@nklisch/pi-enhanced 0.2.3 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/domain/state/project-state.d.ts

@@ -1,327 +0,0 @@
-import { z } from "zod";
-import { type ContentDigest } from "../content-manifest.js";
-import { type ProjectIdentity, type ProjectKey, type ScopeContext } from "./scope.js";
-import { type InstalledPluginRecord, type MarketplaceSnapshotRecord } from "./installed-state.js";
-export { GenerationSchema } from "./config-state.js";
-export type { Generation } from "./config-state.js";
-import type { Sha256 } from "../source.js";
-/**
- * Digest preimage used for a project-local document whose portable declaration
- * has never been synchronized. Fresh scopes and version cut-overs share it.
- */
-export declare const UNSYNCHRONIZED_PORTABLE_INTENT = "portable-project-intent-unsynchronized-v1";
-/**
- * Machine-local state for one verified project declaration and identity. This
- * is the only project-local schema; the literal version remains so a future
- * clean cut-over can recognize stale documents, which the state codec
- * reinitializes instead of migrating.
- */
-export declare const ProjectLocalStateDocumentSchema: z.ZodReadonly<z.ZodObject<{
-    schemaVersion: z.ZodLiteral<4>;
-    generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
-    projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-    identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"repository">;
-        canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-        repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodLiteral<"path-only">;
-        canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
-        limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
-    }, z.core.$strict>>], "kind">;
-    declarationDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-    scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
-        application: z.ZodOptional<z.ZodEnum<{
-            automatic: "automatic";
-            manual: "manual";
-        }>>;
-        schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-            id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
-            startedAt: z.ZodNumber;
-            renewedAt: z.ZodNumber;
-            expiresAt: z.ZodNumber;
-        }, z.core.$strict>>>;
-    }, z.core.$strict>>>;
-    marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
-        source: z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodEnum<{
-                git: "git";
-                github: "github";
-                "local-git": "local-git";
-            }>;
-            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
-        }, z.core.$strict>>;
-        contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-        binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-        contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
-    }, z.core.$strict>>>>;
-    plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-        activation: z.ZodEnum<{
-            disabled: "disabled";
-            enabled: "enabled";
-        }>;
-        selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-        previousRevision: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">>;
-        revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-            revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-            evidence: z.ZodReadonly<z.ZodObject<{
-                plugin: z.ZodReadonly<z.ZodObject<{
-                    key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-                    marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
-                    marketplaceEntryName: z.ZodString;
-                }, z.core.$strict>>;
-                source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-                    marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    declaredVersion: z.ZodOptional<z.ZodString>;
-                    sourceRevision: z.ZodOptional<z.ZodString>;
-                    kind: z.ZodLiteral<"marketplace-path">;
-                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-                    marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
-                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-                    marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    declaredVersion: z.ZodOptional<z.ZodString>;
-                    sourceRevision: z.ZodOptional<z.ZodString>;
-                    kind: z.ZodLiteral<"git">;
-                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
-                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-                    marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    declaredVersion: z.ZodOptional<z.ZodString>;
-                    sourceRevision: z.ZodOptional<z.ZodString>;
-                    kind: z.ZodLiteral<"git-subdir">;
-                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
-                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-                    marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
-                    declaredVersion: z.ZodOptional<z.ZodString>;
-                    sourceRevision: z.ZodOptional<z.ZodString>;
-                    kind: z.ZodLiteral<"npm">;
-                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-                }, z.core.$strict>>], "kind">;
-                components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                    id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
-                    kind: z.ZodEnum<{
