@mrpatronz/nexusflow 2.2.0 → 2.3.0

package/dist/resources/agents-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-catalog.js","sourceRoot":"","sources":["../../src/resources/agents-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,GAAG,MAAM,UAAU,CAAC;AAG3B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACzG,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtH,MAAM,kBAAkB,GAAG,mBAAmB,EAAE,CAAC;AAOjD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,eAAe,CAAI,SAA2B;IAC3D,OAAO,kBAAkB,CAAC,KAAK,IAAI,EAAE;QACnC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,uBAAuB,CAAC,EAAE;YAClG,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,kDAAkD;SACnE,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,4BAA4B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAE5C,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC1D,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAY,CAAC;QACjF,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,KAAK,IAAI;YACjB,eAAe,IAAI,QAAQ;YAC3B,QAAQ,CAAC,aAAa,KAAK,CAAC;YAC5B,UAAU,IAAI,QAAQ,EACtB,CAAC;YACD,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrE,IAAI,cAAc,CAAC,OAAO;gBAAE,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE;QACF,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ;QACR,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,QAAQ;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,iCAAiC,KAAK,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAc;IAC5C,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC;IAElC,OAAO,eAAe,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,uBAAuB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,MAAM,QAAQ,GAAsB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;YAErE,IAAI,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,MAAM,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjD,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAChC,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,aAAa;gBAAE,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1C,IAAI,aAAa,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACvF,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,QAAQ,GAAG,SAAS;IACrE,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,eAAe,CAAC,KAAK,IAAI,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/resources/agents-catalog.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agents-catalog.test.d.ts.map

package/dist/resources/agents-catalog.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-catalog.test.d.ts","sourceRoot":"","sources":["../../src/resources/agents-catalog.test.ts"],"names":[],"mappings":""}

package/dist/resources/agents-catalog.test.js

@@ -0,0 +1,50 @@
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import fse from 'fs-extra';
+import { deleteAgent, getAllAgents, importAgentToml, saveAgent } from './agents-catalog.js';
+describe('Codex agent catalog', () => {
+    let tempHome;
+    const originalHome = process.env.NEXUSFLOW_HOME;
+    beforeEach(async () => {
+        tempHome = await fs.mkdtemp(path.join(os.tmpdir(), 'nexusflow-agents-'));
+        process.env.NEXUSFLOW_HOME = tempHome;
+    });
+    afterEach(async () => {
+        if (originalHome === undefined)
+            delete process.env.NEXUSFLOW_HOME;
+        else
+            process.env.NEXUSFLOW_HOME = originalHome;
+        await fse.remove(tempHome);
+    });
+    it('creates, updates, lists, imports, and deletes native agents', async () => {
+        await saveAgent({
+            name: 'reviewer',
+            category: 'testing-qa',
+            description: 'Review a fixed diff.',
+            developerInstructions: 'Find correctness defects.',
+            sandboxMode: 'read-only',
+        });
+        await saveAgent({
+            id: 'reviewer',
+            name: 'reviewer',
+            category: 'testing-qa',
+            description: 'Review a fixed diff independently.',
+            developerInstructions: 'Find correctness and security defects.',
+            sandboxMode: 'read-only',
+        });
+        await importAgentToml('name = "docs_researcher"\ndescription = "Explore code."\ndeveloper_instructions = "Read code and report evidence."\n');
+        const agents = await getAllAgents();
+        expect(agents.map((agent) => agent.id)).toEqual(['docs_researcher', 'reviewer']);
+        expect(agents.find((agent) => agent.id === 'reviewer')?.description).toContain('independently');
+        expect(await fse.pathExists(path.join(tempHome, 'agents', 'reviewer', 'agent.toml'))).toBe(true);
+        await deleteAgent('reviewer');
+        expect((await getAllAgents()).map((agent) => agent.id)).toEqual(['docs_researcher']);
+    });
+    it('rejects unsupported native configuration without changing the catalog', async () => {
+        await expect(importAgentToml('name = "unsafe"\ndescription = "Unsafe."\ndeveloper_instructions = "Unsafe."\nmcp_servers = {}\n')).rejects.toThrow(/unrecognized key/i);
+        expect(await getAllAgents()).toEqual([]);
+    });
+});
+//# sourceMappingURL=agents-catalog.test.js.map

