@miakapp/cli 4.0.0-alpha.0 → 4.0.0-alpha.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miakapp/cli",
-  "version": "4.0.0-alpha.0",
+  "version": "4.0.0-alpha.3",
   "description": "Agent-first Miakapp command line: check, build, publish, activate and roll back home components",
   "type": "module",
   "engines": {
@@ -8,7 +8,7 @@
     "node": ">=22.9"
   },
   "bin": {
-    "miakapp": "./bin/miakapp.js"
+    "miakapp": "bin/miakapp.js"
   },
   "files": [
     "assets",
@@ -30,7 +30,8 @@
     "directory": "packages/cli"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "latest"
   },
   "keywords": [
     "Miakapp",

package/dist/agent-pack.d.ts

@@ -1,78 +0,0 @@
-/** Directory the pack owns inside the owner's repository. */
-export declare const PACK_DIRECTORY = ".miakapp";
-/** The guide, copied out of the package so it is readable offline. */
-export declare const GUIDE_FILE = ".miakapp/agent-guide.md";
-/** Project-scope MCP configuration. Claude Code reads this file by name. */
-export declare const MCP_FILE = ".mcp.json";
-/** The name the server is registered under, and the tool-name prefix. */
-export declare const SERVER_NAME = "miakapp";
-/**
- * Instruction files, by the client that reads each one. Both are written:
- * a repository is handed to whichever agent the owner has, and an unused
- * pointer costs a paragraph.
- */
-export declare const INSTRUCTION_FILES: readonly {
-    readonly path: string;
-    readonly client: string;
-}[];
-export declare const BEGIN_MARKER = "<!-- miakapp:begin -->";
-export declare const END_MARKER = "<!-- miakapp:end -->";
-/** What happened to one file, reported per file rather than summed. */
-export type PackAction = 'created' | 'updated' | 'unchanged';
-export interface PackedFile {
-    readonly path: string;
-    readonly action: PackAction;
-}
-export interface FileStore {
-    read(path: string): Promise<Uint8Array>;
-    write(path: string, bytes: Uint8Array): Promise<void>;
-    replace(path: string, bytes: Uint8Array): Promise<void>;
-    exists(path: string): Promise<boolean>;
-    makeDirectory(path: string): Promise<void>;
-}
-/**
- * The block written into each instruction file.
- *
- * It is short on purpose. Everything an agent needs to know is in the guide,
- * and a summary that drifts from the guide is worse than no summary: the agent
- * would believe the stale copy it read first.
- */
-export declare function instructionBlock(client: string): string;
-/**
- * Merges the block into an instruction file.
- *
- * Three cases, and the owner's prose survives all three: no file, a file with
- * no block, and a file with a block from an earlier run. The block is appended
- * rather than prepended because the top of an instruction file is where the
- * owner put what matters to them.
- */
-export declare function mergeInstructions(existing: string | undefined, block: string): string;
-/**
- * The server entry, as a client expects to find it.
- *
- * `command` is the bare binary name: the pack is written into a repository that
- * may be opened on another machine, where an absolute path from this one would
- * resolve to nothing.
- */
-export declare function serverEntry(): Record<string, unknown>;
-/**
- * Merges the server entry into an existing `.mcp.json`.
- *
- * Parsed and re-serialized rather than patched as text: every other server in
- * the file is carried across by name, and a file that does not parse is refused
- * instead of being overwritten with a valid one. An owner who hand-edited that
- * file into a syntax error still wants their edit back.
- */
-export declare function mergeMcpConfig(existing: string | undefined): string;
-export interface PackResult {
-    readonly root: string;
-    readonly files: readonly PackedFile[];
-}
-/**
- * Installs the pack under `root`.
- *
- * `guide` is passed in rather than read here so the caller decides where the
- * guide comes from: the packaged asset in production, a fixture in a test.
