@dot-agent/compiler 0.1.0 → 0.5.0-alpha.2

package/dist/{chunk-IT25ILTQ.js → chunk-P5LFGJ6P.js}

@@ -1,6 +1,10 @@
+// src/generated-version.ts
+var DSL_VERSION = "0.1-alpha";
+var COMPILER_VERSION = "0.5.0-alpha.2";
+
 // src/manifest.ts
 function parseAboutme(json) {
-  if (!json.schemaVersion) throw new Error("Missing schemaVersion in aboutme.json");
+  if (!json.dslVersion) throw new Error("Missing dslVersion in aboutme.json");
   if (!json.id) throw new Error("Missing id in aboutme.json");
   if (!json.name) throw new Error("Missing name in aboutme.json");
   if (!json.description) throw new Error("Missing description in aboutme.json");
@@ -12,7 +16,7 @@ function parseAboutme(json) {
   if (!Array.isArray(json.requires)) throw new Error("Missing requires array in aboutme.json");
   if (!json.integrity) throw new Error("Missing integrity in aboutme.json");
   return {
-    schemaVersion: json.schemaVersion,
+    dslVersion: json.dslVersion,
     id: json.id,
     name: json.name,
     description: json.description,
@@ -30,7 +34,7 @@ function parseAboutme(json) {
 }
 function buildAboutme(opts) {
   return {
-    schemaVersion: "dot-agent/1.0",
+    dslVersion: `dot-agent/${DSL_VERSION}`,
     id: opts.id,
     name: opts.name,
     description: opts.description,
@@ -147,6 +151,25 @@ function extractName(id) {
 
 // src/zip-core.ts
 import JSZip from "jszip";
+var MAX_ZIP_SIZE = 500 * 1024 * 1024;
+var MAX_COMPRESSION_RATIO = 100;
+function validateMagicBytes(bytes) {
+  if (!(bytes[0] === 80 && bytes[1] === 75 && bytes[2] === 3 && bytes[3] === 4)) {
+    throw new Error("Not a valid .agent file (invalid magic bytes)");
+  }
+}
+function validateZipBomb(zip, compressedSize) {
+  let totalUncompressed = 0;
+  zip.forEach((_path, file) => {
+    if (!file.dir) totalUncompressed += file._data?.uncompressedSize || 0;
+  });
+  if (totalUncompressed > MAX_ZIP_SIZE) {
+    throw new Error(`Bundle exceeds 500MB uncompressed: ${totalUncompressed}`);
+  }
+  if (totalUncompressed / compressedSize > MAX_COMPRESSION_RATIO) {
+    throw new Error(`Compression ratio exceeds 100x: ${(totalUncompressed / compressedSize).toFixed(1)}x`);
+  }
+}
 function createZip() {
   return new JSZip();
 }
@@ -167,6 +190,7 @@ async function extractFiles(zip, filter) {
 }
 
 export {
+  COMPILER_VERSION,
   parseAboutme,
   buildAboutme,
   aboutmeToJson,
@@ -174,7 +198,9 @@ export {
   buildId,
   extractDigest,
   extractName,
+  validateMagicBytes,
+  validateZipBomb,
   createZip,
   extractFiles
 };
-//# sourceMappingURL=chunk-IT25ILTQ.js.map
+//# sourceMappingURL=chunk-P5LFGJ6P.js.map

