@farmslot/protocol 0.40.0 → 0.41.0

package/dist/runs/run-title.d.ts

@@ -0,0 +1,18 @@
+import type { PendingDecision } from '../contracts/runs.js';
+export interface DisplayRun {
+    ticketOrPr?: string | null;
+    summary?: string | null;
+    ticketData?: {
+        title?: string | null;
+    } | null;
+    branch?: string | null;
+}
+export interface RunDisplayTitle {
+    title: string;
+    subtitle: string | null;
+}
+export declare function runDisplayTitle(run: DisplayRun, maxLength?: number, source?: 'task' | 'summary'): RunDisplayTitle;
+export declare function decisionDisplayTitle(decision: PendingDecision, maxLength?: number): RunDisplayTitle;
+/** Extract a human title without changing the task body. Also handles stored legacy summaries. */
+export declare function taskTitleText(value: string, maxLength?: number): string;
+//# sourceMappingURL=run-title.d.ts.map

package/dist/runs/run-title.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-title.d.ts","sourceRoot":"","sources":["../../src/runs/run-title.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,SAAS,SAAM,EACf,MAAM,GAAE,MAAM,GAAG,SAAkB,GAClC,eAAe,CAWjB;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,SAAM,GAAG,eAAe,CAWhG;AAYD,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CA6BpE"}

package/dist/runs/run-title.js

@@ -0,0 +1,64 @@
+export function runDisplayTitle(run, maxLength = 120, source = 'task') {
+    const taskTitle = cleanDisplayText(run.ticketData?.title, maxLength);
+    const summary = cleanDisplayText(run.summary, maxLength);
+    const ticket = cleanDisplayText(run.ticketOrPr, maxLength);
+    const branch = cleanDisplayText(run.branch, maxLength);
+    const title = (source === 'summary'
+        ? (summary ?? ticket ?? branch)
+        : (taskTitle ?? summary ?? ticket ?? branch)) ?? 'Untitled run';
+    const subtitle = [ticket, branch].find((value) => value && value !== title) ?? null;
+    return { title, subtitle };
+}
+export function decisionDisplayTitle(decision, maxLength = 120) {
+    const payload = decision.payload;
+    const inputSnapshot = recordField(payload, 'inputSnapshot');
+    const ticketData = recordField(inputSnapshot, 'ticketData');
+    const taskTitle = cleanDisplayText(ticketData?.title, maxLength);
+    const runSummary = cleanDisplayText(decision.runMeta?.summary, maxLength);
+    const ticket = cleanDisplayText(decision.runMeta?.ticketOrPr, maxLength);
+    const decisionTitle = cleanDisplayText(decision.title, maxLength);
+    const title = taskTitle ?? runSummary ?? decisionTitle ?? ticket ?? 'Pending decision';
+    const subtitle = [decisionTitle, ticket].find((value) => value && value !== title) ?? null;
+    return { title, subtitle };
+}
+function recordField(record, key) {
+    const value = record?.[key];
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/** Extract a human title without changing the task body. Also handles stored legacy summaries. */
+export function taskTitleText(value, maxLength = 120) {
+    const htmlHeading = value.trimStart().startsWith('<')
+        ? (value.match(/<title\b[^>]*>([\s\S]*?)<\/title\s*>/i) ??
+            value.match(/<h1\b[^>]*>([\s\S]*?)<\/h1\s*>/i))
+        : null;
+    const firstLine = value.trim().split(/\r?\n/)[0] ?? '';
+    const markdownHeading = firstLine.match(/^[ \t]{0,3}#{1,6}[ \t]+(.+?)[ \t]*#*[ \t]*$/);
+    const candidate = htmlHeading?.[1] ?? markdownHeading?.[1] ?? firstLine;
+    const text = candidate
+        .replace(/<[^>]*>/g, ' ')
+        .replace(/&(?:amp|lt|gt|quot|apos|nbsp);|&#(?:x[0-9a-f]+|[0-9]+);/gi, (entity) => {
+        const named = {
+            amp: '&',
+            lt: '<',
+            gt: '>',
+            quot: '\"',
+            apos: "'",
+            nbsp: ' ',
+        };
+        if (!entity.startsWith('&#'))
+            return named[entity.slice(1, -1).toLowerCase()];
+        const code = entity[2].toLowerCase() === 'x'
+            ? Number.parseInt(entity.slice(3, -1), 16)
+            : Number(entity.slice(2, -1));
+        return code <= 0x10ffff ? String.fromCodePoint(code) : '';
+    })
+        .replace(/\s+/g, ' ')
+        .trim();
+    return text.length > maxLength ? text.slice(0, maxLength - 1).trimEnd() + '…' : text;
+}
+function cleanDisplayText(value, maxLength = 120) {
+    return typeof value === 'string' ? taskTitleText(value, maxLength) || null : null;
+}
+//# sourceMappingURL=run-title.js.map

