@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/src/services/ai-authoring-context-v2.test.js

@@ -0,0 +1,171 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_test_1 = __importDefault(require("node:test"));
+const ai_authoring_context_v2_1 = require("./ai-authoring-context-v2");
+const ai_context_managed_install_1 = require("./ai-context-managed-install");
+(0, node_test_1.default)('offline export writes the closed matrix and verifies without network', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-v2-'));
+    const pack = node_path_1.default.join(root, 'context');
+    const result = await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'code',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    strict_1.default.equal(result.manifest.mode, 'offline');
+    strict_1.default.equal(result.lock.signatureAlgorithm, 'none');
+    strict_1.default.equal(result.manifest.files.some((entry) => entry.path === 'authoring/code-sdk.d.ts'), true);
+    strict_1.default.equal(result.manifest.files.some((entry) => entry.path === 'examples/flow/minimal-manual-flow.json'), false);
+    await strict_1.default.doesNotReject((0, ai_authoring_context_v2_1.verifyAuthoringContextV2)({
+        manifestPath: node_path_1.default.join(pack, 'context-manifest.json'),
+    }));
+});
+(0, node_test_1.default)('offline mode rejects every target selector before network or write', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-v2-'));
+    let networkCalls = 0;
+    await strict_1.default.rejects((0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'all',
+        offline: true,
+        callerPreview: true,
+        outDir: node_path_1.default.join(root, 'context'),
+        workspaceDir: root,
+    }, () => {
+        networkCalls += 1;
+        throw new Error('network forbidden');
+    }), /AI_CONTEXT_OFFLINE_TARGET_FORBIDDEN/);
+    strict_1.default.equal(networkCalls, 0);
+    strict_1.default.equal(node_fs_1.default.existsSync(node_path_1.default.join(root, 'context')), false);
+});
+(0, node_test_1.default)('context verification fails closed on content and manifest tamper', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-v2-'));
+    const pack = node_path_1.default.join(root, 'context');
+    await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'all',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    const manifestPath = node_path_1.default.join(pack, 'context-manifest.json');
+    const objectCatalog = node_path_1.default.join(pack, 'catalogs', 'objects.json');
+    node_fs_1.default.appendFileSync(objectCatalog, 'tamper');
+    await strict_1.default.rejects((0, ai_authoring_context_v2_1.verifyAuthoringContextV2)({ manifestPath }), /AI_CONTEXT_(?:TAMPERED|(?:CONTENT|LOCK|MANIFEST).*MISMATCH)/);
+    await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'all',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    const manifest = JSON.parse(node_fs_1.default.readFileSync(manifestPath, 'utf8'));
+    manifest.files = manifest.files.slice(1);
+    node_fs_1.default.writeFileSync(manifestPath, `${JSON.stringify(manifest)}\n`);
+    await strict_1.default.rejects((0, ai_authoring_context_v2_1.verifyAuthoringContextV2)({ manifestPath }), /AI_CONTEXT_(?:TAMPERED|SIGNATURE_INVALID|(?:LOCK|MANIFEST).*MISMATCH)/);
+});
+(0, node_test_1.default)('exported context contains no private key or credential-shaped JSON field', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-v2-'));
+    const pack = node_path_1.default.join(root, 'context');
+    const result = await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'all',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    const forbidden = /"(?:d|token|accessToken|refreshToken|password|secret|privateKey)"\s*:/;
+    for (const file of [
+        ...result.writtenFiles,
+        node_path_1.default.join(pack, 'context-manifest.json'),
+        node_path_1.default.join(pack, 'context-lock.json'),
+    ]) {
+        strict_1.default.doesNotMatch(node_fs_1.default.readFileSync(file, 'utf8'), forbidden, file);
+    }
+});