- */
-export declare function installPack(files: FileStore, root: string, guide: string): Promise<PackResult>;
-//# sourceMappingURL=agent-pack.d.ts.map

package/dist/agent-pack.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-pack.d.ts","sourceRoot":"","sources":["../src/agent-pack.ts"],"names":[],"mappings":"AAqBA,6DAA6D;AAC7D,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,UAAU,4BAAqC,CAAC;AAE7D,4EAA4E;AAC5E,eAAO,MAAM,QAAQ,cAAc,CAAC;AAEpC,yEAAyE;AACzE,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAG1F,CAAC;AAEF,eAAO,MAAM,YAAY,2BAA2B,CAAC;AACrD,eAAO,MAAM,UAAU,yBAAyB,CAAC;AAEjD,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAoCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA8BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBrF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMrD;AAMD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CA+BnE;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC,CAiBrB"}

package/dist/agent-pack.js

@@ -1,193 +0,0 @@
-/**
- * The installable pack.
- *
- * A coding agent handed someone's house does not arrive knowing how a Miakapp
- * home is built. It arrives in the owner's repository, with whatever files are
- * already there. This command puts three things in that repository:
- *
- * - the guide, as a file, so the knowledge survives without a network;
- * - a pointer to it in the instruction file each client actually reads —
- *   `AGENTS.md` for Codex, `CLAUDE.md` for Claude Code;
- * - the MCP server entry, so the tools are wired rather than described.
- *
- * The repository belongs to the owner, and the CLI's rule that it never
- * rewrites what it did not generate holds here too. That rule is what shapes
- * every merge below: the guide is a file this command owns outright, the
- * instruction files are edited only between markers this command wrote, and
- * `.mcp.json` is edited as a structure — one key, by name — never as text.
- * Bytes outside those regions are copied through untouched.
- */
-import { projectError } from './errors.js';
-/** Directory the pack owns inside the owner's repository. */
-export const PACK_DIRECTORY = '.miakapp';
-/** The guide, copied out of the package so it is readable offline. */
-export const GUIDE_FILE = `${PACK_DIRECTORY}/agent-guide.md`;
-/** Project-scope MCP configuration. Claude Code reads this file by name. */
-export const MCP_FILE = '.mcp.json';
-/** The name the server is registered under, and the tool-name prefix. */
-export const SERVER_NAME = 'miakapp';
-/**
- * Instruction files, by the client that reads each one. Both are written:
- * a repository is handed to whichever agent the owner has, and an unused
- * pointer costs a paragraph.
- */
-export const INSTRUCTION_FILES = [
-    { path: 'AGENTS.md', client: 'Codex' },
-    { path: 'CLAUDE.md', client: 'Claude Code' },
-];
-export const BEGIN_MARKER = '<!-- miakapp:begin -->';
-export const END_MARKER = '<!-- miakapp:end -->';
-const encoder = new TextEncoder();
-function decode(bytes, path) {
-    try {
-        return new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-    }
-    catch {
-        throw projectError(`${path} is not readable as UTF-8 text`, 'The pack edits text files in place; move this one aside and run the command again.');
-    }
-}
-/**
- * Writes `bytes` at `path`, creating or replacing.
- *
- * Returns `unchanged` when the bytes already on disk are identical, so a second
- * run of the pack reports honestly instead of claiming work it did not do.
- */
-async function put(files, path, content) {
-    const bytes = encoder.encode(content);
-    if (!await files.exists(path)) {
-        await files.write(path, bytes);
-        return { path, action: 'created' };
-    }
-    if (decode(await files.read(path), path) === content)
-        return { path, action: 'unchanged' };
-    await files.replace(path, bytes);
-    return { path, action: 'updated' };
-}
-/**
- * The block written into each instruction file.
- *
- * It is short on purpose. Everything an agent needs to know is in the guide,
- * and a summary that drifts from the guide is worse than no summary: the agent
- * would believe the stale copy it read first.
