@lesliechan721/aw 0.1.0-beta.10

package/dist/src/utils/orphan-marketplace-cleanup.js

@@ -0,0 +1,198 @@
+import crypto from 'node:crypto';
+import path from 'node:path';
+import fs from 'fs-extra';
+import { assertCatalogSourceInventoryComplete, inventoryCatalogSourceReferences, } from './catalog-source-references.js';
+import { readStrictNamespacedMarketplaceRoot } from './local-marketplace.js';
+import { resolveAwHome } from './state-paths.js';
+const QUARANTINE_DIRECTORY = 'marketplace-quarantine';
+const QUARANTINE_MARKER = '.aw-owner.json';
+const QUARANTINE_OWNER = {
+    schemaVersion: 1,
+    owner: 'agent-workflows',
+    kind: 'marketplace-quarantine',
+};
+function isQuarantineOwner(value) {
+    return Boolean(value && typeof value === 'object' && !Array.isArray(value)
+        && value.schemaVersion === QUARANTINE_OWNER.schemaVersion
+        && value.owner === QUARANTINE_OWNER.owner
+        && value.kind === QUARANTINE_OWNER.kind
+        && Object.keys(value).length === 3);
+}
+async function ensureOwnedQuarantineDirectory(directory) {
+    const existing = await fs.lstat(directory).catch((error) => {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    });
+    if (existing === null) {
+        await fs.mkdir(directory);
+        await fs.writeJson(path.join(directory, QUARANTINE_MARKER), QUARANTINE_OWNER);
+    }
+    else if (!existing.isDirectory() || existing.isSymbolicLink()) {
+        return false;
+    }
+    const marker = await fs.readJson(path.join(directory, QUARANTINE_MARKER)).catch(() => null);
+    return isQuarantineOwner(marker);
+}
+async function cleanupPriorQuarantines(options) {
+    for (const entry of await fs.readdir(options.quarantineRoot, { withFileTypes: true })) {
+        if (entry.name === QUARANTINE_MARKER || !entry.isDirectory() || entry.isSymbolicLink())
+            continue;
+        const container = path.join(options.quarantineRoot, entry.name);
+        if (!await ensureOwnedQuarantineDirectory(container))
+            continue;
+        const quarantinedRoot = path.join(container, options.sourceId);
+        let strict;
+        try {
+            strict = await readStrictNamespacedMarketplaceRoot({
+                trustedMarketplaceRoot: options.quarantineRoot,
+                rootDir: quarantinedRoot,
+                sourceId: options.sourceId,
+                sourceIdentity: options.sourceIdentity,
+                ...(options.marketplaceName ? { marketplaceName: options.marketplaceName } : {}),
+            });
+        }
+        catch {
+            continue;
+        }
+        if (!strict)
+            continue;
+        try {
+            await fs.remove(strict.rootDir);
+            await fs.remove(container);
+        }
+        catch (error) {
+            const code = error.code ?? 'UNKNOWN';
+            throw new Error(`orphanMarketplaceQuarantined: ${code} at ${QUARANTINE_DIRECTORY}/${entry.name}/${options.sourceId}`);
+        }
+    }
+}
+export class MarketplaceGenerationCleanupPendingError extends Error {
+    durableMaterializeCommit = true;
+    constructor(code, location, cause) {
+        super(`marketplaceGenerationCleanupPending: ${code} at ${location}`, { cause });
+        this.name = 'MarketplaceGenerationCleanupPendingError';
+    }
+}
+export async function commitMarketplaceGenerationBackup(options) {
+    const backup = await fs.lstat(options.backupRoot).catch((error) => {
+        if (error.code === 'ENOENT')
+            return null;
+        throw error;
+    });
+    if (backup === null) {
+        return;
+    }
+    const quarantineRoot = path.join(resolveAwHome(options.env), QUARANTINE_DIRECTORY);
+    if (!await ensureOwnedQuarantineDirectory(quarantineRoot)) {
+        throw new Error('marketplaceQuarantineInvalid: quarantine root is not AW-owned.');
+    }
+    const quarantineContainer = path.join(quarantineRoot, `${Date.now()}-${crypto.randomBytes(8).toString('hex')}`);
+    await fs.mkdir(quarantineContainer);
+    await fs.writeJson(path.join(quarantineContainer, QUARANTINE_MARKER), QUARANTINE_OWNER);
+    const quarantinedRoot = path.join(quarantineContainer, options.sourceId);
+    try {
+        await fs.rename(options.backupRoot, quarantinedRoot);
+    }
+    catch (error) {
+        await fs.remove(quarantineContainer).catch(() => undefined);
+        throw error;
+    }
+    try {
+        await fs.remove(quarantinedRoot);
+        await fs.remove(quarantineContainer);
+        await cleanupPriorQuarantines({
+            quarantineRoot,
