@lucern/pack-host 1.0.29 → 1.0.30

package/dist/namespacePolicy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/namespacePolicy.ts"],"names":[],"mappings":";AAwBO,IAAM,kCAAA,GACX;AAAA,EACE;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,mBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,SAAA,EAAW,oBAAoB,CAAA;AAAA,IACjD,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,sBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,WAAW,CAAA;AAAA,IACzC,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,kCAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,WAAW,CAAA;AAAA,IACzC,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,6BAAA;AAAA,IACX,eAAA,EAAiB,CAAC,oBAAA,EAAsB,kBAAkB,CAAA;AAAA,IAC1D,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,iBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,WAAW,CAAA;AAAA,IACzC,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,gBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,cAAA,EAAgB,WAAW,CAAA;AAAA,IACzD,SAAA,EACE;AAAA;AAEN;AAEF,SAAS,OAAA,CACP,IAAA,EACA,OAAA,EACA,IAAA,EACA,WAAgC,OAAA,EACX;AACrB,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,gBAAgB,MAAA,EAA0B;AACjD,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,MAAM,CAAC,CAAA,CAAE,IAAA,EAAK,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7C;AAEO,SAAS,0BACd,SAAA,EACsB;AACtB,EAAA,MAAM,aAAmC,EAAC;AAE1C,EAAA,KAAA,MAAW,OAAA,IAAW,CAAC,KAAA,EAAO,KAAK,CAAA,EAAY;AAC7C,IAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAsB;AACnD,IAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,MAAA,MAAM,UAAA,GAAa,QAAA,CAAS,cAAA,CAAe,OAAO,CAAA;AAClD,MAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,QAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,GAAA,CAAI,SAAS,KAAK,EAAC;AACrD,QAAA,QAAA,CAAS,IAAA,CAAK,SAAS,GAAG,CAAA;AAC1B,QAAA,gBAAA,CAAiB,GAAA,CAAI,WAAW,QAAQ,CAAA;AAAA,MAC1C;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,CAAC,SAAA,EAAW,QAAQ,CAAA,IAAK,gBAAA,CAAiB,SAAQ,EAAG;AAC9D,MAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,QAAA;AAAA,MACF;AACA,MAAA,UAAA,CAAW,IAAA,CAAK;AAAA,QACd,OAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAA,EAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,IAAA;AAAK,OACvC,CAAA;AAAA,IACH;AAAA,EACF;AAEA,EAAA,OAAO,UAAA,CAAW,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAU;AACtC,IAAA,IAAI,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM,OAAA,EAAS;AAClC,MAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,KAAA,CAAM,OAAO,CAAA;AAAA,IACjD;AACA,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,aAAA,CAAc,KAAA,CAAM,SAAS,CAAA;AAAA,EACrD,CAAC,CAAA;AACH;AAEO,SAAS,8BACd,SAAA,EACuB;AACvB,EAAA,MAAM,SAAgC,EAAC;AACvC,EAAA,MAAM,UAAA,GAAa,0BAA0B,SAAS,CAAA;AACtD,EAAA,MAAM,cAAA,uBAAqB,GAAA,EAA8C;AAEzE,EAAA,KAAA,MAAW,SAAS,kCAAA,EAAoC;AACtD,IAAA,MAAM,MAAM,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,MAAM,SAAS,CAAA,CAAA;AAC/C,IAAA,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,OAAA;AAAA,UACE,oCAAA;AAAA,UACA,iCAAiC,GAAG,CAAA,CAAA,CAAA;AAAA,UACpC;AAAA;AACF,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,cAAA,CAAe,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,EAC/B;AAEA,EAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,IAAA,MAAM,MAAM,CAAA,EAAG,SAAA,CAAU,OAAO,CAAA,CAAA,EAAI,UAAU,SAAS,CAAA,CAAA;AACvD,IAAA,MAAM,cAAA,GAAiB,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA;AAC7C,IAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,OAAA;AAAA,UACE,qCAAA;AAAA,UACA,CAAA,WAAA,EAAc,SAAA,CAAU,OAAO,CAAA,0BAAA,EAA6B,SAAA,CAAU,SAAS,CAAA,gBAAA,EAAmB,SAAA,CAAU,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,UAC/H,CAAA,gBAAA,EAAmB,UAAU,OAAO,CAAA;AAAA;AACtC,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,SAAA,CAAU,QAAQ,CAAA;AACtD,IAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,cAAA,CAAe,eAAe,CAAA;AACjE,IAAA,IAAI,gBAAgB,UAAA,EAAY;AAC9B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,OAAA;AAAA,UACE,mCAAA;AAAA,UACA,+BAA+B,SAAA,CAAU,SAAS,CAAA,YAAA,EAAe,WAAW,cAAc,UAAU,CAAA,CAAA;AAAA,UACpG,CAAA,gBAAA,EAAmB,UAAU,OAAO,CAAA;AAAA;AACtC,OACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT","file":"namespacePolicy.js","sourcesContent":["/**\n * Pack Namespace Collision Policy\n *\n * Enforces explicit allowlisting for cross-pack route namespace sharing.