- */
-export function instructionBlock(client) {
-    return `${BEGIN_MARKER}
-## Miakapp
-
-This repository is a Miakapp home: a coordinator that runs on the owner's
-machine and owns state, events and authorization, and a component that runs
-sandboxed in the household's browser and owns nothing but the interface.
-
-**Read \`${GUIDE_FILE}\` before writing or publishing anything here.** It is the
-full guide, copied into this repository so it is readable offline, and it is the
-source of truth for the rules below.
-
-The \`${SERVER_NAME}\` MCP server in \`${MCP_FILE}\` exposes the toolchain to ${client}:
-inventory an existing installation, validate the project, publish, and roll back.
-The same commands exist as \`${SERVER_NAME}\` on the command line; they are one
-implementation, so neither surface can drift from the other.
-
-Three rules the guide explains and this file repeats because getting them wrong
-is expensive:
-
-- \`publish\`, \`activate\` and \`rollback\` change what every device in the home
-  runs. Over MCP they refuse to act without \`confirm: true\`. Set it when the
-  owner asked for that publication, never to get past an error.
-- Every failure carries a stable \`kind\`. Branch on it, not on the message.
-  \`conflict\` means re-read the pointer; \`unknown_outcome\` means the effect is
-  undetermined — reconcile with \`${SERVER_NAME} release\` or \`${SERVER_NAME} upload\`
-  before acting again, and never retry it.
-- The Home Key lives in \`MIAKAPP_HOME_KEY\` in the environment. No command
-  accepts it as an argument, and it belongs in no file in this repository.
-${END_MARKER}`;
-}
-/**
- * Merges the block into an instruction file.
- *
- * Three cases, and the owner's prose survives all three: no file, a file with
- * no block, and a file with a block from an earlier run. The block is appended
- * rather than prepended because the top of an instruction file is where the
- * owner put what matters to them.
- */
-export function mergeInstructions(existing, block) {
-    if (existing === undefined || existing.trim() === '')
-        return `${block}\n`;
-    const start = existing.indexOf(BEGIN_MARKER);
-    if (start === -1) {
-        const separator = existing.endsWith('\n') ? '\n' : '\n\n';
-        return `${existing}${separator}${block}\n`;
-    }
-    const end = existing.indexOf(END_MARKER, start);
-    if (end === -1) {
-        throw projectError(`An unterminated ${BEGIN_MARKER} block is open in this file`, `Close it with ${END_MARKER}, or delete the block and run the pack again.`);
-    }
-    return existing.slice(0, start) + block + existing.slice(end + END_MARKER.length);
-}
-/**
- * The server entry, as a client expects to find it.
- *
- * `command` is the bare binary name: the pack is written into a repository that
- * may be opened on another machine, where an absolute path from this one would
- * resolve to nothing.
- */
-export function serverEntry() {
-    return {
-        type: 'stdio',
-        command: SERVER_NAME,
-        args: ['mcp'],
-    };
-}
-function isPlainObject(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-/**
- * Merges the server entry into an existing `.mcp.json`.
- *
- * Parsed and re-serialized rather than patched as text: every other server in
- * the file is carried across by name, and a file that does not parse is refused
- * instead of being overwritten with a valid one. An owner who hand-edited that
- * file into a syntax error still wants their edit back.
- */
-export function mergeMcpConfig(existing) {
-    let document = {};
-    if (existing !== undefined && existing.trim() !== '') {
-        let parsed;
-        try {
-            parsed = JSON.parse(existing);
-        }
-        catch (error) {
-            throw projectError(`${MCP_FILE} is not valid JSON: ${error instanceof Error ? error.message : 'parse failed'}`, 'The pack merges one entry into this file and will not replace it. Fix the JSON first.');
-        }
-        if (!isPlainObject(parsed)) {
-            throw projectError(`${MCP_FILE} must hold a JSON object`, 'The pack merges one entry into this file and will not replace it.');
-        }
-        document = parsed;
-    }
-    const servers = document['mcpServers'];
-    if (servers !== undefined && !isPlainObject(servers)) {
-        throw projectError(`${MCP_FILE} has an "mcpServers" key that is not an object`, 'The pack merges one entry into this file and will not replace it.');
-    }
-    const merged = { ...(servers ?? {}), [SERVER_NAME]: serverEntry() };
-    return `${JSON.stringify({ ...document, mcpServers: merged }, null, 2)}\n`;
-}
-/**
- * Installs the pack under `root`.