-                        foreign: "foreign";
-                        hook: "hook";
-                        "mcp-server": "mcp-server";
-                        skill: "skill";
-                    }>;
-                }, z.core.$strict>>>>;
-                compatibility: z.ZodReadonly<z.ZodObject<{
-                    activatable: z.ZodBoolean;
-                    fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-                }, z.core.$strict>>;
-                trust: z.ZodReadonly<z.ZodObject<{
-                    executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-                }, z.core.$strict>>;
-            }, z.core.$strict>>;
-            contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-            contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
-            dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
-            configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
-        }, z.core.$strict>>>>;
-    }, z.core.$strict>>>>;
-    marketplaceUpdates: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
-        source: z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"github">;
-            repository: z.ZodString;
-            ref: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict> | z.ZodObject<{
-            kind: z.ZodLiteral<"git">;
-            url: z.ZodString;
-            ref: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict> | z.ZodObject<{
-            kind: z.ZodLiteral<"local-git">;
-            path: z.ZodString;
-            ref: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>, ...(z.ZodObject<{
-            kind: z.ZodLiteral<"github">;
-            repository: z.ZodString;
-            ref: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict> | z.ZodObject<{
-            kind: z.ZodLiteral<"git">;
-            url: z.ZodString;
-            ref: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict> | z.ZodObject<{
-            kind: z.ZodLiteral<"local-git">;
-            path: z.ZodString;
-            ref: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>)[]], "kind">;
-        origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"native">;
-        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"adoption">;
-            candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
-            documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                host: z.ZodEnum<{
-                    claude: "claude";
-                    codex: "codex";
-                }>;
-                document: z.ZodEnum<{
-                    "claude-known-marketplaces": "claude-known-marketplaces";
-                    "claude-user-settings": "claude-user-settings";
-                    "codex-user-config": "codex-user-config";
-                }>;
-                pointer: z.ZodOptional<z.ZodString>;
-            }, z.core.$strict>>>>;
-        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"legacy">;
-        }, z.core.$strict>>], "kind">;
-        applicationOverride: z.ZodOptional<z.ZodEnum<{
-            automatic: "automatic";
-            inherit: "inherit";
-            manual: "manual";
-        }>>;
-        pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-            plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-            sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
-            mode: z.ZodEnum<{
-                automatic: "automatic";
-                inherit: "inherit";
-                manual: "manual";
-            }>;
-        }, z.core.$strict>>>>>;
-        refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
-            claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-                id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
-                startedAt: z.ZodNumber;
-                expiresAt: z.ZodNumber;
-                owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-                    pid: z.ZodNumber;
-                    startToken: z.ZodString;
-                }, z.core.$strict>>>;
-            }, z.core.$strict>>>;
-            lastCompletedAt: z.ZodOptional<z.ZodNumber>;
-            lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-                completedAt: z.ZodNumber;
-                outcome: z.ZodEnum<{
-                    cancelled: "cancelled";
-                    failed: "failed";
-                    succeeded: "succeeded";
-                    unavailable: "unavailable";
-                    unchanged: "unchanged";
-                }>;
-                code: z.ZodOptional<z.ZodEnum<{
-                    ABORTED: "ABORTED";
-                    CATALOG_INVALID: "CATALOG_INVALID";
-                    CONTENT_INVALID: "CONTENT_INVALID";
-                    PROMOTION_FAILED: "PROMOTION_FAILED";
-                    REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
-                    SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
-                    STATE_STALE: "STATE_STALE";
-                }>>;
-            }, z.core.$strict>>>;
-            schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-                anchorAt: z.ZodNumber;
-                baseDelayMs: z.ZodNumber;
-                jitterMs: z.ZodNumber;
-                dueAt: z.ZodNumber;
-                reason: z.ZodEnum<{
-                    failure: "failure";
-                    legacy: "legacy";
-                    success: "success";
-                }>;
-            }, z.core.$strict>>>;
-            consecutiveFailures: z.ZodDefault<z.ZodNumber>;
