@g3nomaly/core 0.3.1 → 0.3.3

package/dist/registry/registry.selectors.js

@@ -1,43 +1,69 @@
 /**
- * Get a single entry by key. Returns undefined if not found.
+ * @brief Gets a single entry by key.
+ *
+ * @param registry - Store to read from.
+ * @param key - Key of the entry.
+ * @returns The entry, or `undefined` when not found.
  */
 export function get(registry, key) {
     return registry.store.state[key];
 }
 /**
- * Check whether a key exists in the store.
+ * @brief Checks whether a key exists in the store.
+ *
+ * @param registry - Store to read from.
+ * @param key - Key to look for.
+ * @returns `true` when the key is present.
  */
 export function has(registry, key) {
     return key in registry.store.state;
 }
 /**
- * Return all entries as a plain record.
+ * @brief Returns all entries as a plain record.
+ *
+ * @param registry - Store to read from.
+ * @returns Entries by key. This is the store's own state, not a copy.
  */
 export function entries(registry) {
     return registry.store.state;
 }
 /**
- * Return all registered keys.
+ * @brief Returns all registered keys.
+ *
+ * @param registry - Store to read from.
+ * @returns Keys of the store's state.
  */
 export function keys(registry) {
     return Object.keys(registry.store.state);
 }
 /**
- * Return all entries that match a given version string.
+ * @brief Returns all entries whose `version` equals the given string.
+ *
+ * @param registry - Store to read from.
+ * @param version - Version to match exactly.
+ * @returns Matching entries by key.
  */
 export function getByVersion(registry, version) {
     return Object.fromEntries(Object.entries(registry.store.state).filter(([, entry]) => entry.version === version));
 }
 /**
- * Return the count of registered entries.
+ * @brief Returns the count of registered entries.
+ *
+ * @param registry - Store to read from.
+ * @returns Number of entries.
  */
 export function size(registry) {
     return Object.keys(registry.store.state).length;
 }
 /**
- * Depth-first walk of `registryDependencies` starting at `key`. Every entry
- * reached is added to `seen`; keys without a registry entry are pushed to
- * `unknown` and not walked further.
+ * @brief Walks `registryDependencies` depth-first, starting at `key`.
+ *
+ * Every entry reached is added to `seen`. Keys without a registry entry are pushed to `unknown` and not walked further.
+ *
+ * @param key - Key to start from.
+ * @param entries - Registry to walk, by key.
+ * @param seen - Keys already reached. Filled in place.
+ * @param unknown - Keys with no registry entry. Filled in place.
  */
 export function collectDependencies(key, entries, seen, unknown) {
     if (seen.has(key))
@@ -52,8 +78,12 @@ export function collectDependencies(key, entries, seen, unknown) {
         collectDependencies(dep, entries, seen, unknown);
 }
 /**
- * Return which of `candidates` have `key` in their `registryDependencies` —
- * the entries that need it and would break if it were removed.
+ * @brief Finds the candidates that depend on `key`, the entries that would break if it were removed.
+ *
+ * @param key - Key that may be needed.
+ * @param entries - Registry to read `registryDependencies` from, by key.
+ * @param candidates - Keys to check.
+ * @returns The candidates whose `registryDependencies` include `key`.
  */
 export function entryDependencies(key, entries, candidates) {
     return candidates.filter((k) => entries[k]?.registryDependencies?.includes(key) ?? false);

