@nklisch/pi-enhanced 0.2.3 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/application/runtime-projection-cache.d.ts

@@ -1,387 +0,0 @@
-import { z } from "zod";
-import { type ContentDigest } from "../domain/content-manifest.js";
-import type { Sha256 } from "../domain/source.js";
-import { type PluginRuntimeProjection, type ProjectionExpectation, type RuntimeProjectionPort } from "./ports/runtime-projection.js";
-/** The cache is deliberately one bounded descriptor, not a component store. */
-export declare const RUNTIME_PROJECTION_CACHE_MAX_BYTES: number;
-export declare const RuntimeProjectionCacheEnvelopeSchemaV1: z.ZodReadonly<z.ZodObject<{
-    cacheVersion: z.ZodLiteral<1>;
-    projection: z.ZodReadonly<z.ZodObject<{
-        schemaVersion: z.ZodLiteral<1>;
-        scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"user">;
-        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"project">;
-            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-        }, z.core.$strict>>], "kind">;
-        plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-        pluginIdentity: z.ZodReadonly<z.ZodObject<{
-            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
-            marketplaceEntryName: z.core.$ZodBranded<z.ZodString, "PluginName", "out">;
-            manifestName: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        compatibilityDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-        revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-        contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
-        dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
-        configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
-        components: z.ZodReadonly<z.ZodObject<{
-            skills: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"skill">;
-                id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
-                name: z.ZodObject<{
-                    value: z.ZodString;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>;
-                root: z.ZodObject<{
-                    value: z.ZodString;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>;
-                metadata: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                    key: z.ZodString;
-                    claimed: z.ZodObject<{
-                        value: z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>;
-                        provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                            location: z.ZodReadonly<z.ZodObject<{
-                                host: z.ZodEnum<{
-                                    claude: "claude";
-                                    codex: "codex";
-                                }>;
-                                documentKind: z.ZodEnum<{
-                                    convention: "convention";
-                                    "foreign-state": "foreign-state";
-                                    hooks: "hooks";
-                                    manifest: "manifest";
-                                    marketplace: "marketplace";
-                                    mcp: "mcp";
-                                    skill: "skill";
-                                }>;
-                                path: z.ZodString;
-                                pointer: z.ZodOptional<z.ZodString>;
-                                line: z.ZodOptional<z.ZodNumber>;
-                                column: z.ZodOptional<z.ZodNumber>;
-                            }, z.core.$strict>>;
-                            declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                        }, z.core.$strict>>>>;
-                    }, z.core.$strict>;
-                }, z.core.$strict>>>>;
-            }, z.core.$strict>>>>;
-            hooks: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"hook">;
-                id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
-                event: z.ZodObject<{
-                    value: z.ZodString;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>;
-                matcher: z.ZodOptional<z.ZodObject<{
-                    value: z.ZodString;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>>;
-                handler: z.ZodObject<{
-                    value: z.ZodDiscriminatedUnion<[z.ZodObject<{
-                        kind: z.ZodLiteral<"exec">;
-                        command: z.ZodString;
-                        args: z.ZodReadonly<z.ZodArray<z.ZodString>>;
-                        timeoutMs: z.ZodOptional<z.ZodNumber>;
-                    }, z.core.$strict> | z.ZodPipe<z.ZodObject<{
-                        kind: z.ZodLiteral<"shell">;
-                        command: z.ZodString;