- *
- * `guide` is passed in rather than read here so the caller decides where the
- * guide comes from: the packaged asset in production, a fixture in a test.
- */
-export async function installPack(files, root, guide) {
-    const written = [];
-    await files.makeDirectory(`${root}/${PACK_DIRECTORY}`);
-    written.push(await put(files, `${root}/${GUIDE_FILE}`, guide));
-    for (const { path, client } of INSTRUCTION_FILES) {
-        const full = `${root}/${path}`;
-        const existing = await files.exists(full) ? decode(await files.read(full), full) : undefined;
-        written.push(await put(files, full, mergeInstructions(existing, instructionBlock(client))));
-    }
-    const mcpPath = `${root}/${MCP_FILE}`;
-    const config = await files.exists(mcpPath) ? decode(await files.read(mcpPath), mcpPath) : undefined;
-    written.push(await put(files, mcpPath, mergeMcpConfig(config)));
-    return { root, files: written };
-}
-//# sourceMappingURL=agent-pack.js.map

package/dist/agent-pack.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-pack.js","sourceRoot":"","sources":["../src/agent-pack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,cAAc,iBAAiB,CAAC;AAE7D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC;AAEpC,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAkE;IAC9F,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,wBAAwB,CAAC;AACrD,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAkBjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,SAAS,MAAM,CAAC,KAAiB,EAAE,IAAY;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAChB,GAAG,IAAI,gCAAgC,EACvC,oFAAoF,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,GAAG,CAChB,KAAgB,EAChB,IAAY,EACZ,OAAe;IAEf,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3F,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,GAAG,YAAY;;;;;;;WAOb,UAAU;;;;QAIb,WAAW,sBAAsB,QAAQ,+BAA+B,MAAM;;+BAEvD,WAAW;;;;;;;;;;;oCAWN,WAAW,mBAAmB,WAAW;;;;EAI3E,UAAU,EAAE,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA4B,EAAE,KAAa;IAC3E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IAE1E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,IAAI,CAAC;IAC7C,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,MAAM,YAAY,CAChB,mBAAmB,YAAY,6BAA6B,EAC5D,iBAAiB,UAAU,+CAA+C,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAChB,GAAG,QAAQ,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,EAC3F,uFAAuF,CACxF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,YAAY,CAChB,GAAG,QAAQ,0BAA0B,EACrC,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,YAAY,CAChB,GAAG,QAAQ,gDAAgD,EAC3D,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;IACpE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAgB,EAChB,IAAY,EACZ,KAAa;IAEb,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,IAAI,IAAI,cAAc,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEhE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC"}

package/dist/artifact.d.ts

@@ -1,32 +0,0 @@
-export interface Artifact {
-    /** Exact bytes that will be uploaded; nothing re-encodes them later. */
-    readonly bytes: Uint8Array;
-    /** SHA-256 of those bytes as unpadded base64url, per RFC 0002 §7.1. */
-    readonly sha256: string;
-    readonly size: number;
-    readonly tokens: number;
-}
-export type ArtifactFindingKind = 'module_syntax' | 'dynamic_import' | 'source_map_directive' | 'token_ceiling' | 'unterminated';
-export interface ArtifactFinding {
-    readonly kind: ArtifactFindingKind;
-    readonly line: number;
-    readonly detail: string;
-}
-/**
- * Publisher pre-check for the RFC 0002 §7.2 artifact rules.
- *
- * RFC 0002 makes the broker's pinned platform parser authoritative; this scan
- * exists so an agent learns about module syntax, a dynamic import, a source-map
- * directive or an oversized program before spending an upload capability. It
- * reports findings rather than throwing, so one run can show every problem.