package/dist/resources/agents-catalog.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-catalog.test.js","sourceRoot":"","sources":["../../src/resources/agents-catalog.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE5F,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,QAAgB,CAAC;IACrB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAEhD,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;;YAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,YAAY,CAAC;QAC/C,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,SAAS,CAAC;YACd,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,YAAY;YACtB,WAAW,EAAE,sBAAsB;YACnC,qBAAqB,EAAE,2BAA2B;YAClD,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;QACH,MAAM,SAAS,CAAC;YACd,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,YAAY;YACtB,WAAW,EAAE,oCAAoC;YACjD,qBAAqB,EAAE,wCAAwC;YAC/D,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;QACH,MAAM,eAAe,CACnB,sHAAsH,CACvH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChG,MAAM,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,CAAC,eAAe,CAC1B,kGAAkG,CACnG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/resources/codex-agent.d.ts

@@ -0,0 +1,6 @@
+import type { CodexAgentItem } from '../types.js';
+import { type CodexAgentInput } from './contracts.js';
+export declare function parseCodexAgentToml(raw: string, expectedId?: string): CodexAgentInput;
+export declare function validateCodexAgentInput(input: unknown): CodexAgentInput;
+export declare function serializeCodexAgentToml(agent: CodexAgentInput | CodexAgentItem): string;
+//# sourceMappingURL=codex-agent.d.ts.map

package/dist/resources/codex-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-agent.d.ts","sourceRoot":"","sources":["../../src/resources/codex-agent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAExB,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,eAAe,CA2BrF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAUvE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,GAAG,MAAM,CAUvF"}

package/dist/resources/codex-agent.js

@@ -0,0 +1,55 @@
+import { parse, stringify } from 'smol-toml';
+import { codexAgentInputSchema, codexAgentTomlSchema, formatValidationError, } from './contracts.js';
+export function parseCodexAgentToml(raw, expectedId) {
+    let parsed;
+    try {
+        parsed = parse(raw);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Invalid Codex agent TOML: ${message}`);
+    }
+    const result = codexAgentTomlSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new Error(`Invalid Codex agent: ${formatValidationError(result.error)}`);
+    }
+    if (expectedId && result.data.name !== expectedId) {
+        throw new Error(`Agent name "${result.data.name}" must match file identity "${expectedId}".`);
+    }
+    return {
+        id: result.data.name,
+        name: result.data.name,
+        category: 'general',
+        description: result.data.description,
+        developerInstructions: result.data.developer_instructions,
+        model: result.data.model,
+        modelReasoningEffort: result.data.model_reasoning_effort,
+        sandboxMode: result.data.sandbox_mode,
+    };
+}
+export function validateCodexAgentInput(input) {
+    const result = codexAgentInputSchema.safeParse(input);
+    if (!result.success) {
+        throw new Error(`Invalid Codex agent: ${formatValidationError(result.error)}`);
+    }
+    const id = result.data.id ?? result.data.name;
+    if (id !== result.data.name) {
+        throw new Error('Codex agent id and name must match.');
+    }
+    return { ...result.data, id };
+}
+export function serializeCodexAgentToml(agent) {
+    const data = {
+        name: agent.name,
+        description: agent.description,
+        developer_instructions: agent.developerInstructions,
+    };
+    if (agent.model)
+        data.model = agent.model;
+    if (agent.modelReasoningEffort)
+        data.model_reasoning_effort = agent.modelReasoningEffort;
+    if (agent.sandboxMode)
+        data.sandbox_mode = agent.sandboxMode;
+    return `${stringify(data).trim()}\n`;
+}
+//# sourceMappingURL=codex-agent.js.map

package/dist/resources/codex-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-agent.js","sourceRoot":"","sources":["../../src/resources/codex-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AAExB,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,UAAmB;IAClE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,IAAI,+BAA+B,UAAU,IAAI,CAAC,CAAC;IAChG,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;QACpC,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB;QACzD,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;QACxB,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB;QACxD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9C,IAAI,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAuC;IAC7E,MAAM,IAAI,GAA2B;QACnC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,sBAAsB,EAAE,KAAK,CAAC,qBAAqB;KACpD,CAAC;IACF,IAAI,KAAK,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,CAAC,oBAAoB;QAAE,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACzF,IAAI,KAAK,CAAC,WAAW;QAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;IAC7D,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;AACvC,CAAC"}

package/dist/resources/codex-agent.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codex-agent.test.d.ts.map