-        }, z.core.$strict>>>;
-        notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-            id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
-            scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"user">;
-            }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"project">;
-                projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-            }, z.core.$strict>>], "kind">;
-            plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-            registrationId: z.ZodString;
-            snapshot: z.ZodString;
-            candidateId: z.ZodString;
-            candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
-            available: z.ZodReadonly<z.ZodObject<{
-                immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-                marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-                pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
-                declaredVersion: z.ZodOptional<z.ZodString>;
-                sourceRevision: z.ZodString;
-            }, z.core.$strict>>;
-            display: z.ZodReadonly<z.ZodObject<{
-                installed: z.ZodString;
-                available: z.ZodString;
-            }, z.core.$strict>>;
-            disposition: z.ZodEnum<{
-                "approval-required": "approval-required";
-                "automatic-applied": "automatic-applied";
-                "automatic-pending": "automatic-pending";
-                "automatic-retryable": "automatic-retryable";
-                "capability-blocked": "capability-blocked";
-                "configuration-blocked": "configuration-blocked";
-                "manual-required": "manual-required";
-            }>;
-            publication: z.ZodEnum<{
-                pending: "pending";
-                published: "published";
-            }>;
-            unread: z.ZodBoolean;
-            discoveredAt: z.ZodNumber;
-            acknowledgedAt: z.ZodOptional<z.ZodNumber>;
-            resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodEnum<{
-                    installed: "installed";
-                    "marketplace-removed": "marketplace-removed";
-                    "plugin-removed": "plugin-removed";
-                    superseded: "superseded";
-                }>;
-                at: z.ZodNumber;
-            }, z.core.$strict>>>;
-            automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
-                state: z.ZodEnum<{
-                    applied: "applied";
-                    blocked: "blocked";
-                    pending: "pending";
-                    retryable: "retryable";
-                }>;
-                reason: z.ZodOptional<z.ZodEnum<{
-                    "approval-required": "approval-required";
-                    "awaiting-host-context": "awaiting-host-context";
-                    "capability-unavailable": "capability-unavailable";
-                    "configuration-required": "configuration-required";
-                    degraded: "degraded";
-                    manual: "manual";
-                    "project-untrusted": "project-untrusted";
-                    retryable: "retryable";
-                    "secret-unavailable": "secret-unavailable";
-                    stale: "stale";
-                }>>;
-                attemptedAt: z.ZodOptional<z.ZodNumber>;
-                retryAt: z.ZodOptional<z.ZodNumber>;
-            }, z.core.$strict>>>;
-        }, z.core.$strict>>>>>;
-    }, z.core.$strict>>>>;
-}, z.core.$strict>>;
-export type ProjectLocalStateDocument = z.infer<typeof ProjectLocalStateDocumentSchema>;
-/** Build and verify the current project-local document envelope. */
-export declare function createProjectLocalStateDocument(input: unknown, context: Extract<ScopeContext, {
-    kind: "project";
-}>, sha256: Sha256): ProjectLocalStateDocument;
-export type ProjectPluginRecordCollectionDecode = Readonly<{
-    records: readonly InstalledPluginRecord[];
-    quarantined: readonly {
-        index: number;
-        recordKey?: string;
-        code: "RECORD_INVALID" | "RECORD_DUPLICATE";
-    }[];
-}>;
-/** Project-local variant of plugin-granular corruption isolation. */
-export declare function decodeProjectPlugins(input: unknown, context: Extract<ScopeContext, {
-    kind: "project";
-}>, sha256: Sha256): ProjectPluginRecordCollectionDecode;
-export type { ProjectIdentity, ProjectKey, ScopeContext, ContentDigest, MarketplaceSnapshotRecord };
-export type { InstalledPluginRecord };

package/node_modules/@nklisch/pi-plugins/dist/domain/state/project-state.js

@@ -1,185 +0,0 @@
-import { z } from "zod";
-import { ContentDigestSchema, } from "../content-manifest.js";
-import { ProjectIdentitySchema, ProjectKeySchema, ScopeContextSchema, createScopeContext, } from "./scope.js";
-import { InstalledPluginRecordSchema, MarketplaceSnapshotRecordSchema, createInstalledPluginRecord, createMarketplaceSnapshotRecord, } from "./installed-state.js";
-import { PluginKeySchema } from "../identity.js";
-import { GenerationSchema } from "./config-state.js";
-export { GenerationSchema } from "./config-state.js";
-import { MarketplaceRegistrationRecordSchema, MarketplaceUpdateRecordSchema, UpdateApplicationModeSchema, UpdateSchedulerLeaseSchema, } from "../update-policy.js";
-import { serializeMarketplaceSource } from "../source.js";
-/**
- * Digest preimage used for a project-local document whose portable declaration
- * has never been synchronized. Fresh scopes and version cut-overs share it.