-                        shell: z.ZodOptional<z.ZodEnum<{
-                            bash: "bash";
-                            powershell: "powershell";
-                        }>>;
-                        timeoutMs: z.ZodOptional<z.ZodNumber>;
-                    }, z.core.$strict>, z.ZodTransform<{
-                        kind: "shell";
-                        command: string;
-                        shell?: "bash" | "powershell" | undefined;
-                        timeoutMs?: number | undefined;
-                    }, {
-                        kind: "shell";
-                        command: string;
-                        shell?: "bash" | "powershell" | undefined;
-                        timeoutMs?: number | undefined;
-                    }>>, ...(z.ZodObject<{
-                        kind: z.ZodLiteral<"exec">;
-                        command: z.ZodString;
-                        args: z.ZodReadonly<z.ZodArray<z.ZodString>>;
-                        timeoutMs: z.ZodOptional<z.ZodNumber>;
-                    }, z.core.$strict> | z.ZodPipe<z.ZodObject<{
-                        kind: z.ZodLiteral<"shell">;
-                        command: z.ZodString;
-                        shell: z.ZodOptional<z.ZodEnum<{
-                            bash: "bash";
-                            powershell: "powershell";
-                        }>>;
-                        timeoutMs: z.ZodOptional<z.ZodNumber>;
-                    }, z.core.$strict>, z.ZodTransform<{
-                        kind: "shell";
-                        command: string;
-                        shell?: "bash" | "powershell" | undefined;
-                        timeoutMs?: number | undefined;
-                    }, {
-                        kind: "shell";
-                        command: string;
-                        shell?: "bash" | "powershell" | undefined;
-                        timeoutMs?: number | undefined;
-                    }>>)[]], "kind">;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>;
-                metadata: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                    key: z.ZodString;
-                    claimed: z.ZodObject<{
-                        value: z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>;
-                        provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                            location: z.ZodReadonly<z.ZodObject<{
-                                host: z.ZodEnum<{
-                                    claude: "claude";
-                                    codex: "codex";
-                                }>;
-                                documentKind: z.ZodEnum<{
-                                    convention: "convention";
-                                    "foreign-state": "foreign-state";
-                                    hooks: "hooks";
-                                    manifest: "manifest";
-                                    marketplace: "marketplace";
-                                    mcp: "mcp";
-                                    skill: "skill";
-                                }>;
-                                path: z.ZodString;
-                                pointer: z.ZodOptional<z.ZodString>;
-                                line: z.ZodOptional<z.ZodNumber>;
-                                column: z.ZodOptional<z.ZodNumber>;
-                            }, z.core.$strict>>;
-                            declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                        }, z.core.$strict>>>>;
-                    }, z.core.$strict>;
-                }, z.core.$strict>>>>;
-            }, z.core.$strict>>>>;
-            mcpServers: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                kind: z.ZodLiteral<"mcp-server">;
-                id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
-                nativeKey: z.ZodObject<{
-                    value: z.ZodString;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>;
-                declaration: z.ZodObject<{
-                    value: z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>;
-                    provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                        location: z.ZodReadonly<z.ZodObject<{
-                            host: z.ZodEnum<{
-                                claude: "claude";
-                                codex: "codex";
-                            }>;
-                            documentKind: z.ZodEnum<{
-                                convention: "convention";
-                                "foreign-state": "foreign-state";
-                                hooks: "hooks";
-                                manifest: "manifest";