package/dist/resources/codex-agent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-agent.test.d.ts","sourceRoot":"","sources":["../../src/resources/codex-agent.test.ts"],"names":[],"mappings":""}

package/dist/resources/codex-agent.test.js

@@ -0,0 +1,27 @@
+import { describe, expect, it } from 'vitest';
+import { parseCodexAgentToml, serializeCodexAgentToml } from './codex-agent.js';
+describe('Codex agent TOML', () => {
+    it('round-trips the supported native fields', () => {
+        const raw = serializeCodexAgentToml({
+            id: 'reviewer',
+            name: 'reviewer',
+            category: 'general',
+            description: 'Use when reviewing a fixed diff.',
+            developerInstructions: 'Review correctness and security.',
+            modelReasoningEffort: 'high',
+            sandboxMode: 'read-only',
+        });
+        expect(parseCodexAgentToml(raw, 'reviewer')).toMatchObject({
+            name: 'reviewer',
+            description: 'Use when reviewing a fixed diff.',
+            developerInstructions: 'Review correctness and security.',
+            modelReasoningEffort: 'high',
+            sandboxMode: 'read-only',
+        });
+    });
+    it('rejects unsupported keys and identity mismatches', () => {
+        expect(() => parseCodexAgentToml('name = "reviewer"\ndescription = "Review"\ndeveloper_instructions = "Review"\nmcp_servers = {}\n')).toThrow(/unrecognized key/i);
+        expect(() => parseCodexAgentToml('name = "reviewer"\ndescription = "Review"\ndeveloper_instructions = "Review"\n', 'other')).toThrow(/must match/i);
+    });
+});
+//# sourceMappingURL=codex-agent.test.js.map

package/dist/resources/codex-agent.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-agent.test.js","sourceRoot":"","sources":["../../src/resources/codex-agent.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,uBAAuB,CAAC;YAClC,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,SAAS;YACnB,WAAW,EAAE,kCAAkC;YAC/C,qBAAqB,EAAE,kCAAkC;YACzD,oBAAoB,EAAE,MAAM;YAC5B,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;YACzD,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,kCAAkC;YAC/C,qBAAqB,EAAE,kCAAkC;YACzD,oBAAoB,EAAE,MAAM;YAC5B,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAC9B,kGAAkG,CACnG,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAC9B,gFAAgF,EAChF,OAAO,CACR,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/resources/contracts.d.ts

