@openrig/cli 0.0.1 → 0.1.0

package/daemon/dist/domain/package-resolve-helper.d.ts

@@ -0,0 +1,19 @@
+import type { ResolvedPackage, FsOps } from "./package-resolver.js";
+export type ResolveResult = {
+    ok: true;
+    resolved: ResolvedPackage;
+} | {
+    ok: false;
+    kind: "resolution";
+    error: string;
+} | {
+    ok: false;
+    kind: "validation";
+    errors: string[];
+};
+/**
+ * Two-step resolve: find manifest file, then parse+validate separately.
+ * Keeps resolution errors (missing file) distinct from validation errors (bad schema).
+ */
+export declare function resolvePackage(sourceRef: string, cwd: string | undefined, fsOps: FsOps): ResolveResult;
+//# sourceMappingURL=package-resolve-helper.d.ts.map

package/daemon/dist/domain/package-resolve-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-resolve-helper.d.ts","sourceRoot":"","sources":["../../src/domain/package-resolve-helper.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAExD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,aAAa,CA0CtG"}

package/daemon/dist/domain/package-resolve-helper.js

@@ -0,0 +1,47 @@
+import nodePath from "node:path";
+import { createHash } from "node:crypto";
+import { parseManifest, validateManifest, normalizeManifest } from "./package-manifest.js";
+/**
+ * Two-step resolve: find manifest file, then parse+validate separately.
+ * Keeps resolution errors (missing file) distinct from validation errors (bad schema).
+ */
+export function resolvePackage(sourceRef, cwd, fsOps) {
+    const absoluteRef = nodePath.isAbsolute(sourceRef)
+        ? sourceRef
+        : nodePath.resolve(cwd ?? process.cwd(), sourceRef);
+    const manifestPath = nodePath.join(absoluteRef, "package.yaml");
+    if (!fsOps.exists(manifestPath)) {
+        return { ok: false, kind: "resolution", error: `No package.yaml found at ${manifestPath}` };
+    }
+    let rawYaml;
+    try {
+        rawYaml = fsOps.readFile(manifestPath);
+    }
+    catch (err) {
+        return { ok: false, kind: "resolution", error: err.message };
+    }
+    let raw;
+    try {
+        raw = parseManifest(rawYaml);
+    }
+    catch (err) {
+        return { ok: false, kind: "resolution", error: err.message };
+    }
+    const validation = validateManifest(raw);
+    if (!validation.valid) {
+        return { ok: false, kind: "validation", errors: validation.errors };
+    }
+    const manifest = normalizeManifest(raw);
+    const manifestHash = createHash("sha256").update(rawYaml).digest("hex");
+    return {
+        ok: true,
+        resolved: {
+            sourceKind: "local_path",
+            sourceRef: absoluteRef,
+            manifest,
+            manifestHash,
+            rawManifestYaml: rawYaml,
+        },
+    };
+}
+//# sourceMappingURL=package-resolve-helper.js.map

package/daemon/dist/domain/package-resolve-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-resolve-helper.js","sourceRoot":"","sources":["../../src/domain/package-resolve-helper.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAwB,MAAM,uBAAuB,CAAC;AAQjH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAuB,EAAE,KAAY;IACrF,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAEhE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,4BAA4B,YAAY,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAoB,CAAC;IAC3D,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,WAAW;YACtB,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,OAAO;SACzB;KACF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/package-resolver.d.ts

@@ -0,0 +1,19 @@
+import { type PackageManifest } from "./package-manifest.js";
+export interface ResolvedPackage {
+    sourceKind: "local_path";
+    sourceRef: string;
+    manifest: PackageManifest;
+    manifestHash: string;
+    rawManifestYaml: string;
+}
+export interface FsOps {
+    readFile: (filePath: string) => string;
+    exists: (filePath: string) => boolean;
+    listFiles?: (dirPath: string) => string[];
+}
+export declare class PackageResolver {
+    private fs;
+    constructor(fs: FsOps);
+    resolve(sourceRef: string, cwd?: string): ResolvedPackage;
+}
+//# sourceMappingURL=package-resolver.d.ts.map

package/daemon/dist/domain/package-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-resolver.d.ts","sourceRoot":"","sources":["../../src/domain/package-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAC3C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,EAAE,CAAQ;gBAEN,EAAE,EAAE,KAAK;IAIrB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,eAAe;CA+B1D"}