+(0, node_test_1.default)('v2 pack excludes legacy Python/context.services aliases and planned command suggestions', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-v2-'));
+    const pack = node_path_1.default.join(root, 'context');
+    const result = await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'all',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    const combined = result.writtenFiles
+        .map((file) => node_fs_1.default.readFileSync(file, 'utf8'))
+        .join('\n');
+    strict_1.default.doesNotMatch(combined, /context\.services/);
+    strict_1.default.doesNotMatch(combined, /candidate\.py|python\s+candidate/i);
+    strict_1.default.doesNotMatch(combined, /"(?:employeeKey|agentKey|packageKey|topicKey)"\s*:/);
+    const cliContract = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(pack, 'cli-contract.json'), 'utf8'));
+    for (const command of cliContract.commands) {
+        strict_1.default.equal(command.executionModes.every((mode) => mode.availability === 'implemented' && mode.implementationId !== null), true);
+        strict_1.default.equal(command.nextCommands.every((next) => cliContract.commands.some((candidate) => candidate.commandId === next.commandId)), true);
+    }
+});
+(0, node_test_1.default)('managed install preserves outside content and fails duplicate markers', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-install-'));
+    const pack = node_path_1.default.join(root, 'context');
+    await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'config',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    node_fs_1.default.writeFileSync(node_path_1.default.join(root, 'AGENTS.md'), '# User instructions\n', 'utf8');
+    const preview = (0, ai_context_managed_install_1.installAiContextManagedBlock)({
+        manifestPath: node_path_1.default.join(pack, 'context-manifest.json'),
+        workspaceDir: root,
+        agent: 'codex',
+    });
+    strict_1.default.equal(preview.action, 'update');
+    strict_1.default.equal(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'AGENTS.md'), 'utf8'), '# User instructions\n');
+    (0, ai_context_managed_install_1.installAiContextManagedBlock)({
+        manifestPath: node_path_1.default.join(pack, 'context-manifest.json'),
+        workspaceDir: root,
+        agent: 'codex',
+        apply: true,
+    });
+    const applied = node_fs_1.default.readFileSync(node_path_1.default.join(root, 'AGENTS.md'), 'utf8');
+    strict_1.default.match(applied, /^# User instructions/m);
+    strict_1.default.match(applied, /NEXUSCLAW:AI-CONTEXT START v2/);
+    strict_1.default.throws(() => (0, ai_context_managed_install_1.mergeManagedBlock)(`${applied}\n<!-- NEXUSCLAW:AI-CONTEXT START v2 -->`, 'replacement'), /AI_CONTEXT_MANAGED_MARKERS_MALFORMED/);
+});
+(0, node_test_1.default)('Claude, Codex and GLM managed wrappers preserve user text and are semantically equal', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-context-wrappers-'));
+    const pack = node_path_1.default.join(root, 'context');
+    await (0, ai_authoring_context_v2_1.exportAuthoringContextV2)({
+        surface: 'all',
+        offline: true,
+        outDir: pack,
+        workspaceDir: root,
+    });
+    const manifestPath = node_path_1.default.join(pack, 'context-manifest.json');
+    const outputs = [];
+    for (const agent of ['claude', 'codex', 'glm-5.2']) {
+        const plan = (0, ai_context_managed_install_1.installAiContextManagedBlock)({
+            manifestPath,
+            workspaceDir: root,
+            agent,
+            apply: true,
+        });
+        const first = node_fs_1.default.readFileSync(plan.targetPath, 'utf8');
+        node_fs_1.default.writeFileSync(plan.targetPath, `user-owned preface\n\n${first}`);
+        const update = (0, ai_context_managed_install_1.installAiContextManagedBlock)({
+            manifestPath,
+            workspaceDir: root,
+            agent,
+            apply: true,
+        });
+        strict_1.default.equal(update.action, 'unchanged');
+        const content = node_fs_1.default.readFileSync(plan.targetPath, 'utf8');
