@dharma-ai-labs/agent-fabric 0.2.49 → 0.2.51

package/dist/index.test.js

@@ -1555,13 +1555,13 @@ test('relay probe opens an authenticated session without polling or leasing work
         },
         openSession: async (version) => {
             sessions += 1;
-            assert.equal(version, '0.2.49');
+            assert.equal(version, '0.2.51');
             return { ok: true };
         },
     }));
     assert.equal(sessions, 1);
     assert.deepEqual(result, {
-        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.49',
+        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.51',
     });
 });
 test('relay probe fails closed when the server does not acknowledge the session', async () => {

package/dist/repositoryCandidateSync.d.ts

@@ -0,0 +1,55 @@
+import { type RepositoryPackageSnapshot } from './repositoryPackage.js';
+export type RepositoryCandidateState = 'accepted' | 'processing' | 'published' | 'blocked';
+export interface RepositoryCandidateScope {
+    organizationId: string;
+    workspaceId: string;
+    repositoryBindingId: string;
+    repositoryAgentId: string;
+}
+export interface RepositoryCandidateTransport {
+    signedGet(route: string): Promise<Record<string, unknown>>;
+    signedPost(route: string, body: unknown): Promise<Record<string, unknown>>;
+}
+export type RepositoryCandidateReceipt = {
+    candidateId: string;
+    operationId: string;
+    snapshotHash: string;
+    state: RepositoryCandidateState;
+    releaseId: string | null;
+};
+type CandidateOutbox = {
+    schema: 'dharma.repository-candidate-outbox/v1';
+    scope: RepositoryCandidateScope;
+    operationId: string;
+    sourceManifestHash: string;
+    snapshotHash: string;
+    consolidation: {
+        mode: 'initial_repository' | 'repository_update';
+        includeApprovedOutputs: true;
+        requireAtlasAssociation: true;
+    };
+    candidateId: string | null;
+    state: 'pending_upload' | RepositoryCandidateState;
+    releaseId: string | null;
+};
+export declare function synchronizeRepositoryCandidate(input: {
+    transport: RepositoryCandidateTransport;
+    outboxRoot: string;
+    scope: RepositoryCandidateScope;
+    snapshot: RepositoryPackageSnapshot;
+    initialRepository: boolean;
+}): Promise<RepositoryCandidateReceipt>;
+export declare function pollRepositoryCandidate(input: {
+    transport: Pick<RepositoryCandidateTransport, 'signedGet'>;
+    outboxRoot: string;
+    scope: RepositoryCandidateScope;
+}): Promise<RepositoryCandidateReceipt | null>;
+export declare function adoptRepositoryCandidate(input: {
+    outboxRoot: string;
+    scope: RepositoryCandidateScope;
+    sourceManifestHash: string;
+    consolidationMode: CandidateOutbox['consolidation']['mode'];
+    candidate: RepositoryCandidateReceipt;
+}): Promise<RepositoryCandidateReceipt>;
+export {};
+//# sourceMappingURL=repositoryCandidateSync.d.ts.map

package/dist/repositoryCandidateSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryCandidateSync.d.ts","sourceRoot":"","sources":["../src/repositoryCandidateSync.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3F,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5E;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,wBAAwB,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,MAAM,EAAE,uCAAuC,CAAC;IAChD,KAAK,EAAE,wBAAwB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE;QACb,IAAI,EAAE,oBAAoB,GAAG,mBAAmB,CAAC;QACjD,sBAAsB,EAAE,IAAI,CAAC;QAC7B,uBAAuB,EAAE,IAAI,CAAC;KAC/B,CAAC;IACF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,gBAAgB,GAAG,wBAAwB,CAAC;IACnD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAiGF,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,4BAA4B,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,wBAAwB,CAAC;IAChC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA8CtC;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,wBAAwB,CAAC;CACjC,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAgB7C;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,wBAAwB,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5D,SAAS,EAAE,0BAA0B,CAAC;CACvC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CActC"}

