@moldea.ai/core 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 moldea.ai
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,135 @@
+# `@moldea.ai/core`
+
+Source-neutral, deterministic interpretation of the `moldea` repository format.
+
+The `1.0.0` package surface accepts caller-supplied text documents and source-neutral repository readers. It does not access a filesystem, Git provider, or network independently. Invalid repository content produces stable diagnostics, while invalid configuration and operational failures use typed exceptions. Strict version 1 manifest and decision parsing, complete repository inspection, deterministic project indexing, built-in custom-runtime behavior, and all-or-nothing package-backed runtime-adapter execution are available now. Tarball and consumer-type checks remain the release boundary for every published version.
+
+## Public entry points
+
+- `@moldea.ai/core` exposes Core construction, results, diagnostics, limits, and exceptions.
+- `@moldea.ai/core/format` exposes repository-format value types.
+- `@moldea.ai/core/adapter` exposes the runtime-adapter inspection contract.
+
+## Text normalization and digests
+
+```typescript
+import { createCore } from '@moldea.ai/core';
+import { parseRepositoryPath } from '@moldea.ai/repository';
+
+const core = createCore();
+const input = {
+  content: new TextEncoder().encode('\ufeffline one\r\nline two\r'),
+  path: parseRepositoryPath('/moldea/project.md'),
+};
+
+const normalized = core.normalizeText(input);
+const digested = await core.calculateContentDigest(input);
+```
+
+Normalization validates strict UTF-8 or Unicode-scalar string input, removes one leading byte-order
+mark, converts CRLF and CR line endings to LF, rejects NUL, performs no Unicode normalization, and
+reports normalized UTF-8 byte and scalar lengths. Digests are SHA-256 over the normalized UTF-8
+bytes.
+
+## Manifest parsing
+
+```typescript
+import { createCore } from '@moldea.ai/core';
+import { parseRepositoryPath } from '@moldea.ai/repository';
+
+const result = await createCore().parseManifest({
+  content: new TextEncoder().encode('version: 1\n'),
+  path: parseRepositoryPath('/moldea/moldea.yaml'),
+});
+```
+
+Manifest parsing validates the canonical path, strict UTF-8 and normalized text, the supported YAML 1.2 Core Schema subset, and every version 1 rule that can be established from the document alone. It rejects directives, anchors, aliases, merge keys, custom tags, duplicate keys, unknown properties, invalid values, unrecognized runtime IDs, and non-canonical relationships. Recognized official runtime IDs remain valid independently from the active Core instance's configured adapter set. A result includes both the normalized manifest asset and deeply immutable manifest value only when the complete document is valid. It does not read the repository, check adapter availability, or check whether referenced files exist.
+
+## Decision parsing
+
+```typescript
+import { createCore } from '@moldea.ai/core';
+import { parseRepositoryPath } from '@moldea.ai/repository';
+
+const result = await createCore().parseDecision({
+  content: [
+    '---',
+    'status: accepted',
+    'createdAt: "2026-08-07T19:42:03.456Z"',
+    '---',
+    'Use the accepted implementation.',
+    '',
+  ].join('\n'),
+  path: parseRepositoryPath('/moldea/decisions/1786131723456-use-postgresql.md'),
+});
+```
+
+Decision parsing validates the canonical timestamp-slug path, exact frontmatter delimiters, strict YAML metadata, status, canonical UTC `createdAt`, filename timestamp equality, supersession IDs, and non-empty Markdown body. A valid result preserves the exact normalized body and complete normalized asset, sorts supersession IDs, and includes a SHA-256 digest. It does not read other decisions or validate reference existence, duplicate IDs across files, supersession graphs, status consistency, or manifest relationships.
+
+## Repository inspection
+
+```typescript
+import { createCore } from '@moldea.ai/core';
+import { createMemoryRepositoryReader } from '@moldea.ai/repository/memory';
+
+const repository = createMemoryRepositoryReader([
+  {
+    content: 'version: 1\n',
+    path: '/moldea/moldea.yaml',
+    type: 'file',
+  },
+  {
+    content: '# Project\n',
+    path: '/moldea/project.md',
+    type: 'file',
+  },
+]);
+const result = await createCore().inspectProject({ repository });
+```
+
+Core's repository-level foundation now includes one isolated reader session for each inspection. The session validates detached reader output, applies the shared entry and byte budgets, caches each successfully read source file once, returns a fresh byte array to every consumer, and preserves cancellation and repository-source failures. Its state is never shared across inspections.
