@grimoire-rs/indexer 0.1.0

package/dist/validate/adapters/registry.js

@@ -0,0 +1,91 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * OCI registry reachability. A pointer is only eligible once the thing it
+ * points at actually exists — the index never publishes a claim it did not
+ * confirm against registry truth.
+ *
+ * The registry is an untrusted endpoint chosen by the PR author, so its replies
+ * steer nothing: the bearer-token realm it names must be HTTPS on a public DNS
+ * host, and a configured credential is sent there only when that host is the
+ * registry itself or is on the committed allowlist. (The Python this ports
+ * followed any realm and sent Basic auth to it — a metadata-endpoint SSRF and a
+ * credential leak in one.)
+ */
+import { isPublicDnsHost } from "../core/metadata.js";
+import { request, USER_AGENT } from "./http.js";
+function quoted(challenge, key) {
+    const match = new RegExp(`${key}="([^"]*)"`).exec(challenge);
+    return match?.[1] ?? null;
+}
+export function tokenRequest(challenge, registryHost, repository, allowlist) {
+    const realm = quoted(challenge, "realm");
+    if (realm === null)
+        return null;
+    let url;
+    try {
+        url = new URL(realm);
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== "https:")
+        return null;
+    if (url.username !== "" || url.password !== "")
+        return null;
+    if (!isPublicDnsHost(url.host))
+        return null;
+    url.searchParams.set("scope", `repository:${repository}:pull`);
+    const service = quoted(challenge, "service");
+    if (service !== null)
+        url.searchParams.set("service", service);
+    const sameHost = url.host.toLowerCase() === registryHost.toLowerCase();
+    const listed = allowlist?.some((entry) => entry.toLowerCase() === url.host.toLowerCase()) ??
+        false;
+    return { url: url.toString(), credentialed: sameHost || listed };
+}
+async function pullToken(challenge, host, repository, config) {
+    const target = tokenRequest(challenge, host, repository, config.allowlist);
+    if (target === null)
+        return null;
+    const headers = { "User-Agent": USER_AGENT };
+    if (config.auth && target.credentialed) {
+        headers.Authorization = `Basic ${Buffer.from(config.auth).toString("base64")}`;
+    }
+    const response = await request(target.url, headers);
+    if (response.status !== 200)
+        return null;
+    try {
+        const token = JSON.parse(response.body)
+            .token;
+        return typeof token === "string" && token !== "" ? token : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** True when `<host>/v2/<repository>/tags/list` lists at least one tag. */
+export async function refReachable(host, repository, config = {}) {
+    const url = `https://${host}/v2/${repository}/tags/list`;
+    let response = await request(url);
+    if (response.status === 401) {
+        const challenge = response.header("WWW-Authenticate");
+        const token = challenge
+            ? await pullToken(challenge, host, repository, config)
+            : null;
+        if (token !== null) {
+            response = await request(url, { Authorization: `Bearer ${token}` });
+        }
+    }
+    if (response.status !== 200)
+        return false;
+    try {
+        const tags = JSON.parse(response.body)
+            .tags;
+        return Array.isArray(tags) && tags.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/validate/adapters/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/validate/adapters/registry.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAShD,SAAS,MAAM,CAAC,SAAiB,EAAE,GAAW;IAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAQD,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,YAAoB,EACpB,UAAkB,EAClB,SAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,UAAU,OAAO,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,IAAI;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;IACvE,MAAM,MAAM,GACV,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1E,KAAK,CAAC;IACR,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,QAAQ,IAAI,MAAM,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,IAAY,EACZ,UAAkB