+            sourceId: options.sourceId,
+            sourceIdentity: options.sourceIdentity,
+            ...(options.marketplaceName ? { marketplaceName: options.marketplaceName } : {}),
+        });
+    }
+    catch (error) {
+        const code = error.code ?? 'UNKNOWN';
+        throw new MarketplaceGenerationCleanupPendingError(code, `${QUARANTINE_DIRECTORY}/${path.basename(quarantineContainer)}/${options.sourceId}`, error);
+    }
+}
+export async function cleanupOrphanNamespacedMarketplaceRoot(options) {
+    const awHome = resolveAwHome(options.env);
+    const rootDir = path.join(awHome, 'marketplaces', options.sourceId);
+    const marketplacesRoot = path.join(awHome, 'marketplaces');
+    const quarantineRoot = path.join(awHome, QUARANTINE_DIRECTORY);
+    const quarantineExists = await fs.pathExists(quarantineRoot);
+    if (quarantineExists) {
+        if (!await ensureOwnedQuarantineDirectory(quarantineRoot))
+            return false;
+        await cleanupPriorQuarantines({
+            quarantineRoot,
+            sourceId: options.sourceId,
+            sourceIdentity: options.sourceIdentity,
+            ...(options.marketplaceName ? { marketplaceName: options.marketplaceName } : {}),
+        });
+    }
+    let root;
+    try {
+        root = await readStrictNamespacedMarketplaceRoot({
+            trustedMarketplaceRoot: marketplacesRoot,
+            rootDir,
+            sourceId: options.sourceId,
+            sourceIdentity: options.sourceIdentity,
+            ...(options.marketplaceName ? { marketplaceName: options.marketplaceName } : {}),
+        });
+    }
+    catch {
+        return false;
+    }
+    if (!root)
+        return false;
+    const inventory = await inventoryCatalogSourceReferences({
+        cwd: options.cwd,
+        env: options.env,
+    });
+    try {
+        assertCatalogSourceInventoryComplete(inventory);
+    }
+    catch {
+        return false;
+    }
+    const blockingReference = inventory.references.some((reference) => reference.sourceId === options.sourceId
+        && !(reference.kind === 'namespacedMarketplace' && reference.pluginName === undefined));
+    if (blockingReference)
+        return false;
+    try {
+        root = await readStrictNamespacedMarketplaceRoot({
+            trustedMarketplaceRoot: marketplacesRoot,
+            rootDir,
+            sourceId: options.sourceId,
+            sourceIdentity: options.sourceIdentity,
+            ...(options.marketplaceName ? { marketplaceName: options.marketplaceName } : {}),
+        });
+    }
+    catch {
+        return false;
+    }
+    if (!root)
+        return false;
+    if (!quarantineExists && !await ensureOwnedQuarantineDirectory(quarantineRoot))
+        return false;
+    const quarantineContainer = path.join(quarantineRoot, `${Date.now()}-${crypto.randomBytes(8).toString('hex')}`);
+    await fs.mkdir(quarantineContainer);
+    await fs.writeJson(path.join(quarantineContainer, QUARANTINE_MARKER), QUARANTINE_OWNER);
+    const quarantinedRoot = path.join(quarantineContainer, options.sourceId);
+    try {
+        await fs.rename(root.rootDir, quarantinedRoot);
+    }
+    catch (error) {
+        await fs.remove(quarantineContainer).catch(() => undefined);
+        throw error;
+    }
+    try {
+        await fs.remove(quarantinedRoot);
+        await fs.remove(quarantineContainer);
+    }
+    catch (error) {
+        const code = error.code ?? 'UNKNOWN';
+        throw new Error(`orphanMarketplaceQuarantined: ${code} at ${QUARANTINE_DIRECTORY}/${path.basename(quarantineContainer)}/${options.sourceId}`);
+    }
+    return true;
+}
+//# sourceMappingURL=orphan-marketplace-cleanup.js.map

package/dist/src/utils/orphan-marketplace-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphan-marketplace-cleanup.js","sourceRoot":"","sources":["../../../src/utils/orphan-marketplace-cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAE1B,OAAO,EACL,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AACtD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAC3C,MAAM,gBAAgB,GAAG;IACvB,aAAa,EAAE,CAAC;IAChB,KAAK,EAAE,iBAAiB;IACxB,IAAI,EAAE,wBAAwB;CACtB,CAAC;AAEX,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACpE,KAAiC,CAAC,aAAa,KAAK,gBAAgB,CAAC,aAAa;WAClF,KAAiC,CAAC,KAAK,KAAK,gBAAgB,CAAC,KAAK;WAClE,KAAiC,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI;WACjE,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,SAAiB;IAC7D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACzD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