-                                marketplace: "marketplace";
-                                mcp: "mcp";
-                                skill: "skill";
-                            }>;
-                            path: z.ZodString;
-                            pointer: z.ZodOptional<z.ZodString>;
-                            line: z.ZodOptional<z.ZodNumber>;
-                            column: z.ZodOptional<z.ZodNumber>;
-                        }, z.core.$strict>>;
-                        declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                    }, z.core.$strict>>>>;
-                }, z.core.$strict>;
-                metadata: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                    key: z.ZodString;
-                    claimed: z.ZodObject<{
-                        value: z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>;
-                        provenance: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-                            location: z.ZodReadonly<z.ZodObject<{
-                                host: z.ZodEnum<{
-                                    claude: "claude";
-                                    codex: "codex";
-                                }>;
-                                documentKind: z.ZodEnum<{
-                                    convention: "convention";
-                                    "foreign-state": "foreign-state";
-                                    hooks: "hooks";
-                                    manifest: "manifest";
-                                    marketplace: "marketplace";
-                                    mcp: "mcp";
-                                    skill: "skill";
-                                }>;
-                                path: z.ZodString;
-                                pointer: z.ZodOptional<z.ZodString>;
-                                line: z.ZodOptional<z.ZodNumber>;
-                                column: z.ZodOptional<z.ZodNumber>;
-                            }, z.core.$strict>>;
-                            declaration: z.ZodOptional<z.ZodType<import("./ports/mcp-runtime.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("./ports/mcp-runtime.js").JsonValue, unknown>>>;
-                        }, z.core.$strict>>>>;
-                    }, z.core.$strict>;
-                }, z.core.$strict>>>>;
-            }, z.core.$strict>>>>;
-        }, z.core.$strict>>;
-        digest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-    }, z.core.$strict>>;
-}, z.core.$strict>>;
-export type RuntimeProjectionCacheEnvelope = z.infer<typeof RuntimeProjectionCacheEnvelopeSchemaV1>;
-export type PreparedRuntimeProjection = Readonly<{
-    expectation: Extract<ProjectionExpectation, {
-        kind: "active";
-    }>;
-    projection: PluginRuntimeProjection;
-    payloadDigest: ContentDigest;
-}>;
-export type RuntimeProjectionCacheReadResult = Readonly<{
-    kind: "ready";
-    value: PreparedRuntimeProjection;
-}> | Readonly<{
-    kind: "failed";
-    code: "CACHE_MISSING" | "CACHE_CORRUPT" | "IDENTITY_COLLISION" | "ADAPTER_FAILED";
-}> | Readonly<{
-    kind: "cancelled";
-}>;
-export interface RuntimeProjectionCacheReaderPort {
-    read(expectation: Extract<ProjectionExpectation, {
-        kind: "active";
-    }>, signal: AbortSignal): Promise<RuntimeProjectionCacheReadResult>;
-}
-export interface RuntimeProjectionCachePort extends RuntimeProjectionPort, RuntimeProjectionCacheReaderPort {
-}
-export type RuntimeProjectionCacheEncoding = Readonly<{
-    envelope: RuntimeProjectionCacheEnvelope;
-    bytes: Uint8Array;
-    payloadDigest: ContentDigest;
-}>;
-/** Hash the exact generated payload using the root-store's entry-list contract. */
-export declare function hashRuntimeProjectionPayload(bytes: Uint8Array, sha256: Sha256): ContentDigest;
-/** Encode one complete projection. MCP fields are retained as opaque schema data. */
-export declare function encodeRuntimeProjectionCache(projectionInput: PluginRuntimeProjection, sha256: Sha256): RuntimeProjectionCacheEncoding;
-/** Decode only canonical bytes and return a complete, independently bound value. */
-export declare function decodeRuntimeProjectionCache(bytes: Uint8Array, expectation: Extract<ProjectionExpectation, {
-    kind: "active";
-}>, sha256: Sha256): PreparedRuntimeProjection;

package/node_modules/@nklisch/pi-plugins/dist/application/runtime-projection-cache.js

@@ -1,128 +0,0 @@
-import { z } from "zod";
-import { hashContent, } from "../domain/content-manifest.js";
-import { ComponentIdSchema } from "../domain/components.js";
-import { createActiveProjectionExpectation, PluginRuntimeProjectionSchemaV1, } from "./ports/runtime-projection.js";
-/** The cache is deliberately one bounded descriptor, not a component store. */