+
+Canonical discovery and exact decision reads can compose through this `IRepositoryReader` boundary. Core parses each discovered decision once and deterministically validates project-wide ID uniqueness, missing supersession references, cycles, active and historical status consistency, and orphaned superseded decisions. Invalid or ambiguous decision nodes do not produce dependent graph cascades, while unrelated trustworthy graph rules continue to run.
+
+The internal relationship layer also validates top-level and per-agent context and decision paths against canonical discovery and the parsed decision graph. Context targets must exist, and decision targets must exist and be accepted. Discovery and document diagnostics retain ownership of invalid targets so dependent missing or inactive diagnostics do not cascade.
+
+Repository references, bindings, capability implementations, unresolved-requirement references, and exact `affectedBy` paths are validated through the same inspection reader. Exact targets must resolve to regular files without following symlinks, repeated paths share one exact lookup, and capability implementation failures use their specific tool or skill diagnostic instead of a generic reference diagnostic. Glob `affectedBy` patterns are not enumerated and may match zero entries; adapter-owned symbol resolution remains deferred to adapter inspection.
+
+Core now also contains internal readers for every discovered runtime-guidance file and for convention-owned registered-agent assets. Runtime guidance is normalized, digested, checked for non-whitespace content, and reconciled with each agent's optional runtime guidance path. Registered agents are reconciled with exact directories, mandatory descriptions and instructions, optional handoff descriptions, Unicode-whitespace-trimmed description limits, forbidden runtime-variable delimiters, opening instruction identity, and complete runtime-placeholder grammar and declaration usage. Placeholder diagnostics preserve scalar-aware source ranges and deterministic declaration pointers. Unregistered directories and missing registered assets produce deterministic diagnostics without rereading unregistered content or cascading from discovery-owned failures.
+
+Declared mirrors are resolved through the same inspection reader and compared with their owning canonical instruction after strict text decoding and repository-format normalization. One leading byte-order mark and CRLF or CR line endings are normalized; all other content differences remain significant. Only exact normalized matches retain mirror and canonical digests. Missing, non-file, symlink, stale, and invalid-text mirrors produce deterministic diagnostics, while an unavailable canonical instruction suppresses mirror lookups and dependent diagnostics.
+
+Universal inspection now reads and parses the manifest, reads the project foundation, and then composes canonical discovery, focused-context reads, decision graphs, runtime guidance, registered-agent assets, manifest relationships, repository references, and mirrors through one coherent reader session. Exact foundation entries and file bytes are reused rather than requested twice. It aggregates diagnostics under one project-inspection limit and produces a deeply immutable, deterministic, JSON-safe provisional project index only when every universal phase succeeds. A supported format version remains available when it is independently trustworthy even if another manifest rule fails. Project and focused-context files must contain non-whitespace text; valid focused context retains its manifest relationship metadata, and all indexed assets retain normalized content, scalar and byte lengths, and SHA-256 digests.
+
+Before any adapter runs, Core verifies that every recognized package-backed runtime ID declared by an agent has a configured adapter and that the adapter supports the active repository-format version. Availability failures retain manifest-derived source ranges, prevent every adapter from running, and return empty evidence. Core then groups agents by runtime ID and invokes each applicable configured adapter exactly once in ascending adapter-ID order. Each adapter receives only its matching agents, the complete frozen project, the shared budget-aware reader, and the active signal. The built-in `custom` behavior requires no configured adapter and produces no runtime evidence by itself.
+