\n */\n\nimport type { AppPackManifest } from \"./contracts\";\nimport type { PackValidationIssue } from \"./manifestValidation\";\n\nexport type NamespaceSurface = \"web\" | \"api\";\n\nexport type NamespaceCollision = {\n  surface: NamespaceSurface;\n  namespace: string;\n  packKeys: string[];\n};\n\nexport type NamespaceCollisionAllowlistEntry = {\n  surface: NamespaceSurface;\n  namespace: string;\n  allowedPackKeys: string[];\n  rationale: string;\n};\n\nexport const PACK_NAMESPACE_COLLISION_ALLOWLIST: NamespaceCollisionAllowlistEntry[] =\n  [\n    {\n      surface: \"web\",\n      namespace: \"/(chat)/chat/[id]\",\n      allowedPackKeys: [\"chat-v1\", \"philosophy-mode-v1\"],\n      rationale:\n        \"Philosophy mode extends the chat surface and intentionally shares the chat detail route.\",\n    },\n    {\n      surface: \"web\",\n      namespace: \"/(projects)/projects\",\n      allowedPackKeys: [\"deals-v1\", \"themes-v1\"],\n      rationale:\n        \"Deals and themes intentionally share the topic index shell mounted under the legacy /projects customer-zero shell.\",\n    },\n    {\n      surface: \"web\",\n      namespace: \"/(projects)/projects/[projectId]\",\n      allowedPackKeys: [\"deals-v1\", \"themes-v1\"],\n      rationale:\n        \"Deals and themes intentionally share topic detail shell routing while the outer customer-zero shell still uses legacy project path segments.\",\n    },\n    {\n      surface: \"api\",\n      namespace: \"/api/philosophy/get-profile\",\n      allowedPackKeys: [\"philosophy-mode-v1\", \"user-profiles-v1\"],\n      rationale:\n        \"User profiles and philosophy mode share profile retrieval endpoint for compatibility.\",\n    },\n    {\n      surface: \"api\",\n      namespace: \"/api/research/*\",\n      allowedPackKeys: [\"deals-v1\", \"themes-v1\"],\n      rationale:\n        \"Deals and themes share research API namespace until productized API gateway split.\",\n    },\n    {\n      surface: \"api\",\n      namespace: \"/api/reports/*\",\n      allowedPackKeys: [\"deals-v1\", \"decisions-v1\", \"themes-v1\"],\n      rationale:\n        \"Domain packs intentionally consume shared report compiler endpoints in the same namespace.\",\n    },\n  ];\n\nfunction toIssue(\n  code: string,\n  message: string,\n  path: string,\n  severity: \"error\" | \"warning\" = \"error\"\n): PackValidationIssue {\n  return {\n    code,\n    severity,\n    message,\n    path,\n  };\n}\n\nfunction normalizeKeySet(values: string[]): string {\n  return [...new Set(values)].sort().join(\"|\");\n}\n\nexport function detectNamespaceCollisions(\n  manifests: AppPackManifest[]\n): NamespaceCollision[] {\n  const collisions: NamespaceCollision[] = [];\n\n  for (const surface of [\"web\", \"api\"] as const) {\n    const namespaceToPacks = new Map<string, string[]>();\n    for (const manifest of manifests) {\n      const namespaces = manifest.routeNamespace[surface];\n      for (const namespace of namespaces) {\n        const existing = namespaceToPacks.get(namespace) ?? [];\n        existing.push(manifest.key);\n        namespaceToPacks.set(namespace, existing);\n      }\n    }\n\n    for (const [namespace, packKeys] of namespaceToPacks.entries()) {\n      if (packKeys.length <= 1) {\n        continue;\n      }\n      collisions.push({\n        surface,\n        namespace,\n        packKeys: [...new Set(packKeys)].sort(),\n      });\n    }\n  }\n\n  return collisions.sort((left, right) => {\n    if (left.surface !