@lesliechan721/aw 0.1.0-beta.3

package/dist/src/utils/project-boundary.js

@@ -0,0 +1,95 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import fs from 'fs-extra';
+import { resolveAwProjectRoot } from './plugin-config.js';
+const execFileAsync = promisify(execFile);
+const LOCAL_CONFIG_PATTERN = '.agent-workflows/plugin-config.local/';
+function isInsidePath(candidate, root) {
+    const relative = path.relative(root, candidate);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+export async function assertCanonicalProjectManagedRoots(options) {
+    const resolvedRepoRoot = path.resolve(resolveAwProjectRoot(options.cwd));
+    const canonicalRepoRoot = await fs.realpath(resolvedRepoRoot).catch(() => resolvedRepoRoot);
+    const managedPaths = new Set([
+        ...options.rootNames,
+        ...(options.managedPaths ?? []),
+    ]);
+    for (const relativeManagedPath of managedPaths) {
+        if (path.isAbsolute(relativeManagedPath)
+            || relativeManagedPath === '..'
+            || relativeManagedPath.startsWith(`..${path.sep}`)) {
+            throw new Error(`Project managed path 必须位于 repo 内：${relativeManagedPath}`);
+        }
+        const targetRoot = path.join(canonicalRepoRoot, relativeManagedPath);
+        let current = canonicalRepoRoot;
+        for (const segment of path.relative(canonicalRepoRoot, targetRoot).split(path.sep)) {
+            current = path.join(current, segment);
+            const stats = await fs.lstat(current).catch(() => null);
+            if (stats?.isSymbolicLink()) {
+                throw new Error(`Project managed path 不能包含符号链接：${current}`);
+            }
+            if (!stats)
+                break;
+        }
+        const realTarget = await fs.realpath(targetRoot).catch(() => targetRoot);
+        if (!isInsidePath(realTarget, canonicalRepoRoot)) {
+            throw new Error(`Project managed root realpath 越界：${targetRoot}`);
+        }
+    }
+    return canonicalRepoRoot;
+}
+function relativePath(repoRoot, targetPath) {
+    return path.relative(path.resolve(repoRoot), path.resolve(targetPath)).split(path.sep).join('/');
+}
+async function inspectGitIgnore(repoRoot, targetRelativePath) {
+    try {
+        const result = await execFileAsync('git', ['check-ignore', '-v', targetRelativePath], { cwd: repoRoot });
+        const line = result.stdout.split(/\r?\n/u).find((entry) => entry.trim() !== '');
+        const match = line ? /^(.*?):(\d+):([^\t]+)\t(.+)$/u.exec(line) : null;
+        return match ? { pattern: match[3] } : {};
+    }
+    catch (error) {
+        const code = String(error.code);
+        if (code === '1' || code === '128' || code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+export async function ensureProjectPrivateStateIgnore(options) {
+    const repoRoot = resolveAwProjectRoot(options.cwd);
+    const targetRelativePath = relativePath(repoRoot, options.targetPath);
+    if (!targetRelativePath.startsWith(LOCAL_CONFIG_PATTERN))
+        return {};
+    if ((await inspectGitIgnore(repoRoot, targetRelativePath))?.pattern)
+        return {};
+    const ignoreFilePath = path.join(repoRoot, '.gitignore');
+    try {
+        const existing = await fs.readFile(ignoreFilePath, 'utf8').catch(() => '');
+        const next = `${existing}${existing && !existing.endsWith('\n') ? '\n' : ''}${LOCAL_CONFIG_PATTERN}\n`;
+        await fs.writeFile(ignoreFilePath, next, 'utf8');
+        if ((await inspectGitIgnore(repoRoot, targetRelativePath))?.pattern)
+            return {};
+    }
+    catch {
+        // Return one actionable warning below.
+    }
+    return {
+        warning: {
+            code: 'projectPrivateStateIgnoreNotEnsured',
+            targetRelativePath,
+            suggestedPatterns: [LOCAL_CONFIG_PATTERN],
+            message: `无法确保 ${targetRelativePath} 已被 Git 忽略。请在 .gitignore 中加入 ${LOCAL_CONFIG_PATTERN}。`,
+        },
+    };
+}
+export async function assertProjectSharedConfigPathVisible(options) {
+    const repoRoot = resolveAwProjectRoot(options.cwd);
+    const targetRelativePath = relativePath(repoRoot, options.targetPath);
+    const match = await inspectGitIgnore(repoRoot, targetRelativePath);
+    if (match?.pattern) {
+        throw new Error(`project shared config 路径 ${targetRelativePath} 被 ignore 规则 ${JSON.stringify(match.pattern)} 覆盖。请修正规则，或使用 \`--scope project --local\`。`);
+    }
+}
+//# sourceMappingURL=project-boundary.js.map