+        strict_1.default.match(content, /^user-owned preface/);
+        outputs.push(content.slice(content.indexOf('<!-- NEXUSCLAW:AI-CONTEXT START v2 -->')));
+    }
+    strict_1.default.deepEqual(outputs[0], outputs[1]);
+    strict_1.default.deepEqual(outputs[1], outputs[2]);
+});
+//# sourceMappingURL=ai-authoring-context-v2.test.js.map

package/dist/nexus-cli/src/services/ai-authoring-context-v2.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-authoring-context-v2.test.js","sourceRoot":"","sources":["../../../../src/services/ai-authoring-context-v2.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAC7B,0DAA6B;AAE7B,uEAGmC;AACnC,6EAGsC;AAEtC,IAAA,mBAAI,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,IAAA,kDAAwB,EAAC;QAC5C,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACrD,gBAAM,CAAC,KAAK,CACV,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,yBAAyB,CACpD,EACD,IAAI,CACL,CAAC;IACF,gBAAM,CAAC,KAAK,CACV,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,wCAAwC,CACnE,EACD,KAAK,CACN,CAAC;IACF,MAAM,gBAAM,CAAC,aAAa,CACxB,IAAA,kDAAwB,EAAC;QACvB,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC;KACvD,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,kDAAwB,EACtB;QACE,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAClC,YAAY,EAAE,IAAI;KACnB,EACD,GAAG,EAAE;QACH,YAAY,IAAI,CAAC,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC,CACF,EACD,qCAAqC,CACtC,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC9B,gBAAM,CAAC,KAAK,CAAC,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,IAAA,kDAAwB,EAAC;QAC7B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAClE,iBAAE,CAAC,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,kDAAwB,EAAC,EAAE,YAAY,EAAE,CAAC,EAC1C,6DAA6D,CAC9D,CAAC;IAEF,MAAM,IAAA,kDAAwB,EAAC;QAC7B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,iBAAE,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,kDAAwB,EAAC,EAAE,YAAY,EAAE,CAAC,EAC1C,uEAAuE,CACxE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,IAAA,kDAAwB,EAAC;QAC5C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,uEAAuE,CAAC;IAC1F,KAAK,MAAM,IAAI,IAAI;QACjB,GAAG,MAAM,CAAC,YAAY;QACtB,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC;QACxC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC;KACrC,EAAE,CAAC;QACF,gBAAM,CAAC,YAAY,CAAC,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;IACzG,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,IAAA,kDAAwB,EAAC;QAC5C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;SAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,gBAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACnD,gBAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACnE,gBAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;IACpF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAC5B,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAC9D,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC3C,gBAAM,CAAC,KAAK,CACV,OAAO,CAAC,cAAc,CAAC,KAAK,CAC1B,CAAC,IAA+D,EAAE,EAAE,CAClE,IAAI,CAAC,YAAY,KAAK,aAAa,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CACxE,EACD,IAAI,CACL,CAAC;QACF,gBAAM,CAAC,KAAK,CACV,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAA2B,EAAE,EAAE,CACzD,WAAW,CAAC,QAAQ,CAAC,IAAI,CACvB,CAAC,SAAgC,EAAE,EAAE,CACnC,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CACzC,CACF,EACD,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,IAAA,kDAAwB,EAAC;QAC7B,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAA,yDAA4B,EAAC;QAC3C,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC;QACtD,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CACV,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,EACrD,uBAAuB,CACxB,CAAC;IACF,IAAA,yDAA4B,EAAC;QAC3B,YAAY,EAAE,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC;QACtD,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,gBAAM,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC/C,gBAAM,CAAC,KAAK,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IACvD,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,IAAA,8CAAiB,EACf,GAAG,OAAO,0CAA0C,EACpD,aAAa,CACd,EACH,sCAAsC,CACvC