package/dist/registry/registry.selectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.selectors.js","sourceRoot":"","sources":["../../src/registry/registry.selectors.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,MAAM,UAAU,GAAG,CACjB,QAA0B,EAC1B,GAAW;IAEX,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GAAG,CACjB,QAA0B,EAC1B,GAAW;IAEX,OAAO,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAA;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CACrB,QAA0B;IAE1B,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAA;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAClB,QAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,QAA0B,EAC1B,OAAe;IAEf,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CACtF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAClB,QAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,OAAqB,EACrB,IAAiB,EACjB,OAAiB;IAEjB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAM;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjB,OAAM;IACR,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE;QAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AACtG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,OAAqB,EACrB,UAAoB;IAEpB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAA;AAC3F,CAAC"}
+{"version":3,"file":"registry.selectors.js","sourceRoot":"","sources":["../../src/registry/registry.selectors.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CACjB,QAA0B,EAC1B,GAAW;IAEX,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CACjB,QAA0B,EAC1B,GAAW;IAEX,OAAO,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAA;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CACrB,QAA0B;IAE1B,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAA;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,QAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,QAA0B,EAC1B,OAAe;IAEf,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CACtF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,QAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,OAAqB,EACrB,IAAiB,EACjB,OAAiB;IAEjB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAM;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjB,OAAM;IACR,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE;QAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AACtG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,OAAqB,EACrB,UAAoB;IAEpB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAA;AAC3F,CAAC"}

package/dist/registry/registry.store.d.ts

@@ -1,34 +1,47 @@
 import { Store } from "@tanstack/store";
 import type { BaseRegistry, BaseRegistryEntry } from "./types";
 import type { RegistryHandler } from "./registry.handlers";
+/**
+ * @brief Options for `createRegistryStore`.
+ *
+ * @property filePath - Absolute path to the manifest file. Used by `load()` and `flush()`.
+ * @property handler - Serialization handler. Defaults to `tsHandler`.
+ */
 export interface RegistryStoreOptions<T extends BaseRegistryEntry = BaseRegistryEntry> {
-    /** Absolute path to the manifest file. Used by load() and flush(). */
     filePath?: string;
-    /** Default handler for serialization/deserialization. Defaults to tsHandler. */
     handler?: RegistryHandler<T>;
 }
 /**
- * The registry store instance — passed to mutations, selectors, and io helpers.
+ * @brief A registry store, passed to mutations, selectors and io helpers.
+ *
+ * @property store - The underlying TanStack Store. Subscribe, derive, or read `.state` directly.
+ * @property filePath - Absolute path this store is bound to, if any.
+ * @property handler - Serialization handler used when `load()` and `flush()` are not given one.
  */
 export interface RegistryStore<T extends BaseRegistryEntry = BaseRegistryEntry> {
-    /** The underlying TanStack Store. Subscribe, derive, or read .state directly. */
     store: Store<BaseRegistry<T>>;
-    /** Absolute path this store is bound to (if any). */
     filePath?: string;
-    /** Default handler for serialization/deserialization. */
     handler?: RegistryHandler<T>;
 }
 /**
- * Creates a RegistryStore backed by TanStack Store.
- * State starts empty — call load() to hydrate from disk.
+ * @brief Creates a `RegistryStore` backed by TanStack Store, starting empty.
+ *
+ * Call `load()` to hydrate it from disk.
  *
  * @example
  * const registry = createRegistryStore<MyEntry>({ filePath: "/abs/.g3nerate-manifest.ts" })
  * await load(registry)
+ *
+ * @param options - Bound file path and handler. Both optional.
+ * @returns A new store with no entries.
  */
 export declare function createRegistryStore<T extends BaseRegistryEntry = BaseRegistryEntry>(options?: RegistryStoreOptions<T>): RegistryStore<T>;
 /**
- * Sets the default handler on the store. Returns the store for chaining.
+ * @brief Sets the default handler on a store.
+ *
+ * @param registry - Store to update.
+ * @param handler - Handler used for serialization and deserialization.
+ * @returns The same store, for chaining.
  */
 export declare function useHandler<T extends BaseRegistryEntry>(registry: RegistryStore<T>, handler: RegistryHandler<T>): RegistryStore<T>;
 //# sourceMappingURL=registry.store.d.ts.map