package/dist/chunk-P5LFGJ6P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/generated-version.ts","../src/manifest.ts","../src/id.ts","../src/zip-core.ts"],"sourcesContent":["// Generated by scripts/embed-version.mjs from dsl/VERSION and package.json — do not edit by hand.\nexport const DSL_VERSION = '0.1-alpha'\nexport const COMPILER_VERSION = '0.5.0-alpha.2'\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n\nimport type { AboutMe, BuildAboutmeOptions } from './types.js'\nimport { DSL_VERSION } from './generated-version.js'\n\nexport function parseAboutme(json: any): AboutMe {\n  if (!json.dslVersion) throw new Error('Missing dslVersion in aboutme.json')\n  if (!json.id) throw new Error('Missing id in aboutme.json')\n  if (!json.name) throw new Error('Missing name in aboutme.json')\n  if (!json.description) throw new Error('Missing description in aboutme.json')\n  if (!json.version) throw new Error('Missing version in aboutme.json')\n  if (!json.domain) throw new Error('Missing domain in aboutme.json')\n  if (!json.persona) throw new Error('Missing persona in aboutme.json')\n  if (!json.compiler) throw new Error('Missing compiler in aboutme.json')\n  if (!Array.isArray(json.capabilities)) throw new Error('Missing capabilities array in aboutme.json')\n  if (!Array.isArray(json.requires)) throw new Error('Missing requires array in aboutme.json')\n  if (!json.integrity) throw new Error('Missing integrity in aboutme.json')\n\n  return {\n    dslVersion: json.dslVersion,\n    id: json.id,\n    name: json.name,\n    description: json.description,\n    version: json.version,\n    domain: json.domain,\n    license: json.license ?? '',\n    persona: json.persona,\n    purpose: json.purpose ?? 'unknown',\n    compiler: json.compiler,\n    commit: json.commit,\n    capabilities: json.capabilities,\n    requires: json.requires,\n    integrity: json.integrity,\n  }\n}\n\nexport function buildAboutme(opts: BuildAboutmeOptions): AboutMe {\n  return {\n    dslVersion: `dot-agent/${DSL_VERSION}`,\n    id: opts.id,\n    name: opts.name,\n    description: opts.description,\n    version: opts.version,\n    domain: opts.domain,\n    license: opts.license ?? '',\n    persona: opts.persona,\n    purpose: opts.purpose ?? 'unknown',\n    compiler: opts.compiler,\n    commit: opts.commit,\n    capabilities: opts.capabilities ?? [],\n    requires: opts.requires ?? [],\n    integrity: opts.integrity,\n  }\n}\n\nexport function aboutmeToJson(aboutme: AboutMe): string {\n  return JSON.stringify(aboutme, null, 2)\n}\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\nimport type { IdParts } from './types.js'\n\n// Code hosting platforms whose namespace format is platform/user rather than plain domain.\n// The list is maintained by the compiler and updated via CLI releases.\nexport const KNOWN_PLATFORMS = ['github.com', 'gitlab.com', 'codeberg.org', 'sr.ht'] as const\n\nfunction parseNamespaceName(identifier: string): { namespace: string; name: string } {\n  // Email namespace: @ appears before any /\n  const atIdx = identifier.indexOf('@')\n  if (atIdx !== -1 && (identifier.indexOf('/') === -1 || atIdx < identifier.indexOf('/'))) {\n    const slashIdx = identifier.indexOf('/')\n    if (slashIdx === -1) {\n      throw new Error(`Invalid agent ID: email namespace requires a name after '/' (got '${identifier}')`)\n    }\n    return {\n      namespace: identifier.slice(0, slashIdx),\n      name: identifier.slice(slashIdx + 1),\n    }\n  }\n\n  // Known code-hosting platforms: namespace is platform/user, name is the next segment.\n  for (const platform of KNOWN_PLATFORMS) {\n    if (identifier.startsWith(platform + '/')) {\n      const afterPlatform = identifier.slice(platform.length + 1)\n      const slashIdx = afterPlatform.indexOf('/')\n      if (slashIdx === -1) {\n        throw new Error(\n          `Invalid agent ID: '${platform}' namespace requires a user segment and a name (got '${identifier}')`,\n        )\n      }\n      return {\n        namespace: platform + '/' + afterPlatform.slice(0, slashIdx),\n        name: afterPlatform.slice(slashIdx + 1),\n      }\n    }\n  }\n\n  // Domain or reserved keyword (e.g. 'unknown'): last '/' separates namespace from name.\n  const lastSlash = identifier.lastIndexOf('/')\n  if (lastSlash === -1) {\n    throw new Error(`Invalid agent ID: missing '/' separator in '${identifier}'`)\n  }\n  return {\n    namespace: identifier.slice(0, lastSlash),\n    name: identifier.slice(lastSlash + 1),\n  }\n}\n\nexport function parseId(id: string): IdParts {\n  if (!id) throw new Error('Invalid agent ID: empty string')\n\n  // Phase 1: split on the first ':' to isolate the identifier from version~digest.\n  const colonIdx = id.indexOf(':')\n\n  let identifier: string\n  let version: string | undefined\n  let digest: string | undefined\n\n  if (colonIdx === -1) {\n    // Form A: namespace/name\n    identifier = id\n  } else {\n    identifier = id.slice(0, colonIdx)\n    const rest = id.slice(colonIdx + 1)\n    if (!rest) throw new Error(`Invalid agent ID: empty version after ':' in '${id}'`)\n\n    // Phase 2: split version~digest\n    const tildeIdx = rest.indexOf('~')\n    if (tildeIdx === -1) {\n      // Form B: namespace/name:version\n      version = rest\n    } else {\n      // Form D: namespace/name:version~digest\n      version = rest.slice(0, tildeIdx)\n      digest = rest.slice(tildeIdx + 1)\n      if (!version) throw new Error(`Invalid agent ID: empty version before '~' in '${id}'`)\n      if (!digest) throw new Error(`Invalid agent ID: empty digest after '~' in '${id}'`)\n    }\n  }\n\n  // Phase 3: extract namespace and name from the identifier\n  const { namespace, name } = parseNamespaceName(identifier)\n\n  if (!namespace) throw new Error(`Invalid agent ID: empty namespace in '${id}'`)\n  if (!name) throw new Error(`Invalid agent ID: empty name in '${id}'`)\n\n  return { namespace, name, version, digest }\n}\n\nexport function buildId(parts: IdParts): string {\n  const { namespace, name, version, digest } = parts\n  if (!namespace || !name) {\n    throw new Error('Missing required ID parts: namespace and name')\n  }\n  if (digest && !version) {\n    throw new Error('Invalid ID parts: digest requires version')\n  }\n  let result = `${namespace}/${name}`\n  if (version) {\n    result += `:${version}`\n    if (digest) result += `~${digest}`\n  }\n  return result\n}\n\nexport function extractDigest(id: string): string {\n  try {\n    return parseId(id).digest ?? ''\n  } catch {\n    return ''\n  }\n}\n\nexport function extractName(id: string): string {\n  try {\n    return parseId(id).name\n  } catch {\n    return ''\n  }\n}\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\nimport JSZip from 'jszip'\n\nexport const MAX_ZIP_SIZE = 500 * 1024 * 1024\nexport const MAX_COMPRESSION_RATIO = 100\n\nexport function validateMagicBytes(bytes: Uint8Array): void {\n  if (!(bytes[0] === 0x50 && bytes[1] === 0x4b && bytes[2] === 0x03 && bytes[3] === 0x04)) {\n    throw new Error('Not a valid .agent file (invalid magic bytes)')\n  }\n}\n\nexport function validateZipBomb(zip: JSZip, compressedSize: number): void {\n  let totalUncompressed = 0\n  zip.forEach((_path, file) => {\n    if (!file.dir) totalUncompressed += (file as any)._data?.uncompressedSize || 0\n  })\n  if (totalUncompressed > MAX_ZIP_SIZE) {\n    throw new Error(`Bundle exceeds 500MB uncompressed: ${totalUncompressed}`)\n  }\n  if (totalUncompressed / compressedSize > MAX_COMPRESSION_RATIO) {\n    throw new Error(`Compression ratio exceeds 100x: ${(totalUncompressed / compressedSize).toFixed(1)}x`)\n  }\n}\n\nexport function createZip(): JSZip {\n  return new JSZip()\n}\n\nexport async function extractFiles(zip: JSZip, filter?: string[]): Promise<Map<string, string>> {\n  const files = new Map<string, string>()\n  const promises: Promise<void>[] = []\n\n  zip.forEach((relativePath, file) => {\n    if (file.dir) return\n    if (filter && !filter.some(f => relativePath.startsWith(f))) return\n    promises.push(\n      file.async('text').then(content => {\n        files.set(relativePath, content)\n      })\n    )\n  })\n\n  await Promise.all(promises)\n  return files\n}\n"],"mappings":";AACO,IAAM,cAAc;AACpB,IAAM,mBAAmB;;;ACSzB,SAAS,aAAa,MAAoB;AAC/C,MAAI,CAAC,KAAK,WAAY,OAAM,IAAI,MAAM,oCAAoC;AAC1E,MAAI,CAAC,KAAK,GAAI,OAAM,IAAI,MAAM,4BAA4B;AAC1D,MAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,8BAA8B;AAC9D,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,qCAAqC;AAC5E,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACpE,MAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,gCAAgC;AAClE,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACpE,MAAI,CAAC,KAAK,SAAU,OAAM,IAAI,MAAM,kCAAkC;AACtE,MAAI,CAAC,MAAM,QAAQ,KAAK,YAAY,EAAG,OAAM,IAAI,MAAM,4CAA4C;AACnG,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAAG,OAAM,IAAI,MAAM,wCAAwC;AAC3F,MAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,mCAAmC;AAExE,SAAO;AAAA,IACL,YAAY,KAAK;AAAA,IACjB,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,WAAW;AAAA,IACzB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,IACnB,UAAU,KAAK;AAAA,IACf,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,aAAa,MAAoC;AAC/D,SAAO;AAAA,IACL,YAAY,aAAa,WAAW;AAAA,IACpC,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,WAAW;AAAA,IACzB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK,gBAAgB,CAAC;AAAA,IACpC,UAAU,KAAK,YAAY,CAAC;AAAA,IAC5B,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,cAAc,SAA0B;AACtD,SAAO,KAAK,UAAU,SAAS,MAAM,CAAC;AACxC;;;AC7CO,IAAM,kBAAkB,CAAC,cAAc,cAAc,gBAAgB,OAAO;AAEnF,SAAS,mBAAmB,YAAyD;AAEnF,QAAM,QAAQ,WAAW,QAAQ,GAAG;AACpC,MAAI,UAAU,OAAO,WAAW,QAAQ,GAAG,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAG,IAAI;AACvF,UAAM,WAAW,WAAW,QAAQ,GAAG;AACvC,QAAI,aAAa,IAAI;AACnB,YAAM,IAAI,MAAM,qEAAqE,UAAU,IAAI;AAAA,IACrG;AACA,WAAO;AAAA,MACL,WAAW,WAAW,MAAM,GAAG,QAAQ;AAAA,MACvC,MAAM,WAAW,MAAM,WAAW,CAAC;AAAA,IACrC;AAAA,EACF;AAGA,aAAW,YAAY,iBAAiB;AACtC,QAAI,WAAW,WAAW,WAAW,GAAG,GAAG;AACzC,YAAM,gBAAgB,WAAW,MAAM,SAAS,SAAS,CAAC;AAC1D,YAAM,WAAW,cAAc,QAAQ,GAAG;AAC1C,UAAI,aAAa,IAAI;AACnB,cAAM,IAAI;AAAA,UACR,sBAAsB,QAAQ,wDAAwD,UAAU;AAAA,QAClG;AAAA,MACF;AACA,aAAO;AAAA,QACL,WAAW,WAAW,MAAM,cAAc,MAAM,GAAG,QAAQ;AAAA,QAC3D,MAAM,cAAc,MAAM,WAAW,CAAC;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,cAAc,IAAI;AACpB,UAAM,IAAI,MAAM,+CAA+C,UAAU,GAAG;AAAA,EAC9E;AACA,SAAO;AAAA,IACL,WAAW,WAAW,MAAM,GAAG,SAAS;AAAA,IACxC,MAAM,WAAW,MAAM,YAAY,CAAC;AAAA,EACtC;AACF;AAEO,SAAS,QAAQ,IAAqB;AAC3C,MAAI,CAAC,GAAI,OAAM,IAAI,MAAM,gCAAgC;AAGzD,QAAM,WAAW,GAAG,QAAQ,GAAG;AAE/B,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,aAAa,IAAI;AAEnB,iBAAa;AAAA,EACf,OAAO;AACL,iBAAa,GAAG,MAAM,GAAG,QAAQ;AACjC,UAAM,OAAO,GAAG,MAAM,WAAW,CAAC;AAClC,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iDAAiD,EAAE,GAAG;AAGjF,UAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,QAAI,aAAa,IAAI;AAEnB,gBAAU;AAAA,IACZ,OAAO;AAEL,gBAAU,KAAK,MAAM,GAAG,QAAQ;AAChC,eAAS,KAAK,MAAM,WAAW,CAAC;AAChC,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,kDAAkD,EAAE,GAAG;AACrF,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,gDAAgD,EAAE,GAAG;AAAA,IACpF;AAAA,EACF;AAGA,QAAM,EAAE,WAAW,KAAK,IAAI,mBAAmB,UAAU;AAEzD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,yCAAyC,EAAE,GAAG;AAC9E,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,oCAAoC,EAAE,GAAG;AAEpE,SAAO,EAAE,WAAW,MAAM,SAAS,OAAO;AAC5C;AAEO,SAAS,QAAQ,OAAwB;AAC9C,QAAM,EAAE,WAAW,MAAM,SAAS,OAAO,IAAI;AAC7C,MAAI,CAAC,aAAa,CAAC,MAAM;AACvB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,UAAU,CAAC,SAAS;AACtB,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,MAAI,SAAS,GAAG,SAAS,IAAI,IAAI;AACjC,MAAI,SAAS;AACX,cAAU,IAAI,OAAO;AACrB,QAAI,OAAQ,WAAU,IAAI,MAAM;AAAA,EAClC;AACA,SAAO;AACT;AAEO,SAAS,cAAc,IAAoB;AAChD,MAAI;AACF,WAAO,QAAQ,EAAE,EAAE,UAAU;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,YAAY,IAAoB;AAC9C,MAAI;AACF,WAAO,QAAQ,EAAE,EAAE;AAAA,EACrB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACvHA,OAAO,WAAW;AAEX,IAAM,eAAe,MAAM,OAAO;AAClC,IAAM,wBAAwB;AAE9B,SAAS,mBAAmB,OAAyB;AAC1D,MAAI,EAAE,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,KAAQ,MAAM,CAAC,MAAM,IAAO;AACvF,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACF;AAEO,SAAS,gBAAgB,KAAY,gBAA8B;AACxE,MAAI,oBAAoB;AACxB,MAAI,QAAQ,CAAC,OAAO,SAAS;AAC3B,QAAI,CAAC,KAAK,IAAK,sBAAsB,KAAa,OAAO,oBAAoB;AAAA,EAC/E,CAAC;AACD,MAAI,oBAAoB,cAAc;AACpC,UAAM,IAAI,MAAM,sCAAsC,iBAAiB,EAAE;AAAA,EAC3E;AACA,MAAI,oBAAoB,iBAAiB,uBAAuB;AAC9D,UAAM,IAAI,MAAM,oCAAoC,oBAAoB,gBAAgB,QAAQ,CAAC,CAAC,GAAG;AAAA,EACvG;AACF;AAEO,SAAS,YAAmB;AACjC,SAAO,IAAI,MAAM;AACnB;AAEA,eAAsB,aAAa,KAAY,QAAiD;AAC9F,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAA4B,CAAC;AAEnC,MAAI,QAAQ,CAAC,cAAc,SAAS;AAClC,QAAI,KAAK,IAAK;AACd,QAAI,UAAU,CAAC,OAAO,KAAK,OAAK,aAAa,WAAW,CAAC,CAAC,EAAG;AAC7D,aAAS;AAAA,MACP,KAAK,MAAM,MAAM,EAAE,KAAK,aAAW;AACjC,cAAM,IAAI,cAAc,OAAO;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,QAAM,QAAQ,IAAI,QAAQ;AAC1B,SAAO;AACT;","names":[]}