+Core validates adapter evidence and diagnostics before retaining them. Evidence references must identify existing regular files; evidence and diagnostic identity, scope, namespace, ranges, pointers, entities, and JSON-scalar details must satisfy the public adapter contract. One operation-wide diagnostic budget counts raw Core proposals across every universal phase plus raw adapter diagnostics; raw evidence has its own operation-wide budget. Both adapter output budgets apply before validation, deduplication, or sorting. Core normalizes, deduplicates, sorts, and freezes valid output. Adapter diagnostics retain valid evidence but withhold the project index. Any universal diagnostic prevents every adapter from running and returns empty evidence.
+
+The repository entry limit counts distinct non-root logical paths across Core and every adapter. A path counts when first targeted by `getEntry` or `readFile`, used as a non-root listing prefix, or yielded by a listing, including absent exact probes. Repeated and concurrent touches count exactly once. The root `/` never counts.
+
+The public result is all-or-nothing: `valid` is true exactly when diagnostics are empty, and `project` is non-null exactly when `valid` is true. A supported parsed format version may remain available after an unrelated universal diagnostic. Operational failures reject instead of returning a structural result.
+
+### Repository inspection failures
+
+`inspectProject` may reject with these `CoreOperationException` contracts:
+
+| Code                       | Stable message                                     | Trigger and metadata                                                                                                                                                                                                                                                                              | Cause and result behavior                                                                                                   |
+| -------------------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------- |
+| `INVALID_ARGUMENT`         | `The Core operation received an invalid argument.` | The inspection input, reader, or signal violates its runtime contract. `operation` is `inspect-project`; `retryable` is `false`.                                                                                                                                                                  | No structural result is returned.                                                                                           |
+| `ABORTED`                  | `The Core operation was aborted.`                  | The shared signal is already aborted or becomes aborted during Core or adapter work. `operation` is `inspect-project`; `retryable` is `true` because a fresh call with a non-aborted signal may succeed.                                                                                          | The signal reason is preserved as `cause` when available; no partial result is returned.                                    |
+| `RESOURCE_LIMIT_EXCEEDED`  | `A Core resource limit was exceeded.`              | A distinct-entry, byte, file, manifest, raw-diagnostic, or raw-evidence budget is exceeded. `limit` identifies the budget; `retryable` is `false`.                                                                                                                                                | No partial project, evidence, or diagnostics are returned.                                                                  |
+| `ADAPTER_EXECUTION_FAILED` | `A runtime adapter failed during inspection.`      | An adapter throws unexpectedly or returns malformed, unsafe, cyclic, incorrectly namespaced, ungrounded, or out-of-scope output. `adapterId` identifies the adapter; `operation` is `inspect-project` for invocation failures and `validate-adapter` for invalid results; `retryable` is `false`. | Unexpected failures are preserved as `cause`; malformed results use a safe validation cause. No partial result is returned. |
+
+`RepositoryPathException` and `RepositorySourceException` raised by the supplied reader or adapter-facing reader propagate unchanged. Core does not translate source access, snapshot, cancellation, or malformed-source failures into repository diagnostics or adapter failures.
+
+## Development
+
+From the monorepo root:
+
+```bash
+pnpm exec turbo run typecheck --filter=@moldea.ai/core
+pnpm exec turbo run build --filter=@moldea.ai/core
+pnpm exec turbo run test --filter=@moldea.ai/core
+```
+
+Unit and integration tests are colocated with their source. Repository-level fixtures use the immutable reader from `@moldea.ai/repository/memory`. Exact conformance goldens cover document diagnostics, context-only repositories, every tool and skill combination, complete project indexes, and the shared runtime-adapter boundary.

