@lesliechan721/aw 0.1.0-beta.10

package/dist/src/utils/rendered-contract.d.ts

@@ -0,0 +1,8 @@
+import type { ClaudePermissions } from '../generators/permissions.js';
+import type { PlatformName } from '../types.js';
+export declare function validateRenderedClaudePermissions(permissions: ClaudePermissions, fieldName?: string): void;
+export declare function validateRenderedCodexRules(content: string, fieldName?: string): void;
+export declare function validateRenderedHooksContent(content: unknown, fieldName: string, platform?: PlatformName): void;
+export declare function validateRenderedClaudeHooksContent(content: unknown, fieldName?: string): void;
+export declare function validateRenderedCodexHooksContent(content: unknown, fieldName?: string): void;
+export declare function validateCodexSharedHooksContent(content: unknown, fieldName?: string): void;

package/dist/src/utils/rendered-contract.js

@@ -0,0 +1,134 @@
+import { assertHookMatcherAllowed, assertNativeHookEvent, parseCodexSharedHooksFile, } from './hooks-contract.js';
+function inferRenderedHooksPlatform(fieldName) {
+    if (fieldName === 'claude' || fieldName.startsWith('claude.')) {
+        return 'claude';
+    }
+    if (fieldName === 'codex' || fieldName.startsWith('codex.')) {
+        return 'codex';
+    }
+    return undefined;
+}
+function assertRecord(value, fieldName) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`Invalid ${fieldName}: expected an object.`);
+    }
+    return value;
+}
+function assertStringArray(value, fieldName) {
+    if (!Array.isArray(value)) {
+        throw new Error(`Invalid ${fieldName}: expected an array.`);
+    }
+    return value.map((entry, index) => {
+        if (typeof entry !== 'string' || entry.trim() === '') {
+            throw new Error(`Invalid ${fieldName}[${index}]: expected a non-empty string.`);
+        }
+        return entry;
+    });
+}
+export function validateRenderedClaudePermissions(permissions, fieldName = 'claude.permissions') {
+    const input = assertRecord(permissions, fieldName);
+    for (const decision of ['allow', 'ask', 'deny']) {
+        const rules = assertStringArray(input[decision], `${fieldName}.${decision}`);
+        for (const [index, rule] of rules.entries()) {
+            if (!/^Bash\([^"'\\*;&|<>`$()]+\)$/.test(rule)) {
+                throw new Error(`Invalid ${fieldName}.${decision}[${index}]: expected a plain Bash(...) token prefix.`);
+            }
+        }
+    }
+}
+export function validateRenderedCodexRules(content, fieldName = 'codex.permissions') {
+    for (const [lineIndex, line] of content.split(/\r?\n/).entries()) {
+        const trimmed = line.trim();
+        if (trimmed === '' || trimmed.startsWith('#')) {
+            continue;
+        }
+        const match = /^prefix_rule\(pattern = (\[[^\n]*\]), decision = "(allow|prompt|forbidden)"\)$/.exec(trimmed);
+        if (!match) {
+            throw new Error(`Invalid ${fieldName}:${lineIndex + 1}: expected prefix_rule(...).`);
+        }
+        let pattern;
+        try {
+            pattern = JSON.parse(match[1]);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`Invalid ${fieldName}:${lineIndex + 1}: expected JSON token array (${message}).`);
+        }
+        const tokens = assertStringArray(pattern, `${fieldName}:${lineIndex + 1}.pattern`);
+        if (tokens.length === 0) {
+            throw new Error(`Invalid ${fieldName}:${lineIndex + 1}.pattern: expected at least one token.`);
+        }
+        for (const [tokenIndex, token] of tokens.entries()) {
+            if (/\s/.test(token) || /["'\\*;&|<>`$()]/.test(token)) {
+                throw new Error(`Invalid ${fieldName}:${lineIndex + 1}.pattern[${tokenIndex}]: expected a plain command token.`);
+            }
+        }
+    }
+}
+export function validateRenderedHooksContent(content, fieldName, platform) {
+    const root = assertRecord(content, fieldName);
+    const extraRootKeys = Object.keys(root).filter((key) => key !== 'hooks');
+    if (extraRootKeys.length > 0) {
+        throw new Error(`Invalid ${fieldName}: unsupported fields ${extraRootKeys.map((key) => `"${key}"`).join(', ')}.`);
+    }
+    const hooks = assertRecord(root.hooks, `${fieldName}.hooks`);
+    const renderedPlatform = platform ?? inferRenderedHooksPlatform(fieldName);
+    for (const [eventName, groups] of Object.entries(hooks)) {
+        if (!renderedPlatform) {
+            throw new Error(`Invalid ${fieldName}: unable to infer rendered hooks platform.`);
+        }
+        assertNativeHookEvent(eventName, renderedPlatform, `${fieldName}.hooks.${eventName}`);
+        if (!Array.isArray(groups)) {
+            throw new Error(`Invalid ${fieldName}.hooks.${eventName}: expected an array of hook groups.`);
+        }
+        for (const [groupIndex, group] of groups.entries()) {
+            const groupField = `${fieldName}.hooks.${eventName}[${groupIndex}]`;
+            const groupRecord = assertRecord(group, groupField);
+            const extraGroupKeys = Object.keys(groupRecord).filter((key) => key !== 'matcher' && key !== 'hooks');
+            if (extraGroupKeys.length > 0) {
+                throw new Error(`Invalid ${groupField}: unsupported fields ${extraGroupKeys.map((key) => `"${key}"`).join(', ')}.`);
+            }
+            const matcher = groupRecord.matcher;
+            if (matcher !== undefined && typeof matcher !== 'string') {
+                throw new Error(`Invalid ${groupField}.matcher: expected a string.`);
+            }
+            assertHookMatcherAllowed({
+                kind: 'native',
+                platform: renderedPlatform,
+                event: eventName,
+                matcher: matcher,
+                fieldName: `${groupField}.matcher`,
+            });
+            if (!Array.isArray(groupRecord.hooks)) {
+                throw new Error(`Invalid ${groupField}.hooks: expected an array.`);
+            }
+            if (groupRecord.hooks.length !== 1) {
+                throw new Error(`Invalid ${groupField}.hooks: expected exactly one hook handler.`);
+            }
+            for (const [handlerIndex, handler] of groupRecord.hooks.entries()) {
+                const handlerField = `${groupField}.hooks[${handlerIndex}]`;
+                const handlerRecord = assertRecord(handler, handlerField);
+                if (handlerRecord.type !== 'command') {
+                    throw new Error(`Invalid ${handlerField}.type: expected "command".`);
+                }
+                if (typeof handlerRecord.command !== 'string' || handlerRecord.command.trim() === '') {
+                    throw new Error(`Invalid ${handlerField}.command: expected a non-empty string.`);
+                }
+                const extraKeys = Object.keys(handlerRecord).filter((key) => key !== 'type' && key !== 'command');
+                if (extraKeys.length > 0) {
+                    throw new Error(`Invalid ${handlerField}: unsupported fields ${extraKeys.map((key) => `"${key}"`).join(', ')}.`);
+                }
+            }
+        }
+    }
+}
+export function validateRenderedClaudeHooksContent(content, fieldName = 'claude.hooks') {
+    validateRenderedHooksContent(content, fieldName, 'claude');
+}
+export function validateRenderedCodexHooksContent(content, fieldName = 'codex.hooks') {
+    validateRenderedHooksContent(content, fieldName, 'codex');
+}
+export function validateCodexSharedHooksContent(content, fieldName = 'codex.hooks') {
+    parseCodexSharedHooksFile(content, fieldName);
+}
+//# sourceMappingURL=rendered-contract.js.map

