@nklisch/pi-enhanced 0.1.0

package/node_modules/@nklisch/pi-plugins/dist/composition/create-trusted-installation-service.js

@@ -0,0 +1,49 @@
+import { createExactTrustGrantService } from "../application/exact-trust-grant-service.js";
+import { createTrustedInstallCandidateService } from "../application/trusted-install-candidate.js";
+import { createTrustedInstallConfigurationAuthority } from "../application/trusted-install-configuration.js";
+import { createTrustedInstallationService } from "../application/trusted-install-service.js";
+/** Private packaged wiring; raw acquisition, state, roots, and mutation ports never escape. */
+export function createComposedTrustedInstallationService(input) {
+    const candidate = input.candidate ?? createTrustedInstallCandidateService({
+        catalog: input.catalog,
+        content: input.candidateContent,
+        inspector: input.inspector,
+        readiness: input.readiness,
+        sha256: input.sha256,
+    });
+    const configurationAuthority = createTrustedInstallConfigurationAuthority({ configurations: input.configurations, sha256: input.sha256 });
+    const trust = createExactTrustGrantService({
+        state: input.state,
+        mutations: input.mutations,
+        projectTrust: input.projectTrust,
+        projectRoots: input.projectRoots,
+        sha256: input.sha256,
+    });
+    return createTrustedInstallationService({
+        candidate,
+        configuration: input.configuration,
+        configurationAuthority,
+        configurationInput(candidateValue, projectRoot) {
+            const scope = candidateValue.resolved.scope;
+            if (scope.kind === "project" && projectRoot === undefined)
+                throw new Error("project configuration requires current root authority");
+            const pathContext = scope.kind === "project"
+                ? { scope, trustedProjectRoot: projectRoot }
+                : { scope, trustedBaseDirectory: input.userBaseDirectory };
+            return { pathContext, paths: input.configurationPaths, secretCustody: input.secretCustody };
+        },
+        trust,
+        lifecycle: {
+            state: input.state,
+            prepared: input.lifecycle.preparedInstall,
+            publicLifecycle: input.lifecycle.application,
+        },
+        evidence: input.evidence,
+        projectRoots: input.projectRoots,
+        clock: input.clock,
+        sessionIds: input.sessionIds,
+        hostEpoch: input.hostEpoch,
+        sha256: input.sha256,
+    });
+}
+//# sourceMappingURL=create-trusted-installation-service.js.map

package/node_modules/@nklisch/pi-plugins/dist/composition/create-trusted-installation-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-trusted-installation-service.js","sourceRoot":"","sources":["../../src/composition/create-trusted-installation-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,oCAAoC,EAAuC,MAAM,6CAA6C,CAAC;AACxI,OAAO,EAAE,0CAA0C,EAAE,MAAM,iDAAiD,CAAC;AAC7G,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAoB7F,+FAA+F;AAC/F,MAAM,UAAU,wCAAwC,CAAC,KAqBvD;IACA,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,oCAAoC,CAAC;QACxE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,gBAAgB;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,sBAAsB,GAAG,0CAA0C,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAG,4BAA4B,CAAC;QACzC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,OAAO,gCAAgC,CAAC;QACtC,SAAS;QACT,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,sBAAsB;QACtB,kBAAkB,CAAC,cAAc,EAAE,WAAW;YAC5C,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACpI,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAY,EAAE;gBAC7C,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,kBAAkB,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QAC9F,CAAC;QACD,KAAK;QACL,SAAS,EAAE;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe;YACzC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;SAC7C;QACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/composition/host-status-service.d.ts

@@ -0,0 +1,20 @@
+import { type HostStartupResult, type HostStatusSnapshot } from "../application/host-observation-contract.js";
+import type { UpdateSchedulerStatus } from "../application/marketplace-update-scheduler.js";
+import { type UpdateSchedulerStatusProjection } from "../application/update-scheduler-status.js";
+export interface HostStatusService {
+    snapshot(): HostStatusSnapshot;
+}
+export interface MutableHostStatus extends HostStatusService {
+    update(input: Readonly<{
+        /** Compatibility for isolated callers; packaged composition shares projection. */
+        scheduler?: UpdateSchedulerStatus["state"];
+        unresolvedCount?: number;
+        unreadCount?: number;
+    }>): void;
+}
+export declare function createHostStatusService(input: Readonly<{
+    startup: HostStartupResult;
+    recovery?: "settled" | "degraded" | "blocked";
+    runtime?: "reconciled" | "degraded" | "blocked";
+    schedulerStatus?: UpdateSchedulerStatusProjection;
+}>): MutableHostStatus;