package/dist/registry/registry.store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.store.d.ts","sourceRoot":"","sources":["../../src/registry/registry.store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAM1D,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IACnF,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gFAAgF;IAChF,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAA;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IAC5E,iFAAiF;IACjF,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yDAAyD;IACzD,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAA;CAC7B;AAMD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,EACjF,OAAO,GAAE,oBAAoB,CAAC,CAAC,CAAM,GACpC,aAAa,CAAC,CAAC,CAAC,CAMlB;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,iBAAiB,EACpD,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,GAC1B,aAAa,CAAC,CAAC,CAAC,CAGlB"}
+{"version":3,"file":"registry.store.d.ts","sourceRoot":"","sources":["../../src/registry/registry.store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAM1D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAA;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IAC5E,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAA;CAC7B;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,EACjF,OAAO,GAAE,oBAAoB,CAAC,CAAC,CAAM,GACpC,aAAa,CAAC,CAAC,CAAC,CAMlB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,iBAAiB,EACpD,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAC1B,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,GAC1B,aAAa,CAAC,CAAC,CAAC,CAGlB"}

package/dist/registry/registry.store.js

@@ -1,14 +1,19 @@
+// packages/core/src/registry/registry.store.ts
 import { Store } from "@tanstack/store";
 // ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
 /**
- * Creates a RegistryStore backed by TanStack Store.
- * State starts empty — call load() to hydrate from disk.
+ * @brief Creates a `RegistryStore` backed by TanStack Store, starting empty.
+ *
+ * Call `load()` to hydrate it from disk.
  *
  * @example
  * const registry = createRegistryStore<MyEntry>({ filePath: "/abs/.g3nerate-manifest.ts" })
  * await load(registry)
+ *
+ * @param options - Bound file path and handler. Both optional.
+ * @returns A new store with no entries.
  */
 export function createRegistryStore(options = {}) {
     return {
@@ -18,7 +23,11 @@ export function createRegistryStore(options = {}) {
     };
 }
 /**
- * Sets the default handler on the store. Returns the store for chaining.
+ * @brief Sets the default handler on a store.
+ *
+ * @param registry - Store to update.
+ * @param handler - Handler used for serialization and deserialization.
+ * @returns The same store, for chaining.
  */
 export function useHandler(registry, handler) {
     registry.handler = handler;

package/dist/registry/registry.store.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.store.js","sourceRoot":"","sources":["../../src/registry/registry.store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AA2BvC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAO,GAA4B,EAAE;IAErC,OAAO;QACL,KAAK,EAAE,IAAI,KAAK,CAAkB,EAAE,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,QAA0B,EAC1B,OAA2B;IAE3B,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAA;IAC1B,OAAO,QAAQ,CAAA;AACjB,CAAC"}
+{"version":3,"file":"registry.store.js","sourceRoot":"","sources":["../../src/registry/registry.store.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAgCvC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAO,GAA4B,EAAE;IAErC,OAAO;QACL,KAAK,EAAE,IAAI,KAAK,CAAkB,EAAE,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,QAA0B,EAC1B,OAA2B;IAE3B,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAA;IAC1B,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/registry/registry.template.d.ts

@@ -1,14 +1,20 @@
 /**
- * Recursively serializes a value to a TypeScript object literal string.
- * Used by generateRegistryFile to produce human-readable .ts output.
+ * @brief Recursively serializes a value to a TypeScript object literal string.
+ *
+ * Used by `generateRegistryFile` to produce human-readable `.ts` output.
+ *
+ * @param value - Value to serialize. Objects, arrays, strings, numbers, booleans and null are written as literals.
+ * @param depth - Nesting level of `value`, used for indentation.
+ * @returns Source text of the literal.
  */
 export declare function stringifyValue(value: unknown, depth?: number): string;
 /**
- * Generates the full content of a typed .ts registry manifest file.
+ * @brief Generates the full content of a typed `.ts` registry manifest file.
  *
- * @param entries    - The registry entries to serialize
- * @param typeName   - TypeScript type name for the `satisfies` clause
- * @param importFrom - Package to import the type from
+ * @param entries - Registry entries to serialize, by key.
+ * @param typeName - TypeScript type name for the `satisfies` clause, e.g. `G3nerateRegistry`.
+ * @param importFrom - Package the type is imported from, e.g. `@g3nomaly/g3nerate`.
+ * @returns Source text of the file, ending with a newline.
  *
  * @example
  * generateRegistryFile(entries, "G3nerateRegistry", "@g3nomaly/g3nerate")