package/dist/repositoryCandidateSync.js

@@ -0,0 +1,177 @@
+import { constants } from 'node:fs';
+import { mkdir, open, readFile, rename, rm } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { canonicalize, sha256 } from '@dharma-ai-labs/agent-fabric-contracts';
+import { serializeRepositoryPackageSnapshot, } from './repositoryPackage.js';
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\s\S])/i;
+const HASH = /^sha256:[0-9a-f]{64}$(?![\s\S])/;
+const ORG = /^org_[A-Za-z0-9_]{1,156}$(?![\s\S])/;
+const STATES = new Set(['accepted', 'processing', 'published', 'blocked']);
+const OUTBOX_STATES = new Set(['pending_upload', ...STATES]);
+function requireFact(value, message) {
+    if (!value)
+        throw new Error(message);
+}
+function checkedScope(value) {
+    requireFact(ORG.test(value.organizationId), 'Repository candidate organization is invalid.');
+    for (const id of [value.workspaceId, value.repositoryBindingId, value.repositoryAgentId]) {
+        requireFact(typeof id === 'string' && UUID.test(id), 'Repository candidate scope is incomplete.');
+    }
+    return { ...value };
+}
+function receipt(value, scope, operationId, snapshotHash) {
+    requireFact(value !== null && typeof value === 'object' && !Array.isArray(value), 'Repository candidate response is invalid.');
+    const response = value;
+    requireFact(response.ok === true && response.organizationId === scope.organizationId
+        && response.candidate !== null && typeof response.candidate === 'object' && !Array.isArray(response.candidate), 'Repository candidate response scope is invalid.');
+    const candidate = response.candidate;
+    requireFact(Reflect.ownKeys(candidate).every(key => typeof key === 'string')
+        && ['candidateId', 'operationId', 'snapshotHash', 'state', 'releaseId'].every(key => Object.hasOwn(candidate, key))
+        && Object.keys(candidate).every(key => ['candidateId', 'operationId', 'snapshotHash', 'state', 'releaseId'].includes(key)), 'Repository candidate receipt is invalid.');
+    requireFact(typeof candidate.candidateId === 'string' && UUID.test(candidate.candidateId)
+        && candidate.operationId === operationId && candidate.snapshotHash === snapshotHash
+        && typeof candidate.state === 'string' && STATES.has(candidate.state)
+        && (candidate.releaseId === null || typeof candidate.releaseId === 'string' && UUID.test(candidate.releaseId))
+        && (candidate.state === 'published') === (candidate.releaseId !== null), 'Repository candidate receipt is inconsistent.');
+    return candidate;
+}
+function outboxPath(root, scope) {
+    return resolve(root, `${scope.workspaceId}.json`);
+}
+async function writeOutbox(path, value) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${process.pid}.${Date.now()}.tmp`;
+    const bytes = `${canonicalize(value)}\n`;
+    const handle = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW || 0), 0o600);
+    try {
+        await handle.writeFile(bytes);
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    try {
+        await rename(temporary, path);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+function outbox(value, expectedScope) {
+    requireFact(value !== null && typeof value === 'object' && !Array.isArray(value), 'Repository candidate outbox is invalid.');
+    const row = value;
+    const keys = ['schema', 'scope', 'operationId', 'sourceManifestHash', 'snapshotHash', 'consolidation',
+        'candidateId', 'state', 'releaseId'];
+    requireFact(row.schema === 'dharma.repository-candidate-outbox/v1'
+        && Reflect.ownKeys(row).every(key => typeof key === 'string')
+        && keys.every(key => Object.hasOwn(row, key)) && Object.keys(row).every(key => keys.includes(key)), 'Repository candidate outbox is invalid.');
+    const scope = checkedScope(row.scope);
+    if (expectedScope)
+        requireFact(canonicalize(scope) === canonicalize(expectedScope), 'Repository candidate outbox scope is invalid.');
+    requireFact(typeof row.operationId === 'string' && HASH.test(row.operationId)
+        && typeof row.sourceManifestHash === 'string' && HASH.test(row.sourceManifestHash)
+        && typeof row.snapshotHash === 'string' && HASH.test(row.snapshotHash)
+        && typeof row.state === 'string' && OUTBOX_STATES.has(row.state)
+        && (row.candidateId === null || typeof row.candidateId === 'string' && UUID.test(row.candidateId))
+        && (row.releaseId === null || typeof row.releaseId === 'string' && UUID.test(row.releaseId))
+        && (row.state === 'pending_upload') === (row.candidateId === null)
+        && (row.state === 'published') === (row.releaseId !== null), 'Repository candidate outbox is inconsistent.');
+    requireFact(row.consolidation !== null && typeof row.consolidation === 'object' && !Array.isArray(row.consolidation), 'Repository candidate consolidation is invalid.');
+    const consolidation = row.consolidation;
+    requireFact(Object.keys(consolidation).sort().join(',') === 'includeApprovedOutputs,mode,requireAtlasAssociation'
+        && ['initial_repository', 'repository_update'].includes(String(consolidation.mode))
+        && consolidation.includeApprovedOutputs === true && consolidation.requireAtlasAssociation === true, 'Repository candidate consolidation is invalid.');
+    return { schema: 'dharma.repository-candidate-outbox/v1', scope,
+        operationId: row.operationId, sourceManifestHash: row.sourceManifestHash,
+        snapshotHash: row.snapshotHash, consolidation: consolidation,
+        candidateId: row.candidateId, state: row.state,
+        releaseId: row.releaseId };
+}
+async function readOutbox(path, expectedScope) {
+    try {
+        const bytes = await readFile(path);