,EAClB,MAAsB;IAEtB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,OAAO,GAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IACrE,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACvC,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA6B;aAC1E,KAAK,CAAC;QACT,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,UAAkB,EAClB,SAAyB,EAAE;IAE3B,MAAM,GAAG,GAAG,WAAW,IAAI,OAAO,UAAU,YAAY,CAAC;IAEzD,IAAI,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,SAAS;YACrB,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA6B;aACzE,IAAI,CAAC;QACR,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/validate/core/metadata.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Pure checks on the submitted `metadata.json` — schema shape, package-name
+ * agreement, owner shape, and OCI-ref syntax/policy.
+ *
+ * Everything here treats its input as hostile: the document comes from the PR
+ * head and is consumed as data only. Nothing is executed, nothing is merged
+ * into an existing object, and no value reaches a shell or a file path.
+ */
+export declare const KINDS: readonly ["skill", "rule", "agent", "mcp", "bundle"];
+export type Kind = (typeof KINDS)[number];
+export interface Owner {
+    /** Numeric forge account id — the authorization key (immutable, rename-proof). */
+    id: number;
+    /** GitHub login. Display only. */
+    github?: string;
+    /** Generic login for non-GitHub forges. Display only. */
+    login?: string;
+}
+export interface Metadata {
+    schema: number;
+    name: string;
+    kind: Kind;
+    ref: string;
+    description: string;
+    owner: Owner;
+}
+/** A metadata document larger than this is refused before it is parsed. */
+export declare const MAX_METADATA_BYTES: number;
+export type Parsed<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * `JSON.parse` with a reviver that refuses prototype-pollution keys anywhere in
+ * the document. Nothing downstream merges this object, so the keys are inert on
+ * their own — refusing them keeps it that way for future callers and makes the
+ * property testable.
+ */
+export declare function parseMetadataJson(text: string): Parsed<unknown>;
+/** Port of `build.validate` — the schema/kind/name checks, plus type strictness. */
+export declare function validateMetadata(value: unknown, pkg: string): Parsed<Metadata>;
+/** The declared owner login — display only, never the authorization key. */
+export declare function ownerLogin(owner: Owner): string;
+export interface RegistryRef {
+    host: string;
+    repository: string;
+}
+/** Split `<host>/<repository>` and check both halves against their grammar. */
+export declare function parseRef(ref: string): Parsed<RegistryRef>;
+/**
+ * A dotted DNS name, not an IP literal and not a dotless internal name — the
+ * shape a public registry always has, and loopback/link-local never do.
+ */
+export declare function isPublicDnsHost(host: string): boolean;
+/**
+ * Registry-host policy, evaluated *before* any network call (SSRF ordering).
+ *
+ * A committed allowlist is authoritative — an operator who lists a host has
+ * accepted it, IP literal or not. With no allowlist the check falls back to
+ * "public DNS name": no IP literals, no dotless hosts, which keeps a hostile
+ * `ref` from steering CI at loopback or a cloud metadata endpoint.
+ */
+export declare function registryHostReason(host: string, allowlist?: readonly string[]): string | null;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/validate/core/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../../src/validate/core/metadata.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AAEH,eAAO,MAAM,KAAK,sDAAuD,CAAC;AAC1E,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C,MAAM,WAAW,KAAK;IACpB,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;CACd;AAcD,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAE5C,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAe/D;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAoD9E;AAED,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAE/C;AASD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAYzD;AAOD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,GAAG,IAAI,CAUf"}