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,IAAA,kDAAwB,EAAC;QAC7B,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAA,yDAA4B,EAAC;YACxC,YAAY;YACZ,YAAY,EAAE,IAAI;YAClB,KAAK;YACL,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,iBAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACvD,iBAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAA,yDAA4B,EAAC;YAC1C,YAAY;YACZ,YAAY,EAAE,IAAI;YAClB,KAAK;YACL,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,iBAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACzD,gBAAM,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,gBAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,gBAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC"}

package/dist/nexus-cli/src/services/ai-context-managed-install.d.ts

@@ -0,0 +1,16 @@
+export type AiContextAgent = 'claude' | 'codex' | 'glm-5.2' | 'generic';
+export interface ManagedContextInstallPlan {
+    readonly agent: AiContextAgent;
+    readonly targetPath: string;
+    readonly action: 'create' | 'update' | 'unchanged';
+    readonly beforeDigest: `sha256:${string}` | null;
+    readonly afterDigest: `sha256:${string}`;
+    readonly mandatoryFirstContextFile?: string;
+}
+export declare function installAiContextManagedBlock(input: {
+    readonly manifestPath: string;
+    readonly workspaceDir: string;
+    readonly agent: AiContextAgent;
+    readonly apply?: boolean;
+}): ManagedContextInstallPlan;
+export declare function mergeManagedBlock(existing: string, generatedBlock: string): string;

package/dist/nexus-cli/src/services/ai-context-managed-install.js

@@ -0,0 +1,79 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installAiContextManagedBlock = installAiContextManagedBlock;
+exports.mergeManagedBlock = mergeManagedBlock;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const shared_1 = require("@nexusclaw/shared");
+const START = '<!-- NEXUSCLAW:AI-CONTEXT START v2 -->';
+const END = '<!-- NEXUSCLAW:AI-CONTEXT END v2 -->';
+function installAiContextManagedBlock(input) {
+    const workspace = node_path_1.default.resolve(input.workspaceDir);
+    const manifestPath = node_path_1.default.resolve(input.manifestPath);
+    const contextRoot = node_path_1.default.dirname(manifestPath);
+    const instructionPath = node_path_1.default.join(contextRoot, 'agent-instructions', `${input.agent}.md`);
+    const instruction = node_fs_1.default.readFileSync(instructionPath, 'utf8').trim();
+    const manifest = JSON.parse(node_fs_1.default.readFileSync(manifestPath, 'utf8'));
+    if (manifest.schemaVersion !== 'nexusclaw.ai-authoring-context/v2') {
+        throw new Error('AI_AUTHORING_CONTEXT_VERSION_UNSUPPORTED');
+    }
+    const relativeManifest = node_path_1.default.relative(workspace, manifestPath);
+    const generated = [
+        START,
+        instruction,
+        '',
+        `Context manifest: \`${relativeManifest}\``,
+        `Context manifest digest: \`${(0, shared_1.rawByteDigest)(node_fs_1.default.readFileSync(manifestPath))}\``,
+        END,
+    ].join('\n');
+    const targetPath = input.agent === 'codex'
+        ? node_path_1.default.join(workspace, 'AGENTS.md')
+        : input.agent === 'claude'
+            ? node_path_1.default.join(workspace, 'CLAUDE.md')
+            : node_path_1.default.join(workspace, '.nexusclaw', 'agents', `${input.agent}.md`);
+    const before = node_fs_1.default.existsSync(targetPath)
+        ? node_fs_1.default.readFileSync(targetPath, 'utf8')
+        : '';
+    const after = mergeManagedBlock(before, generated);
+    const plan = {
+        agent: input.agent,
+        targetPath,
+        action: before === after ? 'unchanged' : before ? 'update' : 'create',
+        beforeDigest: before
+            ? (0, shared_1.canonicalJsonDigest)({ content: before })
+            : null,
+        afterDigest: (0, shared_1.canonicalJsonDigest)({ content: after }),
+        ...(input.agent === 'glm-5.2' || input.agent === 'generic'
+            ? { mandatoryFirstContextFile: targetPath }
+            : {}),
+    };
+    if (input.apply && before !== after) {