package/daemon/dist/domain/package-resolver.js

@@ -0,0 +1,35 @@
+import path from "node:path";
+import { createHash } from "node:crypto";
+import { parseManifest, validateManifest, normalizeManifest, } from "./package-manifest.js";
+export class PackageResolver {
+    fs;
+    constructor(fs) {
+        this.fs = fs;
+    }
+    resolve(sourceRef, cwd) {
+        // Resolve to absolute path
+        const absoluteRef = path.isAbsolute(sourceRef)
+            ? sourceRef
+            : path.resolve(cwd ?? process.cwd(), sourceRef);
+        const manifestPath = path.join(absoluteRef, "package.yaml");
+        if (!this.fs.exists(manifestPath)) {
+            throw new Error(`No package.yaml found at ${manifestPath}`);
+        }
+        const rawYaml = this.fs.readFile(manifestPath);
+        const raw = parseManifest(rawYaml);
+        const validation = validateManifest(raw);
+        if (!validation.valid) {
+            throw new Error(`Invalid manifest: ${validation.errors.join("; ")}`);
+        }
+        const manifest = normalizeManifest(raw);
+        const manifestHash = createHash("sha256").update(rawYaml).digest("hex");
+        return {
+            sourceKind: "local_path",
+            sourceRef: absoluteRef,
+            manifest,
+            manifestHash,
+            rawManifestYaml: rawYaml,
+        };
+    }
+}
+//# sourceMappingURL=package-resolver.js.map

package/daemon/dist/domain/package-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-resolver.js","sourceRoot":"","sources":["../../src/domain/package-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAgB/B,MAAM,OAAO,eAAe;IAClB,EAAE,CAAQ;IAElB,YAAY,EAAS;QACnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,GAAY;QACrC,2BAA2B;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC5C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QAElD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAE5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExE,OAAO;YACL,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,WAAW;YACtB,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,OAAO;SACzB,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/path-safety.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Validates that a path is safe: relative, no traversal, no absolute.
+ * @param path - the path to validate
+ * @param label - human-readable label for error messages
+ * @returns error string or null if valid
+ */
+export declare function validateSafePath(path: string, label: string): string | null;
+//# sourceMappingURL=path-safety.d.ts.map

package/daemon/dist/domain/path-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.d.ts","sourceRoot":"","sources":["../../src/domain/path-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY3E"}

package/daemon/dist/domain/path-safety.js

@@ -0,0 +1,24 @@
+/**
+ * Validates that a path is safe: relative, no traversal, no absolute.
+ * @param path - the path to validate
+ * @param label - human-readable label for error messages
+ * @returns error string or null if valid
+ */
+export function validateSafePath(path, label) {
+    if (!path || typeof path !== "string")
+        return `${label}: path is required`;
+    // Windows drive letter absolute
+    if (/^[A-Za-z]:[/\\]/.test(path))
+        return `${label}: absolute paths are not allowed (got "${path}")`;
+    // Normalize backslashes for traversal check
+    const normalized = path.replace(/\\/g, "/");
+    // Absolute path
+    if (normalized.startsWith("/"))
+        return `${label}: absolute paths are not allowed (got "${path}")`;
+    // Traversal
+    const segments = normalized.split("/");
+    if (segments.some((s) => s === ".."))
+        return `${label}: path traversal (..) is not allowed (got "${path}")`;
+    return null;
+}
+//# sourceMappingURL=path-safety.js.map

package/daemon/dist/domain/path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../src/domain/path-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,KAAK,oBAAoB,CAAC;IAC3E,gCAAgC;IAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,KAAK,0CAA0C,IAAI,IAAI,CAAC;IACpG,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,gBAAgB;IAChB,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,0CAA0C,IAAI,IAAI,CAAC;IAClG,YAAY;IACZ,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,GAAG,KAAK,8CAA8C,IAAI,IAAI,CAAC;IAC5G,OAAO,IAAI,CAAC;AACd,CAAC"}