+        requireFact(bytes.length <= 65_536, 'Repository candidate outbox exceeds its byte limit.');
+        return outbox(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes)), expectedScope);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+export async function synchronizeRepositoryCandidate(input) {
+    const scope = checkedScope(input.scope);
+    const serialized = serializeRepositoryPackageSnapshot(input.snapshot);
+    requireFact(Buffer.byteLength(serialized) <= 8_388_608, 'Repository candidate exceeds its upload byte limit.');
+    const snapshot = JSON.parse(serialized);
+    requireFact(snapshot.manifest.organizationId === scope.organizationId
+        && snapshot.manifest.workspaceId === scope.workspaceId
+        && snapshot.manifest.knowledge?.repositoryAgentId === scope.repositoryAgentId
+        && HASH.test(snapshot.manifest.snapshotHash), 'Repository candidate snapshot scope is invalid.');
+    const sourceManifestHash = sha256(canonicalize(snapshot.manifest));
+    const consolidation = {
+        mode: input.initialRepository ? 'initial_repository' : 'repository_update',
+        includeApprovedOutputs: true, requireAtlasAssociation: true,
+    };
+    const operationId = sha256(canonicalize({ schema: 'dharma.repository-candidate-operation/v1', ...scope,
+        snapshotHash: snapshot.manifest.snapshotHash, sourceManifestHash, consolidation }));
+    const path = outboxPath(input.outboxRoot, scope);
+    const prior = await readOutbox(path, scope);
+    if (prior && (prior.operationId !== operationId || canonicalize(prior.scope) !== canonicalize(scope))) {
+        requireFact(['published', 'blocked'].includes(prior.state), 'A different repository candidate is still pending.');
+    }
+    const pending = prior?.operationId === operationId ? prior : {
+        schema: 'dharma.repository-candidate-outbox/v1', scope, operationId,
+        sourceManifestHash, snapshotHash: snapshot.manifest.snapshotHash, consolidation,
+        candidateId: null, state: 'pending_upload', releaseId: null,
+    };
+    requireFact(pending.sourceManifestHash === sourceManifestHash && pending.snapshotHash === snapshot.manifest.snapshotHash
+        && canonicalize(pending.consolidation) === canonicalize(consolidation), 'Repository candidate outbox does not match the current upload.');
+    await writeOutbox(path, pending);
+    const route = `/agent-fabric/repository-agents/${encodeURIComponent(scope.repositoryAgentId)}/package-candidates`;
+    let accepted;
+    if (pending.candidateId) {
+        const query = new URLSearchParams({ workspaceId: scope.workspaceId, operationId });
+        accepted = receipt(await input.transport.signedGet(`${route}/${encodeURIComponent(pending.candidateId)}?${query}`), scope, operationId, snapshot.manifest.snapshotHash);
+    }
+    else {
+        accepted = receipt(await input.transport.signedPost(route, {
+            schema: 'dharma.repository-candidate-upload/v1', operationId, workspaceId: scope.workspaceId,
+            repositoryBindingId: scope.repositoryBindingId, repositoryAgentId: scope.repositoryAgentId,
+            sourceSnapshotHash: snapshot.manifest.snapshotHash, sourceManifestHash: pending.sourceManifestHash,
+            consolidation: pending.consolidation, snapshot,
+        }), scope, operationId, snapshot.manifest.snapshotHash);
+    }
+    await writeOutbox(path, { ...pending, candidateId: accepted.candidateId, state: accepted.state, releaseId: accepted.releaseId });
+    return accepted;
+}
+export async function pollRepositoryCandidate(input) {
+    const scope = checkedScope(input.scope);
+    const path = outboxPath(input.outboxRoot, scope);
+    const pending = await readOutbox(path, scope);
+    if (!pending || pending.state === 'pending_upload')
+        return null;
+    if (pending.state === 'published' || pending.state === 'blocked') {
+        return { candidateId: pending.candidateId, operationId: pending.operationId, snapshotHash: pending.snapshotHash,
+            state: pending.state, releaseId: pending.releaseId };
+    }
+    const route = `/agent-fabric/repository-agents/${encodeURIComponent(scope.repositoryAgentId)}/package-candidates`;
+    const query = new URLSearchParams({ workspaceId: scope.workspaceId, operationId: pending.operationId });
+    const current = receipt(await input.transport.signedGet(`${route}/${encodeURIComponent(pending.candidateId)}?${query}`), scope, pending.operationId, pending.snapshotHash);
+    await writeOutbox(path, { ...pending, candidateId: current.candidateId, state: current.state, releaseId: current.releaseId });
+    return current;
+}
+export async function adoptRepositoryCandidate(input) {
+    const scope = checkedScope(input.scope);
+    requireFact(HASH.test(input.sourceManifestHash), 'Canonical repository candidate manifest hash is invalid.');
+    const candidate = receipt({ ok: true, organizationId: scope.organizationId, candidate: input.candidate }, scope, input.candidate.operationId, input.candidate.snapshotHash);
+    requireFact(candidate.state !== 'accepted' || candidate.candidateId !== null, 'Canonical repository candidate is incomplete.');
+    await writeOutbox(outboxPath(input.outboxRoot, scope), {
+        schema: 'dharma.repository-candidate-outbox/v1', scope, operationId: candidate.operationId,
+        sourceManifestHash: input.sourceManifestHash, snapshotHash: candidate.snapshotHash,
+        consolidation: { mode: input.consolidationMode, includeApprovedOutputs: true, requireAtlasAssociation: true },
+        candidateId: candidate.candidateId, state: candidate.state, releaseId: candidate.releaseId,
+    });
+    return candidate;
+}
+//# sourceMappingURL=repositoryCandidateSync.js.map