package/dist/validate/core/metadata.js

@@ -0,0 +1,149 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * Pure checks on the submitted `metadata.json` — schema shape, package-name
+ * agreement, owner shape, and OCI-ref syntax/policy.
+ *
+ * Everything here treats its input as hostile: the document comes from the PR
+ * head and is consumed as data only. Nothing is executed, nothing is merged
+ * into an existing object, and no value reaches a shell or a file path.
+ */
+export const KINDS = ["skill", "rule", "agent", "mcp", "bundle"];
+const REQUIRED = [
+    "schema",
+    "name",
+    "kind",
+    "ref",
+    "description",
+    "owner",
+];
+/** Keys that turn a later merge/assign into prototype pollution. */
+const FORBIDDEN_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+/** A metadata document larger than this is refused before it is parsed. */
+export const MAX_METADATA_BYTES = 64 * 1024;
+/**
+ * `JSON.parse` with a reviver that refuses prototype-pollution keys anywhere in
+ * the document. Nothing downstream merges this object, so the keys are inert on
+ * their own — refusing them keeps it that way for future callers and makes the
+ * property testable.
+ */
+export function parseMetadataJson(text) {
+    if (text.length > MAX_METADATA_BYTES) {
+        return { ok: false, reason: `larger than ${MAX_METADATA_BYTES} bytes` };
+    }
+    try {
+        const value = JSON.parse(text, (key, val) => {
+            if (FORBIDDEN_KEYS.has(key)) {
+                throw new SyntaxError(`forbidden key ${JSON.stringify(key)}`);
+            }
+            return val;
+        });
+        return { ok: true, value };
+    }
+    catch (error) {
+        return { ok: false, reason: `invalid JSON: ${error.message}` };
+    }
+}
+/** Port of `build.validate` — the schema/kind/name checks, plus type strictness. */
+export function validateMetadata(value, pkg) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return { ok: false, reason: "metadata must be a JSON object" };
+    }
+    const meta = value;
+    const missing = REQUIRED.filter((key) => !Object.prototype.hasOwnProperty.call(meta, key));
+    if (missing.length > 0) {
+        return { ok: false, reason: `missing keys: ${missing.join(", ")}` };
+    }
+    if (meta.schema !== 1) {
+        return {
+            ok: false,
+            reason: `unsupported schema version ${JSON.stringify(meta.schema)}`,
+        };
+    }
+    if (typeof meta.kind !== "string" ||
+        !KINDS.includes(meta.kind)) {
+        return { ok: false, reason: `kind must be one of ${KINDS.join(", ")}` };
+    }
+    if (typeof meta.name !== "string" || meta.name !== pkg) {
+        return {
+            ok: false,
+            reason: `name ${JSON.stringify(meta.name)} != directory ${JSON.stringify(pkg)}`,
+        };
+    }
+    if (typeof meta.ref !== "string" || meta.ref === "") {
+        return { ok: false, reason: "ref must be a non-empty string" };
+    }
+    if (typeof meta.description !== "string") {
+        return { ok: false, reason: "description must be a string" };
+    }
+    const owner = meta.owner;
+    if (typeof owner !== "object" || owner === null || Array.isArray(owner)) {
+        return { ok: false, reason: "owner must be an object" };
+    }
+    const fields = owner;
+    // `github` names a GitHub login; `login` is the generic key other forges use.
+    const login = fields.github ?? fields.login;
+    if (typeof login !== "string" || login === "") {
+        return { ok: false, reason: "owner needs a 'github' or 'login' string" };
+    }
+    if (typeof fields.id !== "number" || !Number.isInteger(fields.id)) {
+        return { ok: false, reason: "owner.id must be an integer account id" };
+    }
+    return { ok: true, value: meta };
+}
+/** The declared owner login — display only, never the authorization key. */
+export function ownerLogin(owner) {
+    return owner.github ?? owner.login ?? "";
+}
+/** Hostname with optional port. Rejects userinfo, paths, and unicode. */
+const HOST = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*(:\d{1,5})?$/i;
+/** OCI distribution-spec repository name grammar. */
+const REPOSITORY = /^[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*(?:\/[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*)*$/;
+/** Split `<host>/<repository>` and check both halves against their grammar. */
+export function parseRef(ref) {
+    const slash = ref.indexOf("/");
+    if (slash <= 0)
+        return { ok: false, reason: `ref ${JSON.stringify(ref)} has no repository part` };
+    const host = ref.slice(0, slash);
+    const repository = ref.slice(slash + 1);
+    if (!HOST.test(host)) {
+        return { ok: false, reason: `ref ${JSON.stringify(ref)} has an invalid registry host` };
+    }
+    if (!REPOSITORY.test(repository)) {
+        return { ok: false, reason: `ref ${JSON.stringify(ref)} has an invalid repository name` };
+    }
+    return { ok: true, value: { host, repository } };
+}
+function stripPort(host) {
+    const colon = host.lastIndexOf(":");
+    return colon === -1 ? host : host.slice(0, colon);
+}
+/**
+ * A dotted DNS name, not an IP literal and not a dotless internal name — the
+ * shape a public registry always has, and loopback/link-local never do.
+ */
+export function isPublicDnsHost(host) {
+    const bare = host.startsWith("[") ? host : stripPort(host);
+    if (bare.startsWith("[") || /^\d{1,3}(\.\d{1,3}){3}$/.test(bare))
+        return false;
+    return bare.includes(".");
+}
+/**
+ * Registry-host policy, evaluated *before* any network call (SSRF ordering).
+ *
+ * A committed allowlist is authoritative — an operator who lists a host has
+ * accepted it, IP literal or not. With no allowlist the check falls back to
+ * "public DNS name": no IP literals, no dotless hosts, which keeps a hostile
+ * `ref` from steering CI at loopback or a cloud metadata endpoint.
+ */
+export function registryHostReason(host, allowlist) {
+    const listed = allowlist?.some((entry) => entry.toLowerCase() === host.toLowerCase()) ?? false;
+    if (allowlist !== undefined && allowlist.length > 0) {
+        return listed ? null : `registry host ${JSON.stringify(host)} is not in the allowlist`;
+    }
+    if (!isPublicDnsHost(host)) {
+        return `registry host ${JSON.stringify(host)} must be a public DNS name`;
+    }
+    return null;
+}
+//# sourceMappingURL=metadata.js.map