package/dist/registry/registry.template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.template.d.ts","sourceRoot":"","sources":["../../src/registry/registry.template.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,MAAM,CA2BhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,CAeR"}
+{"version":3,"file":"registry.template.d.ts","sourceRoot":"","sources":["../../src/registry/registry.template.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,MAAM,CA2BhE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,CAeR"}

package/dist/registry/registry.template.js

@@ -1,6 +1,12 @@
+// packages/core/src/registry/registry.template.ts
 /**
- * Recursively serializes a value to a TypeScript object literal string.
- * Used by generateRegistryFile to produce human-readable .ts output.
+ * @brief Recursively serializes a value to a TypeScript object literal string.
+ *
+ * Used by `generateRegistryFile` to produce human-readable `.ts` output.
+ *
+ * @param value - Value to serialize. Objects, arrays, strings, numbers, booleans and null are written as literals.
+ * @param depth - Nesting level of `value`, used for indentation.
+ * @returns Source text of the literal.
  */
 export function stringifyValue(value, depth = 0) {
     const indent = "  ".repeat(depth);
@@ -33,11 +39,12 @@ export function stringifyValue(value, depth = 0) {
     return String(value);
 }
 /**
- * Generates the full content of a typed .ts registry manifest file.
+ * @brief Generates the full content of a typed `.ts` registry manifest file.
  *
- * @param entries    - The registry entries to serialize
- * @param typeName   - TypeScript type name for the `satisfies` clause
- * @param importFrom - Package to import the type from
+ * @param entries - Registry entries to serialize, by key.
+ * @param typeName - TypeScript type name for the `satisfies` clause, e.g. `G3nerateRegistry`.
+ * @param importFrom - Package the type is imported from, e.g. `@g3nomaly/g3nerate`.
+ * @returns Source text of the file, ending with a newline.
  *
  * @example
  * generateRegistryFile(entries, "G3nerateRegistry", "@g3nomaly/g3nerate")

package/dist/registry/registry.template.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.template.js","sourceRoot":"","sources":["../../src/registry/registry.template.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAE1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IAEjF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACnC,MAAM,KAAK,GAAG,KAAK;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;aAC3D,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,MAAM,KAAK,MAAM,MAAM,GAAG,CAAA;IACnC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAA;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACrC,MAAM,KAAK,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;aACtF,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,MAAM,KAAK,MAAM,MAAM,GAAG,CAAA;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,QAAgB,EAChB,UAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAC,IAAI,CAAC,iBAAiB,QAAQ,YAAY,UAAU,GAAG,CAAC,CAAA;IAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAEvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAA;IAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}
+{"version":3,"file":"registry.template.js","sourceRoot":"","sources":["../../src/registry/registry.template.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAE1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IAEjF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACnC,MAAM,KAAK,GAAG,KAAK;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;aAC3D,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,MAAM,KAAK,MAAM,MAAM,GAAG,CAAA;IACnC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAA;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACrC,MAAM,KAAK,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;aACtF,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,OAAO,MAAM,KAAK,MAAM,MAAM,GAAG,CAAA;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,QAAgB,EAChB,UAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAC,IAAI,CAAC,iBAAiB,QAAQ,YAAY,UAAU,GAAG,CAAC,CAAA;IAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAEvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAA;IAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/registry/types.d.ts