package/dist/{core-DLZGpzev.d.cts → core-b-7c6X6q.d.cts}

@@ -1,74 +1,8 @@
+import { AnnotatedRef } from '@dot-agent/parser-dsl';
 import JSZip from 'jszip';
 
 type LangId = 'description' | 'behavior';
-interface BehaviorStatement {
-    type: string;
-    [key: string]: unknown;
-}
-interface StateDef {
-    name: string;
-    body: BehaviorStatement[];
-}
-interface TriggerDecl {
-    event: string;
-    body: BehaviorStatement[];
-}
-interface BehaviorFile {
-    merges: string[];
-    global_triggers: TriggerDecl[];
-    states: StateDef[];
-}
-interface OntologyRef {
-    uri: string;
-    label?: string;
-}
-interface AgentDecl {
-    name: string;
-    domain?: string;
-    license?: string;
-    terms?: string;
-    privacy?: string;
-}
-interface AnnotatedRef {
-    name: string;
-    description?: string;
-}
-type PropertyType = {
-    kind: 'primitive';
-    value: string;
-} | {
-    kind: 'reference';
-    value: string;
-} | {
-    kind: 'array';
-    value: PropertyType;
-} | {
-    kind: 'enum';
-    value: string[];
-};
-interface PropertyDecl {
-    name: string;
-    type: PropertyType;
-    is_optional: boolean;
-    description?: string;
-}
-interface TypeDefinition {
-    name: string;
-    category: OntologyRef;
-    concept?: OntologyRef;
-    properties: PropertyDecl[];
-}
-interface DescriptionFile {
-    agent: AgentDecl;
-    description?: string;
-    persona?: string;
-    behavior?: string;
-    requires: AnnotatedRef[];
-    input: AnnotatedRef[];
-    capabilities: AnnotatedRef[];
-    output: AnnotatedRef[];
-    types: TypeDefinition[];
-}
+
 /** Structured diagnostic from the Rust WASM parser. */
 interface ParseDiagnostic {
     severity: 'error' | 'warning' | 'info' | 'hint';
@@ -104,7 +38,7 @@ interface Integrity {
     files?: string;
 }
 interface AboutMe {
-    schemaVersion: string;
+    dslVersion: string;
     id: string;
     name: string;
     description: string;
@@ -119,11 +53,34 @@ interface AboutMe {
     requires: AnnotatedRef[];
     integrity: Integrity;
 }
+interface AgentFiles {
+    description: string;
+    behavior: string;
+    soul?: string;
+    guides: Array<{
+        path: string;
+        content: string;
+    }>;
+    knowledge: Array<{
+        path: string;
+        content: string;
+    }>;
+    behaviors: Array<{
+        path: string;
+        content: string;
+    }>;
+}
+interface AgentBundle {
+    id: string;
+    aboutme: AboutMe;
+    files: AgentFiles;
+}
 interface PackOptions {
     dir?: string;
     out?: string;
     commit?: string;
     version?: string;
+    description?: string;
 }
 interface PackResult {
     path: string;
@@ -155,7 +112,9 @@ declare function buildId(parts: IdParts): string;
 declare function extractDigest(id: string): string;
 declare function extractName(id: string): string;
 
+declare function validateMagicBytes(bytes: Uint8Array): void;
+declare function validateZipBomb(zip: JSZip, compressedSize: number): void;
 declare function createZip(): JSZip;
 declare function extractFiles(zip: JSZip, filter?: string[]): Promise<Map<string, string>>;
 
-export { type AboutMe as A, type BehaviorFile as B, type Capability as C, type DescriptionFile as D, type IdParts as I, type LangId as L, type OntologyRef as O, type ParseDiagnostic as P, type StateDef as S, type TriggerDecl as T, type LintMessage as a, type PackOptions as b, type PackResult as c, type AgentDecl as d, type AnnotatedRef as e, type BehaviorStatement as f, type BuildAboutmeOptions as g, type Integrity as h, type PropertyDecl as i, type PropertyType as j, type TypeDefinition as k, aboutmeToJson as l, buildAboutme as m, buildId as n, createZip as o, extractDigest as p, extractFiles as q, extractName as r, parseAboutme as s, parseId as t };
+export { type AgentBundle as A, type BuildAboutmeOptions as B, type Capability as C, type IdParts as I, type LangId as L, type ParseDiagnostic as P, type LintMessage as a, type PackOptions as b, type PackResult as c, type AboutMe as d, type AgentFiles as e, type Integrity as f, aboutmeToJson as g, buildAboutme as h, buildId as i, createZip as j, extractDigest as k, extractFiles as l, extractName as m, parseId as n, validateZipBomb as o, parseAboutme as p, validateMagicBytes as v };

package/dist/{core-DLZGpzev.d.ts → core-b-7c6X6q.d.ts}

@@ -1,74 +1,8 @@
+import { AnnotatedRef } from '@dot-agent/parser-dsl';
 import JSZip from 'jszip';
 