package/dist/validate/core/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/validate/core/metadata.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAqB1E,MAAM,QAAQ,GAAG;IACf,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;IACL,aAAa;IACb,OAAO;CACC,CAAC;AAEX,oEAAoE;AACpE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAI5C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,kBAAkB,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAW,EAAE,GAAY,EAAE,EAAE;YACpE,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,WAAW,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAkB,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,GAAW;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,KAAgC,CAAC;IAE9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAC1D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;SACpE,CAAC;IACJ,CAAC;IACD,IACE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;SAChF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,8EAA8E;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAA2B,EAAE,CAAC;AAC1D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,MAAM,IAAI,GAAG,+EAA+E,CAAC;AAE7F,qDAAqD;AACrD,MAAM,UAAU,GACd,qFAAqF,CAAC;AAOxF,+EAA+E;AAC/E,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC;IAClG,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,+BAA+B,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iCAAiC,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,SAA6B;IAE7B,MAAM,MAAM,GACV,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC;IAClF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/validate/core/ownership.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Namespace-ownership decisions — pure, given facts the adapters probed.
+ *
+ * Identity is the forge account that authored the PR; authorization is the
+ * *numeric* account id. The login string is display only: ids are immutable and
+ * rename-proof, so every comparison that decides anything compares ids.
+ */
+import type { NamespaceIdentity } from "../adapters/forge.js";
+/**
+ * A bot trusted to announce on someone else's behalf (first-party publish CI).
+ *
+ * The object form pins the numeric account id and scopes the namespaces the bot
+ * may touch — use it. The bare-string form is login-only: unpinned id, every
+ * namespace. It exists because config files are usually written by hand, and it
+ * is safe only where logins cannot be re-registered (GitHub app bots own their
+ * `...[bot]` suffix; humans cannot register brackets).
+ */
+export type TrustedBot = string | {
+    login: string;
+    id?: string;
+    namespaces?: string[];
+};
+export interface BotGrant {
+    login: string;
+    /** Numeric account id the author must present. Absent = unpinned. */
+    id?: string;
+    /** Namespaces the bot may announce for; `"*"` means all. */
+    namespaces: string[];
+}
+export declare function findTrustedBot(bots: readonly TrustedBot[] | undefined, login: string): BotGrant | null;
+export declare function botOwnsNamespace(grant: BotGrant, namespace: string, authorId: string): boolean;
+/**
+ * Does the author own this namespace, given the identity the forge reported?
+ *
+ * A user namespace is owned only by the account it *is* — login match plus id
+ * match, because a login match alone is a rename away from being someone else.
+ * Org/group namespaces delegate to the membership probe the caller ran.
+ */
+export declare function namespaceOwned(namespace: string, identity: NamespaceIdentity, author: {
+    login: string;
+    id: string;
+}, isMember: boolean): boolean;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/validate/core/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../../../src/validate/core/ownership.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAClB,MAAM,GACN;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,EACvC,KAAK,EAAE,MAAM,GACZ,QAAQ,GAAG,IAAI,CASjB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,QAAQ,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAKT;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACrC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAST"}

package/dist/validate/core/ownership.js

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+export function findTrustedBot(bots, login) {
+    for (const bot of bots ?? []) {
+        const grant = typeof bot === "string"
+            ? { login: bot, namespaces: ["*"] }
+            : { login: bot.login, id: bot.id, namespaces: bot.namespaces ?? ["*"] };
+        if (grant.login.toLowerCase() === login.toLowerCase())
+            return grant;
+    }
+    return null;
+}
+export function botOwnsNamespace(grant, namespace, authorId) {
+    if (grant.id !== undefined && grant.id !== authorId)
+        return false;
+    return grant.namespaces.some((allowed) => allowed === "*" || allowed.toLowerCase() === namespace.toLowerCase());
+}
+/**
+ * Does the author own this namespace, given the identity the forge reported?
+ *
+ * A user namespace is owned only by the account it *is* — login match plus id
+ * match, because a login match alone is a rename away from being someone else.
+ * Org/group namespaces delegate to the membership probe the caller ran.
+ */
+export function namespaceOwned(namespace, identity, author, isMember) {
+    if (identity.kind === "user") {
+        return (identity.path.toLowerCase() === author.login.toLowerCase() &&
+            namespace.toLowerCase() === author.login.toLowerCase() &&
+            identity.id === author.id);
+    }
+    return isMember;
+}
+//# sourceMappingURL=ownership.js.map