package/node_modules/@nklisch/pi-plugins/dist/composition/host-status-service.js

@@ -0,0 +1,35 @@
+import { HostStatusSnapshotSchema } from "../application/host-observation-contract.js";
+import { createUpdateSchedulerStatusProjection } from "../application/update-scheduler-status.js";
+export function createHostStatusService(input) {
+    const localScheduler = createUpdateSchedulerStatusProjection();
+    const scheduler = input.schedulerStatus ?? localScheduler;
+    let counts = Object.freeze({ unresolvedCount: 0, unreadCount: 0 });
+    const recovery = input.recovery ?? (input.startup.status === "blocked" ? "blocked" : input.startup.status === "degraded" ? "degraded" : "settled");
+    const runtime = input.runtime ?? (input.startup.status === "blocked" ? "blocked" : input.startup.status === "degraded" ? "degraded" : "reconciled");
+    function snapshot() {
+        const schedulerSnapshot = scheduler.snapshot();
+        const localBlocked = recovery === "blocked" || runtime === "blocked";
+        const localDegraded = recovery === "degraded" || runtime === "degraded";
+        const updateDegraded = schedulerSnapshot.state === "degraded" || schedulerSnapshot.state === "clock-regressed";
+        return HostStatusSnapshotSchema.parse({
+            status: localBlocked ? "blocked" : localDegraded || updateDegraded || input.startup.blocked.length > 0 ? "degraded" : "ready",
+            local: { recovery, runtime },
+            update: { state: schedulerSnapshot.state, ...counts, scopes: schedulerSnapshot.scopes },
+            blocked: input.startup.blocked,
+            capabilities: input.startup.capabilities,
+        });
+    }
+    return Object.freeze({
+        snapshot,
+        update(next) {
+            if (next.scheduler !== undefined && input.schedulerStatus === undefined) {
+                localScheduler.publish({ state: next.scheduler, scopes: localScheduler.snapshot().scopes });
+            }
+            counts = Object.freeze({
+                unresolvedCount: next.unresolvedCount ?? counts.unresolvedCount,
+                unreadCount: next.unreadCount ?? counts.unreadCount,
+            });
+        },
+    });
+}
+//# sourceMappingURL=host-status-service.js.map

package/node_modules/@nklisch/pi-plugins/dist/composition/host-status-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-status-service.js","sourceRoot":"","sources":["../../src/composition/host-status-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAmD,MAAM,6CAA6C,CAAC;AAExI,OAAO,EAAE,qCAAqC,EAAwC,MAAM,2CAA2C,CAAC;AAexI,MAAM,UAAU,uBAAuB,CAAC,KAKtC;IACA,MAAM,cAAc,GAAG,qCAAqC,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,IAAI,cAAc,CAAC;IAC1D,IAAI,MAAM,GAA+D,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/H,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAEpJ,SAAS,QAAQ;QACf,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,YAAY,GAAG,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;QACrE,MAAM,aAAa,GAAG,QAAQ,KAAK,UAAU,IAAI,OAAO,KAAK,UAAU,CAAC;QACxE,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,KAAK,UAAU,IAAI,iBAAiB,CAAC,KAAK,KAAK,iBAAiB,CAAC;QAC/G,OAAO,wBAAwB,CAAC,KAAK,CAAC;YACpC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YAC7H,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC5B,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE;YACvF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;SACzC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,MAAM,CAAC,IAAgD;YACrD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACxE,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBACrB,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe;gBAC/D,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;aACpD,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/composition/native-inspection-evidence.d.ts

@@ -0,0 +1,40 @@
+import { type RuntimeCapabilitySnapshot } from "../domain/compatibility-policy.js";
+import { type ScopeContext } from "../domain/state/scope.js";
+import { type LifecycleRecoveryResult } from "../application/recovery-contract.js";
+import { type ProjectionExpectation } from "../application/ports/runtime-projection.js";
+import type { LifecycleStateStore } from "../application/ports/lifecycle-state-store.js";
+import type { LifecycleClock } from "../application/ports/lifecycle-clock.js";
+import type { MarketplaceCatalogService } from "../application/marketplace-catalog-service.js";
+import type { CurrentProjectRuntimeContext } from "../application/ports/project-trust.js";
+import type { SkillHookContributionObservationResult } from "../runtime/skills/resource-discovery.js";
+import type { McpLifecycleParticipant } from "../runtime/mcp/lifecycle-participant.js";
+import type { Sha256 } from "../domain/source.js";
+import type { RuntimeDesiredState } from "./runtime-desired-state.js";
+import type { RuntimeSelectionCatalog } from "./runtime-selection-catalog.js";
+import type { HostStartupResult } from "../application/host-observation-contract.js";
+import type { HostStatusService } from "./host-status-service.js";
+import type { NativeInspectionEvidencePort } from "../application/ports/native-inspection-evidence.js";
+/**
+ * Compose existing state, catalog, capability, recovery, and local runtime
+ * evidence. The adapter never reconciles, reloads, refreshes, launches, or
+ * probes; all runtime calls below are observation-only against already
+ * composed local participants.
+ */
+export declare function createNativeInspectionEvidence(input: Readonly<{
+    state: LifecycleStateStore;
+    catalog: Pick<MarketplaceCatalogService, "search">;
+    scopes: readonly ScopeContext[];
+    revalidateProject(signal: AbortSignal): Promise<CurrentProjectRuntimeContext>;
+    selections: RuntimeSelectionCatalog;
+    desired(): RuntimeDesiredState | undefined;
+    skillHook: Readonly<{
+        observe(expectation: ProjectionExpectation, signal: AbortSignal): Promise<SkillHookContributionObservationResult>;
+    }>;
+    mcp: Pick<McpLifecycleParticipant, "status">;
+    capabilities?: RuntimeCapabilitySnapshot;
+    recovery: LifecycleRecoveryResult;
+    startup: HostStartupResult;
+    status?: HostStatusService;
+    clock: LifecycleClock;
+    sha256: Sha256;
+}>): NativeInspectionEvidencePort;