package/dist/adapter/index.d.ts

@@ -0,0 +1,48 @@
+import type { IRepositoryReader } from '@moldea.ai/repository';
+import type { IIndexedAgent, IMoldeaProjectIndex } from '../contracts/index.js';
+import type { IAdapterDiagnostic, IDiagnosticDetails } from '../diagnostics/index.js';
+import type { IRepositoryFormatVersion, IRepositoryReference } from '../format/index.js';
+export interface IRuntimeAdapter {
+    readonly id: string;
+    readonly supportedRepositoryFormatVersions: readonly IRepositoryFormatVersion[];
+    /**
+     * Inspects the trusted provisional project through the supplied budget-aware reader.
+     * @param context The immutable project, matching agents, reader, and cancellation signal.
+     * @returns A promise resolving to deterministic evidence and adapter diagnostics.
+     * @throws
+     * - INVALID_REPOSITORY_PATH: An adapter repository path is invalid.
+     * - ENTRY_NOT_FOUND: A requested repository entry is absent.
+     * - ENTRY_NOT_FILE: A requested repository entry is not a regular file.
+     * - ENTRY_NOT_DIRECTORY: A requested repository entry is not a directory.
+     * - ACCESS_DENIED: Access to the repository source was denied.
+     * - SOURCE_UNAVAILABLE: The repository source is unavailable.
+     * - SNAPSHOT_CHANGED: The repository snapshot changed during inspection.
+     * - INVALID_SOURCE_DATA: The repository reader returned invalid contract data.
+     * - RESOURCE_LIMIT_EXCEEDED: A Core or repository resource limit was exceeded.
+     * - ABORTED: Adapter inspection or a repository operation was aborted.
+     */
+    inspect(context: IRuntimeAdapterContext): Promise<IRuntimeAdapterResult>;
+}
+export interface IRuntimeAdapterContext {
+    readonly repository: IRepositoryReader;
+    readonly project: IMoldeaProjectIndex;
+    readonly agents: readonly IIndexedAgent[];
+    readonly signal?: AbortSignal;
+}
+export type IRuntimeAdapterEvidenceKind = 'runtime-package' | 'language' | 'agent-definition' | 'instruction-loader' | 'schema' | 'tool-registration' | 'skill-registration' | 'handoff-registration' | 'variable-provider' | 'runtime-pattern';
+export interface IRuntimeAdapterEvidence {
+    readonly source: string;
+    readonly kind: IRuntimeAdapterEvidenceKind;
+    readonly agentId: string | null;
+    readonly capabilityKind: 'tool' | 'skill' | null;
+    readonly capabilityId: string | null;
+    readonly runtimeName: string | null;
+    readonly references: readonly IRepositoryReference[];
+    readonly details: IDiagnosticDetails;
+}
+export interface IRuntimeAdapterResult {
+    readonly evidence: readonly IRuntimeAdapterEvidence[];
+    readonly diagnostics: readonly IAdapterDiagnostic[];
+}
+export type { IAdapterDiagnostic } from '../diagnostics/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapter/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,KAAK,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGzF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,iCAAiC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAEhF;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC1E;AAGD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAGD,MAAM,MAAM,2BAA2B,GACnC,iBAAiB,GACjB,UAAU,GACV,kBAAkB,GAClB,oBAAoB,GACpB,QAAQ,GACR,mBAAmB,GACnB,oBAAoB,GACpB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;CACtC;AAGD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACrD;AAGD,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/adapter-availability/index.d.ts

@@ -0,0 +1,15 @@
+import type { ICoreDiagnostic } from '../diagnostics/index.js';
+import type { IRepositoryFormatVersion } from '../format/index.js';
+import type { IRuntimeManifestLocation } from '../manifest-validation/index.js';
+import type { ICoreOptionsSnapshot } from '../options/index.js';
+/**
+ * Validates adapter availability and format support before any runtime adapter runs.
+ * @param locations The recognized runtime declarations retained from manifest parsing.
+ * @param formatVersion The active repository-format version.
+ * @param options The immutable Core adapter registry and limits.
+ * @returns Frozen deterministic preflight diagnostics.
+ * @throws
+ * - RESOURCE_LIMIT_EXCEEDED: The raw Core diagnostic limit was exceeded.
+ */
+export declare const validateRuntimeAdapterAvailability: (locations: readonly IRuntimeManifestLocation[], formatVersion: IRepositoryFormatVersion, options: ICoreOptionsSnapshot) => readonly ICoreDiagnostic[];
+//# sourceMappingURL=index.d.ts.map

package/dist/adapter-availability/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapter-availability/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC,GAC7C,WAAW,SAAS,wBAAwB,EAAE,EAC9C,eAAe,wBAAwB,EACvC,SAAS,oBAAoB,KAC5B,SAAS,eAAe,EAkC1B,CAAC"}