-export const RUNTIME_PROJECTION_CACHE_MAX_BYTES = 4 * 1024 * 1024;
-const RUNTIME_PROJECTION_CACHE_FILE = "projection.json";
-const RUNTIME_PROJECTION_PAYLOAD_PREFIX = "projection-root-v1\0";
-export const RuntimeProjectionCacheEnvelopeSchemaV1 = z.object({
-    cacheVersion: z.literal(1),
-    projection: PluginRuntimeProjectionSchemaV1,
-}).strict().readonly();
-class CacheContractFailure extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "CacheContractFailure";
-    }
-}
-function canonicalize(value) {
-    if (Array.isArray(value))
-        return value.map(canonicalize);
-    if (value !== null && typeof value === "object") {
-        const record = value;
-        return Object.fromEntries(Object.keys(record).sort().map((key) => [key, canonicalize(record[key])]));
-    }
-    return value;
-}
-function canonicalJson(value) {
-    return JSON.stringify(canonicalize(value));
-}
-function canonicalBytes(value) {
-    return new TextEncoder().encode(canonicalJson(value));
-}
-function sameJson(left, right) {
-    return canonicalJson(left) === canonicalJson(right);
-}
-function assertSha256(sha256) {
-    if (typeof sha256 !== "function")
-        throw new TypeError("runtime projection cache requires SHA-256");
-}
-function payloadEntries(bytes, sha256) {
-    return [{
-            kind: "file",
-            path: RUNTIME_PROJECTION_CACHE_FILE,
-            mode: 0o644,
-            size: bytes.byteLength,
-            digest: hashContent(bytes, sha256),
-        }];
-}
-/** Hash the exact generated payload using the root-store's entry-list contract. */
-export function hashRuntimeProjectionPayload(bytes, sha256) {
-    assertSha256(sha256);
-    if (!(bytes instanceof Uint8Array))
-        throw new TypeError("runtime projection cache payload must be bytes");
-    return hashContent(new TextEncoder().encode(`${RUNTIME_PROJECTION_PAYLOAD_PREFIX}${JSON.stringify(payloadEntries(bytes, sha256))}`), sha256);
-}
-function assertCanonicalComponentOrder(projection) {
-    for (const components of [projection.components.skills, projection.components.hooks, projection.components.mcpServers]) {
-        let previous;
-        for (const component of components) {
-            ComponentIdSchema.parse(component.id);
-            if (previous !== undefined && previous >= component.id) {
-                throw new CacheContractFailure("runtime projection component order is not canonical");
-            }
-            previous = component.id;
-        }
-    }
-}
-function canonicalActiveExpectation(projection, sha256) {
-    assertCanonicalComponentOrder(projection);
-    try {
-        return createActiveProjectionExpectation(projection, sha256);
-    }
-    catch {
-        throw new CacheContractFailure("runtime projection identity is invalid");
-    }
-}
-function assertExpectedProjection(projection, expectation, sha256) {
-    const actualExpectation = canonicalActiveExpectation(projection, sha256);
-    if (!sameJson(actualExpectation, expectation)) {
-        throw new CacheContractFailure("runtime projection does not match its expected identity");
-    }
-    return actualExpectation;
-}
-/** Encode one complete projection. MCP fields are retained as opaque schema data. */
-export function encodeRuntimeProjectionCache(projectionInput, sha256) {
-    assertSha256(sha256);
-    const projection = PluginRuntimeProjectionSchemaV1.parse(projectionInput);
-    const expectation = canonicalActiveExpectation(projection, sha256);
-    const envelope = RuntimeProjectionCacheEnvelopeSchemaV1.parse({ cacheVersion: 1, projection });
-    const bytes = canonicalBytes(envelope);
-    if (bytes.byteLength > RUNTIME_PROJECTION_CACHE_MAX_BYTES) {
-        throw new CacheContractFailure("runtime projection cache exceeds its size limit");
-    }
-    return Object.freeze({ envelope, bytes, payloadDigest: hashRuntimeProjectionPayload(bytes, sha256) });
-}
-/** Decode only canonical bytes and return a complete, independently bound value. */
-export function decodeRuntimeProjectionCache(bytes, expectation, sha256) {
-    assertSha256(sha256);
-    if (!(bytes instanceof Uint8Array) || bytes.byteLength > RUNTIME_PROJECTION_CACHE_MAX_BYTES) {
-        throw new CacheContractFailure("runtime projection cache bytes are invalid");
-    }
-    let text;
-    try {
-        text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-    }
-    catch {
-        throw new CacheContractFailure("runtime projection cache encoding is invalid");
-    }
-    let parsed;
-    try {
-        parsed = RuntimeProjectionCacheEnvelopeSchemaV1.parse(JSON.parse(text));
-    }
-    catch {
-        throw new CacheContractFailure("runtime projection cache document is invalid");
-    }
-    const canonical = canonicalBytes(parsed);