@@ -1,6 +1,11 @@
 import { z } from "zod";
 /**
- * Base file entry — extended by each package with their own `type` enum.
+ * @brief One file of a registry entry. Each package extends it with its own `type` values.
+ *
+ * @property path - Path of the file relative to the entry's folder.
+ * @property type - Kind of file, set by each package.
+ * @property hash - Content hash. Set at build or install time, absent in unbuilt source meta files.
+ * @property version - Version of the file. Set at build or install time, absent in unbuilt source meta files.
  */
 export declare const BaseFileEntrySchema: z.ZodObject<{
     path: z.ZodString;
@@ -8,9 +13,17 @@ export declare const BaseFileEntrySchema: z.ZodObject<{
     hash: z.ZodOptional<z.ZodString>;
     version: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/** One file of a registry entry, inferred from `BaseFileEntrySchema`. */
 export type BaseFileEntry = z.infer<typeof BaseFileEntrySchema>;
 /**
- * Base registry entry — extended by each package with their own fields.
+ * @brief One entry of a registry. Each package extends it with its own fields.
+ *
+ * @property name - Unique name of the entry.
+ * @property description - What the entry is for.
+ * @property version - Version of the entry.
+ * @property group - Display group for `ls`. Packages derive it when the registry is built or loaded.
+ * @property registryDependencies - Keys of entries this entry needs installed alongside it.
+ * @property files - Files that make up the entry. At least one.
  */
 export declare const BaseRegistryEntrySchema: z.ZodObject<{
     name: z.ZodString;
@@ -25,9 +38,10 @@ export declare const BaseRegistryEntrySchema: z.ZodObject<{
         version: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+/** One registry entry, inferred from `BaseRegistryEntrySchema`. */
 export type BaseRegistryEntry = z.infer<typeof BaseRegistryEntrySchema>;
 /**
- * Generic registry map — key → entry.
+ * Registry map from key to entry.
  */
 export type BaseRegistry<T extends BaseRegistryEntry = BaseRegistryEntry> = Record<string, T>;
 //# sourceMappingURL=types.d.ts.map

package/dist/registry/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBASlC,CAAA;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEvE;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAA;AAEF,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAOlC,CAAA;AAEF,mEAAmE;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEvE;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA"}

package/dist/registry/types.js

@@ -1,24 +1,34 @@
 // packages/core/src/registry/types.ts
 import { z } from "zod";
 /**
- * Base file entry — extended by each package with their own `type` enum.
+ * @brief One file of a registry entry. Each package extends it with its own `type` values.
+ *
+ * @property path - Path of the file relative to the entry's folder.
+ * @property type - Kind of file, set by each package.
+ * @property hash - Content hash. Set at build or install time, absent in unbuilt source meta files.
+ * @property version - Version of the file. Set at build or install time, absent in unbuilt source meta files.
  */
 export const BaseFileEntrySchema = z.object({
     path: z.string().min(1),
     type: z.string(),
-    hash: z.string().min(1).optional(), // populated at build/install time, absent in unbuilt source meta files
-    version: z.string().min(1).optional(), // populated at build/install time, absent in unbuilt source meta files
+    hash: z.string().min(1).optional(),
+    version: z.string().min(1).optional(),
 });
 /**
- * Base registry entry — extended by each package with their own fields.
+ * @brief One entry of a registry. Each package extends it with its own fields.
+ *
+ * @property name - Unique name of the entry.
+ * @property description - What the entry is for.
+ * @property version - Version of the entry.
+ * @property group - Display group for `ls`. Packages derive it when the registry is built or loaded.
+ * @property registryDependencies - Keys of entries this entry needs installed alongside it.
+ * @property files - Files that make up the entry. At least one.
  */
 export const BaseRegistryEntrySchema = z.object({
     name: z.string().min(1),
     description: z.string().optional(),
     version: z.string().optional(),
-    /** Display group for `ls`; packages derive it at registry build/load time */
     group: z.string().optional(),
-    /** Keys of entries this entry needs installed alongside it */
     registryDependencies: z.array(z.string().min(1)).optional(),
     files: z.array(BaseFileEntrySchema).min(1),
 });

package/dist/registry/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,uEAAuE;IAC9G,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,uEAAuE;CAC/G,CAAC,CAAA;AAIF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,6EAA6E;IAC7E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,8DAA8D;IAC9D,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAA"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAA;AAKF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAA"}

package/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/security/index.js

@@ -1,2 +1,3 @@
+// packages/core/src/security/index.ts
 export { getSafeObject } from "./securityParser";
 //# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/security/securityParser.d.ts