== right.surface) {\n      return left.surface.localeCompare(right.surface);\n    }\n    return left.namespace.localeCompare(right.namespace);\n  });\n}\n\nexport function validatePackNamespacePolicies(\n  manifests: AppPackManifest[]\n): PackValidationIssue[] {\n  const issues: PackValidationIssue[] = [];\n  const collisions = detectNamespaceCollisions(manifests);\n  const allowlistByKey = new Map<string, NamespaceCollisionAllowlistEntry>();\n\n  for (const entry of PACK_NAMESPACE_COLLISION_ALLOWLIST) {\n    const key = `${entry.surface}:${entry.namespace}`;\n    if (allowlistByKey.has(key)) {\n      issues.push(\n        toIssue(\n          \"PACK_NAMESPACE_ALLOWLIST_DUPLICATE\",\n          `Duplicate allowlist entry for ${key}.`,\n          \"namespacePolicy.allowlist\"\n        )\n      );\n      continue;\n    }\n    allowlistByKey.set(key, entry);\n  }\n\n  for (const collision of collisions) {\n    const key = `${collision.surface}:${collision.namespace}`;\n    const allowlistEntry = allowlistByKey.get(key);\n    if (!allowlistEntry) {\n      issues.push(\n        toIssue(\n          \"PACK_NAMESPACE_COLLISION_UNAPPROVED\",\n          `Unapproved ${collision.surface} namespace collision for \"${collision.namespace}\" across packs: ${collision.packKeys.join(\", \")}`,\n          `namespacePolicy.${collision.surface}`\n        )\n      );\n      continue;\n    }\n\n    const collidedSet = normalizeKeySet(collision.packKeys);\n    const allowedSet = normalizeKeySet(allowlistEntry.allowedPackKeys);\n    if (collidedSet !== allowedSet) {\n      issues.push(\n        toIssue(\n          \"PACK_NAMESPACE_COLLISION_MISMATCH\",\n          `Collision set mismatch for \"${collision.namespace}\". collided=${collidedSet} allowlist=${allowedSet}`,\n          `namespacePolicy.${collision.surface}`\n        )\n      );\n    }\n  }\n\n  return issues;\n}\n"]}
+{"version":3,"sources":["../src/namespacePolicy.ts"],"names":[],"mappings":";AAyBO,IAAM,kCAAA,GACX;AAAA,EACE;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,mBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,SAAA,EAAW,oBAAoB,CAAA;AAAA,IACjD,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,sBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,WAAW,CAAA;AAAA,IACzC,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,kCAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,WAAW,CAAA;AAAA,IACzC,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,6BAAA;AAAA,IACX,eAAA,EAAiB,CAAC,oBAAA,EAAsB,kBAAkB,CAAA;AAAA,IAC1D,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,iBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,WAAW,CAAA;AAAA,IACzC,SAAA,EACE;AAAA,GACJ;AAAA,EACA;AAAA,IACE,OAAA,EAAS,KAAA;AAAA,IACT,SAAA,EAAW,gBAAA;AAAA,IACX,eAAA,EAAiB,CAAC,UAAA,EAAY,cAAA,EAAgB,WAAW,CAAA;AAAA,IACzD,SAAA,EACE;AAAA;AAEN;AAEF,SAAS,OAAA,CACP,IAAA,EACA,OAAA,EACA,IAAA,EACA,WAAgC,OAAA,EACX;AACrB,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,gBAAgB,MAAA,EAA0B;AACjD,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,MAAM,CAAC,CAAA,CAAE,IAAA,EAAK,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7C;AAEO,SAAS,0BACd,SAAA,EACsB;AACtB,EAAA,MAAM,aAAmC,EAAC;AAE1C,EAAA,KAAA,MAAW,OAAA,IAAW,CAAC,KAAA,EAAO,KAAK,CAAA,EAAY;AAC7C,IAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAsB;AACnD,IAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,MAAA,MAAM,