 type LangId = 'description' | 'behavior';
-interface BehaviorStatement {
-    type: string;
-    [key: string]: unknown;
-}
-interface StateDef {
-    name: string;
-    body: BehaviorStatement[];
-}
-interface TriggerDecl {
-    event: string;
-    body: BehaviorStatement[];
-}
-interface BehaviorFile {
-    merges: string[];
-    global_triggers: TriggerDecl[];
-    states: StateDef[];
-}
-interface OntologyRef {
-    uri: string;
-    label?: string;
-}
-interface AgentDecl {
-    name: string;
-    domain?: string;
-    license?: string;
-    terms?: string;
-    privacy?: string;
-}
-interface AnnotatedRef {
-    name: string;
-    description?: string;
-}
-type PropertyType = {
-    kind: 'primitive';
-    value: string;
-} | {
-    kind: 'reference';
-    value: string;
-} | {
-    kind: 'array';
-    value: PropertyType;
-} | {
-    kind: 'enum';
-    value: string[];
-};
-interface PropertyDecl {
-    name: string;
-    type: PropertyType;
-    is_optional: boolean;
-    description?: string;
-}
-interface TypeDefinition {
-    name: string;
-    category: OntologyRef;
-    concept?: OntologyRef;
-    properties: PropertyDecl[];
-}
-interface DescriptionFile {
-    agent: AgentDecl;
-    description?: string;
-    persona?: string;
-    behavior?: string;
-    requires: AnnotatedRef[];
-    input: AnnotatedRef[];
-    capabilities: AnnotatedRef[];
-    output: AnnotatedRef[];
-    types: TypeDefinition[];
-}
+
 /** Structured diagnostic from the Rust WASM parser. */
 interface ParseDiagnostic {
     severity: 'error' | 'warning' | 'info' | 'hint';
@@ -104,7 +38,7 @@ interface Integrity {
     files?: string;
 }
 interface AboutMe {
-    schemaVersion: string;
+    dslVersion: string;
     id: string;
     name: string;
     description: string;
@@ -119,11 +53,34 @@ interface AboutMe {
     requires: AnnotatedRef[];
     integrity: Integrity;
 }
+interface AgentFiles {
+    description: string;
+    behavior: string;
+    soul?: string;
+    guides: Array<{
+        path: string;
+        content: string;
+    }>;
+    knowledge: Array<{
+        path: string;
+        content: string;
+    }>;
+    behaviors: Array<{
+        path: string;
+        content: string;
+    }>;
+}
+interface AgentBundle {
+    id: string;
+    aboutme: AboutMe;
+    files: AgentFiles;
+}
 interface PackOptions {
     dir?: string;
     out?: string;
     commit?: string;
     version?: string;
+    description?: string;
 }
 interface PackResult {
     path: string;
@@ -155,7 +112,9 @@ declare function buildId(parts: IdParts): string;
 declare function extractDigest(id: string): string;
 declare function extractName(id: string): string;
 
+declare function validateMagicBytes(bytes: Uint8Array): void;
+declare function validateZipBomb(zip: JSZip, compressedSize: number): void;
 declare function createZip(): JSZip;
 declare function extractFiles(zip: JSZip, filter?: string[]): Promise<Map<string, string>>;
 
-export { type AboutMe as A, type BehaviorFile as B, type Capability as C, type DescriptionFile as D, type IdParts as I, type LangId as L, type OntologyRef as O, type ParseDiagnostic as P, type StateDef as S, type TriggerDecl as T, type LintMessage as a, type PackOptions as b, type PackResult as c, type AgentDecl as d, type AnnotatedRef as e, type BehaviorStatement as f, type BuildAboutmeOptions as g, type Integrity as h, type PropertyDecl as i, type PropertyType as j, type TypeDefinition as k, aboutmeToJson as l, buildAboutme as m, buildId as n, createZip as o, extractDigest as p, extractFiles as q, extractName as r, parseAboutme as s, parseId as t };
+export { type AgentBundle as A, type BuildAboutmeOptions as B, type Capability as C, type IdParts as I, type LangId as L, type ParseDiagnostic as P, type LintMessage as a, type PackOptions as b, type PackResult as c, type AboutMe as d, type AgentFiles as e, type Integrity as f, aboutmeToJson as g, buildAboutme as h, buildId as i, createZip as j, extractDigest as k, extractFiles as l, extractName as m, parseId as n, validateZipBomb as o, parseAboutme as p, validateMagicBytes as v };

package/dist/core.cjs

@@ -38,13 +38,18 @@ __export(core_exports, {
   extractFiles: () => extractFiles,
   extractName: () => extractName,
   parseAboutme: () => parseAboutme,
-  parseId: () => parseId
+  parseId: () => parseId,
+  validateMagicBytes: () => validateMagicBytes,
+  validateZipBomb: () => validateZipBomb
 });
 module.exports = __toCommonJS(core_exports);
 
+// src/generated-version.ts
+var DSL_VERSION = "0.1-alpha";
+
 // src/manifest.ts
 function parseAboutme(json) {
-  if (!json.schemaVersion) throw new Error("Missing schemaVersion in aboutme.json");
+  if (!json.dslVersion) throw new Error("Missing dslVersion in aboutme.json");
   if (!json.id) throw new Error("Missing id in aboutme.json");
   if (!json.name) throw new Error("Missing name in aboutme.json");
   if (!json.description) throw new Error("Missing description in aboutme.json");
@@ -56,7 +61,7 @@ function parseAboutme(json) {
   if (!Array.isArray(json.requires)) throw new Error("Missing requires array in aboutme.json");
   if (!json.integrity) throw new Error("Missing integrity in aboutme.json");
   return {
-    schemaVersion: json.schemaVersion,
+    dslVersion: json.dslVersion,
     id: json.id,
     name: json.name,
     description: json.description,
@@ -74,7 +79,7 @@ function parseAboutme(json) {
 }
 function buildAboutme(opts) {
   return {
-    schemaVersion: "dot-agent/1.0",
+    dslVersion: `dot-agent/${DSL_VERSION}`,
     id: opts.id,
     name: opts.name,
     description: opts.description,
@@ -191,6 +196,25 @@ function extractName(id) {
 
 // src/zip-core.ts
 var import_jszip = __toESM(require("jszip"), 1);
+var MAX_ZIP_SIZE = 500 * 1024 * 1024;
+var MAX_COMPRESSION_RATIO = 100;
+function validateMagicBytes(bytes) {
+  if (!(bytes[0] === 80 && bytes[1] === 75 && bytes[2] === 3 && bytes[3] === 4)) {
+    throw new Error("Not a valid .agent file (invalid magic bytes)");
+  }
+}
+function validateZipBomb(zip, compressedSize) {
+  let totalUncompressed = 0;
+  zip.forEach((_path, file) => {
+    if (!file.dir) totalUncompressed += file._data?.uncompressedSize || 0;
+  });
+  if (totalUncompressed > MAX_ZIP_SIZE) {
+    throw new Error(`Bundle exceeds 500MB uncompressed: ${totalUncompressed}`);
+  }
+  if (totalUncompressed / compressedSize > MAX_COMPRESSION_RATIO) {
+    throw new Error(`Compression ratio exceeds 100x: ${(totalUncompressed / compressedSize).toFixed(1)}x`);
+  }
+}
 function createZip() {
   return new import_jszip.default();
 }
@@ -219,6 +243,8 @@ async function extractFiles(zip, filter) {
   extractFiles,
   extractName,
   parseAboutme,
-  parseId
+  parseId,
+  validateMagicBytes,
+  validateZipBomb
 });
 //# sourceMappingURL=core.cjs.map

