ -0,0 +1,163 @@
+import assert from 'node:assert/strict';
+import { createHash, generateKeyPairSync } from 'node:crypto';
+import { lstat, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { basename, join } from 'node:path';
+import test from 'node:test';
+import { signCanonicalObject, validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import { calculateBundleHash } from '@dharma-ai-labs/agent-fabric-skill-manager';
+import { saveDeviceEnrollmentAnchor } from '@dharma-ai-labs/agent-fabric-relay-client';
+import { applyServerEvidencePolicy, materializeWorkspacePolicy, prepareSkillUpdate } from './index.js';
+import { serializeSkillPreparationRecord } from './skillPreparationRecord.js';
+import { skillPreparationScopeRoot } from './skillPreparationTransaction.js';
+const WORKSPACE = '11111111-1111-4111-8111-111111111111';
+const AGENT = '22222222-2222-4222-8222-222222222222';
+const DEVICE = '33333333-3333-4333-8333-333333333333';
+const digest = (s) => 'sha256:' + createHash('sha256').update(s).digest('hex');
+test('pending preparation contract accepts only bounded non-activating records', async () => {
+    const f = await fixture();
+    try {
+        const record = { schema: 'dharma.skill-preparation/v1', organizationId: 'org_test',
+            deviceId: DEVICE, workspaceId: WORKSPACE, repositoryAgentId: AGENT, repositoryBindingId: null, provider: 'codex',
+            policyHash: digest('policy'), rolloutId: 'rollout', bundle: f.bundle,
+            repositoryPackage: null, preparedAt: new Date().toISOString(), activationAuthorized: false };
+        const validate = async (value) => (await validateContract(join(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/skill-preparation/v1', value)).ok;
+        assert.equal(await validate(record), true);
+        assert.deepEqual(JSON.parse(await serializeSkillPreparationRecord(record)), record);
+        await assert.rejects(serializeSkillPreparationRecord({ ...record, organizationId: 'org_foreign' }), /organization mismatch/);
+        await assert.rejects(serializeSkillPreparationRecord({ ...record, workspaceId: AGENT }), /target mismatch/);
+        await assert.rejects(serializeSkillPreparationRecord({ ...record, rolloutId: 'x'.repeat(3 * 1024 * 1024) }), /byte limit/);
+        for (const changes of [{ activationAuthorized: true }, { provider: 'unknown' }, { policyHash: 'not-a-hash' },
+            { repositoryPackage: {} }, { preparedAt: 'not-a-date' }, { extra: 'not allowed' }]) {
+            assert.equal(await validate({ ...record, ...changes }), false);
+        }
+    }
+    finally {
+        await rm(f.home, { recursive: true, force: true });
+    }
+});
+async function fixture() {
+    const home = await mkdtemp(join(tmpdir(), 'af-preparation-'));
+    const workspace = join(home, 'work');
+    await mkdir(workspace);
+    const keys = generateKeyPairSync('ed25519');
+    const publicKey = keys.publicKey.export({ format: 'jwk' }).x;
+    const generated = await materializeWorkspacePolicy({ workspace, organizationId: 'org_test', revision: 'policy-test' });
+    const unsigned = { schema: 'dharma.workspace-policy-authorization/v1', organizationId: 'org_test', workspaceId: WORKSPACE,
+        policy: { revision: 'policy-test', evidence: generated.policy.evidence },
+        issuedAt: new Date(Date.now() - 60_000).toISOString(), expiresAt: new Date(Date.now() + 3_600_000).toISOString(), keyVersion: 'fixture' };
+    const authorization = { ...unsigned, signature: signCanonicalObject(unsigned, keys.privateKey) };
+    const policy = applyServerEvidencePolicy(generated.policy, authorization, publicKey, 'org_test', WORKSPACE);
+    const policyPath = join(workspace, '.dharma', 'approved-policy.json');