package/dist/runs/run-title.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-title.js","sourceRoot":"","sources":["../../src/runs/run-title.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,eAAe,CAC7B,GAAe,EACf,SAAS,GAAG,GAAG,EACf,SAA6B,MAAM;IAEnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,KAAK,GACT,CAAC,MAAM,KAAK,SAAS;QACnB,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC;QAC/B,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC;IACpE,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;IACpF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAyB,EAAE,SAAS,GAAG,GAAG;IAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAA8C,CAAC;IACxE,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,SAAS,IAAI,UAAU,IAAI,aAAa,IAAI,MAAM,IAAI,kBAAkB,CAAC;IACvF,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;IAC3F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAClB,MAA2C,EAC3C,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,SAAS,GAAG,GAAG;IAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QACnD,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC;YACrD,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACxE,MAAM,IAAI,GAAG,SAAS;SACnB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,2DAA2D,EAAE,CAAC,MAAM,EAAE,EAAE;QAC/E,MAAM,KAAK,GAA2B;YACpC,GAAG,EAAE,GAAG;YACR,EAAE,EAAE,GAAG;YACP,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG;SACV,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GACR,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG;YAC7B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC,CAAC;SACD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,OAAO,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,SAAS,GAAG,GAAG;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC"}

package/dist/sources/contracts.d.ts

@@ -0,0 +1,127 @@
+/** ADR-069 source authority. Paths and credentials never belong in portable records. */
+export interface SourceEntryRef {
+    sourceId: string;
+    entry: string;
+}
+export interface SourceDeclaration {
+    id: string;
+    kind: 'pack' | 'recipe-library' | 'helper';
+    repo: string;
+    ref?: string;
+}
+export interface SourceConfiguration {
+    schemaVersion: 1;
+    revision: number;
+    pollIntervalMs: number;
+    sources: SourceDeclaration[];
+    packs: Record<string, SourceEntryRef>;
+}
+export interface SourcePin {
+    sourceId: string;
+    selection: 'branch' | 'main';
+    ref: string;
+    scope: 'run' | 'node' | 'farm';
+    targetId: string;
+    actor: string;
+    declarationRevision: number;
+    revision: number;
+    baseMainCommit: string;
+    createdAt: string;
+}
+export interface SourceResolution {
+    sourceId: string;
+    ref: string;
+    declarationRevision: number;
+    generation: number;
+    commit?: string;
+    refObject?: string;
+    objectFormat?: 'sha1' | 'sha256';
+    treeDigest?: string;
+    resolvedAt?: string;
+    status: 'resolved' | 'stale' | 'failed';
+    reason?: string;
+    rewrites: Array<{
+        before: string;
+        after: string;
+        observedAt: string;
+    }>;
+}
+export interface SourceLockEntry {
+    sourceId: string;
+    kind: SourceDeclaration['kind'];
+    repo: string;
+    declaredRef: string;
+    effectiveRef: string;
+    commit: string;
+    objectFormat: 'sha1' | 'sha256';
+    treeDigest: string;
+    resolutionGeneration: number;
+    scope: 'run' | 'node' | 'farm';
+    pin?: SourcePin;
+    dependencies: SourceEntryRef[];
+}
+export interface SourceLock {
+    schemaVersion: 1;
+    context: {
+        project: string;
+        nodeId?: string;
+        runId?: string;
+    };
+    generation: number;
+    declarationRevision: number;
+    pinRevision: number;
+    resolvedAt: string;
+    entries: SourceLockEntry[];