package/dist/src/utils/project-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-boundary.js","sourceRoot":"","sources":["../../../src/utils/project-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,oBAAoB,GAAG,uCAAuC,CAAC;AAErE,SAAS,YAAY,CAAC,SAAiB,EAAE,IAAY;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,OAIxD;IACC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAE5F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS;QACnC,GAAG,OAAO,CAAC,SAAS;QACpB,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,KAAK,MAAM,mBAAmB,IAAI,YAAY,EAAE,CAAC;QAC/C,IACE,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;eACjC,mBAAmB,KAAK,IAAI;eAC5B,mBAAmB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,mBAAmB,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACrE,IAAI,OAAO,GAAG,iBAAiB,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnF,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,MAAM;QACpB,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;QACzE,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAaD,SAAS,YAAY,CAAC,QAAgB,EAAE,UAAkB;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnG,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,kBAA0B;IAC1E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,CAAE,KAA4D,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC1E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,OAGrD;IACC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,OAAO,EAAE,CAAC;IACpE,IAAI,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EAAE,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,GAAG,QAAQ,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,oBAAoB,IAAI,CAAC;QACvG,MAAM,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IACD,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,qCAAqC;YAC3C,kBAAkB;YAClB,iBAAiB,EAAE,CAAC,oBAAoB,CAAC;YACzC,OAAO,EAAE,QAAQ,kBAAkB,gCAAgC,oBAAoB,GAAG;SAC3F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,OAG1D;IACC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACnE,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,4BAA4B,kBAAkB,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,4CAA4C,CACxI,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/utils/rendered-contract.d.ts

@@ -0,0 +1,8 @@
+import type { ClaudePermissions } from '../generators/permissions.js';
+import type { PlatformName } from '../types.js';
+export declare function validateRenderedClaudePermissions(permissions: ClaudePermissions, fieldName?: string): void;
+export declare function validateRenderedCodexRules(content: string, fieldName?: string): void;
+export declare function validateRenderedHooksContent(content: unknown, fieldName: string, platform?: PlatformName): void;
+export declare function validateRenderedClaudeHooksContent(content: unknown, fieldName?: string): void;
+export declare function validateRenderedCodexHooksContent(content: unknown, fieldName?: string): void;
+export declare function validateCodexSharedHooksContent(content: unknown, fieldName?: string): void;