package/dist/repositoryCandidateSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryCandidateSync.js","sourceRoot":"","sources":["../src/repositoryCandidateSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EACL,kCAAkC,GAEnC,MAAM,wBAAwB,CAAC;AAwChC,MAAM,IAAI,GAAG,sFAAsF,CAAC;AACpG,MAAM,IAAI,GAAG,iCAAiC,CAAC;AAC/C,MAAM,GAAG,GAAG,qCAAqC,CAAC;AAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAA2B,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AACrG,MAAM,aAAa,GAAG,IAAI,GAAG,CAA2B,CAAC,gBAAgB,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAEvF,SAAS,WAAW,CAAC,KAAc,EAAE,OAAe;IAClD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,KAA+B;IACnD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,+CAA+C,CAAC,CAAC;IAC7F,KAAK,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzF,WAAW,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,2CAA2C,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAA+B,EAAE,WAAmB,EAAE,YAAoB;IACzG,WAAW,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,2CAA2C,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;WAC/E,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChH,iDAAiD,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAoC,CAAC;IAChE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;WACvE,CAAC,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;WAChH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC5H,0CAA0C,CAAC,CAAC;IAC5C,WAAW,CAAC,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;WACpF,SAAS,CAAC,WAAW,KAAK,WAAW,IAAI,SAAS,CAAC,YAAY,KAAK,YAAY;WAChF,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAiC,CAAC;WAC9F,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;WAC3G,CAAC,SAAS,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,EACzE,+CAA+C,CAAC,CAAC;IACjD,OAAO,SAAuC,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAA+B;IAC/D,OAAO,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,WAAW,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAsB;IAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrI,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC7F,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,aAAwC;IACtE,WAAW,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,yCAAyC,CAAC,CAAC;IAC7H,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,cAAc,EAAE,eAAe;QACnG,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,WAAW,CAAC,GAAG,CAAC,MAAM,KAAK,uCAAuC;WAC7D,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;WAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EACpG,yCAAyC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAiC,CAAC,CAAC;IAClE,IAAI,aAAa;QAAE,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,EAAE,+CAA+C,CAAC,CAAC;IACrI,WAAW,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;WACxE,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;WAC/E,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;WACnE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,KAAiC,CAAC;WACzF,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;WAC/F,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;WACzF,CAAC,GAAG,CAAC,KAAK,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC;WAC/D,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,8CAA8C,CAAC,CAAC;IAC/G,WAAW,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAClH,gDAAgD,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,GAAG,CAAC,aAAwC,CAAC;IACnE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qDAAqD;WAC5G,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;WAChF,aAAa,CAAC,sBAAsB,KAAK,IAAI,IAAI,aAAa,CAAC,uBAAuB,KAAK,IAAI,EACpG,gDAAgD,CAAC,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,uCAAuC,EAAE,KAAK;QAC7D,WAAW,EAAE,GAAG,CAAC,WAAqB,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAA4B;QAC5F,YAAY,EAAE,GAAG,CAAC,YAAsB,EAAE,aAAa,EAAE,aAAiD;QAC1G,WAAW,EAAE,GAAG,CAAC,WAA4B,EAAE,KAAK,EAAE,GAAG,CAAC,KAAiC;QAC3F,SAAS,EAAE,GAAG,CAAC,SAA0B,EAAE,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,aAAwC;IAC9E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,WAAW,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,qDAAqD,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAMpD;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtE,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,EAAE,qDAAqD,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA8B,CAAC;IACrE,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;WAChE,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;WACnD,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;WAC1E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,iDAAiD,CAAC,CAAC;IACnG,MAAM,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,aAAa,GAAqC;QACtD,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB;QAC1E,sBAAsB,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI;KAC5D,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,0CAA0C,EAAE,GAAG,KAAK;QACpG,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtG,WAAW,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,oDAAoD,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,OAAO,GAAoB,KAAK,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,EAAE,uCAAuC,EAAE,KAAK,EAAE,WAAW;QACnE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,aAAa;QAC/E,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI;KAC5D,CAAC;IACF,WAAW,CAAC,OAAO,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,QAAQ,CAAC,YAAY;WACnH,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,EACxE,gEAAgE,CAAC,CAAC;IAClE,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,mCAAmC,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,qBAAqB,CAAC;IAClH,IAAI,QAAoC,CAAC;IACzC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACnF,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,EAChH,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE;YACzD,MAAM,EAAE,uCAAuC,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5F,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1F,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAClG,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ;SAC/C,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACjI,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAY,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;YAC9G,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,mCAAmC,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,qBAAqB,CAAC;IAClH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CACrD,GAAG,KAAK,IAAI,kBAAkB,CAAC,OAAO,CAAC,WAAY,CAAC,IAAI,KAAK,EAAE,CAChE,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,0DAA0D,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EACtG,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACpE,WAAW,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAC1E,+CAA+C,CAAC,CAAC;IACnD,MAAM,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE;QACrD,MAAM,EAAE,uCAAuC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW;QAC1F,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY;QAClF,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE;QAC7G,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS;KAC3F,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/repositoryCandidateSync.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=repositoryCandidateSync.test.d.ts.map