@@ -1,14 +1,15 @@
 import type { ZodType, z } from "zod";
 /**
- * Safely parses a TypeScript file that has a default export object literal.
- * Transpiles the file, extracts the object literal via regex, evaluates it
- * inside a sandboxed Worker with a timeout, then validates with the provided
- * Zod schema.
+ * @brief Parses a TypeScript file that has a default export object literal, without running it in the main thread.
  *
- * @param filePath  - Absolute path to the .ts file to parse
- * @param schema    - Zod schema to validate the extracted object against
- * @param timeoutMs - Worker timeout in milliseconds (default: 1000)
- * @returns Validated, typed object
+ * Transpiles the file, extracts the object literal with a regex, evaluates it in a sandboxed Worker with a
+ * timeout, then validates the result with `schema`.
+ *
+ * @param filePath - Absolute path to the `.ts` file to parse.
+ * @param schema - Zod schema the extracted object must match.
+ * @param timeoutMs - Worker timeout in milliseconds.
+ * @returns Validated object, typed by `schema`.
+ * @throws {Error} When static analysis blocks the source, no object literal is found, the worker fails or times out, or validation fails.
  */
 export declare function getSafeObject<TSchema extends ZodType>(filePath: string, schema: TSchema, timeoutMs?: number): Promise<z.infer<TSchema>>;
 //# sourceMappingURL=securityParser.d.ts.map

package/dist/security/securityParser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"securityParser.d.ts","sourceRoot":"","sources":["../../src/security/securityParser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,OAAO,SAAS,OAAO,EACzD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,SAAS,SAAO,GACf,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAkG3B"}
+{"version":3,"file":"securityParser.d.ts","sourceRoot":"","sources":["../../src/security/securityParser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,SAAS,OAAO,EACzD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,SAAS,SAAO,GACf,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAsF3B"}

package/dist/security/securityParser.js

@@ -1,47 +1,37 @@
 // packages/core/src/security/securityParser.ts
 import { Transpiler } from "bun";
 /**
- * Safely parses a TypeScript file that has a default export object literal.
- * Transpiles the file, extracts the object literal via regex, evaluates it
- * inside a sandboxed Worker with a timeout, then validates with the provided
- * Zod schema.
+ * @brief Parses a TypeScript file that has a default export object literal, without running it in the main thread.
  *
- * @param filePath  - Absolute path to the .ts file to parse
- * @param schema    - Zod schema to validate the extracted object against
- * @param timeoutMs - Worker timeout in milliseconds (default: 1000)
- * @returns Validated, typed object
+ * Transpiles the file, extracts the object literal with a regex, evaluates it in a sandboxed Worker with a
+ * timeout, then validates the result with `schema`.
+ *
+ * @param filePath - Absolute path to the `.ts` file to parse.
+ * @param schema - Zod schema the extracted object must match.
+ * @param timeoutMs - Worker timeout in milliseconds.
+ * @returns Validated object, typed by `schema`.
+ * @throws {Error} When static analysis blocks the source, no object literal is found, the worker fails or times out, or validation fails.
  */
 export async function getSafeObject(filePath, schema, timeoutMs = 1000) {
     const file = Bun.file(filePath);
     const rawContent = await file.text();
     const transpiler = new Transpiler({ loader: "ts" });
     const jsCode = transpiler.transformSync(rawContent);
-    // ---------------------------------------------------------------------------
-    // Pre-eval static analysis
-    // Catches attacks that are undetectable at runtime because they complete
-    // successfully before the sanitiser sees any output.
-    // ---------------------------------------------------------------------------
+    // Static analysis runs before evaluation, since some attacks finish before the sanitiser sees any output.
     const DANGEROUS_PATTERNS = [
         [/\bimport\s*\(/, "dynamic import()"],
         [/\bimport\.meta\b/, "import.meta"],
         [/\bnew\s+Worker\b/, "Worker construction"],
         [/\beval\s*\(/, "eval()"],
         [/\.constructor\s*\.\s*constructor/, "constructor.constructor chain"],
-        // deep-object.meta.ts: IIFE builds 100k nested object literals in a loop.
-        // Object literal construction bypasses any runtime stub (the Object()
-        // constructor is not called for `{}`), so the only reliable catch is
-        // source-level: reject any for/while loop that contains an object literal.
-        // Pattern: a for(...) or while(...) body that contains `{` (object/block).
+        // Object literals skip the Object() constructor, so loops that build objects are rejected in the source.
         [/\bfor\s*\([\s\S]{0,200}?\)\s*\{[\s\S]{0,500}?\bnested\b/,
             "deep object construction loop"],
-        // Broader: any loop body that reassigns via `= {` (obj = { ... })
         [/\bfor\s*\([^)]*\)[^{]*\{[^}]*=\s*\{/,
             "object-building loop"],
         [/\bwhile\s*\([^)]*\)[^{]*\{[^}]*=\s*\{/,
             "object-building loop"],
-        // regex-bomb.meta.ts: uses a regex *literal* /(a+)+$/ — the RegExp constructor
-        // stub in the worker never fires for literals. Detect nested quantifiers
-        // statically: pattern (x+)+ or (x*)* or (x+)* are canonical ReDoS forms.
+        // Regex literals bypass the RegExp stub in the worker, so nested quantifiers such as (x+)+ are rejected in the source.
         [/\/[^/]*\([^)]*[+*]\)[+*]/, "catastrophic regex literal (nested quantifier)"],
     ];
     for (const [pattern, label] of DANGEROUS_PATTERNS) {