package/dist/src/utils/rendered-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendered-contract.js","sourceRoot":"","sources":["../../../src/utils/rendered-contract.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,SAAS,0BAA0B,CAAC,SAAiB;IACnD,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,SAAiB;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,uBAAuB,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,SAAiB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,sBAAsB,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,KAAK,iCAAiC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAA8B,EAC9B,SAAS,GAAG,oBAAoB;IAEhC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACnD,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAU,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,QAAQ,IAAI,KAAK,6CAA6C,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,SAAS,GAAG,mBAAmB;IAE/B,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,gFAAgF,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7G,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,gCAAgC,OAAO,IAAI,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,GAAG,CAAC,UAAU,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,YAAY,UAAU,oCAAoC,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAgB,EAChB,SAAiB,EACjB,QAAuB;IAEvB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACzE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,wBAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,QAAQ,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAE3E,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,4CAA4C,CAAC,CAAC;QACpF,CAAC;QAED,qBAAqB,CACnB,SAAS,EACT,gBAAgB,EAChB,GAAG,SAAS,UAAU,SAAS,EAAE,CAClC,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,UAAU,SAAS,qCAAqC,CAAC,CAAC;QAChG,CAAC;QAED,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,GAAG,SAAS,UAAU,SAAS,IAAI,UAAU,GAAG,CAAC;YACpE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC;YACtG,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,wBAAwB,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnG,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,8BAA8B,CAAC,CAAC;YACvE,CAAC;YACD,wBAAwB,CAAC;gBACvB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,OAA6B;gBACtC,SAAS,EAAE,GAAG,UAAU,UAAU;aACnC,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,4BAA4B,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,4CAA4C,CAAC,CAAC;YACrF,CAAC;YAED,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClE,MAAM,YAAY,GAAG,GAAG,UAAU,UAAU,YAAY,GAAG,CAAC;gBAC5D,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC1D,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,4BAA4B,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,OAAO,aAAa,CAAC,OAAO,KAAK,QAAQ,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACrF,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,wCAAwC,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC;gBAClG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CACb,WAAW,YAAY,wBAAwB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAgB,EAChB,SAAS,GAAG,cAAc;IAE1B,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAgB,EAChB,SAAS,GAAG,aAAa;IAEzB,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAAgB,EAChB,SAAS,GAAG,aAAa;IAEzB,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}

package/dist/src/utils/runtime-skill-closure.d.ts

@@ -0,0 +1,13 @@
+import type { PlatformName } from '../types.js';
+export interface SkillRuntimeProjectionEvidence {
+    platform: PlatformName;
+    skill: string;
+    target: string;
+    sourceDigest: string;
+    targetDigest: string;
+}
+export declare function validateRuntimeSkillClosure(skillRoot: string, options?: {
+    declaredGeneratedFiles?: ReadonlySet<string>;
+}): Promise<void>;
+export declare function validateRuntimeSkillClosuresRoot(skillsRoot: string): Promise<void>;
+export declare function validateSkillRuntimeProjectionFreshness(outputRoot: string, provenance: readonly SkillRuntimeProjectionEvidence[]): Promise<void>;