5F,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAKtC;IACC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtF,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,SAAS;QACjG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,8BAA8B,CAAC,SAAS,CAAC;YAAE,SAAS;QAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,mCAAmC,CAAC;gBACjD,sBAAsB,EAAE,OAAO,CAAC,cAAc;gBAC9C,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,OAAO,oBAAoB,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wCAAyC,SAAQ,KAAK;IACxD,wBAAwB,GAAG,IAAI,CAAC;IAEzC,YAAY,IAAY,EAAE,QAAgB,EAAE,KAAc;QACxD,KAAK,CAAC,wCAAwC,IAAI,OAAO,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,0CAA0C,CAAC;IACzD,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAMvD;IACC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAChE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,8BAA8B,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACnC,cAAc,EACd,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACzD,CAAC;IACF,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrC,MAAM,uBAAuB,CAAC;YAC5B,cAAc;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;QAChE,MAAM,IAAI,wCAAwC,CAChD,IAAI,EACJ,GAAG,oBAAoB,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,EACnF,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,OAM5D;IACC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,8BAA8B,CAAC,cAAc,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,uBAAuB,CAAC;YAC5B,cAAc;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,mCAAmC,CAAC;YAC/C,sBAAsB,EAAE,gBAAgB;YACxC,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,SAAS,GAAG,MAAM,gCAAgC,CAAC;QACvD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,oCAAoC,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,iBAAiB,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAChE,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;WACpC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,uBAAuB,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC;IAC1F,IAAI,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,mCAAmC,CAAC;YAC/C,sBAAsB,EAAE,gBAAgB;YACxC,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,8BAA8B,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACnC,cAAc,EACd,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACzD,CAAC;IACF,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,OAAO,oBAAoB,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAC7H,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/utils/ownership.d.ts

@@ -0,0 +1,194 @@
+import type { PlatformName, Scope } from '../types.js';
+export declare const SKILL_OWNER_MARKER = ".agent-workflows-owner.json";
+export declare const OWNED_TEXT_HEADER_PREFIX = "# agent-workflows-owner: ";
+export declare const SHARED_OWNER_TOKEN_PREFIX = "aw-owner-v3:";
+export type OwnershipState = 'present' | 'absent' | 'partial';
+export type OwnershipInspectionState = OwnershipState | 'error';
+export type OwnershipComponentState = OwnershipInspectionState | 'foreign';
+export interface TargetIdentity {
+    platform: PlatformName;
+    scope: Scope;
+}
+export interface OwnerIdentity extends TargetIdentity {
+    owner: 'agent-workflows';
+    sourceId?: string;
+    pluginId?: string;
+    plugin: string;
+    artifactKey: string;
+}
+export declare function createSharedOwnerToken(identity: OwnerIdentity): string;
+export declare function parseSharedOwnerToken(value: string): OwnerIdentity | null;
+export type SkillOwnerMarker = OwnerIdentity & {
+    schemaVersion: 3;
+};
+export type OwnedProbeResult = 'present' | 'absent' | 'partial' | 'foreign';
+export type OwnedSharedLocator = {
+    kind: 'claude-permissions';
+    settingsPath: string;
+    ownerKey: string;
+} | {
+    kind: 'codex-instruction';
+    configPath: string;
+    ownerKey: string;
+} | {
+    kind: 'codex-activation';
+    configPath: string;
+    codexPluginId: string;
+    desired: boolean;
+    disposition?: 'remove' | 'disable';
+} | {
+    kind: 'legacy-codex-mcp';
+    configPath: string;
+    serverKey: string;
+    ownerKey: string;
+} | {
+    kind: 'legacy-codex-hook';
+    hooksPath: string;
+    serializedIdentity: string;
+} | {
+    kind: 'codex-role-registration';
+    configPath: string;
+    roleKey: string;
+    rolePath: string;
+    fileIdentity: OwnerIdentity;
+} | {
+    kind: 'codex-marketplace';
+    marketplaceName: string;
+    marketplaceRoot: string;
+    desired: boolean;
+} | {
+    kind: 'claude-marketplace';
+    marketplaceName: string;
+    marketplaceRoot: string;