package/dist/core.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core.ts","../src/manifest.ts","../src/id.ts","../src/zip-core.ts"],"sourcesContent":["// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\n// Browser-safe sub-path export — no Node.js dependencies.\n// Import via: import { ... } from '@dot-agent/compiler/core'\n\nexport { parseAboutme, buildAboutme, aboutmeToJson } from './manifest.js'\nexport { parseId, buildId, extractDigest, extractName } from './id.js'\nexport { createZip, extractFiles } from './zip-core.js'\n\nexport type {\n  AboutMe,\n  Capability,\n  AnnotatedRef,\n  DescriptionFile,\n  Integrity,\n  BuildAboutmeOptions,\n  IdParts,\n  LintMessage,\n} from './types.js'\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n\nimport type { AboutMe, BuildAboutmeOptions } from './types.js'\n\nexport function parseAboutme(json: any): AboutMe {\n  if (!json.schemaVersion) throw new Error('Missing schemaVersion in aboutme.json')\n  if (!json.id) throw new Error('Missing id in aboutme.json')\n  if (!json.name) throw new Error('Missing name in aboutme.json')\n  if (!json.description) throw new Error('Missing description in aboutme.json')\n  if (!json.version) throw new Error('Missing version in aboutme.json')\n  if (!json.domain) throw new Error('Missing domain in aboutme.json')\n  if (!json.persona) throw new Error('Missing persona in aboutme.json')\n  if (!json.compiler) throw new Error('Missing compiler in aboutme.json')\n  if (!Array.isArray(json.capabilities)) throw new Error('Missing capabilities array in aboutme.json')\n  if (!Array.isArray(json.requires)) throw new Error('Missing requires array in aboutme.json')\n  if (!json.integrity) throw new Error('Missing integrity in aboutme.json')\n\n  return {\n    schemaVersion: json.schemaVersion,\n    id: json.id,\n    name: json.name,\n    description: json.description,\n    version: json.version,\n    domain: json.domain,\n    license: json.license ?? '',\n    persona: json.persona,\n    purpose: json.purpose ?? 'unknown',\n    compiler: json.compiler,\n    commit: json.commit,\n    capabilities: json.capabilities,\n    requires: json.requires,\n    integrity: json.integrity,\n  }\n}\n\nexport function buildAboutme(opts: BuildAboutmeOptions): AboutMe {\n  return {\n    schemaVersion: 'dot-agent/1.0',\n    id: opts.id,\n    name: opts.name,\n    description: opts.description,\n    version: opts.version,\n    domain: opts.domain,\n    license: opts.license ?? '',\n    persona: opts.persona,\n    purpose: opts.purpose ?? 'unknown',\n    compiler: opts.compiler,\n    commit: opts.commit,\n    capabilities: opts.capabilities ?? [],\n    requires: opts.requires ?? [],\n    integrity: opts.integrity,\n  }\n}\n\nexport function aboutmeToJson(aboutme: AboutMe): string {\n  return JSON.stringify(aboutme, null, 2)\n}\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\nimport type { IdParts } from './types.js'\n\n// Code hosting platforms whose namespace format is platform/user rather than plain domain.\n// The list is maintained by the compiler and updated via CLI releases.\nexport const KNOWN_PLATFORMS = ['github.com', 'gitlab.com', 'codeberg.org', 'sr.ht'] as const\n\nfunction parseNamespaceName(identifier: string): { namespace: string; name: string } {\n  // Email namespace: @ appears before any /\n  const atIdx = identifier.indexOf('@')\n  if (atIdx !== -1 && (identifier.indexOf('/') === -1 || atIdx < identifier.indexOf('/'))) {\n    const slashIdx = identifier.indexOf('/')\n    if (slashIdx === -1) {\n      throw new Error(`Invalid agent ID: email namespace requires a name after '/' (got '${identifier}')`)\n    }\n    return {\n      namespace: identifier.slice(0, slashIdx),\n      name: identifier.slice(slashIdx + 1),\n    }\n  }\n\n  // Known code-hosting platforms: namespace is platform/user, name is the next segment.\n  for (const platform of KNOWN_PLATFORMS) {\n    if (identifier.startsWith(platform + '/')) {\n      const afterPlatform = identifier.slice(platform.length + 1)\n      const slashIdx = afterPlatform.indexOf('/')\n      if (slashIdx === -1) {\n        throw new Error(\n          `Invalid agent ID: '${platform}' namespace requires a user segment and a name (got '${identifier}')`,\n        )\n      }\n      return {\n        namespace: platform + '/' + afterPlatform.slice(0, slashIdx),\n        name: afterPlatform.slice(slashIdx + 1),\n      }\n    }\n  }\n\n  // Domain or reserved keyword (e.g. 'unknown'): last '/' separates namespace from name.\n  const lastSlash = identifier.lastIndexOf('/')\n  if (lastSlash === -1) {\n    throw new Error(`Invalid agent ID: missing '/' separator in '${identifier}'`)\n  }\n  return {\n    namespace: identifier.slice(0, lastSlash),\n    name: identifier.slice(lastSlash + 1),\n  }\n}\n\nexport function parseId(id: string): IdParts {\n  if (!id) throw new Error('Invalid agent ID: empty string')\n\n  // Phase 1: split on the first ':' to isolate the identifier from version~digest.\n  const colonIdx = id.indexOf(':')\n\n  let identifier: string\n  let version: string | undefined\n  let digest: string | undefined\n\n  if (colonIdx === -1) {\n    // Form A: namespace/name\n    identifier = id\n  } else {\n    identifier = id.slice(0, colonIdx)\n    const rest = id.slice(colonIdx + 1)\n    if (!rest) throw new Error(`Invalid agent ID: empty version after ':' in '${id}'`)\n\n    // Phase 2: split version~digest\n    const tildeIdx = rest.indexOf('~')\n    if (tildeIdx === -1) {\n      // Form B: namespace/name:version\n      version = rest\n    } else {\n      // Form D: namespace/name:version~digest\n      version = rest.slice(0, tildeIdx)\n      digest = rest.slice(tildeIdx + 1)\n      if (!version) throw new Error(`Invalid agent ID: empty version before '~' in '${id}'`)\n      if (!digest) throw new Error(`Invalid agent ID: empty digest after '~' in '${id}'`)\n    }\n  }\n\n  // Phase 3: extract namespace and name from the identifier\n  const { namespace, name } = parseNamespaceName(identifier)\n\n  if (!namespace) throw new Error(`Invalid agent ID: empty namespace in '${id}'`)\n  if (!name) throw new Error(`Invalid agent ID: empty name in '${id}'`)\n\n  return { namespace, name, version, digest }\n}\n\nexport function buildId(parts: IdParts): string {\n  const { namespace, name, version, digest } = parts\n  if (!namespace || !name) {\n    throw new Error('Missing required ID parts: namespace and name')\n  }\n  if (digest && !version) {\n    throw new Error('Invalid ID parts: digest requires version')\n  }\n  let result = `${namespace}/${name}`\n  if (version) {\n    result += `:${version}`\n    if (digest) result += `~${digest}`\n  }\n  return result\n}\n\nexport function extractDigest(id: string): string {\n  try {\n    return parseId(id).digest ?? ''\n  } catch {\n    return ''\n  }\n}\n\nexport function extractName(id: string): string {\n  try {\n    return parseId(id).name\n  } catch {\n    return ''\n  }\n}\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\nimport JSZip from 'jszip'\n\nexport function createZip(): JSZip {\n  return new JSZip()\n}\n\nexport async function extractFiles(zip: JSZip, filter?: string[]): Promise<Map<string, string>> {\n  const files = new Map<string, string>()\n  const promises: Promise<void>[] = []\n\n  zip.forEach((relativePath, file) => {\n    if (file.dir) return\n    if (filter && !filter.some(f => relativePath.startsWith(f))) return\n    promises.push(\n      file.async('text').then(content => {\n        files.set(relativePath, content)\n      })\n    )\n  })\n\n  await Promise.all(promises)\n  return