UAAA,GAAa,QAAA,CAAS,cAAA,CAAe,OAAO,CAAA;AAClD,MAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,QAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,GAAA,CAAI,SAAS,KAAK,EAAC;AACrD,QAAA,QAAA,CAAS,IAAA,CAAK,SAAS,GAAG,CAAA;AAC1B,QAAA,gBAAA,CAAiB,GAAA,CAAI,WAAW,QAAQ,CAAA;AAAA,MAC1C;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,CAAC,SAAA,EAAW,QAAQ,CAAA,IAAK,gBAAA,CAAiB,SAAQ,EAAG;AAC9D,MAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,QAAA;AAAA,MACF;AACA,MAAA,UAAA,CAAW,IAAA,CAAK;AAAA,QACd,OAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAA,EAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,IAAA;AAAK,OACvC,CAAA;AAAA,IACH;AAAA,EACF;AAEA,EAAA,OAAO,UAAA,CAAW,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAU;AACtC,IAAA,IAAI,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM,OAAA,EAAS;AAClC,MAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,KAAA,CAAM,OAAO,CAAA;AAAA,IACjD;AACA,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,aAAA,CAAc,KAAA,CAAM,SAAS,CAAA;AAAA,EACrD,CAAC,CAAA;AACH;AAEO,SAAS,8BACd,SAAA,EACuB;AACvB,EAAA,MAAM,SAAgC,EAAC;AACvC,EAAA,MAAM,UAAA,GAAa,0BAA0B,SAAS,CAAA;AACtD,EAAA,MAAM,cAAA,uBAAqB,GAAA,EAA8C;AAEzE,EAAA,KAAA,MAAW,SAAS,kCAAA,EAAoC;AACtD,IAAA,MAAM,MAAM,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,MAAM,SAAS,CAAA,CAAA;AAC/C,IAAA,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,OAAA;AAAA,UACE,oCAAA;AAAA,UACA,iCAAiC,GAAG,CAAA,CAAA,CAAA;AAAA,UACpC;AAAA;AACF,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,cAAA,CAAe,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,EAC/B;AAEA,EAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,IAAA,MAAM,MAAM,CAAA,EAAG,SAAA,CAAU,OAAO,CAAA,CAAA,EAAI,UAAU,SAAS,CAAA,CAAA;AACvD,IAAA,MAAM,cAAA,GAAiB,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA;AAC7C,IAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,OAAA;AAAA,UACE,qCAAA;AAAA,UACA,CAAA,WAAA,EAAc,SAAA,CAAU,OAAO,CAAA,0BAAA,EAA6B,SAAA,CAAU,SAAS,CAAA,gBAAA,EAAmB,SAAA,CAAU,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,UAC/H,CAAA,gBAAA,EAAmB,UAAU,OAAO,CAAA;AAAA;AACtC,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,SAAA,CAAU,QAAQ,CAAA;AACtD,IAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,cAAA,CAAe,eAAe,CAAA;AACjE,IAAA,IAAI,gBAAgB,UAAA,EAAY;AAC9B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,OAAA;AAAA,UACE,mCAAA;AAAA,UACA,+BAA+B,SAAA,CAAU,SAAS,CAAA,YAAA,EAAe,WAAW,cAAc,UAAU,CAAA,CAAA;AAAA,UACpG,CAAA,gBAAA,EAAmB,UAAU,OAAO,CAAA;AAAA;AACtC,OACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT","file":"namespacePolicy.js","sourcesContent":["// biome-ignore-all lint/style/useFilenamingConvention: Legacy public @lucern/pack-host/namespacePolicy subpath.\n/**\n * Pack Namespace Collision Policy\n *\n * Enforces explicit allowlisting for cross-pack route namespace sharing.\n */\n\nimport type { AppPackManifest } from \"./contracts\";\nimport type { PackValidationIssue } from \"./manifestValidation\";\n\nexport type NamespaceSurface = \"web\" | \"api\";\n\nexport interface NamespaceCollision {\n  namespace: string;\n  packKeys: string[];\n  surface: NamespaceSurface;\n}\n\nexport interface NamespaceCollisionAllowlistEntry {\n  allowedPackKeys: string[];\n  namespace: string;\n  rationale: string;\n  surface: NamespaceSurface;\n}\n\nexport const PACK_NAMESPACE_COLLISION_ALLOWLIST: NamespaceCollisionAllowlistEntry[] =\n  [\n    {\n      surface: \"web\",\n      namespace: \"/(chat)/chat/[id]\",\n      allowedPackKeys: [\"chat-v1\", \"philosophy-mode-v1\"],\n      rationale:\n        \"Philosophy mode extends the chat surface and intentionally shares the chat detail route.