- */
-export const UNSYNCHRONIZED_PORTABLE_INTENT = "portable-project-intent-unsynchronized-v1";
-/**
- * Machine-local state for one verified project declaration and identity. This
- * is the only project-local schema; the literal version remains so a future
- * clean cut-over can recognize stale documents, which the state codec
- * reinitializes instead of migrating.
- */
-export const ProjectLocalStateDocumentSchema = z.object({
-    schemaVersion: z.literal(4),
-    generation: GenerationSchema,
-    projectKey: ProjectKeySchema,
-    identity: ProjectIdentitySchema,
-    declarationDigest: ContentDigestSchema,
-    scope: z.object({
-        application: UpdateApplicationModeSchema.optional(),
-        schedulerLease: UpdateSchedulerLeaseSchema.optional(),
-    }).strict().readonly().default(() => ({})),
-    marketplaces: z.array(MarketplaceSnapshotRecordSchema).readonly(),
-    plugins: z.array(InstalledPluginRecordSchema).readonly(),
-    marketplaceUpdates: z.array(MarketplaceRegistrationRecordSchema).readonly(),
-}).strict().readonly().superRefine((document, context) => {
-    const snapshots = new Set(document.marketplaces.map((record) => record.marketplace));
-    const names = new Set();
-    const sources = new Set();
-    for (const [index, record] of document.marketplaceUpdates.entries()) {
-        if (record.source.kind === "local-git")
-            context.addIssue({ code: "custom", path: ["marketplaceUpdates", index, "source"], message: "project marketplace sources must be portable" });
-        if (!snapshots.has(record.marketplace))
-            context.addIssue({ code: "custom", path: ["marketplaceUpdates", index, "marketplace"], message: "registration must have a matching marketplace snapshot" });
-        if (names.has(record.marketplace))
-            context.addIssue({ code: "custom", path: ["marketplaceUpdates", index, "marketplace"], message: "duplicate marketplace registration" });
-        names.add(record.marketplace);
-        const source = serializeMarketplaceSource(record.source);
-        if (sources.has(source))
-            context.addIssue({ code: "custom", path: ["marketplaceUpdates", index, "source"], message: "duplicate marketplace source" });
-        sources.add(source);
-    }
-    const pluginKeys = new Set();
-    for (const [index, plugin] of document.plugins.entries()) {
-        if (pluginKeys.has(plugin.plugin))
-            context.addIssue({ code: "custom", path: ["plugins", index, "plugin"], message: "duplicate installed plugin" });
-        pluginKeys.add(plugin.plugin);
-        // Plugin scope is independent from the host-global marketplace registry;
-        // a project plugin does not require a duplicated local snapshot.
-    }
-});
-const ProjectLocalStateInputSchema = z
-    .object({
-    schemaVersion: z.literal(4).optional(),
-    generation: GenerationSchema,
-    projectKey: ProjectKeySchema,
-    identity: ProjectIdentitySchema,
-    declarationDigest: ContentDigestSchema,
-    marketplaces: z.array(z.unknown()),
-    plugins: z.array(z.unknown()),
-    marketplaceUpdates: z.array(z.unknown()).optional(),
-    scope: z.unknown().optional(),
-})
-    .strict();
-function sameJsonIdentity(left, right) {
-    if (Object.is(left, right))
-        return true;
-    if (left === null || right === null || typeof left !== "object" || typeof right !== "object")
-        return false;
-    if (Array.isArray(left) || Array.isArray(right)) {
-        return Array.isArray(left) && Array.isArray(right) && left.length === right.length &&
-            left.every((entry, index) => sameJsonIdentity(entry, right[index]));
-    }
-    const leftRecord = left;
-    const rightRecord = right;
-    const leftKeys = Object.keys(leftRecord);
-    const rightKeys = Object.keys(rightRecord);
-    return leftKeys.length === rightKeys.length && leftKeys.every((key) => Object.prototype.hasOwnProperty.call(rightRecord, key) && sameJsonIdentity(leftRecord[key], rightRecord[key]));
-}
-function projectScopeReference(context) {
-    return { kind: "project", projectKey: context.projectKey };
-}
-/**
- * Construct a project-local document only from a scope context whose key is
- * recomputed against the injected hash. The canonical root is retained as
- * identity evidence in this machine-local document; nested plugin references
- * receive only the path-free project key.