files\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,SAAS,aAAa,MAAoB;AAC/C,MAAI,CAAC,KAAK,cAAe,OAAM,IAAI,MAAM,uCAAuC;AAChF,MAAI,CAAC,KAAK,GAAI,OAAM,IAAI,MAAM,4BAA4B;AAC1D,MAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,8BAA8B;AAC9D,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,qCAAqC;AAC5E,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACpE,MAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,gCAAgC;AAClE,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACpE,MAAI,CAAC,KAAK,SAAU,OAAM,IAAI,MAAM,kCAAkC;AACtE,MAAI,CAAC,MAAM,QAAQ,KAAK,YAAY,EAAG,OAAM,IAAI,MAAM,4CAA4C;AACnG,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAAG,OAAM,IAAI,MAAM,wCAAwC;AAC3F,MAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,mCAAmC;AAExE,SAAO;AAAA,IACL,eAAe,KAAK;AAAA,IACpB,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,WAAW;AAAA,IACzB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,IACnB,UAAU,KAAK;AAAA,IACf,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,aAAa,MAAoC;AAC/D,SAAO;AAAA,IACL,eAAe;AAAA,IACf,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,WAAW;AAAA,IACzB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK,gBAAgB,CAAC;AAAA,IACpC,UAAU,KAAK,YAAY,CAAC;AAAA,IAC5B,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,cAAc,SAA0B;AACtD,SAAO,KAAK,UAAU,SAAS,MAAM,CAAC;AACxC;;;AC5CO,IAAM,kBAAkB,CAAC,cAAc,cAAc,gBAAgB,OAAO;AAEnF,SAAS,mBAAmB,YAAyD;AAEnF,QAAM,QAAQ,WAAW,QAAQ,GAAG;AACpC,MAAI,UAAU,OAAO,WAAW,QAAQ,GAAG,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAG,IAAI;AACvF,UAAM,WAAW,WAAW,QAAQ,GAAG;AACvC,QAAI,aAAa,IAAI;AACnB,YAAM,IAAI,MAAM,qEAAqE,UAAU,IAAI;AAAA,IACrG;AACA,WAAO;AAAA,MACL,WAAW,WAAW,MAAM,GAAG,QAAQ;AAAA,MACvC,MAAM,WAAW,MAAM,WAAW,CAAC;AAAA,IACrC;AAAA,EACF;AAGA,aAAW,YAAY,iBAAiB;AACtC,QAAI,WAAW,WAAW,WAAW,GAAG,GAAG;AACzC,YAAM,gBAAgB,WAAW,MAAM,SAAS,SAAS,CAAC;AAC1D,YAAM,WAAW,cAAc,QAAQ,GAAG;AAC1C,UAAI,aAAa,IAAI;AACnB,cAAM,IAAI;AAAA,UACR,sBAAsB,QAAQ,wDAAwD,UAAU;AAAA,QAClG;AAAA,MACF;AACA,aAAO;AAAA,QACL,WAAW,WAAW,MAAM,cAAc,MAAM,GAAG,QAAQ;AAAA,QAC3D,MAAM,cAAc,MAAM,WAAW,CAAC;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,cAAc,IAAI;AACpB,UAAM,IAAI,MAAM,+CAA+C,UAAU,GAAG;AAAA,EAC9E;AACA,SAAO;AAAA,IACL,WAAW,WAAW,MAAM,GAAG,SAAS;AAAA,IACxC,MAAM,WAAW,MAAM,YAAY,CAAC;AAAA,EACtC;AACF;AAEO,SAAS,QAAQ,IAAqB;AAC3C,MAAI,CAAC,GAAI,OAAM,IAAI,MAAM,gCAAgC;AAGzD,QAAM,WAAW,GAAG,QAAQ,GAAG;AAE/B,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,aAAa,IAAI;AAEnB,iBAAa;AAAA,EACf,OAAO;AACL,iBAAa,GAAG,MAAM,GAAG,QAAQ;AACjC,UAAM,OAAO,GAAG,MAAM,WAAW,CAAC;AAClC,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iDAAiD,EAAE,GAAG;AAGjF,UAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,QAAI,aAAa,IAAI;AAEnB,gBAAU;AAAA,IACZ,OAAO;AAEL,gBAAU,KAAK,MAAM,GAAG,QAAQ;AAChC,eAAS,KAAK,MAAM,WAAW,CAAC;AAChC,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,kDAAkD,EAAE,GAAG;AACrF,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,gDAAgD,EAAE,GAAG;AAAA,IACpF;AAAA,EACF;AAGA,QAAM,EAAE,WAAW,KAAK,IAAI,mBAAmB,UAAU;AAEzD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,yCAAyC,EAAE,GAAG;AAC9E,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,oCAAoC,EAAE,GAAG;AAEpE,SAAO,EAAE,WAAW,MAAM,SAAS,OAAO;AAC5C;AAEO,SAAS,QAAQ,OAAwB;AAC9C,QAAM,EAAE,WAAW,MAAM,SAAS,OAAO,IAAI;AAC7C,MAAI,CAAC,aAAa,CAAC,MAAM;AACvB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,UAAU,CAAC,SAAS;AACtB,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,MAAI,SAAS,GAAG,SAAS,IAAI,IAAI;AACjC,MAAI,SAAS;AACX,cAAU,IAAI,OAAO;AACrB,QAAI,OAAQ,WAAU,IAAI,MAAM;AAAA,EAClC;AACA,SAAO;AACT;AAEO,SAAS,cAAc,IAAoB;AAChD,MAAI;AACF,WAAO,QAAQ,EAAE,EAAE,UAAU;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,YAAY,IAAoB;AAC9C,MAAI;AACF,WAAO,QAAQ,EAAE,EAAE;AAAA,EACrB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACvHA,mBAAkB;AAEX,SAAS,YAAmB;AACjC,SAAO,IAAI,aAAAA,QAAM;AACnB;AAEA,eAAsB,aAAa,KAAY,QAAiD;AAC9F,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAA4B,CAAC;AAEnC,MAAI,QAAQ,CAAC,cAAc,SAAS;AAClC,QAAI,KAAK,IAAK;AACd,QAAI,UAAU,CAAC,OAAO,KAAK,OAAK,aAAa,WAAW,CAAC,CAAC,EAAG;AAC7D,aAAS;AAAA,MACP,KAAK,MAAM,MAAM,EAAE,KAAK,aAAW;AACjC,cAAM,IAAI,cAAc,OAAO;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,QAAM,QAAQ,IAAI,QAAQ;AAC1B,SAAO;AACT;","names":["JSZip"]}
+{"version":3,"sources":["../src/core.ts","../src/generated-version.ts","../src/manifest.ts","../src/id.ts","../src/zip-core.ts"],"sourcesContent":["// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\n// Browser-safe sub-path export — no Node.js dependencies.\n// Import via: import { ... } from '@dot-agent/compiler/core'\n\nexport { parseAboutme, buildAboutme, aboutmeToJson } from './manifest.js'\nexport { parseId, buildId, extractDigest, extractName } from './id.js'\nexport { createZip, extractFiles, validateMagicBytes, validateZipBomb } from './zip-core.js'\n\nexport type {\n  AboutMe,\n  AgentBundle,\n  AgentFiles,\n  Capability,\n  AnnotatedRef,\n  DescriptionFile,\n  Integrity,\n  BuildAboutmeOptions,\n  IdParts,\n  LintMessage,\n} from './types.js'\n","// Generated by scripts/embed-version.mjs from dsl/VERSION and package.json — do not edit by hand.\nexport const DSL_VERSION = '0.1-alpha'\nexport const COMPILER_VERSION = '0.5.0-alpha.2'\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n\nimport type { AboutMe, BuildAboutmeOptions } from './types.js'\nimport { DSL_VERSION } from './generated-version.js'\n\nexport function parseAboutme(json: any): AboutMe {\n  if (!json.dslVersion) throw new Error('Missing dslVersion in aboutme.json')\n  if (!json.id) throw new Error('Missing id in aboutme.json')\n  if (!json.name) throw new Error('Missing name in aboutme.json')\n  if (!json.description) throw new Error('Missing description in aboutme.json')\n  if (!json.version) throw new Error('Missing version in aboutme.json')\n  if (!json.domain) throw new Error('Missing domain in aboutme.json')\n  if (!json.persona) throw new Error('Missing persona in aboutme.json')\n  if (!json.compiler) throw new Error('Missing compiler in aboutme.json')\n  if (!Array.isArray(json.capabilities)) throw new Error('Missing capabilities array in aboutme.json')\n  if (!Array.isArray(json.requires)) throw new Error('Missing requires array in aboutme.json')\n  if (!json.integrity) throw new Error('Missing integrity in aboutme.json')\n\n  return {\n    dslVersion: json.dslVersion,\n    id: json.id,\n    name: json.name,\n    description: json.description,\n    version: json.version,\n    domain: json.domain,\n    license: json.license ?? '',\n    persona: json.persona,\n    purpose: json.purpose ?? 'unknown',\n    compiler: json.compiler,\n    commit: json.commit,\n    capabilities: json.capabilities,\n    requires: json.requires,\n    integrity: json.integrity,\n  }\n}\n\nexport function buildAboutme(opts: BuildAboutmeOptions): AboutMe {\n  return {\n    dslVersion: `dot-agent/${DSL_VERSION}`,\n    id: opts.id,\n    name: opts.name,\n    description: opts.description,\n    version: opts.version,\n    domain: opts.domain,\n    license: opts.license ?? '',\n    persona: opts.persona,\n    purpose: opts.purpose ?? 'unknown',\n    compiler: opts.compiler,\n    commit: opts.commit,\n    capabilities: opts.capabilities ?? [],\n    requires: opts.requires ?? [],\n    integrity: opts.integrity,\n  }\n}\n\nexport function aboutmeToJson(aboutme: AboutMe): string {\n  return JSON.stringify(aboutme, null, 2)\n}\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\nimport type { IdParts } from './types.js'\n\n// Code hosting platforms whose namespace format is platform/user rather than plain domain.\n// The list is maintained by the compiler and updated via CLI releases.\nexport const KNOWN_PLATFORMS = ['github.com', 'gitlab.com', 'codeberg.org', 'sr.ht'] as const\n\nfunction parseNamespaceName(identifier: string): { namespace: string; name: string } {\n  // Email namespace: @ appears before any /\n  const atIdx = identifier.indexOf('@')\n  if (atIdx !== -1 && (identifier.indexOf('/') === -1 || atIdx < identifier.indexOf('/'))) {\n    const slashIdx = identifier.indexOf('/')\n    if (slashIdx === -1) {\n      throw new Error(`Invalid agent ID: email namespace requires a name after '/' (got '${identifier}')`)\n    }\n    return {\n      namespace: identifier.slice(0, slashIdx),\n      name: identifier.slice(slashIdx + 1),\n    }\n  }\n\n  // Known code-hosting platforms: namespace is platform/user, name is the next segment.\n  for (const platform of KNOWN_PLATFORMS) {\n    if (identifier.startsWith(platform + '/')) {\n      const afterPlatform = identifier.slice(platform.length + 1)\n      const slashIdx = afterPlatform.indexOf('/')\n      if (slashIdx === -1) {\n        throw new Error(\n          `Invalid agent ID: '${platform}' namespace requires a user segment and a name (got '${identifier}')`,\n        )\n      }\n      return {\n        namespace: platform + '/' + afterPlatform.slice(0, slashIdx),\n        name: afterPlatform.slice(slashIdx + 1),\n      }\n    }\n  }\n\n  // Domain or reserved keyword (e.g. 'unknown'): last '/' separates namespace from name.\n  const lastSlash = identifier.lastIndexOf('/')\n  if (lastSlash === -1) {\n    throw new Error(`Invalid agent ID: missing '/' separator in '${identifier}'`)\n  }\n  return {\n    namespace: identifier.slice(0, lastSlash),\n    name: identifier.slice(lastSlash + 1),\n  }\n}\n\nexport function parseId(id: string): IdParts {\n  if (!id) throw new Error('Invalid agent ID: empty string')\n\n  // Phase 1: split on the first ':' to isolate the identifier from version~digest.