-    if (canonical.byteLength !== bytes.byteLength || !canonical.every((byte, index) => byte === bytes[index])) {
-        throw new CacheContractFailure("runtime projection cache bytes are not canonical");
-    }
-    const actualExpectation = assertExpectedProjection(parsed.projection, expectation, sha256);
-    return Object.freeze({
-        expectation: actualExpectation,
-        projection: parsed.projection,
-        payloadDigest: hashRuntimeProjectionPayload(bytes, sha256),
-    });
-}
-//# sourceMappingURL=runtime-projection-cache.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/runtime-projection-cache.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-projection-cache.js","sourceRoot":"","sources":["../../src/application/runtime-projection-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,GAEZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAIhC,MAAM,+BAA+B,CAAC;AAEvC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClE,MAAM,6BAA6B,GAAG,iBAAiB,CAAC;AACxD,MAAM,iCAAiC,GAAG,sBAAsB,CAAC;AAEjE,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,+BAA+B;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAgCvB,MAAM,oBAAqB,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,KAAc;IAC7C,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,MAAc;IAOvD,OAAO,CAAC;YACN,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;SACnC,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAAC,KAAiB,EAAE,MAAc;IAC5E,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IAC1G,OAAO,WAAW,CAChB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,iCAAiC,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAChH,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAmC;IACxE,KAAK,MAAM,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvH,IAAI,QAA4B,CAAC;QACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;gBACvD,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAC;YACxF,CAAC;YACD,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAmC,EAAE,MAAc;IACrF,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,iCAAiC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAmC,EACnC,WAA+D,EAC/D,MAAc;IAEd,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,oBAAoB,CAAC,yDAAyD,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,4BAA4B,CAC1C,eAAwC,EACxC,MAAc;IAEd,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,UAAU,GAAG,+BAA+B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,sCAAsC,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,GAAG,kCAAkC,EAAE,CAAC;QAC1D,MAAM,IAAI,oBAAoB,CAAC,iDAAiD,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,4BAA4B,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,4BAA4B,CAC1C,KAAiB,EACjB,WAA+D,EAC/D,MAAc;IAEd,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,kCAAkC,EAAE,CAAC;QAC5F,MAAM,IAAI,oBAAoB,CAAC,4CAA4C,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,sCAAsC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,oBAAoB,CAAC,kDAAkD,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,4BAA4B,CAAC,KAAK,EAAE,MAAM,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/sensitive-value.d.ts

@@ -1,9 +0,0 @@
-export declare class SensitiveValue {
-    #private;
-    private constructor();
-    static fromUnknown(input: unknown): SensitiveValue;
-    toString(): "[REDACTED]";
-    toJSON(): "[REDACTED]";
-    [Symbol.toPrimitive](): "[REDACTED]";
-}
-export declare function withSensitiveValue<T>(value: SensitiveValue, consume: (plaintext: string) => T): T;

package/node_modules/@nklisch/pi-plugins/dist/application/sensitive-value.js

@@ -1,50 +0,0 @@
-/**
- * A deliberately tiny custody wrapper. It has no getter: callers can only
- * hand the plaintext to the one operation that immediately consumes it.
- * Native private storage and redacted coercions keep accidental diagnostics
- * from turning a secret into a durable value.
- */
-const plaintextByValue = new WeakMap();
-export class SensitiveValue {
-    #plaintext;
-    constructor(plaintext) {
-        this.#plaintext = plaintext;
-        plaintextByValue.set(this, plaintext);
-        Object.freeze(this);
-    }
-    static fromUnknown(input) {
-        if (input instanceof SensitiveValue)
-            return input;
-        if (typeof input === "string")
-            return new SensitiveValue(input);
-        if (typeof input === "number" && Number.isFinite(input))
-            return new SensitiveValue(String(input));
-        if (typeof input === "boolean")
-            return new SensitiveValue(String(input));
-        if (Array.isArray(input) && input.every((value) => typeof value === "string")) {
-            return new SensitiveValue(JSON.stringify(input));
-        }
-        throw new TypeError("sensitive value must be a string, finite number, boolean, or string array");
-    }
-    toString() {