@@ -0,0 +1,116 @@
+import { z } from 'zod';
+export declare const RESOURCE_ID_PATTERN: RegExp;
+export declare const resourceIdSchema: z.ZodString;
+export declare const CODEX_AGENT_NAME_PATTERN: RegExp;
+export declare const codexAgentNameSchema: z.ZodString;
+export declare const skillFrontmatterSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodString;
+    license: z.ZodOptional<z.ZodString>;
+    compatibility: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    'allowed-tools': z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodString]>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$loose>;
+export declare const skillCategorySchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodDefault<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+    color: z.ZodOptional<z.ZodString>;
+    custom: z.ZodOptional<z.ZodBoolean>;
+    isTemplate: z.ZodOptional<z.ZodBoolean>;
+    skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const codexAgentInputSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    category: z.ZodDefault<z.ZodString>;
+    description: z.ZodString;
+    developerInstructions: z.ZodString;
+    model: z.ZodOptional<z.ZodString>;
+    modelReasoningEffort: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+        ultra: "ultra";
+    }>>;
+    sandboxMode: z.ZodOptional<z.ZodEnum<{
+        "read-only": "read-only";
+        "workspace-write": "workspace-write";
+    }>>;
+}, z.core.$strict>;
+export declare const codexAgentTomlSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodString;
+    developer_instructions: z.ZodString;
+    model: z.ZodOptional<z.ZodString>;
+    model_reasoning_effort: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+        ultra: "ultra";
+    }>>;
+    sandbox_mode: z.ZodOptional<z.ZodEnum<{
+        "read-only": "read-only";
+        "workspace-write": "workspace-write";
+    }>>;
+}, z.core.$strict>;
+export declare const workspaceResourcesConfigSchema: z.ZodObject<{
+    schemaVersion: z.ZodDefault<z.ZodLiteral<1>>;
+    revision: z.ZodDefault<z.ZodNumber>;
+    enabledSkills: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    enabledAgents: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    enabledCategories: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const managedOutputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    path: z.ZodString;
+    hash: z.ZodString;
+    mode: z.ZodOptional<z.ZodNumber>;
+    kind: z.ZodLiteral<"skill">;
+    resourceId: z.ZodString;
+    adapter: z.ZodEnum<{
+        "agent-skill-v1": "agent-skill-v1";
+        "claude-skill-v1": "claude-skill-v1";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    path: z.ZodString;
+    hash: z.ZodString;
+    mode: z.ZodOptional<z.ZodNumber>;
+    kind: z.ZodLiteral<"codex-agent">;
+    resourceId: z.ZodString;
+    adapter: z.ZodLiteral<"codex-agent-v1">;
+}, z.core.$strip>], "kind">;
+export declare const resourceLockSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    outputs: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        path: z.ZodString;
+        hash: z.ZodString;
+        mode: z.ZodOptional<z.ZodNumber>;
+        kind: z.ZodLiteral<"skill">;
+        resourceId: z.ZodString;
+        adapter: z.ZodEnum<{
+            "agent-skill-v1": "agent-skill-v1";
+            "claude-skill-v1": "claude-skill-v1";
+        }>;
+    }, z.core.$strip>, z.ZodObject<{
+        path: z.ZodString;
+        hash: z.ZodString;
+        mode: z.ZodOptional<z.ZodNumber>;
+        kind: z.ZodLiteral<"codex-agent">;
+        resourceId: z.ZodString;
+        adapter: z.ZodLiteral<"codex-agent-v1">;
+    }, z.core.$strip>], "kind">>;
+}, z.core.$strict>;
+export type CodexAgentInput = z.infer<typeof codexAgentInputSchema>;
+export type WorkspaceResourcesConfigData = z.infer<typeof workspaceResourcesConfigSchema>;
+export type ManagedOutput = z.infer<typeof managedOutputSchema>;
+export type ResourceLock = z.infer<typeof resourceLockSchema>;
+export declare function formatValidationError(error: z.ZodError): string;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/resources/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/resources/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB,QAA+B,CAAC;AAEhE,eAAO,MAAM,gBAAgB,aAK4D,CAAC;AAE1F,eAAO,MAAM,wBAAwB,QAAkC,CAAC;AAExE,eAAO,MAAM,oBAAoB,aAKmE,CAAC;AAIrG,eAAO,MAAM,sBAAsB;;;;;;;;;;iBAYnB,CAAC;AAEjB,eAAO,MAAM,mBAAmB;;;;;;;;;kBAWrB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;kBAWvB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;kBAStB,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;kBAQhC,CAAC;AAQZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;2BAa9B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;kBAKpB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAC1F,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,MAAM,CAI/D"}