package/dist/adapter-execution/index.d.ts

@@ -0,0 +1,31 @@
+import type { IRuntimeAdapterEvidence } from '../adapter/index.js';
+import type { IMoldeaProjectIndex } from '../contracts/index.js';
+import type { IAdapterDiagnostic } from '../diagnostics/index.js';
+import type { ICoreOptionsSnapshot } from '../options/index.js';
+import type { IRepositoryInspectionSession } from '../repository-inspection-session/index.js';
+export interface IRuntimeAdapterInspectionResult {
+    readonly evidence: readonly IRuntimeAdapterEvidence[];
+    readonly diagnostics: readonly IAdapterDiagnostic[];
+}
+/**
+ * Invokes every applicable configured adapter in canonical ID order.
+ * @param project The complete frozen universal project index.
+ * @param session The shared inspection reader, cache, and resource budget.
+ * @param options The immutable Core adapter registry and resource limits.
+ * @param signal Optional cancellation shared by the complete inspection.
+ * @returns A promise resolving to normalized evidence and adapter diagnostics.
+ * @throws
+ * - INVALID_REPOSITORY_PATH: An adapter repository path is invalid.
+ * - ENTRY_NOT_FOUND: A requested repository entry is absent.
+ * - ENTRY_NOT_FILE: A requested repository entry is not a regular file.
+ * - ENTRY_NOT_DIRECTORY: A requested repository entry is not a directory.
+ * - ACCESS_DENIED: Access to the repository source was denied.
+ * - SOURCE_UNAVAILABLE: The repository source is unavailable.
+ * - SNAPSHOT_CHANGED: The repository snapshot changed during adapter inspection.
+ * - INVALID_SOURCE_DATA: The repository reader returned invalid contract data.
+ * - RESOURCE_LIMIT_EXCEEDED: A Core or repository resource limit was exceeded.
+ * - ABORTED: Adapter inspection or a repository operation was aborted.
+ * - ADAPTER_EXECUTION_FAILED: An adapter failed or returned an invalid result.
+ */
+export declare const inspectRuntimeAdapters: (project: IMoldeaProjectIndex, session: IRepositoryInspectionSession, options: ICoreOptionsSnapshot, signal?: AbortSignal) => Promise<IRuntimeAdapterInspectionResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/adapter-execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapter-execution/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA0B,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAOjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGlE,OAAO,KAAK,EAAE,oBAAoB,EAA2B,MAAM,qBAAqB,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAG9F,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACrD;AAsED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,sBAAsB,GACjC,SAAS,mBAAmB,EAC5B,SAAS,4BAA4B,EACrC,SAAS,oBAAoB,EAC7B,SAAS,WAAW,KACnB,OAAO,CAAC,+BAA+B,CAezC,CAAC"}

package/dist/adapter-validation/index.d.ts

@@ -0,0 +1,44 @@
+import { type IRepositoryReader } from '@moldea.ai/repository';
+import type { IRuntimeAdapterEvidence } from '../adapter/index.js';
+import type { ICoreResourceLimits, IIndexedAgent, IMoldeaProjectIndex } from '../contracts/index.js';
+import type { IAdapterDiagnostic } from '../diagnostics/index.js';
+export interface IValidatedRuntimeAdapterResult {
+    readonly evidence: readonly IRuntimeAdapterEvidence[];
+    readonly diagnostics: readonly IAdapterDiagnostic[];
+}
+export interface IRuntimeAdapterOutputCounts {
+    diagnostics: number;
+    evidence: number;
+}
+interface IAdapterValidationContext {
+    readonly adapterId: string;
+    readonly agents: readonly IIndexedAgent[];
+    readonly project: IMoldeaProjectIndex;
+    readonly repository: IRepositoryReader;
+    readonly limits: ICoreResourceLimits;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Deduplicates and sorts normalized evidence from every completed adapter.
+ * @param candidates The normalized evidence items to combine.
+ * @returns A frozen deterministic evidence collection.
+ */
+export declare const normalizeRuntimeAdapterEvidence: (candidates: readonly IRuntimeAdapterEvidence[]) => readonly IRuntimeAdapterEvidence[];
+/**
+ * Validates and normalizes one untrusted runtime adapter result.
+ * @param candidate The result returned by the adapter implementation.
+ * @param context The invoking adapter scope, project, reader, limits, and signal.
+ * @returns A promise resolving to frozen deterministic evidence and diagnostics.
+ * @throws
+ * - INVALID_REPOSITORY_PATH: An adapter repository reference path is invalid.
+ * - ACCESS_DENIED: Access to the repository source was denied.
+ * - SOURCE_UNAVAILABLE: The repository source is unavailable.
+ * - SNAPSHOT_CHANGED: The repository snapshot changed during validation.
+ * - INVALID_SOURCE_DATA: The repository reader returned invalid contract data.
+ * - RESOURCE_LIMIT_EXCEEDED: A Core or repository resource limit was exceeded.
+ * - ABORTED: Adapter validation or a repository operation was aborted.
+ * - ADAPTER_EXECUTION_FAILED: The adapter result violates its public contract.
+ */
+export declare const validateRuntimeAdapterResult: (candidate: unknown, context: IAdapterValidationContext, outputCounts: IRuntimeAdapterOutputCounts) => Promise<IValidatedRuntimeAdapterResult>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/adapter-validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapter-validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,uBAAuB,EAA+B,MAAM,qBAAqB,CAAC;AAChG,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,KAAK,EACV,kBAAkB,EAInB,MAAM,yBAAyB,CAAC;AA8DjC,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACrD;AAGD,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,yBAAyB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AA6cD;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,GAC1C,YAAY,SAAS,uBAAuB,EAAE,KAC7C,SAAS,uBAAuB,EAQlC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,4BAA4B,GACvC,WAAW,OAAO,EAClB,SAAS,yBAAyB,EAClC,cAAc,2BAA2B,KACxC,OAAO,CAAC,8BAA8B,CA4DxC,CAAC"}