package/node_modules/@nklisch/pi-plugins/dist/composition/native-inspection-evidence.js

@@ -0,0 +1,269 @@
+import { hashContent } from "../domain/content-manifest.js";
+import { RuntimeCapabilitySnapshotSchema } from "../domain/compatibility-policy.js";
+import { compareUtf8 } from "../domain/canonical-json.js";
+import { deriveMarketplaceRegistrationId, deriveMarketplaceSnapshotToken } from "../domain/marketplace-registration.js";
+import { toScopeReference } from "../domain/state/scope.js";
+import { LifecycleRecoveryResultSchema } from "../application/recovery-contract.js";
+import { createInactiveProjectionExpectation } from "../application/ports/runtime-projection.js";
+import { marketplaceSnapshots, marketplaceUpdateRecords } from "../application/marketplace-update-state.js";
+const encoder = new TextEncoder();
+function stable(value) {
+    if (value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(stable).join(",")}]`;
+    if (typeof value !== "object")
+        throw new TypeError("inspection evidence is not serializable");
+    const record = value;
+    return `{${Object.keys(record).sort(compareUtf8).map((key) => `${JSON.stringify(key)}:${stable(record[key])}`).join(",")}}`;
+}
+function digest(tag, value, sha256) {
+    return hashContent(encoder.encode(`${tag}\0${stable(value)}`), sha256);
+}
+function sameAuthority(left, right) {
+    const { capturedAt: _leftAt, ...leftAuthority } = left;
+    const { capturedAt: _rightAt, ...rightAuthority } = right;
+    return stable(leftAuthority) === stable(rightAuthority);
+}
+function installAuthority(binding) {
+    const { capturedAt: _capturedAt, updateDigest: _updateDigest, scopes, ...authority } = binding;
+    return {
+        ...authority,
+        // Exact trust/configuration writes advance the containing scope generation.
+        // Preserve health/corruption authority while excluding only that expected
+        // workflow-owned counter.
+        scopes: scopes.map(({ generation: _generation, ...scope }) => scope),
+    };
+}
+function sameInstallAuthority(left, right) {
+    return stable(installAuthority(left)) === stable(installAuthority(right));
+}
+function scopeOrder(left, right) {
+    if (left.kind !== right.kind)
+        return left.kind === "user" ? -1 : 1;
+    return left.kind === "project" && right.kind === "project" ? compareUtf8(left.projectKey, right.projectKey) : 0;
+}
+function records(result) {
+    if (!result.ok)
+        return [];
+    const values = "installed" in result.snapshot ? result.snapshot.installed.plugins : result.snapshot.project.plugins;
+    return values.map((record) => ({ scope: result.snapshot.scope, record }));
+}
+function ownerMatches(scope, plugin, expectation) {
+    const owner = expectation.kind === "active"
+        ? { scope: expectation.projection.scope, plugin: expectation.projection.plugin }
+        : { scope: expectation.scope, plugin: expectation.plugin };
+    return stable(owner.scope) === stable(scope) && owner.plugin === plugin;
+}
+function mcpExpectation(desired, scope, plugin) {
+    const transition = desired?.mcp.find((entry) => ownerMatches(scope, plugin, entry.to.expectation));
+    if (transition?.to.kind === "source") {
+        const registration = transition.to.projection.registration;
+        return Object.freeze({
+            kind: "source",
+            registrationDigest: registration.digest,
+            servers: Object.entries(registration.source.servers).map(([serverKey, server]) => Object.freeze({
+                componentId: server.componentId,
+                serverKey: serverKey,
+                transport: server.transport,
+            })).sort((left, right) => compareUtf8(left.serverKey, right.serverKey)),
+        });
+    }
+    return Object.freeze({ kind: transition?.to.kind === "none" ? "none" : "inactive", servers: Object.freeze([]) });
+}
+function safeMcpStatus(result) {
+    if (result.kind === "ready")
+        return Object.freeze({ kind: "ready", status: result.status });
+    if (result.kind === "ambiguous")
+        return Object.freeze({ kind: "mismatched" });
+    return Object.freeze({ kind: "unavailable", code: result.kind === "unavailable" ? "RUNTIME_UNAVAILABLE" : result.kind === "cancelled" ? "CANCELLED" : result.code });
+}
+function safeSkillObservation(result) {
+    if (result.kind === "ready")
+        return Object.freeze({ kind: "ready", observation: result.observation });
+    if (result.kind === "failed" && result.code === "OBSERVATION_MISMATCH")
+        return Object.freeze({ kind: "mismatched" });
+    return Object.freeze({ kind: "unavailable", code: result.kind === "cancelled" ? "CANCELLED" : result.code });
+}
+/**
+ * Compose existing state, catalog, capability, recovery, and local runtime
+ * evidence. The adapter never reconciles, reloads, refreshes, launches, or
+ * probes; all runtime calls below are observation-only against already