package/dist/src/utils/rendered-contract.js

@@ -0,0 +1,134 @@
+import { assertHookMatcherAllowed, assertNativeHookEvent, parseCodexSharedHooksFile, } from './hooks-contract.js';
+function inferRenderedHooksPlatform(fieldName) {
+    if (fieldName === 'claude' || fieldName.startsWith('claude.')) {
+        return 'claude';
+    }
+    if (fieldName === 'codex' || fieldName.startsWith('codex.')) {
+        return 'codex';
+    }
+    return undefined;
+}
+function assertRecord(value, fieldName) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`Invalid ${fieldName}: expected an object.`);
+    }
+    return value;
+}
+function assertStringArray(value, fieldName) {
+    if (!Array.isArray(value)) {
+        throw new Error(`Invalid ${fieldName}: expected an array.`);
+    }
+    return value.map((entry, index) => {
+        if (typeof entry !== 'string' || entry.trim() === '') {
+            throw new Error(`Invalid ${fieldName}[${index}]: expected a non-empty string.`);
+        }
+        return entry;
+    });
+}
+export function validateRenderedClaudePermissions(permissions, fieldName = 'claude.permissions') {
+    const input = assertRecord(permissions, fieldName);
+    for (const decision of ['allow', 'ask', 'deny']) {
+        const rules = assertStringArray(input[decision], `${fieldName}.${decision}`);
+        for (const [index, rule] of rules.entries()) {
+            if (!/^Bash\([^"'\\*;&|<>`$()]+\)$/.test(rule)) {
+                throw new Error(`Invalid ${fieldName}.${decision}[${index}]: expected a plain Bash(...) token prefix.`);
+            }
+        }
+    }
+}
+export function validateRenderedCodexRules(content, fieldName = 'codex.permissions') {
+    for (const [lineIndex, line] of content.split(/\r?\n/).entries()) {
+        const trimmed = line.trim();
+        if (trimmed === '' || trimmed.startsWith('#')) {
+            continue;
+        }
+        const match = /^prefix_rule\(pattern = (\[[^\n]*\]), decision = "(allow|prompt|forbidden)"\)$/.exec(trimmed);
+        if (!match) {
+            throw new Error(`Invalid ${fieldName}:${lineIndex + 1}: expected prefix_rule(...).`);
+        }
+        let pattern;
+        try {
+            pattern = JSON.parse(match[1]);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`Invalid ${fieldName}:${lineIndex + 1}: expected JSON token array (${message}).`);
+        }
+        const tokens = assertStringArray(pattern, `${fieldName}:${lineIndex + 1}.pattern`);
+        if (tokens.length === 0) {
+            throw new Error(`Invalid ${fieldName}:${lineIndex + 1}.pattern: expected at least one token.`);
+        }
+        for (const [tokenIndex, token] of tokens.entries()) {
+            if (/\s/.test(token) || /["'\\*;&|<>`$()]/.test(token)) {
+                throw new Error(`Invalid ${fieldName}:${lineIndex + 1}.pattern[${tokenIndex}]: expected a plain command token.`);
+            }
+        }
+    }
+}
+export function validateRenderedHooksContent(content, fieldName, platform) {
+    const root = assertRecord(content, fieldName);
+    const extraRootKeys = Object.keys(root).filter((key) => key !== 'hooks');
+    if (extraRootKeys.length > 0) {
+        throw new Error(`Invalid ${fieldName}: unsupported fields ${extraRootKeys.map((key) => `"${key}"`).join(', ')}.`);
+    }
+    const hooks = assertRecord(root.hooks, `${fieldName}.hooks`);
+    const renderedPlatform = platform ?? inferRenderedHooksPlatform(fieldName);
+    for (const [eventName, groups] of Object.entries(hooks)) {
+        if (!renderedPlatform) {
+            throw new Error(`Invalid ${fieldName}: unable to infer rendered hooks platform.`);
+        }
+        assertNativeHookEvent(eventName, renderedPlatform, `${fieldName}.hooks.${eventName}`);
+        if (!Array.isArray(groups)) {
+            throw new Error(`Invalid ${fieldName}.hooks.${eventName}: expected an array of hook groups.`);
+        }
+        for (const [groupIndex, group] of groups.entries()) {
+            const groupField = `${fieldName}.hooks.${eventName}[${groupIndex}]`;
+            const groupRecord = assertRecord(group, groupField);
+            const extraGroupKeys = Object.keys(groupRecord).filter((key) => key !== 'matcher' && key !== 'hooks');
+            if (extraGroupKeys.length > 0) {
+                throw new Error(`Invalid ${groupField}: unsupported fields ${extraGroupKeys.map((key) => `"${key}"`).join(', ')}.`);
+            }
+            const matcher = groupRecord.matcher;
+            if (matcher !== undefined && typeof matcher !== 'string') {
+                throw new Error(`Invalid ${groupField}.matcher: expected a string.`);
+            }
+            assertHookMatcherAllowed({
+                kind: 'native',
+                platform: renderedPlatform,
+                event: eventName,
+                matcher: matcher,
+                fieldName: `${groupField}.matcher`,
+            });
+            if (!Array.isArray(groupRecord.hooks)) {
+                throw new Error(`Invalid ${groupField}.hooks: expected an array.`);
+            }
+            if (groupRecord.hooks.length !== 1) {
+                throw new Error(`Invalid ${groupField}.hooks: expected exactly one hook handler.`);
+            }
+            for (const [handlerIndex, handler] of groupRecord.hooks.entries()) {
+                const handlerField = `${groupField}.hooks[${handlerIndex}]`;
+                const handlerRecord = assertRecord(handler, handlerField);
+                if (handlerRecord.type !== 'command') {
+                    throw new Error(`Invalid ${handlerField}.type: expected "command".`);
+                }
+                if (typeof handlerRecord.command !== 'string' || handlerRecord.command.trim() === '') {
+                    throw new Error(`Invalid ${handlerField}.command: expected a non-empty string.`);
+                }
+                const extraKeys = Object.keys(handlerRecord).filter((key) => key !== 'type' && key !== 'command');
+                if (extraKeys.length > 0) {
+                    throw new Error(`Invalid ${handlerField}: unsupported fields ${extraKeys.map((key) => `"${key}"`).join(', ')}.`);
+                }
+            }
+        }
+    }
+}
+export function validateRenderedClaudeHooksContent(content, fieldName = 'claude.hooks') {
+    validateRenderedHooksContent(content, fieldName, 'claude');
+}
+export function validateRenderedCodexHooksContent(content, fieldName = 'codex.hooks') {
+    validateRenderedHooksContent(content, fieldName, 'codex');
+}
+export function validateCodexSharedHooksContent(content, fieldName = 'codex.hooks') {
+    parseCodexSharedHooksFile(content, fieldName);
+}
+//# sourceMappingURL=rendered-contract.js.map