package/daemon/dist/domain/pod-bundle-assembler.d.ts

@@ -0,0 +1,43 @@
+import { type AgentResolverFsOps } from "./agent-resolver.js";
+import { type PodBundleManifest } from "./bundle-types.js";
+export interface PodAssemblerFsOps extends AgentResolverFsOps {
+    mkdirp(path: string): void;
+    writeFile(path: string, content: string): void;
+    copyDir(src: string, dest: string): void;
+    listFiles(dirPath: string): string[];
+}
+export interface PodAssembleOptions {
+    rigRoot: string;
+    rigSpecPath: string;
+    outputDir: string;
+    bundleName: string;
+    bundleVersion: string;
+}
+export interface PodAssembleResult {
+    manifest: PodBundleManifest;
+    collectedFiles: string[];
+}
+/**
+ * Pod-aware bundle assembler. Walks embedded pod members' agent_ref to
+ * collect AgentSpecs and their resources/imports. Produces a self-contained
+ * bundle with rewritten refs.
+ */
+export declare class PodBundleAssembler {
+    private fs;
+    constructor(deps: {
+        fsOps: PodAssemblerFsOps;
+    });
+    /**
+     * Assemble a pod-aware bundle from a rig spec.
+     * @param opts - assembly options
+     * @returns manifest and list of collected files
+     */
+    assemble(opts: PodAssembleOptions): PodAssembleResult;
+    private collectRigFile;
+    private collectStartupFiles;
+    private vendorDirectory;
+    private findOriginalImportRef;
+    private rewriteAgentYamlImportRefs;
+    private rewriteRigSpecRefs;
+}
+//# sourceMappingURL=pod-bundle-assembler.d.ts.map

package/daemon/dist/domain/pod-bundle-assembler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pod-bundle-assembler.d.ts","sourceRoot":"","sources":["../../src/domain/pod-bundle-assembler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAA8B,KAAK,iBAAiB,EAA4D,MAAM,mBAAmB,CAAC;AAGjJ,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,EAAE,CAAoB;gBAElB,IAAI,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE;IAI9C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB;IAiIrD,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,0BAA0B;IAkBlC,OAAO,CAAC,kBAAkB;CAoB3B"}