- */
-export declare function scanArtifactSource(source: string): {
-    tokens: number;
-    findings: readonly ArtifactFinding[];
-};
-/**
- * Verifies the exact bytes an upload would deliver and derives the digest and
- * size that bind the upload capability.
- */
-export declare function prepareArtifact(bytes: Uint8Array): Artifact;
-//# sourceMappingURL=artifact.d.ts.map

package/dist/artifact.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../src/artifact.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,QAAQ;IACvB,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,gBAAgB,GAChB,sBAAsB,GACtB,eAAe,GACf,cAAc,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAwBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CACtC,CAsIA;AAiHD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,CA8B3D"}

package/dist/artifact.js

@@ -1,328 +0,0 @@
-import { createHash } from 'node:crypto';
-import { artifactError } from './errors.js';
-import { MAXIMUM_ARTIFACT_BYTES, MAXIMUM_PROGRAM_TOKENS, } from './internal/names.js';
-const IDENTIFIER_START = /[$_\p{ID_Start}]/u;
-const IDENTIFIER_PART = /[$_\u200c\u200d\p{ID_Continue}]/u;
-/**
- * Tokens after which a `/` starts a regular expression rather than a division.
- * The list is deliberately conservative: a wrong guess only changes how the
- * scanner counts, never whether the broker's pinned parser accepts the program.
- */
-const REGEX_ALLOWED_AFTER = new Set([
-    'case', 'delete', 'do', 'else', 'in', 'instanceof', 'new', 'of', 'return',
-    'throw', 'typeof', 'void', 'yield',
-]);
-function isRegexPosition(previous) {
-    if (previous === undefined)
-        return true;
-    if (REGEX_ALLOWED_AFTER.has(previous))
-        return true;
-    if (/^[A-Za-z_$]/.test(previous))
-        return false;
-    if (/^[0-9]/.test(previous))
-        return false;
-    return previous !== ')' && previous !== ']' && previous !== '}' && previous !== '++'
-        && previous !== '--' && previous[0] !== '"' && previous[0] !== "'" && previous[0] !== '`';
-}
-/**
- * Publisher pre-check for the RFC 0002 §7.2 artifact rules.
- *
- * RFC 0002 makes the broker's pinned platform parser authoritative; this scan
- * exists so an agent learns about module syntax, a dynamic import, a source-map
- * directive or an oversized program before spending an upload capability. It
- * reports findings rather than throwing, so one run can show every problem.
- */
-export function scanArtifactSource(source) {
-    const findings = [];
-    let index = 0;
-    let line = 1;
-    let tokens = 0;
-    let previous;
-    let lineStartOnlyWhitespace = true;
-    const record = (kind, detail) => {
-        if (findings.some((finding) => finding.kind === kind && finding.line === line))
-            return;
-        findings.push({ kind, line, detail });
-    };
-    const advanceLines = (text) => {
-        for (const character of text)
-            if (character === '\n')
-                line += 1;
-    };
-    while (index < source.length) {
-        const character = source[index];
-        if (character === '\n') {
-            line += 1;
-            lineStartOnlyWhitespace = true;
-            index += 1;
-            continue;
-        }
-        if (character === ' ' || character === '\t' || character === '\r' || character === '\f'
-            || character === '\v' || character === '\u00a0' || character === '\ufeff') {
-            index += 1;
-            continue;
-        }
-        if (character === '/' && source[index + 1] === '/') {
-            const end = source.indexOf('\n', index);
-            const comment = source.slice(index, end === -1 ? source.length : end);
-            if (/^\/\/[#@]\s*sourceMappingURL=/.test(comment)) {
-                record('source_map_directive', comment.trim());
-            }
-            index = end === -1 ? source.length : end;
-            continue;
-        }
-        if (character === '/' && source[index + 1] === '*') {
-            const end = source.indexOf('*/', index + 2);
-            if (end === -1) {
-                record('unterminated', 'Unterminated block comment');
-                break;
-            }
-            const comment = source.slice(index, end + 2);
-            if (/^\/\*[#@]\s*sourceMappingURL=/.test(comment)) {