- */
-function normalizeProjectLocalCore(input, context, sha256) {
-    const value = ProjectLocalStateInputSchema.parse(input);
-    const verifiedContext = createScopeContext(ScopeContextSchema.parse(context), sha256);
-    if (verifiedContext.kind !== "project")
-        throw new Error("project-local state requires project scope context");
-    if (value.projectKey !== verifiedContext.projectKey)
-        throw new Error("project-local state project key does not match scope context");
-    if (!sameJsonIdentity(value.identity, verifiedContext.identity))
-        throw new Error("project-local state identity does not match scope context");
-    const scope = projectScopeReference(verifiedContext);
-    return {
-        value,
-        core: {
-            generation: value.generation,
-            projectKey: verifiedContext.projectKey,
-            identity: verifiedContext.identity,
-            declarationDigest: value.declarationDigest,
-            marketplaces: value.marketplaces.map((marketplace) => createMarketplaceSnapshotRecord(marketplace, sha256)),
-            plugins: value.plugins.map((plugin) => createInstalledPluginRecord({ ...plugin, scope }, sha256)),
-        },
-    };
-}
-/** Build and verify the current project-local document envelope. */
-export function createProjectLocalStateDocument(input, context, sha256) {
-    const value = ProjectLocalStateInputSchema.parse(input);
-    // Project plugins resolve through the host-global marketplace registry, so
-    // the constructor deliberately applies no plugin-to-snapshot cross-check.
-    const { core } = normalizeProjectLocalCore(value, context, sha256);
-    return ProjectLocalStateDocumentSchema.parse({
-        ...core,
-        schemaVersion: 4,
-        scope: value.scope ?? {},
-        marketplaceUpdates: (value.marketplaceUpdates ?? []).map((record) => MarketplaceUpdateRecordSchema.parse(record)),
-    });
-}
-function projectCandidateKey(input) {
-    if (input === null || typeof input !== "object")
-        return undefined;
-    const key = input.plugin;
-    return typeof key === "string" && PluginKeySchema.safeParse(key).success ? key : undefined;
-}
-/** Project-local variant of plugin-granular corruption isolation. */
-export function decodeProjectPlugins(input, context, sha256) {
-    if (!Array.isArray(input))
-        throw new Error("project plugin collection must be an array");
-    const valid = [];
-    const quarantined = [];
-    const verifiedContext = createScopeContext(ScopeContextSchema.parse(context), sha256);
-    if (verifiedContext.kind !== "project") {
-        throw new Error("project plugin collection requires project scope context");
-    }
-    const scope = projectScopeReference(verifiedContext);
-    const counts = new Map();
-    for (const candidate of input) {
-        const key = projectCandidateKey(candidate);
-        if (key !== undefined)
-            counts.set(key, (counts.get(key) ?? 0) + 1);
-    }
-    for (const [index, candidate] of input.entries()) {
-        const key = projectCandidateKey(candidate);
-        if (key === undefined) {
-            throw new Error(`project plugin record identity is missing or invalid at index ${index}`);
-        }
-        try {
-            const record = createInstalledPluginRecord({
-                ...candidate,
-                scope,
-            }, sha256);
-            valid.push({ index, key, record });
-        }
-        catch {
-            quarantined.push({ index, recordKey: key, code: "RECORD_INVALID" });
-        }
-    }
-    const records = [];
-    for (const candidate of valid) {
-        if (counts.get(candidate.key) > 1) {
-            quarantined.push({ index: candidate.index, recordKey: candidate.key, code: "RECORD_DUPLICATE" });
-        }
-        else {
-            records.push(candidate.record);
-        }
-    }
-    return {
-        records,
-        quarantined: quarantined.sort((left, right) => left.index - right.index),
-    };
-}
-//# sourceMappingURL=project-state.js.map