package/dist/security/securityParser.js.map

@@ -1 +1 @@
-{"version":3,"file":"securityParser.js","sourceRoot":"","sources":["../../src/security/securityParser.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAGjC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,MAAe,EACf,SAAS,GAAG,IAAI;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpD,8EAA8E;IAC9E,2BAA2B;IAC3B,yEAAyE;IACzE,qDAAqD;IACrD,8EAA8E;IAE9E,MAAM,kBAAkB,GAA4B;QAClD,CAAC,eAAe,EAAuB,kBAAkB,CAAC;QAC1D,CAAC,kBAAkB,EAAoB,aAAa,CAAC;QACrD,CAAC,kBAAkB,EAAoB,qBAAqB,CAAC;QAC7D,CAAC,aAAa,EAAyB,QAAQ,CAAC;QAChD,CAAC,kCAAkC,EAAI,+BAA+B,CAAC;QAEvE,0EAA0E;QAC1E,sEAAsE;QACtE,qEAAqE;QACrE,2EAA2E;QAC3E,2EAA2E;QAC3E,CAAC,yDAAyD;YACnB,+BAA+B,CAAC;QACvE,kEAAkE;QAClE,CAAC,qCAAqC;YACC,sBAAsB,CAAC;QAC9D,CAAC,uCAAuC;YACD,sBAAsB,CAAC;QAC9D,+EAA+E;QAC/E,yEAAyE;QACzE,yEAAyE;QACzE,CAAC,0BAA0B,EAAU,gDAAgD,CAAC;KACvF,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,SAAS,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,4FAA4F;IAC5F,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CACD,IAAI,KAAK,CACP,8CAA8C,SAAS,kCAAkC,QAAQ,EAAE,CACpG,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,SAAS,EAAE,CAAC;YAEnB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAItC,CAAC;YAEF,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,KAAK,CAAC,+BAA+B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,CAAC,GAAe,EAAE,EAAE;YACnC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAwB,CAAC;AACzC,CAAC"}
+{"version":3,"file":"securityParser.js","sourceRoot":"","sources":["../../src/security/securityParser.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAGjC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,MAAe,EACf,SAAS,GAAG,IAAI;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpD,0GAA0G;IAC1G,MAAM,kBAAkB,GAA4B;QAClD,CAAC,eAAe,EAAuB,kBAAkB,CAAC;QAC1D,CAAC,kBAAkB,EAAoB,aAAa,CAAC;QACrD,CAAC,kBAAkB,EAAoB,qBAAqB,CAAC;QAC7D,CAAC,aAAa,EAAyB,QAAQ,CAAC;QAChD,CAAC,kCAAkC,EAAI,+BAA+B,CAAC;QAEvE,yGAAyG;QACzG,CAAC,yDAAyD;YACnB,+BAA+B,CAAC;QACvE,CAAC,qCAAqC;YACC,sBAAsB,CAAC;QAC9D,CAAC,uCAAuC;YACD,sBAAsB,CAAC;QAC9D,uHAAuH;QACvH,CAAC,0BAA0B,EAAU,gDAAgD,CAAC;KACvF,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,SAAS,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,4FAA4F;IAC5F,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CACD,IAAI,KAAK,CACP,8CAA8C,SAAS,kCAAkC,QAAQ,EAAE,CACpG,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,SAAS,EAAE,CAAC;YAEnB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAItC,CAAC;YAEF,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,KAAK,CAAC,+BAA+B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,CAAC,GAAe,EAAE,EAAE;YACnC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAwB,CAAC;AACzC,CAAC"}