-                record('source_map_directive', comment.slice(0, 64));
-            }
-            advanceLines(comment);
-            index = end + 2;
-            continue;
-        }
-        if (character === '"' || character === "'") {
-            const end = scanQuoted(source, index, character);
-            if (end === -1) {
-                record('unterminated', 'Unterminated string literal');
-                break;
-            }
-            advanceLines(source.slice(index, end));
-            previous = `${character}string`;
-            tokens += 1;
-            index = end;
-            lineStartOnlyWhitespace = false;
-            continue;
-        }
-        if (character === '`') {
-            const end = scanTemplate(source, index);
-            if (end === -1) {
-                record('unterminated', 'Unterminated template literal');
-                break;
-            }
-            advanceLines(source.slice(index, end));
-            previous = '`template';
-            tokens += 1;
-            index = end;
-            lineStartOnlyWhitespace = false;
-            continue;
-        }
-        if (character === '/' && isRegexPosition(previous)) {
-            const end = scanRegex(source, index);
-            if (end === -1) {
-                record('unterminated', 'Unterminated regular expression literal');
-                break;
-            }
-            previous = '/regex';
-            tokens += 1;
-            index = end;
-            lineStartOnlyWhitespace = false;
-            continue;
-        }
-        if (IDENTIFIER_START.test(character)) {
-            let end = index + 1;
-            while (end < source.length && IDENTIFIER_PART.test(source[end]))
-                end += 1;
-            const word = source.slice(index, end);
-            if (word === 'import') {
-                const next = nextSignificant(source, end);
-                if (next === '(')
-                    record('dynamic_import', 'import( expression');
-                else if (next === '.')
-                    record('dynamic_import', 'import.meta reference');
-                else
-                    record('module_syntax', 'import declaration');
-            }
-            else if (word === 'export' && lineStartOnlyWhitespace) {
-                record('module_syntax', 'export declaration');
-            }
-            previous = word;
-            tokens += 1;
-            index = end;
-            lineStartOnlyWhitespace = false;
-            continue;
-        }
-        if (character >= '0' && character <= '9') {
-            let end = index + 1;
-            while (end < source.length && /[0-9a-fA-FxXoObBn._]/.test(source[end]))
-                end += 1;
-            previous = source.slice(index, end);
-            tokens += 1;
-            index = end;
-            lineStartOnlyWhitespace = false;
-            continue;
-        }
-        const punctuator = scanPunctuator(source, index);
-        previous = punctuator;
-        tokens += 1;
-        index += punctuator.length;
-        lineStartOnlyWhitespace = false;
-        if (tokens > MAXIMUM_PROGRAM_TOKENS)
-            break;
-    }
-    if (tokens > MAXIMUM_PROGRAM_TOKENS) {
-        findings.push({
-            kind: 'token_ceiling',
-            line,
-            detail: `Program exceeds the ABI 1 ceiling of ${MAXIMUM_PROGRAM_TOKENS} lexical tokens`,
-        });
-    }
-    return { tokens, findings };
-}
-function scanQuoted(source, start, quote) {
-    let index = start + 1;
-    while (index < source.length) {
-        const character = source[index];
-        if (character === '\\') {
-            index += 2;
-            continue;
-        }
-        if (character === quote)
-            return index + 1;
-        if (character === '\n')
-            return -1;
-        index += 1;
-    }
-    return -1;
-}
-function scanTemplate(source, start) {
-    let index = start + 1;
-    while (index < source.length) {
-        const character = source[index];
-        if (character === '\\') {
-            index += 2;
-            continue;
-        }
-        if (character === '`')
-            return index + 1;
-        if (character === '$' && source[index + 1] === '{') {
-            let depth = 1;