package/dist/repositoryCandidateSync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryCandidateSync.test.d.ts","sourceRoot":"","sources":["../src/repositoryCandidateSync.test.ts"],"names":[],"mappings":""}

package/dist/repositoryCandidateSync.test.js

@@ -0,0 +1,141 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { canonicalize } from '@dharma-ai-labs/agent-fabric-contracts';
+import { pollRepositoryCandidate, synchronizeRepositoryCandidate } from './repositoryCandidateSync.js';
+import { inventoryRepositoryPackage } from './repositoryPackage.js';
+import { initializeRepositoryKnowledge } from './repositoryKnowledge.js';
+const ids = {
+    workspaceId: '056b63dc-ebed-48ed-85d8-02c72f623ea8',
+    repositoryBindingId: '73a95988-fd64-41ba-a0b9-6c8867d03788',
+    repositoryAgentId: '57f61652-a5eb-46e4-930c-9478cd4a9c31',
+};
+async function snapshot(root) {
+    const workspace = join(root, 'repository');
+    await mkdir(join(workspace, '.agents/skills/dharma-agent-fabric'), { recursive: true });
+    await writeFile(join(workspace, '.agents/skills/dharma-agent-fabric/.dharma-agent-fabric.json'), JSON.stringify({ managedBy: 'dharma-agent-fabric', workspaceId: ids.workspaceId }));
+    await writeFile(join(workspace, 'README.md'), '# Governed repository\n');
+    const operation = { action: 'authorize', confirmed: true,
+        requestId: '5ff2ee1b-6cb3-459e-a977-ea99c757bf30', repositoryBindingId: ids.repositoryBindingId,
+        expectedRevision: 0, allowedContentClasses: ['approved_outputs', 'repository_content', 'repository_skills'],
+        approvedRepositoryPaths: ['README.md'], approvedOutputFolders: [], automaticValidatedPublication: true,
+        retentionDays: 30, maximumFileBytes: 262144, maximumSnapshotBytes: 4194304,
+        maximumDailyUploadBytes: 1073741824, expiresAt: '2031-01-01T00:00:00.000Z' };
+    const generationId = '67f61652-a5eb-46e4-930c-9478cd4a9c31';
+    const sourceAuthorization = { schema: 'dharma.repository-source-authorization/v1', organizationId: 'org_fixture',
+        workspaceId: ids.workspaceId, repositoryBindingId: ids.repositoryBindingId, repositoryAgentId: ids.repositoryAgentId,
+        revision: 1, generationId, receiptId: `repo_consent_${generationId}`,
+        policyRevision: `repository-source-${generationId}`,
+        policyHash: `sha256:${createHash('sha256').update(canonicalize(operation)).digest('hex')}`,
+        confirmedAt: '2030-01-01T00:00:00.000Z', policy: operation };
+    const input = { workspace, organizationId: 'org_fixture', ...ids, sourceAuthorization,
+        now: new Date('2030-01-02T00:00:00.000Z') };
+    await initializeRepositoryKnowledge(input);
+    return inventoryRepositoryPackage(input);
+}
+test('repository candidate upload persists an exact outbox and polls the same operation after a lost caller response', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-candidate-'));
+    const calls = [];
+    const candidateId = '77f61652-a5eb-46e4-930c-9478cd4a9c31';
+    try {
+        const transport = {
+            signedPost: async (route, body) => {
+                calls.push({ method: 'POST', route, body });
+                const request = body;
+                return { ok: true, organizationId: 'org_fixture', candidate: { candidateId,
+                        operationId: request.operationId, snapshotHash: request.sourceSnapshotHash, state: 'processing', releaseId: null } };
+            },
+            signedGet: async (route) => {
+                calls.push({ method: 'GET', route });
+                const stored = JSON.parse(await readFile(join(root, 'outbox', `${ids.workspaceId}.json`), 'utf8'));
+                return { ok: true, organizationId: 'org_fixture', candidate: { candidateId,
+                        operationId: stored.operationId, snapshotHash: stored.snapshotHash,
+                        state: 'published', releaseId: '87f61652-a5eb-46e4-930c-9478cd4a9c31' } };
+            },
+        };
+        const input = { transport, outboxRoot: join(root, 'outbox'), scope: { organizationId: 'org_fixture', ...ids },
+            snapshot: await snapshot(root), initialRepository: true };
+        const first = await synchronizeRepositoryCandidate(input);
+        assert.equal(first.state, 'processing');
+        const second = await synchronizeRepositoryCandidate(input);
+        assert.equal(second.state, 'published');
+        assert.deepEqual(calls.map(call => call.method), ['POST', 'GET']);
+        const request = calls[0]?.body;
+        assert.deepEqual(request.consolidation, { mode: 'initial_repository', includeApprovedOutputs: true,
+            requireAtlasAssociation: true });
+        const stored = await readFile(join(root, 'outbox', `${ids.workspaceId}.json`), 'utf8');
+        assert.doesNotMatch(stored, /contentBase64|Governed repository/);
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+test('repository candidate status polling is independent of repository source observation', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-candidate-'));
+    const candidateId = '77f61652-a5eb-46e4-930c-9478cd4a9c31';
+    try {
+        const candidateSnapshot = await snapshot(root);
+        const scope = { organizationId: 'org_fixture', ...ids };
+        const first = await synchronizeRepositoryCandidate({ outboxRoot: join(root, 'outbox'), scope,
+            snapshot: candidateSnapshot, initialRepository: false, transport: { signedGet: async () => ({}),
+                signedPost: async (_route, body) => ({ ok: true, organizationId: scope.organizationId, candidate: {
+                        candidateId, operationId: body.operationId,
+                        snapshotHash: body.sourceSnapshotHash, state: 'accepted', releaseId: null
+                    } }) } });
+        const current = await pollRepositoryCandidate({ outboxRoot: join(root, 'outbox'), scope,
+            transport: { signedGet: async (route) => {
+                    assert.match(route, new RegExp(candidateId));
+                    return { ok: true, organizationId: scope.organizationId, candidate: { ...first, state: 'published',
+                            releaseId: '87f61652-a5eb-46e4-930c-9478cd4a9c31' } };
+                } } });
+        assert.equal(current?.state, 'published');
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+test('repository candidate rejects tampered durable metadata before transport', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-candidate-'));
+    let calls = 0;
+    try {
+        const candidateSnapshot = await snapshot(root);
+        const input = { outboxRoot: join(root, 'outbox'), scope: { organizationId: 'org_fixture', ...ids },
+            snapshot: candidateSnapshot, initialRepository: true, transport: { signedGet: async () => { calls += 1; return {}; },
+                signedPost: async (_route, body) => ({ ok: true, organizationId: 'org_fixture', candidate: {
+                        candidateId: '77f61652-a5eb-46e4-930c-9478cd4a9c31', operationId: body.operationId,
+                        snapshotHash: body.sourceSnapshotHash, state: 'processing', releaseId: null
+                    } }) } };
+        await synchronizeRepositoryCandidate(input);
+        const path = join(root, 'outbox', `${ids.workspaceId}.json`);
+        const stored = JSON.parse(await readFile(path, 'utf8'));
+        stored.consolidation.includeApprovedOutputs = false;
+        await writeFile(path, JSON.stringify(stored));
+        await assert.rejects(() => pollRepositoryCandidate({ outboxRoot: join(root, 'outbox'), scope: input.scope,
+            transport: input.transport }), /outbox|consolidation|current upload/i);
+        assert.equal(calls, 0);
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+test('repository candidate upload rejects foreign or inconsistent receipts without advancing the outbox', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-candidate-'));
+    try {
+        const candidateSnapshot = await snapshot(root);
+        await assert.rejects(() => synchronizeRepositoryCandidate({
+            outboxRoot: join(root, 'outbox'), scope: { organizationId: 'org_fixture', ...ids },
+            snapshot: candidateSnapshot, initialRepository: false,
+            transport: { signedGet: async () => ({}), signedPost: async (_route, body) => ({ ok: true,
+                    organizationId: 'org_foreign', candidate: { candidateId: ids.workspaceId,
+                        operationId: body.operationId,
+                        snapshotHash: body.sourceSnapshotHash, state: 'published', releaseId: null } }) },
+        }), /scope|receipt|response/i);
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=repositoryCandidateSync.test.js.map