+    await writeFile(policyPath, JSON.stringify(policy));
+    await mkdir(join(home, 'registry', 'workspace-authorizations'), { recursive: true });
+    await writeFile(join(home, 'registry', 'workspaces.json'), JSON.stringify([{ workspaceId: WORKSPACE, organizationId: 'org_test',
+            name: 'Fixture', path: workspace, status: 'active', routeHash: 'a'.repeat(64), repositoryRemoteHash: 'b'.repeat(64), repositoryAgentId: AGENT }]));
+    await writeFile(join(home, 'registry', 'workspace-authorizations', WORKSPACE + '.json'), JSON.stringify({ issuedAt: unsigned.issuedAt, signature: authorization.signature }));
+    const config = { schema: 'dharma.device-config/v1', organizationId: 'org_test', deviceId: DEVICE, deviceName: 'Fixture', platform: 'linux',
+        hqUrl: 'https://example.invalid', relayUrl: 'wss://example.invalid', publicKeyEd25519: publicKey,
+        serverPublicKeyEd25519: publicKey, enrolledAt: new Date().toISOString() };
+    await writeFile(join(home, 'device.json'), JSON.stringify(config));
+    const values = new Map();
+    const store = { backend: 'linux-secret-service', get: async (k) => values.get(k) ?? null,
+        put: async (k, v) => { values.set(k, v); }, delete: async (k) => { values.delete(k); } };
+    await saveDeviceEnrollmentAnchor({ config, store });
+    const text = '# Verifier\n';
+    const unsignedBundle = { schema: 'dharma.skill-bundle/v2', bundleId: '44444444-4444-4444-8444-444444444444', organizationId: 'org_test',
+        version: 'fixture', operation: 'install', riskClass: 'R0', activationPolicy: 'next_session', rollbackBundleId: null,
+        evaluationReceiptId: '55555555-5555-4555-8555-555555555555', createdAt: new Date(Date.now() - 60_000).toISOString(), expiresAt: unsigned.expiresAt,
+        targetSelectors: { organizationAgentIds: [AGENT], deviceIds: [DEVICE], workspaceIds: [WORKSPACE], providers: ['codex'] },
+        skills: [{ skillId: 'verifier', version: 'fixture', repository: 'https://github.com/example/repository', commit: 'a'.repeat(40), path: 'skills/verifier',
+                contentHash: digest('verifier/SKILL.md\0' + text + '\0'), files: [{ path: 'SKILL.md', contentBase64: Buffer.from(text).toString('base64'), sha256: digest(text) }] }] };
+    const signed = { ...unsignedBundle, bundleHash: calculateBundleHash(unsignedBundle) };
+    const bundle = { ...signed, signature: signCanonicalObject(signed, keys.privateKey) };
+    return { home, policyPath, store, values, bundle, keys, text };
+}
+for (const scenario of ['success', 'foreign selector', 'tampered tree', 'stop after poll', 'changed policy', 'no update']) {
+    test(`actual automatic preparation: ${scenario}`, async () => {
+        const f = await fixture();
+        const previous = process.env.DHARMA_HOME;
+        process.env.DHARMA_HOME = f.home;
+        let stopped = false, calls = 0;
+        const baseline = new Map(f.values);
+        const bundle = structuredClone(f.bundle);
+        if (scenario === 'foreign selector') {
+            bundle.targetSelectors.workspaceIds = ['foreign'];
+            const { signature: _signature, bundleHash: _hash, ...unsigned } = bundle;
+            bundle.bundleHash = calculateBundleHash(unsigned);
+            const { signature: _unused, ...signed } = bundle;
+            bundle.signature = signCanonicalObject(signed, f.keys.privateKey);
+        }
+        if (scenario === 'tampered tree') {
+            bundle.skills[0].contentHash = digest('wrong');
+            const { signature: _signature, bundleHash: _hash, ...unsigned } = bundle;
+            bundle.bundleHash = calculateBundleHash(unsigned);