\",\n    },\n    {\n      surface: \"web\",\n      namespace: \"/(projects)/projects\",\n      allowedPackKeys: [\"deals-v1\", \"themes-v1\"],\n      rationale:\n        \"Deals and themes intentionally share the topic index shell mounted under the legacy /projects customer-zero shell.\",\n    },\n    {\n      surface: \"web\",\n      namespace: \"/(projects)/projects/[projectId]\",\n      allowedPackKeys: [\"deals-v1\", \"themes-v1\"],\n      rationale:\n        \"Deals and themes intentionally share topic detail shell routing while the outer customer-zero shell still uses legacy project path segments.\",\n    },\n    {\n      surface: \"api\",\n      namespace: \"/api/philosophy/get-profile\",\n      allowedPackKeys: [\"philosophy-mode-v1\", \"user-profiles-v1\"],\n      rationale:\n        \"User profiles and philosophy mode share profile retrieval endpoint for compatibility.\",\n    },\n    {\n      surface: \"api\",\n      namespace: \"/api/research/*\",\n      allowedPackKeys: [\"deals-v1\", \"themes-v1\"],\n      rationale:\n        \"Deals and themes share research API namespace until productized API gateway split.\",\n    },\n    {\n      surface: \"api\",\n      namespace: \"/api/reports/*\",\n      allowedPackKeys: [\"deals-v1\", \"decisions-v1\", \"themes-v1\"],\n      rationale:\n        \"Domain packs intentionally consume shared report compiler endpoints in the same namespace.\",\n    },\n  ];\n\nfunction toIssue(\n  code: string,\n  message: string,\n  path: string,\n  severity: \"error\" | \"warning\" = \"error\"\n): PackValidationIssue {\n  return {\n    code,\n    severity,\n    message,\n    path,\n  };\n}\n\nfunction normalizeKeySet(values: string[]): string {\n  return [...new Set(values)].sort().join(\"|\");\n}\n\nexport function detectNamespaceCollisions(\n  manifests: AppPackManifest[]\n): NamespaceCollision[] {\n  const collisions: NamespaceCollision[] = [];\n\n  for (const surface of [\"web\", \"api\"] as const) {\n    const namespaceToPacks = new Map<string, string[]>();\n    for (const manifest of manifests) {\n      const namespaces = manifest.routeNamespace[surface];\n      for (const namespace of namespaces) {\n        const existing = namespaceToPacks.get(namespace) ?? [];\n        existing.push(manifest.key);\n        namespaceToPacks.set(namespace, existing);\n      }\n    }\n\n    for (const [namespace, packKeys] of namespaceToPacks.entries()) {\n      if (packKeys.length <= 1) {\n        continue;\n      }\n      collisions.push({\n        surface,\n        namespace,\n        packKeys: [...new Set(packKeys)].sort(),\n      });\n    }\n  }\n\n  return collisions.sort((left, right) => {\n    if (left.surface !== right.surface) {\n      return left.surface.localeCompare(right.surface);\n    }\n    return left.namespace.localeCompare(right.namespace);\n  });\n}\n\nexport function validatePackNamespacePolicies(\n  manifests: AppPackManifest[]\n): PackValidationIssue[] {\n  const issues: PackValidationIssue[] = [];\n  const collisions = detectNamespaceCollisions(manifests);\n  const allowlistByKey = new Map<string, NamespaceCollisionAllowlistEntry>();\n\n  for (const entry of PACK_NAMESPACE_COLLISION_ALLOWLIST) {\n    const key = `${entry.surface}:${entry.namespace}`;\n    if (allowlistByKey.has(key)) {\n      issues.push(\n        toIssue(\n          \"PACK_NAMESPACE_ALLOWLIST_DUPLICATE\",\n          `Duplicate allowlist entry for ${key}.`,\n          \"namespacePolicy.allowlist\"\n        )\n      );\n      continue;\n    }\n    allowlistByKey.set(key, entry);\n  }\n\n  for (const collision of collisions) {\n    const key = `${collision.surface}:${collision.namespace}`;\n    const allowlistEntry = allowlistByKey.get(key);\n    if (!allowlistEntry) {\n      issues.push(\n        toIssue(\n          \"PACK_NAMESPACE_COLLISION_UNAPPROVED\",\n          `Unapproved ${collision.surface} namespace collision for \"${collision.namespace}\" across packs: ${collision.packKeys.join(\", \")}`,\n          `namespacePolicy.