package/dist/resources/contracts.js

@@ -0,0 +1,103 @@
+import { z } from 'zod';
+export const RESOURCE_ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export const resourceIdSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(64)
+    .regex(RESOURCE_ID_PATTERN, 'Use lowercase letters, numbers, and single hyphens only.');
+export const CODEX_AGENT_NAME_PATTERN = /^[a-z0-9]+(?:[-_][a-z0-9]+)*$/;
+export const codexAgentNameSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(64)
+    .regex(CODEX_AGENT_NAME_PATTERN, 'Use lowercase letters, numbers, hyphens, and underscores only.');
+const nonEmptyString = z.string().trim().min(1);
+export const skillFrontmatterSchema = z
+    .object({
+    name: resourceIdSchema,
+    description: nonEmptyString.max(1024),
+    license: z.string().trim().max(1024).optional(),
+    compatibility: z.string().trim().max(1024).optional(),
+    title: z.string().trim().max(120).optional(),
+    category: resourceIdSchema.optional(),
+    tags: z.array(nonEmptyString.max(64)).max(32).optional(),
+    'allowed-tools': z.union([z.array(nonEmptyString.max(128)).max(32), nonEmptyString]).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+})
+    .passthrough();
+export const skillCategorySchema = z
+    .object({
+    id: resourceIdSchema,
+    name: nonEmptyString.max(120),
+    description: z.string().trim().max(1024).default(''),
+    icon: z.string().trim().max(120).optional(),
+    color: z.string().trim().max(64).optional(),
+    custom: z.boolean().optional(),
+    isTemplate: z.boolean().optional(),
+    skills: z.array(resourceIdSchema).max(1000).optional(),
+})
+    .strict();
+export const codexAgentInputSchema = z
+    .object({
+    id: codexAgentNameSchema.optional(),
+    name: codexAgentNameSchema,
+    category: resourceIdSchema.default('general'),
+    description: nonEmptyString.max(1024),
+    developerInstructions: nonEmptyString.max(100_000),
+    model: nonEmptyString.max(120).optional(),
+    modelReasoningEffort: z.enum(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']).optional(),
+    sandboxMode: z.enum(['read-only', 'workspace-write']).optional(),
+})
+    .strict();
+export const codexAgentTomlSchema = z
+    .object({
+    name: codexAgentNameSchema,
+    description: nonEmptyString.max(1024),
+    developer_instructions: nonEmptyString.max(100_000),
+    model: nonEmptyString.max(120).optional(),
+    model_reasoning_effort: z.enum(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']).optional(),
+    sandbox_mode: z.enum(['read-only', 'workspace-write']).optional(),
+})
+    .strict();
+export const workspaceResourcesConfigSchema = z
+    .object({
+    schemaVersion: z.literal(1).default(1),
+    revision: z.number().int().nonnegative().default(0),
+    enabledSkills: z.array(resourceIdSchema).max(1000).default([]),
+    enabledAgents: z.array(codexAgentNameSchema).max(1000).default([]),
+    enabledCategories: z.array(resourceIdSchema).max(1000).default([]),
+})
+    .strict();
+const managedHashAndPath = {
+    path: z.string().min(1),
+    hash: z.string().regex(/^[a-f0-9]{64}$/),
+    mode: z.number().int().min(0).max(0o777).optional(),
+};
+export const managedOutputSchema = z.discriminatedUnion('kind', [
+    z.object({
+        kind: z.literal('skill'),
+        resourceId: resourceIdSchema,
+        adapter: z.enum(['agent-skill-v1', 'claude-skill-v1']),
+        ...managedHashAndPath,
+    }),
+    z.object({
+        kind: z.literal('codex-agent'),
+        resourceId: codexAgentNameSchema,
+        adapter: z.literal('codex-agent-v1'),
+        ...managedHashAndPath,
+    }),
+]);
+export const resourceLockSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    outputs: z.array(managedOutputSchema),
+})
+    .strict();
+export function formatValidationError(error) {
+    return error.issues
+        .map((issue) => `${issue.path.join('.') || 'value'}: ${issue.message}`)
+        .join('; ');
+}
+//# sourceMappingURL=contracts.js.map

package/dist/resources/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/resources/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEhE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,mBAAmB,EAAE,0DAA0D,CAAC,CAAC;AAE1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,+BAA+B,CAAC;AAExE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,wBAAwB,EAAE,gEAAgE,CAAC,CAAC;AAErG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,EAAE,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7C,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,qBAAqB,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;IAClD,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzC,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3F,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,sBAAsB,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;IACnD,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzC,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7F,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACnE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,UAAU,EAAE,gBAAgB;QAC5B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;QACtD,GAAG,kBAAkB;KACtB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACpC,GAAG,kBAAkB;KACtB,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ,MAAM,UAAU,qBAAqB,CAAC,KAAiB;IACrD,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/resources/fs-safety.d.ts

@@ -0,0 +1,11 @@
+export declare function assertPathWithin(rootDir: string, targetPath: string): string;
+/**
+ * Rejects symlink/junction components below a trusted root. Missing trailing
+ * components are allowed because callers may create them after this check.
+ */
+export declare function assertNoLinkedPathComponents(rootDir: string, targetPath: string): Promise<void>;
+export declare function assertRegularFile(filePath: string): Promise<void>;
+export declare function assertPathIsNotLink(targetPath: string): Promise<void>;
+export declare function atomicWriteFile(filePath: string, data: string | Uint8Array): Promise<void>;
+export declare function atomicWriteJson(filePath: string, value: unknown): Promise<void>;
+//# sourceMappingURL=fs-safety.d.ts.map

package/dist/resources/fs-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-safety.d.ts","sourceRoot":"","sources":["../../src/resources/fs-safety.ts"],"names":[],"mappings":"AAGA,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAO5E;AAQD;;;GAGG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrG;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE;AAED,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3E;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAShG;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAErF"}