package/daemon/dist/domain/pod-bundle-assembler.js

@@ -0,0 +1,198 @@
+import nodePath from "node:path";
+import { RigSpecCodec } from "./rigspec-codec.js";
+import { RigSpecSchema } from "./rigspec-schema.js";
+import { resolveAgentRef } from "./agent-resolver.js";
+import { serializePodBundleManifest } from "./bundle-types.js";
+/**
+ * Pod-aware bundle assembler. Walks embedded pod members' agent_ref to
+ * collect AgentSpecs and their resources/imports. Produces a self-contained
+ * bundle with rewritten refs.
+ */
+export class PodBundleAssembler {
+    fs;
+    constructor(deps) {
+        this.fs = deps.fsOps;
+    }
+    /**
+     * Assemble a pod-aware bundle from a rig spec.
+     * @param opts - assembly options
+     * @returns manifest and list of collected files
+     */
+    assemble(opts) {
+        // 1. Parse + validate rig spec
+        if (!this.fs.exists(opts.rigSpecPath)) {
+            throw new Error(`Rig spec not found: ${opts.rigSpecPath}`);
+        }
+        const rigSpecYaml = this.fs.readFile(opts.rigSpecPath);
+        const raw = RigSpecCodec.parse(rigSpecYaml);
+        const validation = RigSpecSchema.validate(raw);
+        if (!validation.valid) {
+            throw new Error(`Invalid rig spec: ${validation.errors.join("; ")}`);
+        }
+        const rigSpec = RigSpecSchema.normalize(raw);
+        // 2. Collect all files
+        const collectedFiles = [];
+        const agentEntries = [];
+        const resolvedAgentPaths = new Set();
+        // 2a. Rig spec — written after ref rewriting (deferred to step 4)
+        this.fs.mkdirp(opts.outputDir);
+        collectedFiles.push("rig.yaml");
+        // Track ref rewrites: originalRef -> vendored local: ref
+        const refRewrites = new Map();
+        // 2b. Culture file
+        if (rigSpec.cultureFile) {
+            this.collectRigFile(rigSpec.cultureFile, opts.rigRoot, opts.outputDir, collectedFiles);
+        }
+        // 2c. Rig startup files
+        this.collectStartupFiles(rigSpec.startup, opts.rigRoot, opts.outputDir, collectedFiles);
+        // 2d. Walk pods
+        for (const pod of rigSpec.pods) {
+            // Pod startup files
+            this.collectStartupFiles(pod.startup, opts.rigRoot, opts.outputDir, collectedFiles);
+            for (const member of pod.members) {
+                // Member startup files
+                this.collectStartupFiles(member.startup, opts.rigRoot, opts.outputDir, collectedFiles);
+                // Terminal members are bundle-native sentinels, not vendored agents.
+                if (member.agentRef === "builtin:terminal") {
+                    continue;
+                }
+                // Resolve agent_ref
+                const result = resolveAgentRef(member.agentRef, opts.rigRoot, this.fs);
+                if (!result.ok) {
+                    throw new Error(`Failed to resolve agent_ref "${member.agentRef}" for member ${pod.id}.${member.id}: ${result.code === "validation_failed" ? result.errors.join("; ") : result.error}`);
+                }
+                // Dedup: skip if already collected (but still record rewrite)
+                const agentVendorPath = `agents/${result.resolved.spec.name}`;
+                refRewrites.set(member.agentRef, `local:${agentVendorPath}`);
+                if (resolvedAgentPaths.has(result.resolved.sourcePath))
+                    continue;
+                resolvedAgentPaths.add(result.resolved.sourcePath);
+                this.vendorDirectory(result.resolved.sourcePath, nodePath.join(opts.outputDir, agentVendorPath), collectedFiles, agentVendorPath);
+                // Collect import entries — always record provenance, only vendor once
+                const importEntries = [];
+                for (const imp of result.imports) {
+                    const importVendorPath = `agents/${imp.spec.name}`;
+                    // Vendor files only once (dedup by path), but always record importEntry
+                    if (!resolvedAgentPaths.has(imp.sourcePath)) {
+                        resolvedAgentPaths.add(imp.sourcePath);
+                        this.vendorDirectory(imp.sourcePath, nodePath.join(opts.outputDir, importVendorPath), collectedFiles, importVendorPath);
+                    }
+                    importEntries.push({
+                        name: imp.spec.name,
+                        version: imp.spec.version,
+                        path: importVendorPath,
+                        originalRef: this.findOriginalImportRef(result.resolved.spec, imp.spec.name, result.imports),
+                        hash: imp.hash,
+                    });
+                }
+                // Rewrite vendored agent.yaml import refs to local: vendored paths
+                if (result.imports.length > 0) {
+                    this.rewriteAgentYamlImportRefs(nodePath.join(opts.outputDir, agentVendorPath, "agent.yaml"), agentVendorPath, result.imports.map((imp) => ({
+                        originalRef: this.findOriginalImportRef(result.resolved.spec, imp.spec.name, result.imports),
+                        vendoredPath: `agents/${imp.spec.name}`,
+                    })));
+                }
+                agentEntries.push({
+                    name: result.resolved.spec.name,
+                    version: result.resolved.spec.version,
+                    path: agentVendorPath,
+                    originalRef: member.agentRef,
+                    hash: result.resolved.hash,
+                    importEntries,
+                });
+            }
+        }
+        // 3. Write rewritten rig.yaml with vendored agent_ref values
+        const rewrittenRigYaml = this.rewriteRigSpecRefs(rigSpecYaml, refRewrites);
+        this.fs.writeFile(nodePath.join(opts.outputDir, "rig.yaml"), rewrittenRigYaml);
+        // 4. Build manifest
+        const manifest = {
+            schemaVersion: 2,
+            name: opts.bundleName,
+            version: opts.bundleVersion,
+            createdAt: new Date().toISOString(),
+            rigSpec: "rig.yaml",
+            agents: agentEntries,
+            cultureFile: rigSpec.cultureFile,
+        };
+        // Write manifest
+        this.fs.writeFile(nodePath.join(opts.outputDir, "bundle.yaml"), serializePodBundleManifest(manifest));
+        collectedFiles.push("bundle.yaml");
+        return { manifest, collectedFiles };
+    }
+    collectRigFile(relPath, rigRoot, outputDir, collected) {
+        const absPath = nodePath.resolve(rigRoot, relPath);
+        if (!absPath.startsWith(rigRoot)) {
+            throw new Error(`Path traversal detected: "${relPath}" escapes rig root`);
+        }
+        if (!this.fs.exists(absPath))
+            return; // optional files may not exist
+        const content = this.fs.readFile(absPath);
+        this.fs.mkdirp(nodePath.dirname(nodePath.join(outputDir, relPath)));
+        this.fs.writeFile(nodePath.join(outputDir, relPath), content);
+        collected.push(relPath);
+    }
+    collectStartupFiles(startup, rigRoot, outputDir, collected) {
+        if (!startup)
+            return;
+        for (const file of startup.files) {
+            this.collectRigFile(file.path, rigRoot, outputDir, collected);
+        }
+    }
+    vendorDirectory(srcDir, destDir, collected, relPrefix) {
+        this.fs.mkdirp(destDir);
+        const files = this.fs.listFiles(srcDir);
+        for (const file of files) {
+            const srcPath = nodePath.join(srcDir, file);
+            const destPath = nodePath.join(destDir, file);
+            this.fs.mkdirp(nodePath.dirname(destPath));
+            const content = this.fs.readFile(srcPath);
+            this.fs.writeFile(destPath, content);
+            collected.push(nodePath.join(relPrefix, file).replace(/\\/g, "/"));
+        }
+    }
+    findOriginalImportRef(spec, importName, resolvedImports) {
+        // Match by resolved spec name to original import ref
+        for (let i = 0; i < spec.imports.length; i++) {
+            if (i < resolvedImports.length && resolvedImports[i].spec.name === importName) {
+                return spec.imports[i].ref;
+            }
+        }
+        return `unknown:${importName}`;
+    }
+    rewriteAgentYamlImportRefs(vendoredAgentYamlPath, agentVendorDir, importMappings) {
+        if (!this.fs.exists(vendoredAgentYamlPath))
+            return;
+        const content = this.fs.readFile(vendoredAgentYamlPath);
+        let rewritten = content;
+        for (const mapping of importMappings) {
+            // Compute relative path from agent dir to vendored import dir
+            const rel = nodePath.relative(agentVendorDir, mapping.vendoredPath).replace(/\\/g, "/");
+            const localRef = `local:${rel}`;
+            // Replace the original ref with the vendored local: ref
+            rewritten = rewritten.replace(mapping.originalRef, localRef);
+        }
+        this.fs.writeFile(vendoredAgentYamlPath, rewritten);
+    }
+    rewriteRigSpecRefs(originalYaml, refRewrites) {
+        // Parse as raw object, rewrite agent_ref values, re-serialize
+        const raw = RigSpecCodec.parse(originalYaml);
+        const pods = raw["pods"];
+        if (pods) {
+            for (const pod of pods) {
+                const members = pod["members"];
+                if (members) {
+                    for (const member of members) {
+                        const originalRef = member["agent_ref"];
+                        const rewritten = refRewrites.get(originalRef);
+                        if (rewritten) {
+                            member["agent_ref"] = rewritten;
+                        }
+                    }
+                }
+            }
+        }
+        return RigSpecCodec.serialize(RigSpecSchema.normalize(raw));
+    }
+}
+//# sourceMappingURL=pod-bundle-assembler.js.map