package/dist/repositoryCandidateSync.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryCandidateSync.test.js","sourceRoot":"","sources":["../src/repositoryCandidateSync.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,MAAM,GAAG,GAAG;IACV,WAAW,EAAE,sCAAsC;IACnD,mBAAmB,EAAE,sCAAsC;IAC3D,iBAAiB,EAAE,sCAAsC;CAC1D,CAAC;AACF,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,oCAAoC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,8DAA8D,CAAC,EAC7F,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI;QACtD,SAAS,EAAE,sCAAsC,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC/F,gBAAgB,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;QAC3G,uBAAuB,EAAE,CAAC,WAAW,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,6BAA6B,EAAE,IAAI;QACtG,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO;QAC1E,uBAAuB,EAAE,UAAU,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC;IAC/E,MAAM,YAAY,GAAG,sCAAsC,CAAC;IAC5D,MAAM,mBAAmB,GAAG,EAAE,MAAM,EAAE,2CAA2C,EAAE,cAAc,EAAE,aAAa;QAC9G,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACpH,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,YAAY,EAAE;QACpE,cAAc,EAAE,qBAAqB,YAAY,EAAE;QACnD,UAAU,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC1F,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE,mBAAmB;QACnF,GAAG,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9C,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,IAAI,CAAC,gHAAgH,EAAE,KAAK,IAAI,EAAE;IAChI,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAA6D,EAAE,CAAC;IAC3E,MAAM,WAAW,GAAG,sCAAsC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE,KAAK,EAAE,KAAa,EAAE,IAAa,EAAE,EAAE;gBACjD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,IAA+B,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,WAAW;wBACxE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YACzH,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBACjC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACnG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,WAAW;wBACxE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;wBAClE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,sCAAsC,EAAE,EAAE,CAAC;YAC9E,CAAC;SACF,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE;YAC3G,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAA+B,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,IAAI;YAChG,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;IACrG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,sCAAsC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,8BAA8B,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK;YAC1F,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC7F,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE;wBAChG,WAAW,EAAE,WAAW,EAAG,IAAgC,CAAC,WAAW;wBACvE,YAAY,EAAG,IAAgC,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI;qBAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACvH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK;YACrF,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;oBACpC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;oBAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,WAAW;4BAChG,SAAS,EAAE,sCAAsC,EAAE,EAAE,CAAC;gBAC1D,CAAC,EAAE,EAAE,CAAC,CAAC;QACT,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE;YAChG,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAClH,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,IAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE;wBAC1G,WAAW,EAAE,sCAAsC,EAAE,WAAW,EAAG,IAAgC,CAAC,WAAW;wBAC/G,YAAY,EAAG,IAAgC,CAAC,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI;qBAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACxH,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,WAAW,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,aAAa,CAAC,sBAAsB,GAAG,KAAK,CAAC;QACpD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;YACvG,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,sCAAsC,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;IACnH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE;YAClF,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK;YACrD,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI;oBACvF,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;wBACtE,WAAW,EAAG,IAAgC,CAAC,WAAW;wBAC1D,YAAY,EAAG,IAAgC,CAAC,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE;SACnH,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC"}