${collision.surface}`\n        )\n      );\n      continue;\n    }\n\n    const collidedSet = normalizeKeySet(collision.packKeys);\n    const allowedSet = normalizeKeySet(allowlistEntry.allowedPackKeys);\n    if (collidedSet !== allowedSet) {\n      issues.push(\n        toIssue(\n          \"PACK_NAMESPACE_COLLISION_MISMATCH\",\n          `Collision set mismatch for \"${collision.namespace}\". collided=${collidedSet} allowlist=${allowedSet}`,\n          `namespacePolicy.${collision.surface}`\n        )\n      );\n    }\n  }\n\n  return issues;\n}\n"]}

package/dist/proof-attestation.json

@@ -41,5 +41,5 @@
     "convex-validators",
     "proof-attestation"
   ],
-  "signedAt": 1781580640960
+  "signedAt": 1782180087025
 }

package/dist/registry.js

@@ -12,6 +12,73 @@ function toIssue(code, message, path, severity = "error") {
 function buildManifestMap(manifests) {
   return new Map(manifests.map((manifest) => [manifest.key, manifest]));
 }
+function initializeDependencyGraph(manifests) {
+  const manifestsByKey = buildManifestMap(manifests);
+  const indegree = /* @__PURE__ */ new Map();
+  const adjacency = /* @__PURE__ */ new Map();
+  for (const manifest of manifests) {
+    indegree.set(manifest.key, indegree.get(manifest.key) ?? 0);
+    adjacency.set(manifest.key, []);
+  }
+  return { adjacency, indegree, manifestsByKey };
+}
+function linkPackDependency(manifest, dependency, graph, issues) {
+  if (!graph.manifestsByKey.has(dependency)) {
+    issues.push(
+      toIssue(
+        "PACK_DEPENDENCY_MISSING",
+        `Pack "${manifest.key}" depends on unknown pack "${dependency}".`,
+        `dependencies:${manifest.key}`
+      )
+    );
+    return;
+  }
+  const dependencyDependents = graph.adjacency.get(dependency) ?? [];
+  dependencyDependents.push(manifest.key);
+  graph.adjacency.set(dependency, dependencyDependents);
+  graph.indegree.set(manifest.key, (graph.indegree.get(manifest.key) ?? 0) + 1);
+}
+function linkPackDependencies(manifests, graph, issues) {
+  for (const manifest of manifests) {
+    for (const dependency of manifest.dependencies) {
+      linkPackDependency(manifest, dependency, graph, issues);
+    }
+  }
+}
+function topologicalPackOrder(graph) {
+  const queue = [...graph.indegree.entries()].filter(([, value]) => value === 0).map(([packKey]) => packKey).sort();
+  const orderedPackKeys = [];
+  while (queue.length > 0) {
+    const nextKey = queue.shift();
+    if (!nextKey) {
+      break;
+    }
+    orderedPackKeys.push(nextKey);
+    const dependents = graph.adjacency.get(nextKey) ?? [];
+    for (const dependent of dependents) {
+      const updated = (graph.indegree.get(dependent) ?? 0) - 1;
+      graph.indegree.set(dependent, updated);
+      if (updated === 0) {
+        queue.push(dependent);
+      }
+    }
+    queue.sort();
+  }
+  return orderedPackKeys;
+}
+function recordUnresolvedDependencyCycles(orderedPackKeys, graph, issues) {
+  if (orderedPackKeys.length === graph.manifestsByKey.size) {
+    return;
+  }
+  const unresolved = [...graph.indegree.entries()].filter(([, value]) => value > 0).map(([key]) => key).sort();
+  issues.push(
+    toIssue(
+      "PACK_DEPENDENCY_CYCLE",
+      `Dependency graph is not acyclic; unresolved packs: ${unresolved.join(", ")}`,
+      "dependencies"
+    )
+  );
+}
 function walkDependencyClosure(manifestKey, manifestsByKey, path, closure, issues) {
   const manifest = manifestsByKey.get(manifestKey);
   if (!manifest) {