+        node_fs_1.default.mkdirSync(node_path_1.default.dirname(targetPath), { recursive: true });
+        const temp = `${targetPath}.${process.pid}.tmp`;
+        node_fs_1.default.writeFileSync(temp, after, 'utf8');
+        node_fs_1.default.renameSync(temp, targetPath);
+    }
+    return plan;
+}
+function mergeManagedBlock(existing, generatedBlock) {
+    const startCount = occurrences(existing, START);
+    const endCount = occurrences(existing, END);
+    if (startCount !== endCount || startCount > 1) {
+        throw new Error('AI_CONTEXT_MANAGED_MARKERS_MALFORMED');
+    }
+    if (startCount === 0) {
+        return `${existing.trimEnd()}${existing.trim() ? '\n\n' : ''}${generatedBlock}\n`;
+    }
+    const start = existing.indexOf(START);
+    const end = existing.indexOf(END, start);
+    if (end < start)
+        throw new Error('AI_CONTEXT_MANAGED_MARKERS_MALFORMED');
+    return `${existing.slice(0, start)}${generatedBlock}${existing.slice(end + END.length)}`;
+}
+function occurrences(value, needle) {
+    return value.split(needle).length - 1;
+}
+//# sourceMappingURL=ai-context-managed-install.js.map

package/dist/nexus-cli/src/services/ai-context-managed-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-context-managed-install.js","sourceRoot":"","sources":["../../../../src/services/ai-context-managed-install.ts"],"names":[],"mappings":";;;;;AAkBA,oEA2DC;AAED,8CAkBC;AAjGD,sDAAyB;AACzB,0DAA6B;AAC7B,8CAAuE;AAEvE,MAAM,KAAK,GAAG,wCAAwC,CAAC;AACvD,MAAM,GAAG,GAAG,sCAAsC,CAAC;AAanD,SAAgB,4BAA4B,CAAC,KAK5C;IACC,MAAM,SAAS,GAAG,mBAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,mBAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,mBAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,mBAAI,CAAC,IAAI,CAC/B,WAAW,EACX,oBAAoB,EACpB,GAAG,KAAK,CAAC,KAAK,KAAK,CACpB,CAAC;IACF,MAAM,WAAW,GAAG,iBAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAEhE,CAAC;IACF,IAAI,QAAQ,CAAC,aAAa,KAAK,mCAAmC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,gBAAgB,GAAG,mBAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG;QAChB,KAAK;QACL,WAAW;QACX,EAAE;QACF,uBAAuB,gBAAgB,IAAI;QAC3C,8BAA8B,IAAA,sBAAa,EAAC,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,IAAI;QAC9E,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,UAAU,GACd,KAAK,CAAC,KAAK,KAAK,OAAO;QACrB,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QACnC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;YACxB,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;YACnC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAA8B;QACtC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU;QACV,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACrE,YAAY,EAAE,MAAM;YAClB,CAAC,CAAC,IAAA,4BAAmB,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1C,CAAC,CAAC,IAAI;QACR,WAAW,EAAE,IAAA,4BAAmB,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YACxD,CAAC,CAAC,EAAE,yBAAyB,EAAE,UAAU,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACpC,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAChD,iBAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,iBAAE,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,iBAAiB,CAC/B,QAAgB,EAChB,cAAsB;IAEtB,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,IAAI,CAAC;IACpF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzE,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,cAAc,GAAG,QAAQ,CAAC,KAAK,CAClE,GAAG,GAAG,GAAG,CAAC,MAAM,CACjB,EAAE,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/nexus-cli/src/services/ai-context-pack.d.ts

@@ -0,0 +1,33 @@
+import { AI_AUTHORING_CONTEXT_SCHEMA_VERSION, type AiContextSha256 } from '@nexusclaw/shared';
+export interface AiContextWorkspaceInstalledPackageV1 {
+    readonly packageName: string;
+    readonly version: string;
+    readonly packageType: string;
+    readonly digest: AiContextSha256;
+}
+export interface AiContextIndustryOverlayFile {
+    readonly sourcePath: string;
+    readonly outputPath: string;
+    readonly digest: AiContextSha256;
+    readonly mediaType: string;
+    readonly bytes: Uint8Array;
+}
+export interface AiContextIndustryOverlay {