-        return "[REDACTED]";
-    }
-    toJSON() {
-        return "[REDACTED]";
-    }
-    [Symbol.toPrimitive]() {
-        return "[REDACTED]";
-    }
-    [Symbol.for("nodejs.util.inspect.custom")]() {
-        return "[REDACTED]";
-    }
-}
-export function withSensitiveValue(value, consume) {
-    if (!(value instanceof SensitiveValue))
-        throw new TypeError("withSensitiveValue requires SensitiveValue");
-    const plaintext = plaintextByValue.get(value);
-    if (plaintext === undefined)
-        throw new TypeError("sensitive value is not valid");
-    return consume(plaintext);
-}
-//# sourceMappingURL=sensitive-value.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/sensitive-value.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sensitive-value.js","sourceRoot":"","sources":["../../src/application/sensitive-value.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAA0B,CAAC;AAE/D,MAAM,OAAO,cAAc;IACzB,UAAU,CAAS;IAEnB,YAAoB,SAAiB;QACnC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,KAAc;QAC/B,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClG,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC9E,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAC;IACnG,CAAC;IAED,QAAQ;QACN,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM;QACJ,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,CAAC,MAAM,CAAC,WAAW,CAAC;QAClB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACxC,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAqB,EACrB,OAAiC;IAEjC,IAAI,CAAC,CAAC,KAAK,YAAY,cAAc,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAC1G,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/source-materialization.d.ts

@@ -1,62 +0,0 @@
-import { BoundaryError } from "../domain/errors.js";
-import { type ContentDigest, type ContentManifest } from "../domain/content-manifest.js";
-import { type MarketplaceSource, type PluginSource, type ResolvedMarketplaceSource, type ResolvedPluginSource } from "../domain/source.js";
-import type { JsonValue } from "../domain/schema.js";
-import type { SourceMaterializationPortDependencies, StagingSlot } from "./ports/source-acquisition.js";
-export type { StagingSlot } from "./ports/source-acquisition.js";
-export type { ContentEntry, GitSourceAcquirer, MarketplacePathAcquirer, MaterializationLimits, NpmSourceAcquirer, SecureContentSession, SecureContentWriterFactory, } from "./ports/source-acquisition.js";
-export { DEFAULT_MATERIALIZATION_LIMITS } from "./ports/source-acquisition.js";
-export type MaterializedMarketplace = Readonly<{
-    root: string;
-    source: ResolvedMarketplaceSource;
-    content: ContentManifest;
-    binding: ContentDigest;
-}>;
-export type MaterializedPlugin = Readonly<{
-    root: string;
-    source: ResolvedPluginSource;
-    content: ContentManifest;
-    binding: ContentDigest;
-}>;
-export type SourceContext = Readonly<{
-    kind: "external";
-}> | Readonly<{
-    kind: "marketplace";
-    root: string;
-    source: ResolvedMarketplaceSource;
-    contentRootDigest: ContentDigest;
-    /** The complete verified manifest, retained for context revalidation. */
-    content: ContentManifest;
-    /** Digest binding the resolved source identity to contentRootDigest. */
-    binding: ContentDigest;
-}>;
-export type MaterializationFailureClassification = "security" | "permanent" | "transient";
-export declare class SourceMaterializationError extends BoundaryError {
-    readonly classification: MaterializationFailureClassification;
-    constructor(input: Readonly<{
-        code: "PATH_CONTAINMENT_FAILED" | "SOURCE_RESOLUTION_FAILED" | "ADAPTER_FAILED";
-        classification: MaterializationFailureClassification;
-        operation: string;
-        message: string;
-        details?: JsonValue;
-        cause?: unknown;
-    }>);
-}
-export type SourceMaterializationDependencies = SourceMaterializationPortDependencies;
-/**
- * Catalogs spell repository-relative paths with a leading `./`, while content
- * manifests intentionally forbid dot segments. Remove only that catalog sigil
- * before applying the shared containment validator; every other path rule is
- * preserved unchanged.
- */
-export declare function normalizeMarketplaceSourcePath(path: string): string;
-export declare function createSourceMaterializers(dependencies: SourceMaterializationDependencies): Readonly<{
-    marketplaces: MarketplaceMaterializer;
-    plugins: PluginMaterializer;
-}>;
-export interface MarketplaceMaterializer {
-    materialize(source: MarketplaceSource, destination: StagingSlot, signal: AbortSignal): Promise<MaterializedMarketplace>;
-}
-export interface PluginMaterializer {
-    materialize(source: PluginSource, context: SourceContext, destination: StagingSlot, signal: AbortSignal): Promise<MaterializedPlugin>;
-}