@@ -52,63 +119,8 @@ function walkDependencyClosure(manifestKey, manifestsByKey, path, closure, issue
     );
   }
 }
-function resolvePackDependencyGraph(manifests) {
-  const issues = [];
-  const manifestsByKey = buildManifestMap(manifests);
-  const indegree = /* @__PURE__ */ new Map();
-  const adjacency = /* @__PURE__ */ new Map();
-  for (const manifest of manifests) {
-    indegree.set(manifest.key, indegree.get(manifest.key) ?? 0);
-    adjacency.set(manifest.key, []);
-  }
-  for (const manifest of manifests) {
-    for (const dependency of manifest.dependencies) {
-      if (!manifestsByKey.has(dependency)) {
-        issues.push(
-          toIssue(
-            "PACK_DEPENDENCY_MISSING",
-            `Pack "${manifest.key}" depends on unknown pack "${dependency}".`,
-            `dependencies:${manifest.key}`
-          )
-        );
-        continue;
-      }
-      const dependencyDependents = adjacency.get(dependency) ?? [];
-      dependencyDependents.push(manifest.key);
-      adjacency.set(dependency, dependencyDependents);
-      indegree.set(manifest.key, (indegree.get(manifest.key) ?? 0) + 1);
-    }
-  }
-  const queue = [...indegree.entries()].filter(([, value]) => value === 0).map(([packKey]) => packKey).sort();
-  const orderedPackKeys = [];
-  while (queue.length > 0) {
-    const nextKey = queue.shift();
-    if (!nextKey) {
-      break;
-    }
-    orderedPackKeys.push(nextKey);
-    const dependents = adjacency.get(nextKey) ?? [];
-    for (const dependent of dependents) {
-      const current = indegree.get(dependent) ?? 0;
-      const updated = current - 1;
-      indegree.set(dependent, updated);
-      if (updated === 0) {
-        queue.push(dependent);
-      }
-    }
-    queue.sort();
-  }
-  if (orderedPackKeys.length !== manifestsByKey.size) {
-    const unresolved = [...indegree.entries()].filter(([, value]) => value > 0).map(([key]) => key).sort();
-    issues.push(
-      toIssue(
-        "PACK_DEPENDENCY_CYCLE",
-        `Dependency graph is not acyclic; unresolved packs: ${unresolved.join(", ")}`,
-        "dependencies"
-      )
-    );
-  }
-  const dependencyClosureByPack = {};
+function dependencyClosureByPack(manifests, manifestsByKey, issues) {
+  const dependencyClosure = {};
   for (const manifest of manifests) {
     const closure = /* @__PURE__ */ new Set();
     walkDependencyClosure(
@@ -118,11 +130,23 @@ function resolvePackDependencyGraph(manifests) {
       closure,
       issues
     );
-    dependencyClosureByPack[manifest.key] = [...closure].sort();
+    dependencyClosure[manifest.key] = [...closure].sort();
   }
+  return dependencyClosure;
+}
+function resolvePackDependencyGraph(manifests) {
+  const issues = [];
+  const graph = initializeDependencyGraph(manifests);
+  linkPackDependencies(manifests, graph, issues);
+  const orderedPackKeys = topologicalPackOrder(graph);
+  recordUnresolvedDependencyCycles(orderedPackKeys, graph, issues);
   return {
     orderedPackKeys,
-    dependencyClosureByPack,
+    dependencyClosureByPack: dependencyClosureByPack(
+      manifests,
+      graph.manifestsByKey,
+      issues
+    ),
     issues,
     valid: issues.every((issue) => issue.severity !== "error")
   };
@@ -326,12 +350,7 @@ var dealsV1Manifest = defineAppPackManifest({
   lifecycle: "beta",
   category: "domain",
   description: "Deal diligence application using shared reasoning graph primitives with deal-calibrated workflows.",
-  dependencies: [
-    "chat-v1",
-    "documents-v1",
-    "news-v1",
-    "decisions-v1"
-  ],
+  dependencies: ["chat-v1", "documents-v1", "news-v1", "decisions-v1"],
   capabilityFlags: [
     "deal.lifecycle",
     "diligence.workflow",