+ * composed local participants.
+ */
+export function createNativeInspectionEvidence(input) {
+    if (input === null || typeof input !== "object" || typeof input.sha256 !== "function") {
+        throw new TypeError("native inspection evidence dependencies are required");
+    }
+    const scopes = [...input.scopes].sort(scopeOrder);
+    const capabilities = input.capabilities === undefined ? undefined : RuntimeCapabilitySnapshotSchema.parse(input.capabilities);
+    const recovery = LifecycleRecoveryResultSchema.parse(input.recovery);
+    const capabilityDigest = capabilities === undefined ? undefined : digest("inspection-capability-v1", capabilities, input.sha256);
+    async function captureAuthority(signal) {
+        signal.throwIfAborted();
+        const currentProject = await input.revalidateProject(signal);
+        const states = [];
+        const scopeBindings = [];
+        for (const scope of scopes) {
+            try {
+                const result = await input.state.read(scope, signal);
+                states.push(result);
+                const corruptions = result.ok ? result.snapshot.corruptions : result.corruptions;
+                const corruptionCodes = corruptions.map((item) => item.code).sort(compareUtf8);
+                scopeBindings.push({
+                    scope: toScopeReference(scope),
+                    ...(result.ok ? { generation: result.snapshot.generation } : {}),
+                    status: result.ok && corruptions.length === 0 ? "ready" : "corrupt",
+                    corruptionCodes,
+                    ...(corruptions.length === 0 ? {} : { corruptionDigest: digest("inspection-state-corruption-v1", corruptions, input.sha256) }),
+                });
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw error;
+                scopeBindings.push({ scope: toScopeReference(scope), status: "unavailable", corruptionCodes: [] });
+            }
+        }
+        let catalogs = [];
+        const globalRegistry = states.find((result) => result.ok && result.snapshot.scope.kind === "user");
+        if (globalRegistry?.ok) {
+            const registryReference = toScopeReference(globalRegistry.snapshot.scope);
+            const snapshots = marketplaceSnapshots(globalRegistry.snapshot);
+            for (const target of states) {
+                if (!target.ok)
+                    continue;
+                const targetReference = toScopeReference(target.snapshot.scope);
+                for (const record of marketplaceUpdateRecords(globalRegistry.snapshot)) {
+                    const registrationId = deriveMarketplaceRegistrationId({ scope: registryReference, source: record.source }, input.sha256);
+                    const selected = snapshots.find((snapshot) => snapshot.marketplace === record.marketplace);
+                    catalogs.push({
+                        scope: targetReference,
+                        registrationId,
+                        ...(selected === undefined ? {} : { snapshot: deriveMarketplaceSnapshotToken({ scope: targetReference, registrationId, snapshot: selected }, input.sha256) }),
+                        // Replaced below by the catalog service's publication-verified
+                        // observation. A missing observation is unavailable, never guessed.
+                        cache: { kind: "unavailable" },
+                    });
+                }
+            }
+        }
+        // Validate the one global catalog projection for every readable plugin
+        // target. Native adapter errors never enter bindings or public observations.
+        for (const result of states) {
+            if (!result.ok)
+                continue;
+            const scope = toScopeReference(result.snapshot.scope);
+            if (!catalogs.some((catalog) => stable(catalog.scope) === stable(scope)))
+                continue;
+            try {
+                const page = await input.catalog.search({ scope: scope.kind, query: "", limit: 1 }, signal);
+                const observations = new Map(page.observations.map((observation) => [observation.registrationId, observation.cache]));
+                catalogs = catalogs.map((catalog) => stable(catalog.scope) !== stable(scope)
+                    ? catalog
+                    : { ...catalog, cache: observations.get(catalog.registrationId) ?? { kind: "unavailable" } });
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw error;
+                catalogs = catalogs.map((catalog) => stable(catalog.scope) !== stable(scope)
+                    ? catalog
+                    : { ...catalog, cache: { kind: "unavailable" } });
+            }
+        }
+        catalogs.sort((left, right) => {
+            const scopeCompare = left.scope.kind !== right.scope.kind ? (left.scope.kind === "user" ? -1 : 1)
+                : left.scope.kind === "project" && right.scope.kind === "project" ? compareUtf8(left.scope.projectKey, right.scope.projectKey)