package/dist/agent-asset-validation/index.d.ts

@@ -0,0 +1,34 @@
+import type { ICoreResourceLimits, IIndexedDescriptionAsset, IIndexedTextAsset } from '../contracts/index.js';
+import type { ICoreDiagnostic } from '../diagnostics/index.js';
+export interface IAgentDescriptionValidationResult {
+    readonly valid: boolean;
+    readonly description: IIndexedDescriptionAsset | null;
+    readonly diagnostics: readonly ICoreDiagnostic[];
+}
+export interface IAgentInstructionValidationResult {
+    readonly valid: boolean;
+    readonly instruction: IIndexedTextAsset | null;
+    readonly diagnostics: readonly ICoreDiagnostic[];
+}
+/**
+ * Validates the effective value of one agent description asset.
+ * @param asset The normalized complete description or handoff-description asset.
+ * @param agentId The owning registered agent ID.
+ * @param kind The description role determining its diagnostic code.
+ * @param limits The Core diagnostic budget.
+ * @returns The frozen effective description when every version 1 rule passes.
+ * @throws
+ * - RESOURCE_LIMIT_EXCEEDED: The repository-level diagnostic budget was exceeded.
+ */
+export declare const validateAgentDescription: (asset: IIndexedTextAsset, agentId: string, kind: "description" | "handoff-description", limits: ICoreResourceLimits) => IAgentDescriptionValidationResult;
+/**
+ * Validates one canonical instruction's non-empty content and opening identity.
+ * @param asset The normalized complete instruction asset.
+ * @param agentId The owning registered agent ID.
+ * @param limits The Core diagnostic budget.
+ * @returns The frozen instruction result, retaining non-empty content for later validation.
+ * @throws
+ * - RESOURCE_LIMIT_EXCEEDED: The repository-level diagnostic budget was exceeded.
+ */
+export declare const validateAgentInstruction: (asset: IIndexedTextAsset, agentId: string, limits: ICoreResourceLimits) => IAgentInstructionValidationResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/agent-asset-validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-asset-validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAW/D,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAGD,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAeD;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,iBAAiB,EACxB,SAAS,MAAM,EACf,MAAM,aAAa,GAAG,qBAAqB,EAC3C,QAAQ,mBAAmB,KAC1B,iCAsCF,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,iBAAiB,EACxB,SAAS,MAAM,EACf,QAAQ,mBAAmB,KAC1B,iCA0CF,CAAC"}