package/dist/repositoryInstalledKnowledge.d.ts

@@ -0,0 +1,13 @@
+import type { ProviderId } from '@dharma-ai-labs/agent-fabric-contracts';
+type Bytes = {
+    catalogBytes: Buffer;
+    manifestBytes: Buffer;
+};
+export declare function selectInstalledRepositoryKnowledge(input: {
+    organizationId: string;
+    repositoryBindingId: string;
+    repositoryAgentId: string;
+    loadProvider: (provider: ProviderId) => Promise<Bytes | null>;
+}): Promise<Bytes | null>;
+export {};
+//# sourceMappingURL=repositoryInstalledKnowledge.d.ts.map

package/dist/repositoryInstalledKnowledge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryInstalledKnowledge.d.ts","sourceRoot":"","sources":["../src/repositoryInstalledKnowledge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAGzE,KAAK,KAAK,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAI7D,wBAAsB,kCAAkC,CAAC,KAAK,EAAE;IAC9D,cAAc,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAC/E,YAAY,EAAE,CAAC,QAAQ,EAAE,UAAU,KAAK,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;CAC/D,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAmBxB"}

package/dist/repositoryInstalledKnowledge.js

@@ -0,0 +1,25 @@
+import { validateRepositoryKnowledgeRetention } from './repositoryKnowledge.js';
+// Installed-tree verification belongs to the loader; carrier authority still
+// belongs to the server. Divergent claims at one generation must not be merged.
+export async function selectInstalledRepositoryKnowledge(input) {
+    const generations = new Map();
+    let latest = 0;
+    for (const provider of ['codex', 'claude', 'agy', 'hermes']) {
+        const observed = await input.loadProvider(provider);
+        if (!observed)
+            continue;
+        if (![observed.catalogBytes, observed.manifestBytes].every(bytes => Buffer.isBuffer(bytes) && bytes.length > 0 && bytes.length <= 262144)) {
+            throw new Error('Installed repository knowledge byte limit exceeded.');
+        }
+        const bytes = { catalogBytes: Buffer.from(observed.catalogBytes), manifestBytes: Buffer.from(observed.manifestBytes) };
+        const retained = validateRepositoryKnowledgeRetention({ identity: input, ...bytes });
+        const previous = generations.get(retained.reference.generation);
+        if (previous && (!previous.catalogBytes.equals(bytes.catalogBytes) || !previous.manifestBytes.equals(bytes.manifestBytes))) {
+            throw new Error('Installed repository knowledge generation conflict.');
+        }
+        generations.set(retained.reference.generation, bytes);
+        latest = Math.max(latest, retained.reference.generation);
+    }
+    return generations.get(latest) || null;
+}
+//# sourceMappingURL=repositoryInstalledKnowledge.js.map

package/dist/repositoryInstalledKnowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryInstalledKnowledge.js","sourceRoot":"","sources":["../src/repositoryInstalledKnowledge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAIhF,6EAA6E;AAC7E,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAGxD;IACC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAU,EAAE,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YAC1I,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACvH,MAAM,QAAQ,GAAG,oCAAoC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3H,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC"}

package/dist/repositoryInstallerFiles.d.ts

@@ -0,0 +1,6 @@
+declare const FILES: readonly [".agents/skills/dharma-agent-fabric/.dharma-agent-fabric.json", ".agents/skills/dharma-agent-fabric/SKILL.md", ".agents/skills/dharma-agent-fabric/references/organization.md", ".dharma/agent-fabric.json", ".dharma/repository-agent.json"];
+type InstallerFile = typeof FILES[number];
+export declare function assertRepositoryInstallerOwnership(workspace: string, workspaceId: string): Promise<void>;
+export declare function writeRepositoryInstallerFile(workspace: string, path: InstallerFile, content: string): Promise<void>;
+export {};
+//# sourceMappingURL=repositoryInstallerFiles.d.ts.map