+    packBindings: Record<string, SourceEntryRef>;
+    digest: string;
+}
+export interface SourceMaterializationReceipt {
+    schemaVersion: 1;
+    id: string;
+    nodeId: string;
+    lockDigest: string;
+    verifiedAt: string;
+    sources: Array<{
+        sourceId: string;
+        commit: string;
+        treeDigest: string;
+        protection: 'read-only-volume';
+    }>;
+}
+export interface RunSourceProvenance {
+    state: 'locked';
+    attemptId: string;
+    lock: SourceLock;
+    /** Stable execution-input lock retained across tasks with identical source inputs. */
+    workerLock: SourceLock;
+    receiptIds: string[];
+    bindings: SourceEntryRef[];
+    attempts: SourceExecutionAttemptReceipt[];
+}
+export interface SourceExecutionAttemptReceipt {
+    id: string;
+    receiptIds: string[];
+}
+/** An execution-local attestation adds paths only inside the authenticated node boundary. */
+export interface SourceMaterialization {
+    lock: SourceLock;
+    receipt: SourceMaterializationReceipt;
+    roots: Record<string, string>;
+    receiptPath: string;
+}
+export interface SourceNodeStatus {
+    nodeId: string;
+    materializations: Array<{
+        lockDigest: string;
+        sources: SourceMaterializationReceipt['sources'];
+        verifiedAt?: string;
+        drift: string[];
+    }>;
+}
+export interface RunSourceStatus {
+    runId: string;
+    state: 'locked' | 'unknown-legacy';
+    lockDigest?: string;
+    attemptId?: string;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/sources/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/sources/contracts.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,QAAQ,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,cAAc,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,KAAK,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,kBAAkB,CAAC;KAChC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,QAAQ,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,sFAAsF;IACtF,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,QAAQ,EAAE,6BAA6B,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,6FAA6F;AAC7F,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,4BAA4B,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,KAAK,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,4BAA4B,CAAC,SAAS,CAAC,CAAC;QACjD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,GAAG,gBAAgB,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/sources/contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/sources/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/sources/contracts.ts"],"names":[],"mappings":""}

package/dist/sources/validation.d.ts

@@ -0,0 +1,9 @@
+import type { SourceConfiguration, SourceEntryRef } from './contracts.js';
+export declare function assertSourceEntry(value: unknown): asserts value is SourceEntryRef;
+export declare function isContainedSourceEntry(value: string): boolean;
+/** Credential-free Git repository identity; authentication remains Git's responsibility. */
+export declare function canonicalSourceRepo(value: string): string;
+export declare function assertSourceConfiguration(value: unknown): asserts value is SourceConfiguration;
+/** Canonical ordering is shared by locks, integrity receipts and mutation comparisons. */
+export declare function canonicalSourceJson(value: unknown): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/sources/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/sources/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAUjF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED,4FAA4F;AAC5F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAezD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAuC9F;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAS1D"}