+                    : 0;
+            return scopeCompare || compareUtf8(left.registrationId, right.registrationId);
+        });
+        const desired = input.desired();
+        const selectionSnapshot = input.selections.snapshot();
+        const runtime = [];
+        for (const { scope, record } of states.flatMap(records).sort((left, right) => {
+            const scopeCompare = scopeOrder(left.scope, right.scope);
+            return scopeCompare || compareUtf8(left.record.plugin, right.record.plugin);
+        })) {
+            signal.throwIfAborted();
+            const reference = toScopeReference(scope);
+            const selection = selectionSnapshot.selections.find((candidate) => stable(candidate.scope) === stable(reference) && candidate.plugin === record.plugin && candidate.revision.revision === record.selectedRevision);
+            const expectation = selection?.skillHook.prepared.expectation ?? createInactiveProjectionExpectation({ scope: reference, plugin: record.plugin, sha256: input.sha256 });
+            let skillsHooks;
+            try {
+                skillsHooks = safeSkillObservation(await input.skillHook.observe(expectation, signal));
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw error;
+                skillsHooks = Object.freeze({ kind: "unavailable", code: "ADAPTER_FAILED" });
+            }
+            let status;
+            try {
+                status = safeMcpStatus(await input.mcp.status({ scope: reference, plugin: record.plugin }, signal));
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw error;
+                status = Object.freeze({ kind: "unavailable", code: "ADAPTER_FAILED" });
+            }
+            runtime.push(Object.freeze({
+                scope: reference,
+                plugin: record.plugin,
+                selectedRevision: record.selectedRevision,
+                ...(selection === undefined ? {} : { projectionDigest: selection.skillHook.prepared.expectation.projection.digest }),
+                skillsHooks,
+                mcp: Object.freeze({ expected: mcpExpectation(desired, reference, record.plugin), status }),
+            }));
+        }
+        const runtimeEpoch = digest("inspection-runtime-epoch-v1", {
+            selectionEpoch: selectionSnapshot.epoch,
+            currentProject: { projectKey: currentProject.projectKey, trust: currentProject.trust },
+            runtime,
+        }, input.sha256);
+        const recoveryDigest = digest("inspection-recovery-v1", recovery, input.sha256);
+        const hostStatus = input.status?.snapshot();
+        const updateDigest = digest("inspection-update-v1", {
+            scopes: states.filter((result) => result.ok).map((result) => ({
+                scope: toScopeReference(result.snapshot.scope),
+                generation: result.snapshot.generation,
+                records: marketplaceUpdateRecords(result.snapshot),
+            })),
+            ...(hostStatus === undefined ? {} : { hostStatus }),
+        }, input.sha256);
+        const projectEpoch = digest("inspection-project-trust-v1", { projectKey: currentProject.projectKey, trust: currentProject.trust }, input.sha256);
+        const binding = Object.freeze({
+            capturedAt: input.clock.nowEpochMilliseconds(),
+            scopes: Object.freeze(scopeBindings),
+            currentProject: Object.freeze({ projectKey: currentProject.projectKey, trust: currentProject.trust, epoch: projectEpoch }),
+            catalogs: Object.freeze(catalogs),
+            capability: Object.freeze(capabilities === undefined
+                ? { status: "unavailable" }
+                : { status: "ready", digest: capabilityDigest, capturedBy: capabilities.capturedBy }),
+            runtimeEpoch,
+            recoveryDigest,
+            updateDigest,
+        });
+        return Object.freeze({ states: Object.freeze(states), currentProject, runtime: Object.freeze(runtime), binding });
+    }
+    const port = {
+        async capture(signal) {
+            const captured = await captureAuthority(signal);
+            return Object.freeze({
+                ...captured,
+                ...(capabilities === undefined ? {} : { capabilities }),
+                recovery,
+                startup: input.startup,
+                ...(input.status === undefined ? {} : { hostStatus: input.status.snapshot() }),
+            });
+        },
+        async validate(binding, signal) {
+            const current = await captureAuthority(signal);
+            return sameAuthority(binding, current.binding) ? "current" : "stale";
+        },
+        async validateForInstall(binding, signal) {
+            const current = await captureAuthority(signal);
+            return sameInstallAuthority(binding, current.binding) ? "current" : "stale";
+        },
+    };
+    return Object.freeze(port);
+}
+//# sourceMappingURL=native-inspection-evidence.js.map