package/dist/agent-assets/index.d.ts

@@ -0,0 +1,38 @@
+import { type IRepositoryReader } from '@moldea.ai/repository';
+import type { ICanonicalDiscoveryResult } from '../canonical-discovery/index.js';
+import type { IIndexedDescriptionAsset, IIndexedTextAsset } from '../contracts/index.js';
+import type { ICoreDiagnostic } from '../diagnostics/index.js';
+import type { IAgentManifestEntry, IMoldeaManifestV1 } from '../format/index.js';
+import { type ICoreOptionsSnapshot } from '../options/index.js';
+export interface IInspectedAgentAssets {
+    readonly id: string;
+    readonly declaration: IAgentManifestEntry;
+    readonly description: IIndexedDescriptionAsset | null;
+    readonly instruction: IIndexedTextAsset | null;
+    readonly handoffDescription: IIndexedDescriptionAsset | null;
+}
+export interface IAgentAssetInspectionResult {
+    readonly valid: boolean;
+    readonly agents: readonly IInspectedAgentAssets[];
+    readonly diagnostics: readonly ICoreDiagnostic[];
+}
+/**
+ * Reconciles registered agents with their convention-owned directories and Markdown assets.
+ * @param repository The coherent source-neutral repository reader.
+ * @param manifest The normalized manifest containing registered agents.
+ * @param discovery The canonical inventory and path-owned structural diagnostics.
+ * @param options The immutable Core configuration snapshot.
+ * @param signal Optional cancellation forwarded to every repository read.
+ * @returns Deeply immutable registered-agent assets and deterministic diagnostics.
+ * @throws
+ * - ENTRY_NOT_FOUND: A discovered agent asset disappeared from the reader snapshot.
+ * - ENTRY_NOT_FILE: A discovered agent asset is no longer a regular file.
+ * - ACCESS_DENIED: Access to the repository source was denied.
+ * - SOURCE_UNAVAILABLE: The repository source is unavailable.
+ * - SNAPSHOT_CHANGED: The repository snapshot changed during agent reads.
+ * - INVALID_SOURCE_DATA: The repository reader returned invalid contract data.
+ * - RESOURCE_LIMIT_EXCEEDED: A Core or repository resource limit was exceeded.
+ * - ABORTED: Agent inspection or a repository operation was aborted.
+ */
+export declare const inspectAgentAssets: (repository: IRepositoryReader, manifest: IMoldeaManifestV1, discovery: ICanonicalDiscoveryResult, options: ICoreOptionsSnapshot, signal?: AbortSignal) => Promise<IAgentAssetInspectionResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/agent-assets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-assets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAM/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAKzF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,EAAsC,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAOpG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,GAAG,IAAI,CAAC;CAC9D;AAGD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAyFD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,kBAAkB,GAC7B,YAAY,iBAAiB,EAC7B,UAAU,iBAAiB,EAC3B,WAAW,yBAAyB,EACpC,SAAS,oBAAoB,EAC7B,SAAS,WAAW,KACnB,OAAO,CAAC,2BAA2B,CAiIrC,CAAC"}

package/dist/canonical-discovery/index.d.ts

@@ -0,0 +1,47 @@
+import { type IRepositoryEntry, type IRepositoryPath, type IRepositoryReader } from '@moldea.ai/repository';
+import type { ICoreResourceLimits } from '../contracts/index.js';
+import type { ICoreDiagnostic } from '../diagnostics/index.js';
+export interface IDiscoveredAgentAssets {
+    readonly id: string;
+    readonly path: IRepositoryPath;
+    readonly description: IRepositoryPath | null;
+    readonly instruction: IRepositoryPath | null;
+    readonly handoffDescription: IRepositoryPath | null;
+}
+export interface ICanonicalDiscoveryInventory {
+    readonly manifest: IRepositoryPath | null;
+    readonly project: IRepositoryPath | null;
+    readonly context: readonly IRepositoryPath[];
+    readonly decisions: readonly IRepositoryPath[];
+    readonly runtimeGuidance: readonly IRepositoryPath[];
+    readonly agents: readonly IDiscoveredAgentAssets[];
+}
+export interface ICanonicalDiscoveryResult {
+    readonly valid: boolean;
+    readonly inventory: ICanonicalDiscoveryInventory;
+    readonly diagnostics: readonly ICoreDiagnostic[];
+}
+export interface ICanonicalDiscoveryFoundationEntries {
+    readonly moldeaRoot: IRepositoryEntry | null;
+    readonly manifest: IRepositoryEntry | null;
+    readonly project: IRepositoryEntry | null;
+}
+/**
+ * Discovers and classifies version 1 canonical assets through one repository snapshot.
+ * @param repository The coherent source-neutral repository reader.
+ * @param limits The immutable Core limits governing diagnostic collection.
+ * @param signal Optional cancellation forwarded to every repository operation.
+ * @param foundations Optional exact foundation entries already observed by this inspection.
+ * @returns A deeply immutable inventory and its deterministic structural diagnostics.
+ * @throws
+ * - ENTRY_NOT_FOUND: The reader snapshot became inconsistent during discovery.
+ * - ENTRY_NOT_DIRECTORY: The reader snapshot became inconsistent during discovery.
+ * - ACCESS_DENIED: Access to the repository source was denied.
+ * - SOURCE_UNAVAILABLE: The repository source was unavailable.
+ * - SNAPSHOT_CHANGED: The repository snapshot changed during discovery.
+ * - INVALID_SOURCE_DATA: The repository reader returned invalid contract data.
+ * - RESOURCE_LIMIT_EXCEEDED: A Core or repository resource limit was exceeded.
+ * - ABORTED: Discovery or a repository operation was aborted.
+ */
+export declare const discoverCanonicalAssets: (repository: IRepositoryReader, limits: ICoreResourceLimits, signal?: AbortSignal, foundations?: ICanonicalDiscoveryFoundationEntries) => Promise<ICanonicalDiscoveryResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/canonical-discovery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canonical-discovery/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAM/B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAKjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAS/D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,eAAe,GAAG,IAAI,CAAC;CACrD;AAGD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACpD;AAGD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAGD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC3C;AA+ND;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,GAClC,YAAY,iBAAiB,EAC7B,QAAQ,mBAAmB,EAC3B,SAAS,WAAW,EACpB,cAAc,oCAAoC,KACjD,OAAO,CAAC,yBAAyB,CA+GnC,CAAC"}