package/dist/resources/fs-safety.js

@@ -0,0 +1,77 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+export function assertPathWithin(rootDir, targetPath) {
+    const root = path.resolve(rootDir);
+    const target = path.resolve(targetPath);
+    if (target !== root && !target.startsWith(`${root}${path.sep}`)) {
+        throw new Error(`Path "${targetPath}" is outside the allowed root.`);
+    }
+    return target;
+}
+function errorCode(error) {
+    return typeof error === 'object' && error !== null && 'code' in error
+        ? String(error.code)
+        : undefined;
+}
+/**
+ * Rejects symlink/junction components below a trusted root. Missing trailing
+ * components are allowed because callers may create them after this check.
+ */
+export async function assertNoLinkedPathComponents(rootDir, targetPath) {
+    const root = path.resolve(rootDir);
+    const target = assertPathWithin(root, targetPath);
+    const canonicalRoot = await fs.realpath(root);
+    const relative = path.relative(root, target);
+    if (!relative)
+        return;
+    let current = root;
+    for (const segment of relative.split(path.sep)) {
+        current = path.join(current, segment);
+        try {
+            const stat = await fs.lstat(current);
+            if (stat.isSymbolicLink()) {
+                throw new Error(`Linked path components are not allowed in managed resource paths: ${current}`);
+            }
+            const canonicalCurrent = await fs.realpath(current);
+            assertPathWithin(canonicalRoot, canonicalCurrent);
+        }
+        catch (error) {
+            if (errorCode(error) === 'ENOENT')
+                return;
+            throw error;
+        }
+    }
+}
+export async function assertRegularFile(filePath) {
+    const stat = await fs.lstat(filePath);
+    if (stat.isSymbolicLink() || !stat.isFile()) {
+        throw new Error(`Expected a regular file: ${filePath}`);
+    }
+}
+export async function assertPathIsNotLink(targetPath) {
+    try {
+        if ((await fs.lstat(targetPath)).isSymbolicLink()) {
+            throw new Error(`Linked managed roots are not allowed: ${targetPath}`);
+        }
+    }
+    catch (error) {
+        if (errorCode(error) === 'ENOENT')
+            return;
+        throw error;
+    }
+}
+export async function atomicWriteFile(filePath, data) {
+    const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
+    try {
+        await fs.writeFile(tempPath, data);
+        await fs.rename(tempPath, filePath);
+    }
+    catch (error) {
+        await fs.unlink(tempPath).catch(() => { });
+        throw error;
+    }
+}
+export async function atomicWriteJson(filePath, value) {
+    await atomicWriteFile(filePath, `${JSON.stringify(value, null, 2)}\n`);
+}
+//# sourceMappingURL=fs-safety.js.map

package/dist/resources/fs-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-safety.js","sourceRoot":"","sources":["../../src/resources/fs-safety.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,UAAkB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,SAAS,UAAU,gCAAgC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QACnE,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAAe,EAAE,UAAkB;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,qEAAqE,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,gBAAgB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpD,gBAAgB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,OAAO;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAyB;IAC/E,MAAM,QAAQ,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IACpE,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC"}

package/dist/resources/materializer.d.ts

@@ -0,0 +1,17 @@
+import * as fs from 'node:fs/promises';
+import type { AIAssistant, CodexAgentItem, SkillItem } from '../types.js';
+export interface ResourceReconcileResult {
+    installed: string[];
+    updated: string[];
+    removed: string[];
+    unchanged: string[];
+}
+export interface ResourceMaterializerOptions {
+    rename?: typeof fs.rename;
+}
+export declare class ResourceConflictError extends Error {
+    readonly conflicts: string[];
+    constructor(conflicts: string[]);
+}
+export declare function reconcileWorkspaceResources(workspacePath: string, assistants: AIAssistant[], skills: SkillItem[], agents: CodexAgentItem[], options?: ResourceMaterializerOptions): Promise<ResourceReconcileResult>;
+//# sourceMappingURL=materializer.d.ts.map

package/dist/resources/materializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializer.d.ts","sourceRoot":"","sources":["../../src/resources/materializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAKvC,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA8B1E,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC;CAC3B;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,SAAgB,SAAS,EAAE,MAAM,EAAE,CAAC;gBAExB,SAAS,EAAE,MAAM,EAAE;CAKhC;AAmUD,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,WAAW,EAAE,EACzB,MAAM,EAAE,SAAS,EAAE,EACnB,MAAM,EAAE,cAAc,EAAE,EACxB,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,uBAAuB,CAAC,CAiHlC"}