package/dist/src/utils/rendered-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendered-contract.js","sourceRoot":"","sources":["../../../src/utils/rendered-contract.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,SAAS,0BAA0B,CAAC,SAAiB;IACnD,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,SAAiB;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,uBAAuB,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,SAAiB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,sBAAsB,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,KAAK,iCAAiC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAA8B,EAC9B,SAAS,GAAG,oBAAoB;IAEhC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACnD,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAU,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,QAAQ,IAAI,KAAK,6CAA6C,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,SAAS,GAAG,mBAAmB;IAE/B,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,gFAAgF,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7G,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,gCAAgC,OAAO,IAAI,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,SAAS,GAAG,CAAC,UAAU,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,IAAI,SAAS,GAAG,CAAC,YAAY,UAAU,oCAAoC,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAgB,EAChB,SAAiB,EACjB,QAAuB;IAEvB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACzE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,wBAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,QAAQ,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAE3E,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,4CAA4C,CAAC,CAAC;QACpF,CAAC;QAED,qBAAqB,CACnB,SAAS,EACT,gBAAgB,EAChB,GAAG,SAAS,UAAU,SAAS,EAAE,CAClC,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,UAAU,SAAS,qCAAqC,CAAC,CAAC;QAChG,CAAC;QAED,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,GAAG,SAAS,UAAU,SAAS,IAAI,UAAU,GAAG,CAAC;YACpE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC;YACtG,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,wBAAwB,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnG,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,8BAA8B,CAAC,CAAC;YACvE,CAAC;YACD,wBAAwB,CAAC;gBACvB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,OAA6B;gBACtC,SAAS,EAAE,GAAG,UAAU,UAAU;aACnC,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,4BAA4B,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,4CAA4C,CAAC,CAAC;YACrF,CAAC;YAED,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClE,MAAM,YAAY,GAAG,GAAG,UAAU,UAAU,YAAY,GAAG,CAAC;gBAC5D,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC1D,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,4BAA4B,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,OAAO,aAAa,CAAC,OAAO,KAAK,QAAQ,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACrF,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,wCAAwC,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC;gBAClG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CACb,WAAW,YAAY,wBAAwB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAgB,EAChB,SAAS,GAAG,cAAc;IAE1B,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAgB,EAChB,SAAS,GAAG,aAAa;IAEzB,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAAgB,EAChB,SAAS,GAAG,aAAa;IAEzB,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}

package/dist/src/utils/runtime-skill-closure.d.ts

@@ -0,0 +1,13 @@
+import type { PlatformName } from '../types.js';
+export interface SkillRuntimeProjectionEvidence {
+    platform: PlatformName;
+    skill: string;
+    target: string;
+    sourceDigest: string;
+    targetDigest: string;
+}
+export declare function validateRuntimeSkillClosure(skillRoot: string, options?: {
+    declaredGeneratedFiles?: ReadonlySet<string>;
+}): Promise<void>;
+export declare function validateRuntimeSkillClosuresRoot(skillsRoot: string): Promise<void>;
+export declare function validateSkillRuntimeProjectionFreshness(outputRoot: string, provenance: readonly SkillRuntimeProjectionEvidence[]): Promise<void>;