+    readonly packageName: string;
+    readonly version: string;
+    readonly packageDigest: AiContextSha256;
+    readonly compatibleContextSchemaVersion: typeof AI_AUTHORING_CONTEXT_SCHEMA_VERSION;
+    readonly files: readonly AiContextIndustryOverlayFile[];
+}
+export interface AiContextPackContentFile {
+    readonly path: string;
+    readonly digest: AiContextSha256;
+    readonly mediaType: string;
+    readonly bytes: Uint8Array;
+    readonly source: 'core' | 'industry_overlay';
+}
+export declare function appendVerifiedIndustryOverlay(input: {
+    readonly coreFiles: readonly AiContextPackContentFile[];
+    readonly installedPackages: readonly AiContextWorkspaceInstalledPackageV1[];
+    readonly overlay: AiContextIndustryOverlay;
+}): readonly AiContextPackContentFile[];

package/dist/nexus-cli/src/services/ai-context-pack.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appendVerifiedIndustryOverlay = appendVerifiedIndustryOverlay;
+const shared_1 = require("@nexusclaw/shared");
+const PACKAGE_NAME = /^[a-z0-9][a-z0-9._-]{0,254}$/;
+const SAFE_SEGMENT = /^[A-Za-z0-9._-]+$/;
+function appendVerifiedIndustryOverlay(input) {
+    const { overlay } = input;
+    if (!PACKAGE_NAME.test(overlay.packageName) ||
+        overlay.compatibleContextSchemaVersion !==
+            shared_1.AI_AUTHORING_CONTEXT_SCHEMA_VERSION ||
+        !(0, shared_1.isSha256Digest)(overlay.packageDigest)) {
+        throw new Error('AI_CONTEXT_OVERLAY_INCOMPATIBLE');
+    }
+    const installed = input.installedPackages.filter((candidate) => candidate.packageName === overlay.packageName &&
+        candidate.packageType === 'industry-overlay');
+    if (installed.length !== 1 ||
+        installed[0].version !== overlay.version ||
+        installed[0].digest !== overlay.packageDigest) {
+        throw new Error('AI_CONTEXT_OVERLAY_NOT_INSTALLED');
+    }
+    const prefix = `examples/overlays/${overlay.packageName}/`;
+    const output = [...input.coreFiles];
+    const occupied = new Set();
+    for (const file of input.coreFiles) {
+        if (occupied.has(collisionKey(file.path)) ||
+            (0, shared_1.rawByteDigest)(file.bytes) !== file.digest) {
+            throw new Error('AI_CONTEXT_TAMPERED');
+        }
+        occupied.add(collisionKey(file.path));
+    }
+    for (const file of overlay.files) {
+        assertSafeRelativePath(file.sourcePath);
+        assertSafeRelativePath(file.outputPath);
+        if (!file.outputPath.startsWith(prefix) ||
+            file.outputPath === prefix ||
+            !isAllowedExampleMediaType(file.mediaType) ||
+            (0, shared_1.rawByteDigest)(file.bytes) !== file.digest ||
+            occupied.has(collisionKey(file.outputPath))) {
+            throw new Error('AI_CONTEXT_OVERLAY_CONTRACT_OVERRIDE');
+        }
+        occupied.add(collisionKey(file.outputPath));
+        output.push({
+            path: file.outputPath,
+            digest: file.digest,
+            mediaType: file.mediaType,
+            bytes: file.bytes,
+            source: 'industry_overlay',
+        });
+    }
+    return output.sort((a, b) => Buffer.from(a.path, 'utf8').compare(Buffer.from(b.path, 'utf8')));
+}
+function assertSafeRelativePath(value) {
+    if (!value ||
+        value.startsWith('/') ||
+        value.includes('\\') ||
+        value.split('/').some((segment) => !segment ||
+            segment === '.' ||
+            segment === '..' ||
+            !SAFE_SEGMENT.test(segment))) {
+        throw new Error('AI_CONTEXT_OVERLAY_PATH_INVALID');
+    }
+}
+function collisionKey(value) {
+    return value.normalize('NFC').toLocaleLowerCase('en-US');
+}
+function isAllowedExampleMediaType(value) {
+    return (value === 'application/json' ||
+        value === 'text/markdown; charset=utf-8' ||
+        value === 'text/typescript; charset=utf-8');
+}
+//# sourceMappingURL=ai-context-pack.js.map