package/daemon/dist/domain/pod-bundle-assembler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pod-bundle-assembler.js","sourceRoot":"","sources":["../../src/domain/pod-bundle-assembler.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAA2B,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAoF,MAAM,mBAAmB,CAAC;AAuBjJ;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACrB,EAAE,CAAoB;IAE9B,YAAY,IAAkC;QAC5C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,IAAwB;QAC/B,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,GAA8B,CAAC,CAAC;QAExE,uBAAuB;QACvB,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,MAAM,YAAY,GAA0B,EAAE,CAAC;QAC/C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE7C,kEAAkE;QAClE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEhC,yDAAyD;QACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE9C,mBAAmB;QACnB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACzF,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAExF,gBAAgB;QAChB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,oBAAoB;YACpB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEpF,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,uBAAuB;gBACvB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBAEvF,qEAAqE;gBACrE,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBAC3C,SAAS;gBACX,CAAC;gBAED,oBAAoB;gBACpB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,gBAAgB,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAE,MAA+B,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,MAA4B,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC3O,CAAC;gBAED,8DAA8D;gBAC9D,MAAM,eAAe,GAAG,UAAU,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9D,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC,CAAC;gBAE7D,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,SAAS;gBACjE,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACnD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;gBAElI,sEAAsE;gBACtE,MAAM,aAAa,GAAgC,EAAE,CAAC;gBACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjC,MAAM,gBAAgB,GAAG,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAEnD,wEAAwE;oBACxE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5C,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACvC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;oBAC1H,CAAC;oBAED,aAAa,CAAC,IAAI,CAAC;wBACjB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;wBACnB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;wBACzB,IAAI,EAAE,gBAAgB;wBACtB,WAAW,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;wBAC5F,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf,CAAC,CAAC;gBACL,CAAC;gBAED,mEAAmE;gBACnE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,0BAA0B,CAC7B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,EAC5D,eAAe,EACf,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAC3B,WAAW,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;wBAC5F,YAAY,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;qBACxC,CAAC,CAAC,CACJ,CAAC;gBACJ,CAAC;gBAED,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI;oBAC/B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO;oBACrC,IAAI,EAAE,eAAe;oBACrB,WAAW,EAAE,MAAM,CAAC,QAAQ;oBAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;oBAC1B,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC3E,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAE/E,oBAAoB;QACpB,MAAM,QAAQ,GAAsB;YAClC,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,OAAO,EAAE,IAAI,CAAC,aAAa;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QAEF,iBAAiB;QACjB,IAAI,CAAC,EAAE,CAAC,SAAS,CACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC5C,0BAA0B,CAAC,QAAQ,CAAC,CACrC,CAAC;QACF,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEnC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IACtC,CAAC;IAEO,cAAc,CAAC,OAAe,EAAE,OAAe,EAAE,SAAiB,EAAE,SAAmB;QAC7F,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,+BAA+B;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9D,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAEO,mBAAmB,CAAC,OAAiC,EAAE,OAAe,EAAE,SAAiB,EAAE,SAAmB;QACpH,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAc,EAAE,OAAe,EAAE,SAAmB,EAAE,SAAiB;QAC7F,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,IAAoC,EAAE,UAAkB,EAAE,eAAkE;QACxJ,qDAAqD;QACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/E,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,WAAW,UAAU,EAAE,CAAC;IACjC,CAAC;IAEO,0BAA0B,CAChC,qBAA6B,EAC7B,cAAsB,EACtB,cAAoE;QAEpE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC;YAAE,OAAO;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QACxD,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,8DAA8D;YAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxF,MAAM,QAAQ,GAAG,SAAS,GAAG,EAAE,CAAC;YAChC,wDAAwD;YACxD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAEO,kBAAkB,CAAC,YAAoB,EAAE,WAAgC;QAC/E,8DAA8D;QAC9D,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAA4B,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAA+C,CAAC;QACvE,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAA+C,CAAC;gBAC7E,IAAI,OAAO,EAAE,CAAC;oBACZ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;wBAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAW,CAAC;wBAClD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;wBAC/C,IAAI,SAAS,EAAE,CAAC;4BACd,MAAM,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;wBAClC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,GAA8B,CAAC,CAAC,CAAC;IACzF,CAAC;CACF"}