package/node_modules/@nklisch/pi-plugins/dist/composition/native-inspection-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-inspection-evidence.js","sourceRoot":"","sources":["../../src/composition/native-inspection-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAsB,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAkC,MAAM,mCAAmC,CAAC;AACpH,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACxH,OAAO,EAAE,gBAAgB,EAAqB,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAgC,MAAM,qCAAqC,CAAC;AAClH,OAAO,EAAE,mCAAmC,EAA8B,MAAM,4CAA4C,CAAC;AAQ7H,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAc5G,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9H,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,KAAc,EAAE,MAAc;IACzD,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAA+B,EAAE,KAAgC;IACtF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC;IAC1D,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC,cAAc,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAkC;IAC1D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;IAC/F,OAAO;QACL,GAAG,SAAS;QACZ,4EAA4E;QAC5E,0EAA0E;QAC1E,0BAA0B;QAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA+B,EAAE,KAAgC;IAC7F,OAAO,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB,EAAE,KAAmB;IACzD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,OAAO,CAAC,MAAuB;IACtC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IACpH,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY,CAAC,KAA0C,EAAE,MAAc,EAAE,WAAkC;IAClH,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,KAAK,QAAQ;QACzC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE;QAChF,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,OAAwC,EAAE,KAA0C,EAAE,MAAc;IAC1H,MAAM,UAAU,GAAG,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACnG,IAAI,UAAU,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAC3D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,QAAiB;YACvB,kBAAkB,EAAE,YAAY,CAAC,MAAM;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9F,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,SAAkB;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,UAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACrI,CAAC;AAED,SAAS,aAAa,CAAC,MAAgC;IACrD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChL,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA8C;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,CAAC,CAAC;IAC9H,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACxH,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAe7C;IACA,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,0BAA0B,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjI,KAAK,UAAU,gBAAgB,CAAC,MAAmB;QACjD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,aAAa,GAAkD,EAAE,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;gBACjF,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/E,aAAa,CAAC,IAAI,CAAC;oBACjB,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC;oBAC9B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACnE,eAAe;oBACf,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gCAAgC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC/H,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBAChC,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,GAAoD,EAAE,CAAC;QACnE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACnG,IAAI,cAAc,EAAE,EAAE,EAAE,CAAC;YACvB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,oBAAoB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChE,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,SAAS;gBACzB,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAChE,KAAK,MAAM,MAAM,IAAI,wBAAwB,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvE,MAAM,cAAc,GAAG,+BAA+B,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1H,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC;oBAC3F,QAAQ,CAAC,IAAI,CAAC;wBACZ,KAAK,EAAE,eAAe;wBACtB,cAAc;wBACd,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,8BAA8B,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC7J,+DAA+D;wBAC/D,oEAAoE;wBACpE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,6EAA6E;QAC7E,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,SAAS;YACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YACnF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC5F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtH,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;oBAC1E,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAClG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBAChC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC;oBAC1E,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/F,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC9H,CAAC,CAAC,CAAC,CAAC;YACN,OAAO,YAAY,IAAI,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,OAAO,GAA+B,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC3E,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,YAAY,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACnN,MAAM,WAAW,GAAG,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,IAAI,mCAAmC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACxK,IAAI,WAAoD,CAAC;YACzD,IAAI,CAAC;gBACH,WAAW,GAAG,oBAAoB,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBAChC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,MAAiD,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACtG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBAChC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACzB,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACpH,WAAW;gBACX,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;aAC5F,CAAC,CAAC,CAAC;QACN,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,6BAA6B,EAAE;YACzD,cAAc,EAAE,iBAAiB,CAAC,KAAK;YACvC,cAAc,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE;YACtF,OAAO;SACR,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,sBAAsB,EAAE;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC5D,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC9C,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;gBACtC,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC;aACnD,CAAC,CAAC;YACH,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACpD,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,YAAY,GAAG,MAAM,CAAC,6BAA6B,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjJ,MAAM,OAAO,GAA8B,MAAM,CAAC,MAAM,CAAC;YACvD,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,oBAAoB,EAAE;YAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACpC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YAC1H,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,MAAM,EAAE,aAAsB,EAAE;gBACpC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,gBAAiB,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC;YACjG,YAAY;YACZ,cAAc;YACd,YAAY;SACb,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,MAAM,IAAI,GAAiC;QACzC,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,GAAG,QAAQ;gBACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;gBACvD,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM;YAC5B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM;YACtC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/composition/native-inspection-readiness.d.ts