\n  const colonIdx = id.indexOf(':')\n\n  let identifier: string\n  let version: string | undefined\n  let digest: string | undefined\n\n  if (colonIdx === -1) {\n    // Form A: namespace/name\n    identifier = id\n  } else {\n    identifier = id.slice(0, colonIdx)\n    const rest = id.slice(colonIdx + 1)\n    if (!rest) throw new Error(`Invalid agent ID: empty version after ':' in '${id}'`)\n\n    // Phase 2: split version~digest\n    const tildeIdx = rest.indexOf('~')\n    if (tildeIdx === -1) {\n      // Form B: namespace/name:version\n      version = rest\n    } else {\n      // Form D: namespace/name:version~digest\n      version = rest.slice(0, tildeIdx)\n      digest = rest.slice(tildeIdx + 1)\n      if (!version) throw new Error(`Invalid agent ID: empty version before '~' in '${id}'`)\n      if (!digest) throw new Error(`Invalid agent ID: empty digest after '~' in '${id}'`)\n    }\n  }\n\n  // Phase 3: extract namespace and name from the identifier\n  const { namespace, name } = parseNamespaceName(identifier)\n\n  if (!namespace) throw new Error(`Invalid agent ID: empty namespace in '${id}'`)\n  if (!name) throw new Error(`Invalid agent ID: empty name in '${id}'`)\n\n  return { namespace, name, version, digest }\n}\n\nexport function buildId(parts: IdParts): string {\n  const { namespace, name, version, digest } = parts\n  if (!namespace || !name) {\n    throw new Error('Missing required ID parts: namespace and name')\n  }\n  if (digest && !version) {\n    throw new Error('Invalid ID parts: digest requires version')\n  }\n  let result = `${namespace}/${name}`\n  if (version) {\n    result += `:${version}`\n    if (digest) result += `~${digest}`\n  }\n  return result\n}\n\nexport function extractDigest(id: string): string {\n  try {\n    return parseId(id).digest ?? ''\n  } catch {\n    return ''\n  }\n}\n\nexport function extractName(id: string): string {\n  try {\n    return parseId(id).name\n  } catch {\n    return ''\n  }\n}\n","// Copyright 2026 Danilo Borges\n//\n// Licensed under the Apache License, Version 2.0 (the \"License\");\n// you may not use this file except in compliance with the License.\n// You may obtain a copy of the License at\n//\n//     http://www.apache.org/licenses/LICENSE-2.0\n//\n// Unless required by applicable law or agreed to in writing, software\n// distributed under the License is distributed on an \"AS IS\" BASIS,\n// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n// See the License for the specific language governing permissions and\n// limitations under the License.\n\nimport JSZip from 'jszip'\n\nexport const MAX_ZIP_SIZE = 500 * 1024 * 1024\nexport const MAX_COMPRESSION_RATIO = 100\n\nexport function validateMagicBytes(bytes: Uint8Array): void {\n  if (!(bytes[0] === 0x50 && bytes[1] === 0x4b && bytes[2] === 0x03 && bytes[3] === 0x04)) {\n    throw new Error('Not a valid .agent file (invalid magic bytes)')\n  }\n}\n\nexport function validateZipBomb(zip: JSZip, compressedSize: number): void {\n  let totalUncompressed = 0\n  zip.forEach((_path, file) => {\n    if (!file.dir) totalUncompressed += (file as any)._data?.uncompressedSize || 0\n  })\n  if (totalUncompressed > MAX_ZIP_SIZE) {\n    throw new Error(`Bundle exceeds 500MB uncompressed: ${totalUncompressed}`)\n  }\n  if (totalUncompressed / compressedSize > MAX_COMPRESSION_RATIO) {\n    throw new Error(`Compression ratio exceeds 100x: ${(totalUncompressed / compressedSize).toFixed(1)}x`)\n  }\n}\n\nexport function createZip(): JSZip {\n  return new JSZip()\n}\n\nexport async function extractFiles(zip: JSZip, filter?: string[]): Promise<Map<string, string>> {\n  const files = new Map<string, string>()\n  const promises: Promise<void>[] = []\n\n  zip.forEach((relativePath, file) => {\n    if (file.dir) return\n    if (filter && !filter.some(f => relativePath.startsWith(f))) return\n    promises.push(\n      file.async('text').then(content => {\n        files.set(relativePath, content)\n      })\n    )\n  })\n\n  await Promise.all(promises)\n  return files\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCO,IAAM,cAAc;;;ACUpB,SAAS,aAAa,MAAoB;AAC/C,MAAI,CAAC,KAAK,WAAY,OAAM,IAAI,MAAM,oCAAoC;AAC1E,MAAI,CAAC,KAAK,GAAI,OAAM,IAAI,MAAM,4BAA4B;AAC1D,MAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,8BAA8B;AAC9D,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,qCAAqC;AAC5E,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACpE,MAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,gCAAgC;AAClE,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,iCAAiC;AACpE,MAAI,CAAC,KAAK,SAAU,OAAM,IAAI,MAAM,kCAAkC;AACtE,MAAI,CAAC,MAAM,QAAQ,KAAK,YAAY,EAAG,OAAM,IAAI,MAAM,4CAA4C;AACnG,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAAG,OAAM,IAAI,MAAM,wCAAwC;AAC3F,MAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,mCAAmC;AAExE,SAAO;AAAA,IACL,YAAY,KAAK;AAAA,IACjB,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,WAAW;AAAA,IACzB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,IACnB,UAAU,KAAK;AAAA,IACf,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,aAAa,MAAoC;AAC/D,SAAO;AAAA,IACL,YAAY,aAAa,WAAW;AAAA,IACpC,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,WAAW;AAAA,IACzB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK,gBAAgB,CAAC;AAAA,IACpC,UAAU,KAAK,YAAY,CAAC;AAAA,IAC5B,WAAW,KAAK;AAAA,EAClB;AACF;AAEO,SAAS,cAAc,SAA0B;AACtD,SAAO,KAAK,UAAU,SAAS,MAAM,CAAC;AACxC;;;AC7CO,IAAM,kBAAkB,CAAC,cAAc,cAAc,gBAAgB,OAAO;AAEnF,SAAS,mBAAmB,YAAyD;AAEnF,QAAM,QAAQ,WAAW,QAAQ,GAAG;AACpC,MAAI,UAAU,OAAO,WAAW,QAAQ,GAAG,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAG,IAAI;AACvF,UAAM,WAAW,WAAW,QAAQ,GAAG;AACvC,QAAI,aAAa,IAAI;AACnB,YAAM,IAAI,MAAM,qEAAqE,UAAU,IAAI;AAAA,IACrG;AACA,WAAO;AAAA,MACL,WAAW,WAAW,MAAM,GAAG,QAAQ;AAAA,MACvC,MAAM,WAAW,MAAM,WAAW,CAAC;AAAA,IACrC;AAAA,EACF;AAGA,aAAW,YAAY,iBAAiB;AACtC,QAAI,WAAW,WAAW,WAAW,GAAG,GAAG;AACzC,YAAM,gBAAgB,WAAW,MAAM,SAAS,SAAS,CAAC;AAC1D,YAAM,WAAW,cAAc,QAAQ,GAAG;AAC1C,UAAI,aAAa,IAAI;AACnB,cAAM,IAAI;AAAA,UACR,sBAAsB,QAAQ,wDAAwD,UAAU;AAAA,QAClG;AAAA,MACF;AACA,aAAO;AAAA,QACL,WAAW,WAAW,MAAM,cAAc,MAAM,GAAG,QAAQ;AAAA,QAC3D,MAAM,cAAc,MAAM,WAAW,CAAC;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,cAAc,IAAI;AACpB,UAAM,IAAI,MAAM,+CAA+C,UAAU,GAAG;AAAA,EAC9E;AACA,SAAO;AAAA,IACL,WAAW,WAAW,MAAM,GAAG,SAAS;AAAA,IACxC,MAAM,WAAW,MAAM,YAAY,CAAC;AAAA,EACtC;AACF;AAEO,SAAS,QAAQ,IAAqB;AAC3C,MAAI,CAAC,GAAI,OAAM,IAAI,MAAM,gCAAgC;AAGzD,QAAM,WAAW,GAAG,QAAQ,GAAG;AAE/B,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,aAAa,IAAI;AAEnB,iBAAa;AAAA,EACf,OAAO;AACL,iBAAa,GAAG,MAAM,GAAG,QAAQ;AACjC,UAAM,OAAO,GAAG,MAAM,WAAW,CAAC;AAClC,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iDAAiD,EAAE,GAAG;AAGjF,UAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,QAAI,aAAa,IAAI;AAEnB,gBAAU;AAAA,IACZ,OAAO;AAEL,gBAAU,KAAK,MAAM,GAAG,QAAQ;AAChC,eAAS,KAAK,MAAM,WAAW,CAAC;AAChC,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,kDAAkD,EAAE,GAAG;AACrF,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,gDAAgD,EAAE,GAAG;AAAA,IACpF;AAAA,EACF;AAGA,QAAM,EAAE,WAAW,KAAK,IAAI,mBAAmB,UAAU;AAEzD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,yCAAyC,EAAE,GAAG;AAC9E,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,oCAAoC,EAAE,GAAG;AAEpE,SAAO,EAAE,WAAW,MAAM,SAAS,OAAO;AAC5C;AAEO,SAAS,QAAQ,OAAwB;AAC9C,QAAM,EAAE,WAAW,MAAM,SAAS,OAAO,IAAI;AAC7C,MAAI,CAAC,aAAa,CAAC,MAAM;AACvB,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,UAAU,CAAC,SAAS;AACtB,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,MAAI,SAAS,GAAG,SAAS,IAAI,IAAI;AACjC,MAAI,SAAS;AACX,cAAU,IAAI,OAAO;AACrB,QAAI,OAAQ,WAAU,IAAI,MAAM;AAAA,EAClC;AACA,SAAO;AACT;AAEO,SAAS,cAAc,IAAoB;AAChD,MAAI;AACF,WAAO,QAAQ,EAAE,EAAE,UAAU;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,YAAY,IAAoB;AAC9C,MAAI;AACF,WAAO,QAAQ,EAAE,EAAE;AAAA,EACrB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACvHA,mBAAkB;AAEX,IAAM,eAAe,MAAM,OAAO;AAClC,IAAM,wBAAwB;AAE9B,SAAS,mBAAmB,OAAyB;AAC1D,MAAI,EAAE,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,MAAQ,MAAM,CAAC,MAAM,KAAQ,MAAM,CAAC,MAAM,IAAO;AACvF,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACF;AAEO,SAAS,gBAAgB,KAAY,gBAA8B;AACxE,MAAI,oBAAoB;AACxB,MAAI,QAAQ,CAAC,OAAO,SAAS;AAC3B,QAAI,CAAC,KAAK,IAAK,sBAAsB,KAAa,OAAO,oBAAoB;AAAA,EAC/E,CAAC;AACD,MAAI,oBAAoB,cAAc;AACpC,UAAM,IAAI,MAAM,sCAAsC,iBAAiB,EAAE;AAAA,EAC3E;AACA,MAAI,oBAAoB,iBAAiB,uBAAuB;AAC9D,UAAM,IAAI,MAAM,oCAAoC,oBAAoB,gBAAgB,QAAQ,CAAC,CAAC,GAAG;AAAA,EACvG;AACF;AAEO,SAAS,YAAmB;AACjC,SAAO,IAAI,aAAAA,QAAM;AACnB;AAEA,eAAsB,aAAa,KAAY,QAAiD;AAC9F,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,WAA4B,CAAC;AAEnC,MAAI,QAAQ,CAAC,cAAc,SAAS;AAClC,QAAI,KAAK,IAAK;AACd,QAAI,UAAU,CAAC,OAAO,KAAK,OAAK,aAAa,WAAW,CAAC,CAAC,EAAG;AAC7D,aAAS;AAAA,MACP,KAAK,MAAM,MAAM,EAAE,KAAK,aAAW;AACjC,cAAM,IAAI,cAAc,OAAO;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,QAAM,QAAQ,IAAI,QAAQ;AAC1B,SAAO;AACT;","names":["JSZip"]}