-            index += 2;
-            while (index < source.length && depth > 0) {
-                const inner = source[index];
-                if (inner === '{')
-                    depth += 1;
-                else if (inner === '}')
-                    depth -= 1;
-                else if (inner === '`') {
-                    const nested = scanTemplate(source, index);
-                    if (nested === -1)
-                        return -1;
-                    index = nested;
-                    continue;
-                }
-                else if (inner === '"' || inner === "'") {
-                    const nested = scanQuoted(source, index, inner);
-                    if (nested === -1)
-                        return -1;
-                    index = nested;
-                    continue;
-                }
-                index += 1;
-            }
-            continue;
-        }
-        index += 1;
-    }
-    return -1;
-}
-function scanRegex(source, start) {
-    let index = start + 1;
-    let inClass = false;
-    while (index < source.length) {
-        const character = source[index];
-        if (character === '\\') {
-            index += 2;
-            continue;
-        }
-        if (character === '\n')
-            return -1;
-        if (character === '[')
-            inClass = true;
-        else if (character === ']')
-            inClass = false;
-        else if (character === '/' && !inClass) {
-            index += 1;
-            while (index < source.length && IDENTIFIER_PART.test(source[index]))
-                index += 1;
-            return index;
-        }
-        index += 1;
-    }
-    return -1;
-}
-const PUNCTUATORS = [
-    '>>>=', '...', '===', '!==', '**=', '<<=', '>>=', '>>>', '&&=', '||=', '??=',
-    '=>', '==', '!=', '<=', '>=', '&&', '||', '??', '?.', '++', '--', '+=', '-=',
-    '*=', '/=', '%=', '&=', '|=', '^=', '<<', '>>', '**',
-];
-function scanPunctuator(source, index) {
-    for (const punctuator of PUNCTUATORS) {
-        if (source.startsWith(punctuator, index))
-            return punctuator;
-    }
-    return source[index];
-}
-function nextSignificant(source, from) {
-    let index = from;
-    while (index < source.length) {
-        const character = source[index];
-        if (/\s/.test(character)) {
-            index += 1;
-            continue;
-        }
-        if (character === '/' && source[index + 1] === '/') {
-            const end = source.indexOf('\n', index);
-            if (end === -1)
-                return undefined;
-            index = end + 1;
-            continue;
-        }
-        if (character === '/' && source[index + 1] === '*') {
-            const end = source.indexOf('*/', index + 2);
-            if (end === -1)
-                return undefined;
-            index = end + 2;
-            continue;
-        }
-        return character;
-    }
-    return undefined;
-}
-/**
- * Verifies the exact bytes an upload would deliver and derives the digest and
- * size that bind the upload capability.
- */
-export function prepareArtifact(bytes) {
-    if (bytes.byteLength === 0)
-        throw artifactError('Artifact is empty');
-    if (bytes.byteLength > MAXIMUM_ARTIFACT_BYTES) {
-        throw artifactError(`Artifact is ${bytes.byteLength} bytes, above the ABI 1 ceiling of ${MAXIMUM_ARTIFACT_BYTES}`);
-    }
-    let source;
-    try {
-        source = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-    }
-    catch {
-        throw artifactError('Artifact is not valid UTF-8');
-    }
-    const { tokens, findings } = scanArtifactSource(source);
-    if (findings.length > 0) {
-        const detail = findings
-            .map((finding) => `  line ${finding.line}: ${finding.kind} — ${finding.detail}`)
-            .join('\n');
-        throw artifactError(`Artifact violates the RFC 0002 §7.2 artifact rules:\n${detail}`, 'Bundle to one self-contained classic Worker program with no module syntax, '
-            + 'no dynamic import and no source map.');
-    }
-    return Object.freeze({
-        bytes,
-        sha256: createHash('sha256').update(bytes).digest('base64url'),
-        size: bytes.byteLength,
-        tokens,
-    });
-}
-//# sourceMappingURL=artifact.js.map