@@ -0,0 +1,14 @@
+import type { LifecycleStateStore } from "../application/ports/lifecycle-state-store.js";
+import type { PluginConfigurationStore } from "../application/ports/plugin-configuration-store.js";
+import type { ProjectTrustPort } from "../application/ports/project-trust.js";
+import type { Sha256 } from "../domain/source.js";
+import type { HostCapabilityStatus } from "../application/host-observation-contract.js";
+import type { InspectionReadinessPort } from "../application/ports/inspection-readiness.js";
+/** Read trust/configuration presence without returning values, locators, roots, or stores. */
+export declare function createNativeInspectionReadiness(input: Readonly<{
+    state: LifecycleStateStore;
+    configurations: PluginConfigurationStore;
+    projectTrust: ProjectTrustPort;
+    secretCustody: HostCapabilityStatus;
+    sha256: Sha256;
+}>): InspectionReadinessPort;

package/node_modules/@nklisch/pi-plugins/dist/composition/native-inspection-readiness.js

@@ -0,0 +1,127 @@
+import { compareUtf8 } from "../domain/canonical-json.js";
+import { PluginConfigurationSchema } from "../domain/configuration.js";
+import { verifyPluginConfigurationDocument } from "../domain/configured-values.js";
+import { evaluateTrust, verifyTrustCandidate } from "../domain/trust-policy.js";
+import { ScopeReferenceSchema } from "../domain/state/scope.js";
+import { NativeConfigurationOptionViewSchema } from "../application/native-inspection-contract.js";
+import { NativeDisplayLimits, toSafeDisplayField } from "../application/native-inspection-display.js";
+function hasDefault(option) {
+    return "default" in option.value && option.value.default !== undefined;
+}
+function sameScope(left, right) {
+    return JSON.stringify(left) === JSON.stringify(right);
+}
+/** Read trust/configuration presence without returning values, locators, roots, or stores. */
+export function createNativeInspectionReadiness(input) {
+    if (input === null || typeof input !== "object" || typeof input.sha256 !== "function") {
+        throw new TypeError("native inspection readiness dependencies are required");
+    }
+    const custody = Object.freeze({ ...input.secretCustody });
+    const port = {
+        async trust(candidateInput, scopeInput, signal) {
+            signal.throwIfAborted();
+            const scope = ScopeReferenceSchema.parse(scopeInput);
+            let candidate;
+            try {
+                candidate = verifyTrustCandidate(candidateInput, input.sha256);
+            }
+            catch {
+                return "invalid-evidence";
+            }
+            if (!sameScope(scope, candidate.evidence.scope))
+                return "invalid-evidence";
+            if (scope.kind === "project") {
+                try {
+                    if ((await input.projectTrust.assess(scope.projectKey, signal)).kind !== "trusted")
+                        return "project-untrusted";
+                }
+                catch (error) {
+                    if (signal.aborted)
+                        throw error;
+                    return "unavailable";
+                }
+            }
+            let state;
+            try {
+                state = await input.state.read({ kind: "user" }, signal);
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw error;
+                return "unavailable";
+            }
+            if (!state.ok || !("trust" in state.snapshot))
+                return "unavailable";
+            const decision = evaluateTrust(candidate, state.snapshot.trust.records, input.sha256);
+            if (decision.kind === "authorized")
+                return "authorized";
+            if (decision.reason === "ABSENT")
+                return "required";
+            if (decision.reason === "REVOKED")
+                return "revoked";
+            return "invalid-evidence";
+        },
+        async configuration(request, signal) {
+            signal.throwIfAborted();
+            const descriptors = PluginConfigurationSchema.parse(request.descriptors);
+            const scope = ScopeReferenceSchema.parse(request.scope);
+            let configured = new Set();
+            let documentState = request.configurationRef === undefined ? "missing" : "ready";
+            if (request.configurationRef !== undefined) {
+                try {
+                    const result = await input.configurations.read(request.configurationRef, signal);
+                    if (result.kind === "missing") {
+                        documentState = "missing";
+                    }
+                    else {
+                        try {
+                            const document = verifyPluginConfigurationDocument(result.document, descriptors, input.sha256);
+                            if (document.configurationRef !== request.configurationRef || document.plugin !== request.plugin || !sameScope(document.scope, scope)) {
+                                documentState = "invalid";
+                            }
+                            else {
+                                configured = new Set([...document.values.map((entry) => entry.key), ...document.secrets.map((entry) => entry.key)]);
+                            }
+                        }
+                        catch {
+                            documentState = "invalid";
+                        }
+                    }
+                }
+                catch (error) {
+                    if (signal.aborted)
+                        throw error;
+                    documentState = "unavailable";
+                }
+            }
+            const views = descriptors.options.map((option) => {
+                let state;
+                if (documentState === "invalid")
+                    state = "invalid";
+                else if (documentState === "unavailable")
+                    state = "unavailable";
+                else if (configured.has(option.key))
+                    state = option.sensitive && custody.status === "unavailable" ? "unavailable" : "configured";
+                else if (hasDefault(option))
+                    state = "defaulted";
+                else if (option.sensitive && custody.status === "unavailable")
+                    state = "unavailable";
+                else
+                    state = "missing";
+                return NativeConfigurationOptionViewSchema.parse({
+                    key: option.key,
+                    label: toSafeDisplayField(option.label.value, { maxScalars: NativeDisplayLimits.labelScalars }),
+                    valueKind: option.value.kind,
+                    required: option.required,
+                    sensitive: option.sensitive,
+                    defaultPresent: hasDefault(option),
+                    state,
+                });
+            }).sort((left, right) => compareUtf8(left.key, right.key));
+            return Object.freeze(views);
+        },
+        secretCustody: () => custody,
+    };
+    return Object.freeze(port);
+}
+//# sourceMappingURL=native-inspection-readiness.js.map