package/dist/core.d.cts

@@ -1,2 +1,3 @@
-export { A as AboutMe, e as AnnotatedRef, g as BuildAboutmeOptions, C as Capability, D as DescriptionFile, I as IdParts, h as Integrity, a as LintMessage, l as aboutmeToJson, m as buildAboutme, n as buildId, o as createZip, p as extractDigest, q as extractFiles, r as extractName, s as parseAboutme, t as parseId } from './core-DLZGpzev.cjs';
+export { d as AboutMe, A as AgentBundle, e as AgentFiles, B as BuildAboutmeOptions, C as Capability, I as IdParts, f as Integrity, a as LintMessage, g as aboutmeToJson, h as buildAboutme, i as buildId, j as createZip, k as extractDigest, l as extractFiles, m as extractName, p as parseAboutme, n as parseId, v as validateMagicBytes, o as validateZipBomb } from './core-b-7c6X6q.cjs';
+export { AnnotatedRef, DescriptionFile } from '@dot-agent/parser-dsl';
 import 'jszip';

package/dist/core.d.ts

@@ -1,2 +1,3 @@
-export { A as AboutMe, e as AnnotatedRef, g as BuildAboutmeOptions, C as Capability, D as DescriptionFile, I as IdParts, h as Integrity, a as LintMessage, l as aboutmeToJson, m as buildAboutme, n as buildId, o as createZip, p as extractDigest, q as extractFiles, r as extractName, s as parseAboutme, t as parseId } from './core-DLZGpzev.js';
+export { d as AboutMe, A as AgentBundle, e as AgentFiles, B as BuildAboutmeOptions, C as Capability, I as IdParts, f as Integrity, a as LintMessage, g as aboutmeToJson, h as buildAboutme, i as buildId, j as createZip, k as extractDigest, l as extractFiles, m as extractName, p as parseAboutme, n as parseId, v as validateMagicBytes, o as validateZipBomb } from './core-b-7c6X6q.js';
+export { AnnotatedRef, DescriptionFile } from '@dot-agent/parser-dsl';
 import 'jszip';

package/dist/core.js

@@ -7,8 +7,10 @@ import {
   extractFiles,
   extractName,
   parseAboutme,
-  parseId
-} from "./chunk-IT25ILTQ.js";
+  parseId,
+  validateMagicBytes,
+  validateZipBomb
+} from "./chunk-P5LFGJ6P.js";
 export {
   aboutmeToJson,
   buildAboutme,
@@ -18,6 +20,8 @@ export {
   extractFiles,
   extractName,
   parseAboutme,
-  parseId
+  parseId,
+  validateMagicBytes,
+  validateZipBomb
 };
 //# sourceMappingURL=core.js.map