+    desired: boolean;
+} | {
+    kind: 'corrupted';
+    message: string;
+};
+interface OwnedPathComponent {
+    path: string;
+    allowedRoot: string;
+    identity: OwnerIdentity;
+}
+export type OwnedComponent = ({
+    kind: 'skill-directory';
+    validateHealth?: boolean;
+    pristineTree?: Array<{
+        relativePath: string;
+        contentDigest: string;
+    }>;
+} & OwnedPathComponent) | ({
+    kind: 'owned-text-file';
+} & OwnedPathComponent) | {
+    kind: 'managed-block' | 'shared-config';
+    identity: OwnerIdentity;
+    label: string;
+    locator: OwnedSharedLocator;
+} | {
+    kind: 'native-plugin';
+    identity: OwnerIdentity;
+    pluginId: string;
+};
+export interface OwnedComponentInspection {
+    component: OwnedComponent;
+    state: OwnershipComponentState;
+    diagnostic?: string;
+    collision?: ArtifactCollisionEvidence;
+}
+export interface ArtifactCollisionEvidence {
+    reason: 'ownerMismatch' | 'unownedContent' | 'typeMismatch';
+    artifactKind: OwnedComponent['kind'];
+    artifactKey: string;
+    expectedOwner: string;
+    actualOwner?: string;
+}
+export interface OwnershipError {
+    label: string;
+    message: string;
+}
+export interface OwnershipInspection {
+    state: OwnershipInspectionState;
+    components: OwnedComponentInspection[];
+    errors: OwnershipError[];
+}
+export type NativeOwnershipProbe = (component: Extract<OwnedComponent, {
+    kind: 'native-plugin';
+}>) => Promise<OwnedProbeResult>;
+export type NativeOwnershipRemove = (component: Extract<OwnedComponent, {
+    kind: 'native-plugin';
+}>) => Promise<void>;
+export interface OwnedComponentExecutor {
+    inspectShared(component: Extract<OwnedComponent, {
+        kind: 'managed-block' | 'shared-config';
+    }>): Promise<OwnedProbeResult>;
+    removeShared(component: Extract<OwnedComponent, {
+        kind: 'managed-block' | 'shared-config';
+    }>): Promise<void>;
+    validateSkillDirectory?(component: Extract<OwnedComponent, {
+        kind: 'skill-directory';
+    }>): Promise<void>;
+    skillDirectoryMatchesPristineTree?(options: {
+        actualPath: string;
+        files: ReadonlyArray<{
+            relativePath: string;
+            contentDigest: string;
+        }>;
+    }): Promise<boolean>;
+}
+export interface CleanupFailure extends OwnershipError {
+    phase: 'probe' | 'mutation' | 'verify' | 'remove' | 'post-probe';
+    quarantinePath?: string;
+}
+export interface CleanupResult {
+    removed: string[];
+    absent: string[];
+    residual: string[];
+    quarantined: string[];
+    failures: CleanupFailure[];
+}
+export declare function assertSafeOwnershipSegment(value: string, label: string): void;
+export declare function validateOwnerIdentity(identity: OwnerIdentity): void;
+export declare function createSkillOwnerMarkerContent(identity: OwnerIdentity): string;
+export declare function assertOwnedSkillPath(options: {
+    skillRoot: string;
+    allowedRoot: string;
+    identity: OwnerIdentity;
+}): Promise<void>;
+export declare function writeSkillOwnerMarker(options: {
+    skillRoot: string;
+    allowedRoot: string;
+    identity: OwnerIdentity;
+}): Promise<string>;
+export declare function readSkillOwnerMarker(options: {
+    skillRoot: string;
+    allowedRoot: string;
+    expectedIdentity?: OwnerIdentity;
+}): Promise<SkillOwnerMarker | null>;
+export declare function renderOwnedTextFile(content: string, identity: OwnerIdentity): string;
+export declare function parseOwnedTextHeader(content: string, expectedIdentity?: OwnerIdentity): {
+    identity: OwnerIdentity;
+    content: string;
+} | null;
+export declare function writeOwnedTextFile(options: {
+    path: string;
+    allowedRoot: string;
+    identity: OwnerIdentity;
+    content: string;
+}): Promise<void>;
+export declare function inspectOwnedComponents(options: {
+    components: readonly OwnedComponent[];
+    nativeProbe?: NativeOwnershipProbe;
+    executor?: OwnedComponentExecutor;
+    verifyHealth?: boolean;
+    forceExclusive?: boolean;
+}): Promise<OwnershipInspection>;
+export declare function cleanupOwnedComponents(options: {
+    components: readonly OwnedComponent[];
+    nativeProbe?: NativeOwnershipProbe;
+    nativeRemove?: NativeOwnershipRemove;
+    executor?: OwnedComponentExecutor;
+    beforeMutation?: (component: OwnedComponent) => Promise<void>;
+    afterQuarantine?: (component: OwnedComponent, quarantinePath: string) => Promise<void>;
+    forceExclusive?: boolean;
+}): Promise<CleanupResult>;
+export {};