+            const { signature: _unused, ...signed } = bundle;
+            bundle.signature = signCanonicalObject(signed, f.keys.privateKey);
+        }
+        const fabric = { pollSkill: async (input) => {
+                calls++;
+                assert.equal(input.workspaceId, WORKSPACE);
+                assert.equal(input.installedBundleId, null);
+                if (scenario === 'stop after poll')
+                    stopped = true;
+                if (scenario === 'changed policy') {
+                    const policy = JSON.parse(await readFile(f.policyPath, 'utf8'));
+                    policy.skills.canaryPercent = 25;
+                    await writeFile(f.policyPath, JSON.stringify(policy));
+                }
+                return { ok: true, organizationId: 'org_test', rollout: scenario === 'no update' ? null : { id: 'rollout', bundle } };
+            }, signedGet: async () => { throw new Error('Unexpected package transport.'); } };
+        try {
+            const operation = () => prepareSkillUpdate({ workspaceId: WORKSPACE, provider: 'codex', policyPath: f.policyPath,
+                fabric, store: f.store, automatic: true, assertRunning: () => { if (stopped)
+                    throw new Error('stopped fixture'); } });
+            if (scenario === 'success') {
+                const first = await operation();
+                const second = await operation();
+                assert.ok(first && second);
+                assert.notEqual(first.sourceRoot, second.sourceRoot);
+                assert.equal(await readFile(join(first.sourceRoot, 'skills/verifier/SKILL.md'), 'utf8'), f.text);
+                if (process.platform !== 'win32') {
+                    assert.equal((await stat(first.sourceRoot)).mode & 0o777, 0o700);
+                    assert.equal((await stat(join(first.sourceRoot, 'skills/verifier/SKILL.md'))).mode & 0o777, 0o600);
+                }
+                await rm(first.sourceRoot, { recursive: true });
+                assert.equal(await readFile(join(second.sourceRoot, 'skills/verifier/SKILL.md'), 'utf8'), f.text);
+                await rm(second.sourceRoot, { recursive: true });
+            }
+            else if (scenario === 'no update')
+                assert.equal(await operation(), null);
+            else
+                await assert.rejects(operation(), scenario === 'foreign selector' ? /does not target/ : scenario === 'tampered tree' ? /content hash/ : scenario === 'stop after poll' ? /stopped fixture/ : /scope or policy changed/);
+            assert.equal(calls, scenario === 'success' ? 2 : 1);
+            assert.deepEqual(f.values, baseline);
+            const dirs = await readdir(join(f.home, 'relay/skill-pending-sources')).catch(e => { if (e.code === 'ENOENT')
+                return []; throw e; });
+            const reachedPreparation = ['success', 'tampered tree', 'changed policy'].includes(scenario);
+            const scopeRoot = skillPreparationScopeRoot(f.home, WORKSPACE, 'codex');
+            assert.deepEqual(dirs, reachedPreparation ? [basename(scopeRoot)] : []);
+            if (reachedPreparation) {
+                const scope = await lstat(scopeRoot);
+                assert.equal(scope.isDirectory(), true);
+                assert.equal(scope.isSymbolicLink(), false);
+                if (process.platform !== 'win32') {
+                    const getuid = process.getuid;
+                    assert.equal(typeof getuid, 'function');
+                    assert.equal(scope.mode & 0o777, 0o700);
+                    assert.equal(scope.uid, getuid?.());
+                }
+                // Direct preparation does not publish; no attempt, pointer or metadata may remain.