package/dist/nexus-cli/src/services/ai-context-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-context-pack.js","sourceRoot":"","sources":["../../../../src/services/ai-context-pack.ts"],"names":[],"mappings":";;AAgDA,sEAiEC;AAjHD,8CAK2B;AAmC3B,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAOzC,SAAgB,6BAA6B,CAAC,KAI7C;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACvC,OAAO,CAAC,8BAA8B;YACpC,4CAAmC;QACrC,CAAC,IAAA,uBAAc,EAAC,OAAO,CAAC,aAAa,CAAC,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC9C,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QAC7C,SAAS,CAAC,WAAW,KAAK,kBAAkB,CAC/C,CAAC;IACF,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QACxC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,OAAO,CAAC,WAAW,GAAG,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACnC,IACE,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAA,sBAAa,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,EACzC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;YACnC,IAAI,CAAC,UAAU,KAAK,MAAM;YAC1B,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1C,IAAA,sBAAa,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;YACzC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IACE,CAAC,KAAK;QACN,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CACnB,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO;YACR,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAC9B,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,OAAO,CACL,KAAK,KAAK,kBAAkB;QAC5B,KAAK,KAAK,8BAA8B;QACxC,KAAK,KAAK,gCAAgC,CAC3C,CAAC;AACJ,CAAC"}

package/dist/nexus-cli/src/services/ai-context-pack.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/nexus-cli/src/services/ai-context-pack.test.js

@@ -0,0 +1,102 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const shared_1 = require("@nexusclaw/shared");
+const ai_context_pack_1 = require("./ai-context-pack");
+const PACKAGE_DIGEST = 'sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa';
+function overlayFile(outputPath = 'examples/overlays/industry.healthcare/lead-routing.ts') {
+    const bytes = Buffer.from('export const example = true;\n');
+    return {
+        sourcePath: 'authoring-examples/lead-routing.ts',
+        outputPath,
+        digest: (0, shared_1.rawByteDigest)(bytes),
+        mediaType: 'text/typescript; charset=utf-8',
+        bytes,
+    };
+}
+function overlay(overrides = {}) {
+    return {
+        packageName: 'industry.healthcare',
+        version: '1.2.3',
+        packageDigest: PACKAGE_DIGEST,
+        compatibleContextSchemaVersion: shared_1.AI_AUTHORING_CONTEXT_SCHEMA_VERSION,
+        files: [overlayFile()],
+        ...overrides,
+    };
+}
+const coreBytes = Buffer.from('{"schemaVersion":"core"}\n');
+const coreFiles = [
+    {
+        path: 'cli-contract.json',
+        digest: (0, shared_1.rawByteDigest)(coreBytes),
+        mediaType: 'application/json',
+        bytes: coreBytes,
+        source: 'core',
+    },
+];
+const installed = [
+    {
+        packageName: 'industry.healthcare',
+        version: '1.2.3',
+        packageType: 'industry-overlay',
+        digest: PACKAGE_DIGEST,
+    },
+];
+(0, node_test_1.default)('verified installed overlay appends examples under its isolated prefix', () => {
+    const result = (0, ai_context_pack_1.appendVerifiedIndustryOverlay)({
+        coreFiles,
+        installedPackages: installed,
+        overlay: overlay(),
+    });
+    strict_1.default.deepEqual(result.map((file) => [file.path, file.source]), [
+        ['cli-contract.json', 'core'],
+        [
+            'examples/overlays/industry.healthcare/lead-routing.ts',
+            'industry_overlay',
+        ],
+    ]);
+});
+(0, node_test_1.default)('overlay requires an exact installed version/type/digest match', () => {
+    for (const installedPackages of [
+        [],
+        [{ ...installed[0], version: '1.2.4' }],
+        [{ ...installed[0], packageType: 'extension-pack' }],
+        [
+            {
+                ...installed[0],
+                digest: 'sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb',
+            },
+        ],
+    ]) {
+        strict_1.default.throws(() => (0, ai_context_pack_1.appendVerifiedIndustryOverlay)({
+            coreFiles,
+            installedPackages,