package/node_modules/@nklisch/pi-plugins/dist/composition/native-inspection-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-inspection-readiness.js","sourceRoot":"","sources":["../../src/composition/native-inspection-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAA4B,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAMhE,OAAO,EAAE,mCAAmC,EAAsC,MAAM,8CAA8C,CAAC;AACvI,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAGtG,SAAS,UAAU,CAAC,MAA2B;IAC7C,OAAO,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,+BAA+B,CAAC,KAM9C;IACA,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IAE1D,MAAM,IAAI,GAA4B;QACpC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM;YAC5C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,SAAS,CAAC;YACd,IAAI,CAAC;gBACH,SAAS,GAAG,oBAAoB,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,kBAAkB,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,kBAAkB,CAAC;YAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,mBAAmB,CAAC;gBACjH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,KAAK,CAAC;oBAChC,OAAO,aAAa,CAAC;gBACvB,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,KAAK,CAAC;gBAChC,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,aAAa,CAAC;YACpE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtF,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,YAAY,CAAC;YACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,UAAU,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACpD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM;YACjC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACnC,IAAI,aAAa,GAAoD,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAClI,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;oBACjF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAC9B,aAAa,GAAG,SAAS,CAAC;oBAC5B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,iCAAiC,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;4BAC/F,IAAI,QAAQ,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gCACtI,aAAa,GAAG,SAAS,CAAC;4BAC5B,CAAC;iCAAM,CAAC;gCACN,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;4BACtH,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,aAAa,GAAG,SAAS,CAAC;wBAC5B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,KAAK,CAAC;oBAChC,aAAa,GAAG,aAAa,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC/C,IAAI,KAA6C,CAAC;gBAClD,IAAI,aAAa,KAAK,SAAS;oBAAE,KAAK,GAAG,SAAS,CAAC;qBAC9C,IAAI,aAAa,KAAK,aAAa;oBAAE,KAAK,GAAG,aAAa,CAAC;qBAC3D,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;oBAAE,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;qBAC5H,IAAI,UAAU,CAAC,MAAM,CAAC;oBAAE,KAAK,GAAG,WAAW,CAAC;qBAC5C,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa;oBAAE,KAAK,GAAG,aAAa,CAAC;;oBAChF,KAAK,GAAG,SAAS,CAAC;gBACvB,OAAO,mCAAmC,CAAC,KAAK,CAAC;oBAC/C,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,mBAAmB,CAAC,YAAY,EAAE,CAAC;oBAC/F,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC;oBAClC,KAAK;iBACN,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO;KAC7B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/composition/node-pi-runtime-capability-probe.d.ts

@@ -0,0 +1,8 @@
+import type { HookExecutableResolverPort } from "../application/ports/hook-executable-resolver.js";
+import type { RuntimeCapabilityProbe } from "../application/ports/runtime-capability-probe.js";
+import type { RuntimeParticipantQualification } from "./runtime-participant-qualification.js";
+/** Complete capability chain; optional participants remain truthful absence. */
+export declare function createNodePiRuntimeCapabilityProbe(input: Readonly<{
+    executables: HookExecutableResolverPort;
+    qualification: RuntimeParticipantQualification;
+}>): RuntimeCapabilityProbe;