package/daemon/dist/domain/pod-repository.d.ts

@@ -0,0 +1,47 @@
+import type Database from "better-sqlite3";
+import type { Pod } from "./types.js";
+interface PodOptions {
+    summary?: string;
+    continuityPolicyJson?: string;
+}
+/**
+ * CRUD repository for pods (bounded context domains within a rig).
+ * @param db - shared database handle
+ */
+export declare class PodRepository {
+    readonly db: Database.Database;
+    constructor(db: Database.Database);
+    /**
+     * Create a pod within a rig.
+     * @param rigId - parent rig id
+     * @param label - human-readable pod label
+     * @param opts - optional summary and continuity policy JSON
+     * @returns the created Pod
+     */
+    createPod(rigId: string, namespace: string, label: string, opts?: PodOptions): Pod;
+    /**
+     * Get a pod by id.
+     * @param podId - pod id
+     * @returns Pod or null if not found
+     */
+    getPod(podId: string): Pod | null;
+    /** Get a pod by rig and authored namespace. Returns null if not found. */
+    getPodByNamespace(rigId: string, namespace: string): Pod | null;
+    /**
+     * Get all pods for a rig.
+     * @param rigId - rig id
+     * @returns array of Pods ordered by creation time
+     */
+    getPodsForRig(rigId: string): Pod[];
+    /**
+     * Delete a pod by id.
+     * Nodes with this pod_id will have pod_id set to NULL (ON DELETE SET NULL).
+     * @param podId - pod id
+     */
+    deletePod(podId: string): void;
+    getContinuityStatesForRig(rigId: string): import("./types.js").ContinuityState[];
+    updateContinuityState(podId: string, nodeId: string, status: "healthy" | "degraded" | "restoring", artifactsJson?: string): void;
+    private rowToPod;
+}
+export {};
+//# sourceMappingURL=pod-repository.d.ts.map