+                assert.deepEqual(await readdir(scopeRoot), []);
+            }
+        }
+        finally {
+            if (previous === undefined)
+                delete process.env.DHARMA_HOME;
+            else
+                process.env.DHARMA_HOME = previous;
+            await rm(f.home, { recursive: true, force: true });
+        }
+    });
+}
+//# sourceMappingURL=skillPreparation.test.js.map

package/dist/skillPreparation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillPreparation.test.js","sourceRoot":"","sources":["../src/skillPreparation.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAoB,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,0BAA0B,EAAqE,MAAM,2CAA2C,CAAC;AAC1J,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAE7E,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,MAAM,GAAG,sCAAsC,CAAC;AACtD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEvF,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,6BAA6B,EAAE,cAAc,EAAE,UAAU;YAChF,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO;YAChH,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;YACpE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;QAC/F,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EACrG,mDAAmD,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC7H,MAAM,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC5G,MAAM,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QAC3H,KAAK,MAAM,OAAO,IAAI,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;YAC1G,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AACH,KAAK,UAAU,OAAO;IACpB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;IACvH,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,0CAA0C,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS;QACvH,MAAM,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;QACxE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC5I,MAAM,aAAa,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IACjG,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5G,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,0BAA0B,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU;YAC7H,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACrJ,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,0BAA0B,EAAE,SAAS,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC9K,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,yBAAyB,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO;QACxI,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,SAAS;QAChG,sBAAsB,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAkB,CAAC;IAC5F,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAsB,EAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI;QACvG,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,0BAA0B,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC;IAC5B,MAAM,cAAc,GAAG,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,sCAAsC,EAAE,cAAc,EAAE,UAAU;QACrI,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,IAAI;QACnH,mBAAmB,EAAE,sCAAsC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;QAClJ,eAAe,EAAE,EAAE,oBAAoB,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE;QACxH,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,uCAAuC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB;gBACtJ,WAAW,EAAE,MAAM,CAAC,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5K,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,UAAU,EAAE,mBAAmB,CAAC,cAA+D,CAAC,EAAE,CAAC;IACvI,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,EAAiB,CAAC;IACrG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,KAAK,MAAM,QAAQ,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,CAAU,EAAE,CAAC;IACnI,IAAI,CAAC,iCAAiC,QAAQ,EAAE,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YACpC,MAAM,CAAC,eAAe,CAAC,YAAY,GAAG,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;YACzE,MAAM,CAAC,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;YACjD,MAAM,CAAC,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;YACzE,MAAM,CAAC,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;YACjD,MAAM,CAAC,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAA8B,EAAE,EAAE;gBACnE,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACjG,IAAI,QAAQ,KAAK,iBAAiB;oBAAE,OAAO,GAAG,IAAI,CAAC;gBACnD,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;oBAAC,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC;oBAClG,MAAM,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxD,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;YACxH,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAkC,CAAC;QAClH,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;gBAC9G,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;gBAAC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;gBAClE,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;gBAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBACrD,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;oBACjE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;gBACrG,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,QAAQ,KAAK,WAAW;gBAAE,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;;gBACtE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;YAC7N,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrI,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7F,MAAM,SAAS,GAAG,yBAAyB,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACxE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,UAAU,CAAC,CAAC;oBACxC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;oBACxC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBACtC,CAAC;gBACD,mFAAmF;gBACnF,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;;gBAAM,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;YACpG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/skillPreparationCache.d.ts

@@ -0,0 +1,34 @@
+import { type ProviderId } from '@dharma-ai-labs/agent-fabric-contracts';
+type ExpectedPreparation = {
+    organizationId: string;
+    deviceId: string;
+    repositoryAgentId: string;
+    repositoryBindingId: string | null;
+    policyHash: string;
+    rolloutId: string;
+    bundleId: string;
+    bundleHash: string;
+};
+export type SkillPreparationCachePublication = {
+    home: string;
+    workspaceId: string;
+    provider: ProviderId;
+    sourceRoot: string;
+    recordBytes: string;
+    expected: ExpectedPreparation;
+    assertCurrent: () => void;
+    onCommitted: () => void;
+};
+export type SkillPreparationCacheExpectation = Omit<ExpectedPreparation, 'rolloutId' | 'bundleId' | 'bundleHash'> & {
+    home: string;
+    workspaceId: string;
+    provider: ProviderId;
+    assertCurrent: () => void;
+};
+export declare function publishSkillPreparationCache(input: SkillPreparationCachePublication): Promise<void>;
+export declare function takeSkillPreparationCache(input: SkillPreparationCacheExpectation): Promise<{
+    sourceRoot: string;
+    record: Record<string, unknown>;
+} | null>;
+export {};
+//# sourceMappingURL=skillPreparationCache.d.ts.map

package/dist/skillPreparationCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillPreparationCache.d.ts","sourceRoot":"","sources":["../src/skillPreparationCache.ts"],"names":[],"mappings":"AAIA,OAAO,EAA0C,KAAK,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAIjH,KAAK,mBAAmB,GAAG;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC,GAAG;IAClH,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,MAAM,IAAI,CAAC;CAC3B,CAAC;AA6EF,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAyIzG;AAID,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,IAAI,CAAC,CAgER"}