package/dist/security/securityWorker.d.ts

@@ -3,6 +3,17 @@ declare const MAX_DEPTH = 20;
 declare const MAX_KEYS = 1000;
 declare const MAX_STRLEN = 100000;
 declare let totalKeys: number;
+/**
+ * @brief Copies evaluated sandbox data into plain values, rejecting anything that can carry code, memory or stacks.
+ *
+ * Getters and setters are dropped without running them.
+ *
+ * @param value - Value to copy. Usually the result of the sandbox evaluation.
+ * @param depth - Current nesting depth, starting at 0.
+ * @returns Plain copy of `value`.
+ * @throws {Error} When the value nests too deep, has too many keys, is a function, symbol, RegExp, buffer, error,
+ * promise or non-plain object, or is a string that is too long or looks like a stack trace.
+ */
 declare function sanitise(value: unknown, depth?: number): unknown;
 declare const SANDBOX_PREAMBLE = "\n  \"use strict\";\n\n  const process       = undefined;\n  const global        = undefined;\n  const globalThis    = Object.create(null); // isolated dummy \u2014 writes succeed but go nowhere\n  const module        = undefined;\n  const require       = undefined;\n  const __dirname     = undefined;\n  const __filename    = undefined;\n  const importScripts = undefined;\n  const Function      = undefined;\n  const Reflect       = undefined;\n  const Proxy         = undefined;\n\n  // Stub ArrayBuffer \u2014 catches IIFE allocation bombs before they run.\n  const ArrayBuffer = function() {\n    throw new RangeError(\"ArrayBuffer construction is not allowed in meta files\");\n  };\n\n  // Stub RegExp constructor \u2014 catches IIFE regex bombs constructed via\n  // new RegExp(...) or RegExp(...). Regex *literals* are a different path\n  // (they don't call the RegExp constructor at parse time) but executing\n  // .match()/.exec() on them still goes through the engine's regex executor.\n  // The Worker timeout is the backstop for literal-based regex bombs.\n  const RegExp = function() {\n    throw new Error(\"RegExp construction is not allowed in meta files\");\n  };\n";
 //# sourceMappingURL=securityWorker.d.ts.map

package/dist/security/securityWorker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"securityWorker.d.ts","sourceRoot":"","sources":["../../src/security/securityWorker.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,MAAM,EAAsB,0BAA0B,CAAC;AAM7D,QAAA,MAAM,SAAS,KAAM,CAAC;AACtB,QAAA,MAAM,QAAQ,OAAU,CAAC;AACzB,QAAA,MAAM,UAAU,SAAU,CAAC;AAC3B,QAAA,IAAM,SAAS,QAAK,CAAC;AAErB,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAwEpD;AAwCD,QAAA,MAAM,gBAAgB,uqCA4BrB,CAAC"}
+{"version":3,"file":"securityWorker.d.ts","sourceRoot":"","sources":["../../src/security/securityWorker.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,MAAM,EAAsB,0BAA0B,CAAC;AAM7D,QAAA,MAAM,SAAS,KAAM,CAAC;AACtB,QAAA,MAAM,QAAQ,OAAU,CAAC;AACzB,QAAA,MAAM,UAAU,SAAU,CAAC;AAC3B,QAAA,IAAM,SAAS,QAAK,CAAC;AAErB;;;;;;;;;;GAUG;AACH,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAoEpD;AAWD,QAAA,MAAM,gBAAgB,uqCA4BrB,CAAC"}