package/dist/validate/core/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../../src/validate/core/ownership.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAiCtC,MAAM,UAAU,cAAc,CAC5B,IAAuC,EACvC,KAAa;IAEb,KAAK,MAAM,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,KAAK,GACT,OAAO,GAAG,KAAK,QAAQ;YACrB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE;YACnC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAe,EACf,SAAiB,EACjB,QAAgB;IAEhB,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAClF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAiB,EACjB,QAA2B,EAC3B,MAAqC,EACrC,QAAiB;IAEjB,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CACL,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;YAC1D,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;YACtD,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAC1B,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/validate/core/paths.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Changed-path gate — the first and cheapest filter on an untrusted PR.
+ *
+ * Every changed path must be `index/<host>/<namespace...>/<pkg>/metadata.json`.
+ * Anything else means manual review. Path strings arrive from the forge API and
+ * are attacker-chosen, so segments are charset-checked rather than merely
+ * pattern-matched: `..`, empty segments, absolute paths, backslashes and NUL
+ * never survive, which is what makes the later `resolve()` in
+ * `adapters/files.ts` a belt-and-braces check rather than the only one.
+ */
+export type Forge = "github" | "gitlab";
+export interface IndexPath {
+    /** The path exactly as the forge reported it. */
+    file: string;
+    /** Namespace segment(s) — one on GitHub, possibly nested on GitLab. */
+    namespace: string;
+    /** Package directory name; `metadata.json`'s `name` must equal it. */
+    pkg: string;
+}
+export declare function parseIndexPath(file: string, forge: Forge, host: string): IndexPath | null;
+//# sourceMappingURL=paths.d.ts.map

package/dist/validate/core/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/validate/core/paths.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,MAAM,MAAM,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExC,MAAM,WAAW,SAAS;IACxB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;CACb;AAQD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,IAAI,CAmBlB"}

package/dist/validate/core/paths.js

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * A single path segment: starts alphanumeric, then alphanumeric/`.`/`_`/`-`.
+ * Rejects `.`, `..`, hidden files, and anything needing URL escaping.
+ */
+const SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+export function parseIndexPath(file, forge, host) {
+    if (file.includes("\0") || file.includes("\\"))
+        return null;
+    const parts = file.split("/");
+    // index / <host> / <ns...> / <pkg> / metadata.json
+    if (parts.length < 5)
+        return null;
+    if (parts[0] !== "index")
+        return null;
+    if ((parts[1] ?? "").toLowerCase() !== host.toLowerCase())
+        return null;
+    if (parts[parts.length - 1] !== "metadata.json")
+        return null;
+    const middle = parts.slice(2, -1);
+    if (middle.length < 2)
+        return null;
+    // GitHub namespaces are a single login or org; GitLab groups nest.
+    if (forge === "github" && middle.length !== 2)
+        return null;
+    if (!middle.every((segment) => SEGMENT.test(segment)))
+        return null;
+    const pkg = middle[middle.length - 1];
+    if (pkg === undefined)
+        return null;
+    return { file, namespace: middle.slice(0, -1).join("/"), pkg };
+}
+//# sourceMappingURL=paths.js.map

package/dist/validate/core/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/validate/core/paths.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAwBtC;;;GAGG;AACH,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAE/C,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAAY,EACZ,IAAY;IAEZ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,mDAAmD;IACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,mEAAmE;IACnE,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;AACjE,CAAC"}

package/dist/validate/index.d.ts

@@ -0,0 +1,40 @@
+import { type TrustedBot } from "./core/ownership.js";
+export type { TrustedBot } from "./core/ownership.js";
+export type { Metadata } from "./core/metadata.js";
+export interface ValidateOptions {
+    forge: "github" | "gitlab";
+    /** Trusted base checkout — the committed state the PR proposes to change. */
+    root: string;
+    changedFiles: string[];
+    author: {
+        login: string;
+        id: string;
+    };
+    /** Directory holding the PR head's files. DATA ONLY. */
+    prTree: string;
+    /**
+     * Accounts trusted to announce for a namespace they do not own. Bare strings
+     * are login-only; the object form pins the account id and scopes namespaces.
+     */
+    trustedBots?: TrustedBot[];
+    /** Committed registry-host allowlist. Empty/absent = any public DNS host. */
+    registryHosts?: string[];
+    /** Namespaces nobody may claim through a PR, whoever owns them upstream. */
+    reservedNamespaces?: string[];
+    /** Forge host pinning the `index/<host>/` segment. Default: the forge's own. */
+    host?: string;
+    /** API base URL. Default: the CI-predefined one for the forge. */
+    apiBase?: string;
+    /** Forge API token. Default: the CI-conventional environment variable. */
+    token?: string;
+    /** `user:token` for registries without anonymous pull tokens. */
+    registryAuth?: string;
+    /** GitLab only: membership threshold (30 = Developer). */
+    minAccessLevel?: number;
+}
+export interface ValidateResult {
+    eligible: boolean;
+    reasons: string[];
+}
+export declare function runValidate(options: ValidateOptions): Promise<ValidateResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/validate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validate/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC3B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AA+BD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,CAAC,CAWzB"}