package/dist/sources/validation.js

@@ -0,0 +1,79 @@
+import { isRecord } from '../recipe/common.js';
+export function assertSourceEntry(value) {
+    if (!isRecord(value) ||
+        typeof value.sourceId !== 'string' ||
+        !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(String(value.sourceId)) ||
+        typeof value.entry !== 'string' ||
+        !isContainedSourceEntry(value.entry) ||
+        Object.keys(value).some((key) => !['sourceId', 'entry'].includes(key)))
+        throw new Error('Source binding requires a sourceId and contained relative entry');
+}
+export function isContainedSourceEntry(value) {
+    return (value === '.' ||
+        (/^[a-zA-Z0-9_.@/-]+$/.test(value) &&
+            !value.startsWith('/') &&
+            !value.split('/').some((part) => !part || part === '.' || part === '..')));
+}
+/** Credential-free Git repository identity; authentication remains Git's responsibility. */
+export function canonicalSourceRepo(value) {
+    const scp = /^git@([^/:]+):([^\s]+)$/.exec(value);
+    const url = new URL(scp ? `ssh://git@${scp[1]}/${scp[2]}` : value);
+    if (!['https:', 'ssh:'].includes(url.protocol) ||
+        url.password ||
+        url.search ||
+        url.hash ||
+        (url.username && !(url.protocol === 'ssh:' && url.username === 'git')) ||
+        !url.hostname ||
+        !/^\/[a-zA-Z0-9_.-]+(?:\/[a-zA-Z0-9_.-]+)+\/?$/.test(url.pathname))
+        throw new Error('Source repository must be a credential-free HTTPS or Git SSH identity');
+    url.pathname = url.pathname.replace(/\/$/, '').replace(/\.git$/, '');
+    return url.toString().replace(/\/$/, '');
+}
+export function assertSourceConfiguration(value) {
+    if (!isRecord(value) ||
+        value.schemaVersion !== 1 ||
+        !Number.isSafeInteger(value.revision) ||
+        Number(value.revision) < 1 ||
+        !Number.isSafeInteger(value.pollIntervalMs) ||
+        Number(value.pollIntervalMs) < 1_000 ||
+        Number(value.pollIntervalMs) > 300_000 ||
+        !Array.isArray(value.sources) ||
+        !isRecord(value.packs) ||
+        Object.keys(value).some((key) => !['schemaVersion', 'revision', 'pollIntervalMs', 'sources', 'packs'].includes(key)))
+        throw new Error('Invalid source configuration or unsupported schema');
+    const ids = new Set();
+    for (const source of value.sources) {
+        if (!isRecord(source) ||
+            typeof source.id !== 'string' ||
+            !/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(source.id) ||
+            ids.has(source.id) ||
+            !['pack', 'recipe-library', 'helper'].includes(String(source.kind)) ||
+            typeof source.repo !== 'string' ||
+            (source.ref !== undefined &&
+                (typeof source.ref !== 'string' || !source.ref || source.ref.startsWith('-'))) ||
+            Object.keys(source).some((key) => !['id', 'kind', 'repo', 'ref'].includes(key)))
+            throw new Error('Invalid or duplicate source declaration');
+        canonicalSourceRepo(source.repo);
+        ids.add(source.id);
+    }
+    for (const [project, binding] of Object.entries(value.packs)) {
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(project))
+            throw new Error('Invalid pack name');
+        assertSourceEntry(binding);
+        if (!value.sources.some((source) => source.id === binding.sourceId && source.kind === 'pack'))
+            throw new Error(`Pack ${project} references an undeclared pack source`);
+    }
+}
+/** Canonical ordering is shared by locks, integrity receipts and mutation comparisons. */
+export function canonicalSourceJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalSourceJson).join(',')}]`;
+    if (isRecord(value))
+        return `{${Object.keys(value)
+            .filter((key) => value[key] !== undefined)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalSourceJson(value[key])}`)
+            .join(',')}}`;
+    return JSON.stringify(value);
+}
+//# sourceMappingURL=validation.js.map

package/dist/sources/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/sources/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAI/C,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEtE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,CACL,KAAK,KAAK,GAAG;QACb,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACtB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,GAAG,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,IACE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1C,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI;QACR,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;QACtE,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAElE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,KAAK;QACpC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,OAAO;QACtC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC5F;QAED,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAC7B,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClB,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;gBACvB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE/E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxF,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,uCAAuC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjF,IAAI,QAAQ,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aACzC,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aACzE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PROTOCOL_VERSION = "0.40.0";
+export declare const PROTOCOL_VERSION = "0.41.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -3,5 +3,5 @@
 // fleet can be upgraded deliberately; optional method/event fields remain
 // backward-compatible unless a caller requires a new node capability.
 // Format: semver-ish, increment when methods/events/frame format changes.
-export const PROTOCOL_VERSION = '0.40.0';
+export const PROTOCOL_VERSION = '0.41.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@farmslot/protocol",
-  "version": "0.40.0",
+  "version": "0.41.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",