package/daemon/dist/domain/pod-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pod-repository.d.ts","sourceRoot":"","sources":["../../src/domain/pod-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAEtC,UAAU,UAAU;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAYD;;;GAGG;AACH,qBAAa,aAAa;IACxB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBAEnB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,GAAG;IAalF;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAKjC,0EAA0E;IAC1E,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAK/D;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE;IAOnC;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9B,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,YAAY,EAAE,eAAe,EAAE;IAgBhF,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IAQhI,OAAO,CAAC,QAAQ;CAWjB"}

package/daemon/dist/domain/pod-repository.js

@@ -0,0 +1,90 @@
+import { ulid } from "ulid";
+/**
+ * CRUD repository for pods (bounded context domains within a rig).
+ * @param db - shared database handle
+ */
+export class PodRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Create a pod within a rig.
+     * @param rigId - parent rig id
+     * @param label - human-readable pod label
+     * @param opts - optional summary and continuity policy JSON
+     * @returns the created Pod
+     */
+    createPod(rigId, namespace, label, opts) {
+        const id = ulid();
+        this.db
+            .prepare("INSERT INTO pods (id, rig_id, namespace, label, summary, continuity_policy_json) VALUES (?, ?, ?, ?, ?, ?)")
+            .run(id, rigId, namespace, label, opts?.summary ?? null, opts?.continuityPolicyJson ?? null);
+        return this.rowToPod(this.db.prepare("SELECT * FROM pods WHERE id = ?").get(id));
+    }
+    /**
+     * Get a pod by id.
+     * @param podId - pod id
+     * @returns Pod or null if not found
+     */
+    getPod(podId) {
+        const row = this.db.prepare("SELECT * FROM pods WHERE id = ?").get(podId);
+        return row ? this.rowToPod(row) : null;
+    }
+    /** Get a pod by rig and authored namespace. Returns null if not found. */
+    getPodByNamespace(rigId, namespace) {
+        const row = this.db.prepare("SELECT * FROM pods WHERE rig_id = ? AND namespace = ?").get(rigId, namespace);
+        return row ? this.rowToPod(row) : null;
+    }
+    /**
+     * Get all pods for a rig.
+     * @param rigId - rig id
+     * @returns array of Pods ordered by creation time
+     */
+    getPodsForRig(rigId) {
+        const rows = this.db
+            .prepare("SELECT * FROM pods WHERE rig_id = ? ORDER BY created_at")
+            .all(rigId);
+        return rows.map((r) => this.rowToPod(r));
+    }
+    /**
+     * Delete a pod by id.
+     * Nodes with this pod_id will have pod_id set to NULL (ON DELETE SET NULL).
+     * @param podId - pod id
+     */
+    deletePod(podId) {
+        this.db.prepare("DELETE FROM pods WHERE id = ?").run(podId);
+    }
+    // -- Continuity state operations --
+    getContinuityStatesForRig(rigId) {
+        const podIds = this.db.prepare("SELECT id FROM pods WHERE rig_id = ?").all(rigId);
+        if (podIds.length === 0)
+            return [];
+        const rows = this.db.prepare(`SELECT * FROM continuity_state WHERE pod_id IN (${podIds.map(() => "?").join(",")})`).all(...podIds.map((p) => p.id));
+        return rows.map((r) => ({
+            podId: r.pod_id,
+            nodeId: r.node_id,
+            status: r.status,
+            artifactsJson: r.artifacts_json,
+            lastSyncAt: r.last_sync_at,
+            updatedAt: r.updated_at,
+        }));
+    }
+    updateContinuityState(podId, nodeId, status, artifactsJson) {
+        this.db.prepare(`INSERT INTO continuity_state (pod_id, node_id, status, artifacts_json, updated_at)
+       VALUES (?, ?, ?, ?, datetime('now'))
+       ON CONFLICT(pod_id, node_id) DO UPDATE SET status = ?, artifacts_json = ?, updated_at = datetime('now')`).run(podId, nodeId, status, artifactsJson ?? null, status, artifactsJson ?? null);
+    }
+    rowToPod(row) {
+        return {
+            id: row.id,
+            rigId: row.rig_id,
+            namespace: row.namespace,
+            label: row.label,
+            summary: row.summary,
+            continuityPolicyJson: row.continuity_policy_json,
+            createdAt: row.created_at,
+        };
+    }
+}
+//# sourceMappingURL=pod-repository.js.map