package/node_modules/@nklisch/pi-plugins/dist/domain/state/project-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-state.js","sourceRoot":"","sources":["../../../src/domain/state/project-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GAInB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,GAGhC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,2CAA2C,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,gBAAgB;IAC5B,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,qBAAqB;IAC/B,iBAAiB,EAAE,mBAAmB;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,WAAW,EAAE,2BAA2B,CAAC,QAAQ,EAAE;QACnD,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE;KACtD,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IACjE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACxD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACvD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACrL,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;QACpM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC3K,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACtJ,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACzD,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACnJ,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,yEAAyE;QACzE,iEAAiE;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,gBAAgB;IAC5B,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,qBAAqB;IAC/B,iBAAiB,EAAE,mBAAmB;IACtC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,SAAS,gBAAgB,CAAC,IAAa,EAAE,KAAc;IACrD,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3G,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAChF,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAG,IAA+B,CAAC;IACnD,MAAM,WAAW,GAAG,KAAgC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACpE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAC9G,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmD;IAIhF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,KAAc,EACd,OAAmD,EACnD,MAAc;IAEd,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,eAAe,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC9G,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACrI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAE9I,MAAM,KAAK,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACrD,OAAO;QACL,KAAK;QACL,IAAI,EAAE;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,eAAe,CAAC,UAAU;YACtC,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,+BAA+B,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC3G,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,GAAG,MAAiC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;SAC7H;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,OAAmD,EACnD,MAAc;IAEd,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,+BAA+B,CAAC,KAAK,CAAC;QAC3C,GAAG,IAAI;QACP,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,kBAAkB,EAAE,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAClH,CAAC,CAAC;AACL,CAAC;AAWD,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAI,KAAuC,CAAC,MAAM,CAAC;IAC5D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,OAAmD,EACnD,MAAc;IAEd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACzF,MAAM,KAAK,GAAyE,EAAE,CAAC;IACvF,MAAM,WAAW,GAAiE,EAAE,CAAC;IACrF,MAAM,eAAe,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,eAAe,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,iEAAiE,KAAK,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,2BAA2B,CAAC;gBACzC,GAAG,SAAoC;gBACvC,KAAK;aACN,EAAE,MAAM,CAAC,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAE,GAAG,CAAC,EAAE,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACnG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO;QACP,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;KACzE,CAAC;AACJ,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/domain/state/references.d.ts

@@ -1,78 +0,0 @@
-import { z } from "zod";
-import { type JsonValue } from "../schema.js";
-import { type PluginKey } from "../identity.js";
-import { type ContentDigest } from "../content-manifest.js";
-import { type ScopeReference } from "./scope.js";
-import type { Sha256 } from "../source.js";
-/**
- * All logical state references are opaque, versioned values. Keeping the tag
- * registry here prevents one family from accidentally accepting another
- * family's digest or inventing a second spelling of a reference kind.