+            overlay: overlay(),
+        }), /AI_CONTEXT_OVERLAY_NOT_INSTALLED/);
+    }
+});
+(0, node_test_1.default)('overlay cannot override contracts, escape its prefix, collide, or lie about bytes', () => {
+    for (const file of [
+        overlayFile('cli-contract.json'),
+        overlayFile('examples/overlays/industry.other/example.ts'),
+        {
+            ...overlayFile(),
+            digest: 'sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb',
+        },
+        {
+            ...overlayFile(),
+            outputPath: 'examples/overlays/industry.healthcare/../cli-contract.json',
+        },
+    ]) {
+        strict_1.default.throws(() => (0, ai_context_pack_1.appendVerifiedIndustryOverlay)({
+            coreFiles,
+            installedPackages: installed,
+            overlay: overlay({ files: [file] }),
+        }));
+    }
+});
+//# sourceMappingURL=ai-context-pack.test.js.map

package/dist/nexus-cli/src/services/ai-context-pack.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-context-pack.test.js","sourceRoot":"","sources":["../../../../src/services/ai-context-pack.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,0DAA6B;AAC7B,8CAG2B;AAC3B,uDAI2B;AAE3B,MAAM,cAAc,GAClB,yEAAkF,CAAC;AAErF,SAAS,WAAW,CAClB,UAAU,GAAG,uDAAuD;IAEpE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC5D,OAAO;QACL,UAAU,EAAE,oCAAoC;QAChD,UAAU;QACV,MAAM,EAAE,IAAA,sBAAa,EAAC,KAAK,CAAC;QAC5B,SAAS,EAAE,gCAAgC;QAC3C,KAAK;KACG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CACd,YAA+C,EAAE;IAEjD,OAAO;QACL,WAAW,EAAE,qBAAqB;QAClC,OAAO,EAAE,OAAO;QAChB,aAAa,EAAE,cAAc;QAC7B,8BAA8B,EAAE,4CAAmC;QACnE,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QACtB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;AAC5D,MAAM,SAAS,GAAwC;IACrD;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,IAAA,sBAAa,EAAC,SAAS,CAAC;QAChC,SAAS,EAAE,kBAAkB;QAC7B,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,MAAM;KACf;CACF,CAAC;AACF,MAAM,SAAS,GAAG;IAChB;QACE,WAAW,EAAE,qBAAqB;QAClC,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,cAAc;KACvB;CACO,CAAC;AAEX,IAAA,mBAAI,EAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,MAAM,GAAG,IAAA,+CAA6B,EAAC;QAC3C,SAAS;QACT,iBAAiB,EAAE,SAAS;QAC5B,OAAO,EAAE,OAAO,EAAE;KACnB,CAAC,CAAC;IACH,gBAAM,CAAC,SAAS,CACd,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAC9C;QACE,CAAC,mBAAmB,EAAE,MAAM,CAAC;QAC7B;YACE,uDAAuD;YACvD,kBAAkB;SACnB;KACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,KAAK,MAAM,iBAAiB,IAAI;QAC9B,EAAE;QACF,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACvC,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACpD;YACE;gBACE,GAAG,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,EACJ,yEAAkF;aACrF;SACF;KACF,EAAE,CAAC;QACF,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,IAAA,+CAA6B,EAAC;YAC5B,SAAS;YACT,iBAAiB;YACjB,OAAO,EAAE,OAAO,EAAE;SACnB,CAAC,EACJ,kCAAkC,CACnC,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,KAAK,MAAM,IAAI,IAAI;QACjB,WAAW,CAAC,mBAAmB,CAAC;QAChC,WAAW,CAAC,6CAA6C,CAAC;QAC1D;YACE,GAAG,WAAW,EAAE;YAChB,MAAM,EACJ,yEAAkF;SACrF;QACD;YACE,GAAG,WAAW,EAAE;YAChB,UAAU,EACR,4DAA4D;SAC/D;KACF,EAAE,CAAC;QACF,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,IAAA,+CAA6B,EAAC;YAC5B,SAAS;YACT,iBAAiB,EAAE,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/nexus-cli/src/services/ai-context-signing-key-cache.d.ts

@@ -0,0 +1,17 @@
+import { type AiContextSigningKeySetV1 } from '@nexusclaw/shared';
+export interface ResolveOnlineSigningKeyInput {
+    readonly keyId: string;
+    readonly expectedIssuer?: string;
+    readonly fetchKeySet: () => Promise<AiContextSigningKeySetV1>;
+    readonly now?: Date;
+}
+export declare class AiContextSigningKeyCache {
+    private readonly cachePath;
+    constructor(cachePath?: string);
+    resolveLocal(keyId: string, expectedIssuer?: string, now?: Date): AiContextSigningKeySetV1;
+    resolveOnline(input: ResolveOnlineSigningKeyInput): Promise<AiContextSigningKeySetV1>;
+    store(keySet: AiContextSigningKeySetV1, fetchedAt?: Date): void;
+    private hasUsableKey;
+    private read;
+    private write;
+}