package/daemon/dist/domain/pod-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pod-repository.js","sourceRoot":"","sources":["../../src/domain/pod-repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAkB5B;;;GAGG;AACH,MAAM,OAAO,aAAa;IACf,EAAE,CAAoB;IAE/B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,KAAa,EAAE,SAAiB,EAAE,KAAa,EAAE,IAAiB;QAC1E,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,4GAA4G,CAC7G;aACA,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,IAAI,EAAE,oBAAoB,IAAI,IAAI,CAAC,CAAC;QAE/F,OAAO,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAW,CACrE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAa;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAuB,CAAC;QAChG,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,0EAA0E;IAC1E,iBAAiB,CAAC,KAAa,EAAE,SAAiB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAuB,CAAC;QACjI,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,yDAAyD,CAAC;aAClE,GAAG,CAAC,KAAK,CAAa,CAAC;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAAa;QACrB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,oCAAoC;IAEpC,yBAAyB,CAAC,KAAa;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAqB,CAAC;QACtG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,mDAAmD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACtF,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAA+I,CAAC;QAChL,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,KAAK,EAAE,CAAC,CAAC,MAAM;YACf,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,MAAM,EAAE,CAAC,CAAC,MAA8C;YACxD,aAAa,EAAE,CAAC,CAAC,cAAc;YAC/B,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,SAAS,EAAE,CAAC,CAAC,UAAU;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,qBAAqB,CAAC,KAAa,EAAE,MAAc,EAAE,MAA4C,EAAE,aAAsB;QACvH,IAAI,CAAC,EAAE,CAAC,OAAO,CACb;;+GAEyG,CAC1G,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,IAAI,IAAI,EAAE,MAAM,EAAE,aAAa,IAAI,IAAI,CAAC,CAAC;IACrF,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,oBAAoB,EAAE,GAAG,CAAC,sBAAsB;YAChD,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/profile-resolver.d.ts

@@ -0,0 +1,51 @@
+import type { LifecycleDefaults, RigSpec, RigSpecPod, RigSpecPodMember, StartupBlock, SkillResource, GuidanceResource, SubagentResource, HookResource, RuntimeResource } from "./types.js";
+import type { ResolvedAgentSpec, ResourceCollision } from "./agent-resolver.js";
+export interface QualifiedResource {
+    effectiveId: string;
+    sourceSpec: string;
+    sourcePath: string;
+    resource: SkillResource | GuidanceResource | SubagentResource | HookResource | RuntimeResource;
+}
+export interface ResolvedResources {
+    skills: QualifiedResource[];
+    guidance: QualifiedResource[];
+    subagents: QualifiedResource[];
+    hooks: QualifiedResource[];
+    runtimeResources: QualifiedResource[];
+}
+export interface ResolvedNodeConfig {
+    runtime: string;
+    model: string | undefined;
+    cwd: string;
+    restorePolicy: string;
+    lifecycle: LifecycleDefaults | undefined;
+    selectedResources: ResolvedResources;
+    startup: StartupBlock;
+    resolvedSpecName: string;
+    resolvedSpecVersion: string;
+    resolvedSpecHash: string;
+}
+export interface ResolutionContext {
+    baseSpec: ResolvedAgentSpec;
+    importedSpecs: ResolvedAgentSpec[];
+    collisions: ResourceCollision[];
+    profileName: string;
+    member: RigSpecPodMember;
+    pod: RigSpecPod;
+    rig: RigSpec;
+    operatorStartup?: StartupBlock;
+}
+export type ResolutionResult = {
+    ok: true;
+    config: ResolvedNodeConfig;
+} | {
+    ok: false;
+    errors: string[];
+};
+/**
+ * Resolve effective node configuration from agent spec, profile, and rig context.
+ * @param ctx - resolution context with all inputs
+ * @returns resolved config or errors
+ */
+export declare function resolveNodeConfig(ctx: ResolutionContext): ResolutionResult;
+//# sourceMappingURL=profile-resolver.d.ts.map