package/dist/repositoryInstallerFiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryInstallerFiles.d.ts","sourceRoot":"","sources":["../src/repositoryInstallerFiles.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,KAAK,yPAC6D,CAAC;AACzE,KAAK,aAAa,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;AA4B1C,wBAAsB,kCAAkC,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBA6B9F;AAGD,wBAAsB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,iBAqBzG"}

package/dist/repositoryInstallerFiles.js

@@ -0,0 +1,113 @@
+import { constants } from 'node:fs';
+import { lstat, open, rename, unlink } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { dirname, isAbsolute, relative, resolve } from 'node:path';
+const ROOT = '.agents/skills/dharma-agent-fabric';
+const MARKER = `${ROOT}/.dharma-agent-fabric.json`;
+const FILES = [MARKER, `${ROOT}/SKILL.md`, `${ROOT}/references/organization.md`,
+    '.dharma/agent-fabric.json', '.dharma/repository-agent.json'];
+async function checkedPath(workspace, path, leaf) {
+    const boundary = resolve(workspace), within = relative(boundary, path);
+    if (isAbsolute(within) || within === '..' || within.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`)) {
+        throw new Error('Repository installer path escapes the workspace.');
+    }
+    const components = [path];
+    // System ancestors may be aliases (for example macOS /var); owned paths may not.
+    while (components[0] !== boundary)
+        components.unshift(dirname(components[0]));
+    let exists = false;
+    for (const [index, component] of components.entries()) {
+        let metadata;
+        try {
+            metadata = await lstat(component);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return false;
+            throw error;
+        }
+        if (metadata.isSymbolicLink())
+            throw new Error('Repository installer symlink is forbidden.');
+        const isLeaf = index === components.length - 1;
+        if ((!isLeaf || leaf === 'directory') && !metadata.isDirectory()) {
+            throw new Error('Invalid repository installer directory.');
+        }
+        if (isLeaf && leaf === 'file' && (!metadata.isFile() || metadata.nlink !== 1)) {
+            throw new Error('Repository installer hardlink or non-regular destination is forbidden.');
+        }
+        exists = isLeaf;
+    }
+    return exists;
+}
+export async function assertRepositoryInstallerOwnership(workspace, workspaceId) {
+    if (!await checkedPath(workspace, resolve(workspace), 'directory'))
+        throw new Error('Repository installer workspace is missing.');
+    const rootExists = await checkedPath(workspace, resolve(workspace, ROOT), 'directory');
+    for (const path of FILES)
+        await checkedPath(workspace, resolve(workspace, path), 'file');
+    if (!rootExists)
+        return;
+    const markerPath = resolve(workspace, MARKER);
+    if (!await checkedPath(workspace, markerPath, 'file')) {
+        throw new Error('Refusing to replace an unmanaged repository skill at .agents/skills/dharma-agent-fabric.');
+    }
+    const handle = await open(markerPath, constants.O_RDONLY | (constants.O_NOFOLLOW || 0) | (constants.O_NONBLOCK || 0));
+    try {
+        const before = await handle.stat();
+        if (!before.isFile() || before.nlink !== 1 || before.size > 4096)
+            throw new Error('Invalid repository skill ownership marker.');
+        const buffer = Buffer.alloc(4097);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+        const after = await handle.stat(), current = await lstat(markerPath);
+        if (bytesRead !== before.size || before.size !== after.size || before.mtimeMs !== after.mtimeMs
+            || current.isSymbolicLink() || current.ino !== before.ino || current.dev !== before.dev
+            || current.nlink !== 1 || current.mtimeMs !== after.mtimeMs)
+            throw new Error('Repository ownership marker changed.');
+        let marker;
+        try {
+            marker = JSON.parse(buffer.subarray(0, bytesRead).toString('utf8'));
+        }
+        catch {
+            throw new Error('Invalid repository skill ownership marker.');
+        }
+        if (!marker || typeof marker !== 'object' || Array.isArray(marker)
+            || Object.keys(marker).sort().join(',') !== 'managedBy,workspaceId'
+            || marker.managedBy !== 'dharma-agent-fabric'
+            || marker.workspaceId !== workspaceId) {
+            throw new Error('Invalid or foreign repository skill ownership marker.');
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+// Replace owned generated leaves atomically; never truncate an existing inode.
+export async function writeRepositoryInstallerFile(workspace, path, content) {
+    if (!FILES.includes(path))
+        throw new Error('Unsupported repository installer file.');
+    const target = resolve(workspace, path);
+    await checkedPath(workspace, dirname(target), 'directory');
+    await checkedPath(workspace, target, 'file');
+    const temporary = `${target}.staging-${randomUUID()}`;
+    const handle = await open(temporary, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY
+        | (constants.O_NOFOLLOW || 0), 0o600);
+    let published = false;
+    try {
+        try {
+            await handle.writeFile(content);
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await checkedPath(workspace, dirname(target), 'directory');
+        await checkedPath(workspace, target, 'file');
+        await rename(temporary, target);
+        published = true;
+    }
+    finally {
+        if (!published && await checkedPath(workspace, temporary, 'file'))
+            await unlink(temporary);
+    }
+}
+//# sourceMappingURL=repositoryInstallerFiles.js.map