- */
-export declare const StateReferenceKindRegistry: {
-    readonly stateBlob: {
-        readonly tag: "state-blob-v1";
-    };
-    readonly marketplaceContent: {
-        readonly tag: "marketplace-content-v1";
-    };
-    readonly pluginContent: {
-        readonly tag: "plugin-content-v1";
-    };
-    readonly pluginData: {
-        readonly tag: "plugin-data-v1";
-    };
-    readonly pluginConfiguration: {
-        readonly tag: "plugin-configuration-v1";
-    };
-    readonly trustSubject: {
-        readonly tag: "trust-subject-v1";
-    };
-    readonly runtimeProjection: {
-        readonly tag: "runtime-projection-v1";
-    };
-};
-export type StateReferenceKind = keyof typeof StateReferenceKindRegistry;
-export type StateReferenceTag = (typeof StateReferenceKindRegistry)[StateReferenceKind]["tag"];
-/** Build one strict schema for one registry-owned versioned digest tag. */
-export declare function taggedSha256<Brand extends string>(tag: string): PropertyKey extends Brand ? z.ZodString : z.core.$ZodBranded<z.ZodString, Brand, "out">;
-export declare const StateBlobRefSchema: z.core.$ZodBranded<z.ZodString, "StateBlobRef", "out">;
-export type StateBlobRef = z.infer<typeof StateBlobRefSchema>;
-export declare const MarketplaceContentRefSchema: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
-export type MarketplaceContentRef = z.infer<typeof MarketplaceContentRefSchema>;
-export declare const PluginContentRefSchema: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
-export type PluginContentRef = z.infer<typeof PluginContentRefSchema>;
-export declare const PluginDataRefSchema: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
-export type PluginDataRef = z.infer<typeof PluginDataRefSchema>;
-export declare const PluginConfigurationRefSchema: z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">;
-export type PluginConfigurationRef = z.infer<typeof PluginConfigurationRefSchema>;
-export declare const TrustSubjectRefSchema: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
-export type TrustSubjectRef = z.infer<typeof TrustSubjectRefSchema>;
-export declare const ProjectionRootRefSchema: z.core.$ZodBranded<z.ZodString, "ProjectionRootRef", "out">;
-export type ProjectionRootRef = z.infer<typeof ProjectionRootRefSchema>;
-export declare const StateReferenceSchema: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "StateBlobRef", "out">, z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">, z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">, z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">, z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">, z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">, z.core.$ZodBranded<z.ZodString, "ProjectionRootRef", "out">]>;
-export type StateReference = z.infer<typeof StateReferenceSchema>;
-export type ReferenceIdentity = JsonValue;
-export declare const ReferenceIdentitySchema: z.ZodPipe<z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>, z.ZodCustom<JsonValue, JsonValue>>;
-export declare function deriveStateBlobRef(identity: ReferenceIdentity, sha256: Sha256): StateBlobRef;
-export declare function deriveMarketplaceContentRef(identity: ReferenceIdentity, sha256: Sha256): MarketplaceContentRef;
-export declare function derivePluginContentRef(identity: ReferenceIdentity, sha256: Sha256): PluginContentRef;
-export declare function derivePluginDataRef(identity: ReferenceIdentity, sha256: Sha256): PluginDataRef;
-export declare function derivePluginConfigurationRef(identity: ReferenceIdentity, sha256: Sha256): PluginConfigurationRef;
-export declare function deriveTrustSubjectRef(identity: ReferenceIdentity, sha256: Sha256): TrustSubjectRef;
-export declare function deriveProjectionRootRef(identity: Readonly<{
-    scope: ScopeReference;
-    plugin: PluginKey;
-    projectionDigest: ContentDigest;
-}>, sha256: Sha256): ProjectionRootRef;
-export declare function verifyStateBlobRef(candidate: unknown, identity: ReferenceIdentity, sha256: Sha256): StateBlobRef;
-export declare function verifyMarketplaceContentRef(candidate: unknown, identity: ReferenceIdentity, sha256: Sha256): MarketplaceContentRef;
-export declare function verifyPluginContentRef(candidate: unknown, identity: ReferenceIdentity, sha256: Sha256): PluginContentRef;
-export declare function verifyPluginDataRef(candidate: unknown, identity: ReferenceIdentity, sha256: Sha256): PluginDataRef;
-export declare function verifyPluginConfigurationRef(candidate: unknown, identity: ReferenceIdentity, sha256: Sha256): PluginConfigurationRef;
-export declare function verifyTrustSubjectRef(candidate: unknown, identity: ReferenceIdentity, sha256: Sha256): TrustSubjectRef;
-export declare function verifyProjectionRootRef(candidate: unknown, identity: Readonly<{
-    scope: ScopeReference;
-    plugin: PluginKey;
-    projectionDigest: ContentDigest;
-}>, sha256: Sha256): ProjectionRootRef;