package/dist/canonical-discovery-validation/index.d.ts

@@ -0,0 +1,26 @@
+import type { IRepositoryEntry } from '@moldea.ai/repository';
+export type ICanonicalFileKind = 'manifest' | 'project' | 'context' | 'decision' | 'runtime-guidance' | 'agent-description' | 'agent-instruction' | 'agent-handoff-description';
+export type ICanonicalEntryClassification = {
+    readonly kind: 'canonical-file';
+    readonly fileKind: ICanonicalFileKind;
+    readonly agentId: string | null;
+} | {
+    readonly kind: 'agent-directory';
+    readonly agentId: string;
+} | {
+    readonly kind: 'structural-directory' | 'ignored-directory';
+} | {
+    readonly kind: 'canonical-asset-symlink';
+} | {
+    readonly kind: 'entry-type-invalid';
+    readonly expectedType: 'file' | 'directory';
+} | {
+    readonly kind: 'unrecognized';
+};
+/**
+ * Classifies one reader entry against the version 1 canonical layout.
+ * @param entry The detached entry beneath the canonical moldea root.
+ * @returns Its canonical category or the precise structural failure category.
+ */
+export declare const classifyCanonicalEntry: (entry: IRepositoryEntry) => ICanonicalEntryClassification;
+//# sourceMappingURL=index.d.ts.map

package/dist/canonical-discovery-validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canonical-discovery-validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAmB,MAAM,uBAAuB,CAAC;AAK/E,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,SAAS,GACT,SAAS,GACT,UAAU,GACV,kBAAkB,GAClB,mBAAmB,GACnB,mBAAmB,GACnB,2BAA2B,CAAC;AAGhC,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,GAAG,mBAAmB,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GAC5C;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AA2EtC;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,gBAAgB,KAAG,6BAkChE,CAAC"}

package/dist/constants/index.d.ts

@@ -0,0 +1,6 @@
+import type { ICoreResourceLimits } from '../contracts/index.js';
+import type { IRepositoryFormatVersion } from '../format/index.js';
+export declare const RECOGNIZED_RUNTIME_ADAPTER_IDS: readonly ["anthropic", "claude-agent-sdk", "cloudflare-agents", "custom", "eve", "google-genai", "langchain", "langgraph", "openai", "openai-agents-sdk", "pydantic-ai", "vercel-ai-sdk"];
+export declare const SUPPORTED_REPOSITORY_FORMAT_VERSIONS: readonly IRepositoryFormatVersion[];
+export declare const DEFAULT_CORE_RESOURCE_LIMITS: ICoreResourceLimits;
+//# sourceMappingURL=index.d.ts.map

package/dist/constants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAGnE,eAAO,MAAM,8BAA8B,2LAahC,CAAC;AAGZ,eAAO,MAAM,oCAAoC,EAAE,SAAS,wBAAwB,EAChE,CAAC;AAGrB,eAAO,MAAM,4BAA4B,EAAE,mBAOzC,CAAC"}