@openrig/cli 0.0.1 → 0.1.1

package/daemon/dist/domain/install-engine.js

@@ -0,0 +1,154 @@
+import path from "node:path";
+import { createHash } from "node:crypto";
+const BLOCK_START = (name) => `<!-- BEGIN RIGGED MANAGED BLOCK: ${name} -->`;
+const BLOCK_END = (name) => `<!-- END RIGGED MANAGED BLOCK: ${name} -->`;
+function hashContent(content) {
+    return createHash("sha256").update(content).digest("hex");
+}
+export class InstallEngine {
+    installRepo;
+    fs;
+    constructor(installRepo, fs) {
+        this.installRepo = installRepo;
+        this.fs = fs;
+    }
+    apply(policyResult, plan, packageId, targetRoot, bootstrapId) {
+        const install = this.installRepo.createInstall(packageId, targetRoot, "project_shared", bootstrapId);
+        const applied = [];
+        const backupRoot = path.join(targetRoot, ".rigged-backups", install.id);
+        try {
+            for (const entry of policyResult.approved) {
+                // Ensure target directory
+                this.fs.mkdirp(path.dirname(entry.targetPath));
+                // Backup existing file if it exists
+                let backupPath;
+                let beforeHash;
+                if (this.fs.exists(entry.targetPath)) {
+                    const relativePath = path.relative(targetRoot, entry.targetPath);
+                    backupPath = path.join(backupRoot, relativePath);
+                    this.fs.mkdirp(path.dirname(backupPath));
+                    this.fs.copyFile(entry.targetPath, backupPath);
+                    beforeHash = hashContent(this.fs.readFile(entry.targetPath));
+                }
+                // Apply — guidance always uses managed-block merge (even for new files)
+                if (entry.exportType === "guidance") {
+                    this.applyGuidanceMerge(entry, plan.packageName);
+                }
+                else if (entry.sourcePath) {
+                    // Copy source to target (skills, agents)
+                    this.fs.copyFile(entry.sourcePath, entry.targetPath);
+                }
+                const afterHash = this.fs.exists(entry.targetPath)
+                    ? hashContent(this.fs.readFile(entry.targetPath))
+                    : undefined;
+                try {
+                    const journal = this.installRepo.createJournalEntry({
+                        installId: install.id,
+                        action: entry.classification === "managed_merge" ? "merge_block" : "copy",
+                        exportType: entry.exportType,
+                        classification: entry.classification,
+                        targetPath: entry.targetPath,
+                        backupPath,
+                        beforeHash,
+                        afterHash,
+                        status: "applied",
+                    });
+                    applied.push(journal);
+                }
+                catch (journalErr) {
+                    // Undo this entry's file mutation since it won't be in the rollback list
+                    try {
+                        if (backupPath && this.fs.exists(backupPath)) {
+                            this.fs.copyFile(backupPath, entry.targetPath);
+                        }
+                        else if (this.fs.exists(entry.targetPath)) {
+                            this.fs.deleteFile(entry.targetPath);
+                        }
+                    }
+                    catch { /* best-effort undo */ }
+                    throw journalErr;
+                }
+            }
+            this.installRepo.updateInstallStatus(install.id, "applied");
+        }
+        catch (err) {
+            // Compensating rollback on failure
+            this.rollbackEntries(install.id, applied);
+            this.installRepo.updateInstallStatus(install.id, "failed");
+            throw err;
+        }
+        return {
+            installId: install.id,
+            applied,
+            deferred: plan.deferred,
+            conflicts: plan.conflicts,
+        };
+    }
+    rollback(installId) {
+        const entries = this.installRepo.getJournalEntries(installId);
+        const applyEntries = entries.filter((e) => e.action !== "rollback");
+        const { restored, deleted } = this.rollbackEntries(installId, applyEntries);
+        this.installRepo.updateInstallStatus(installId, "rolled_back");
+        return { installId, restored, deleted };
+    }
+    rollbackEntries(installId, entries) {
+        const restored = [];
+        const deleted = [];
+        // Reverse order for rollback
+        for (const entry of [...entries].reverse()) {
+            try {
+                if (entry.backupPath && this.fs.exists(entry.backupPath)) {
+                    // Restore from backup
+                    this.fs.mkdirp(path.dirname(entry.targetPath));
+                    this.fs.copyFile(entry.backupPath, entry.targetPath);
+                    restored.push(entry.targetPath);
+                }
+                else if (this.fs.exists(entry.targetPath)) {
+                    // No backup = new file, delete it
+                    this.fs.deleteFile(entry.targetPath);
+                    deleted.push(entry.targetPath);
+                }
+                // Journal the rollback action
+                this.installRepo.createJournalEntry({
+                    installId,
+                    action: "rollback",
+                    exportType: entry.exportType,
+                    classification: entry.classification,
+                    targetPath: entry.targetPath,
+                    status: "rolled_back",
+                });
+            }
+            catch {
+                // Best-effort rollback — continue with remaining entries
+            }
+        }
+        return { restored, deleted };
+    }
+    applyGuidanceMerge(entry, packageName) {
+        if (!entry.sourcePath)
+            return;
+        const content = this.fs.readFile(entry.sourcePath);
+        const block = `${BLOCK_START(packageName)}\n${content}\n${BLOCK_END(packageName)}`;
+        if (this.fs.exists(entry.targetPath)) {
+            const existing = this.fs.readFile(entry.targetPath);
+            const startMarker = BLOCK_START(packageName);
+            const endMarker = BLOCK_END(packageName);
+            const startIdx = existing.indexOf(startMarker);
+            const endIdx = existing.indexOf(endMarker);
+            if (startIdx !== -1 && endIdx !== -1) {
+                // Update existing block
+                const updated = existing.slice(0, startIdx) + block + existing.slice(endIdx + endMarker.length);
+                this.fs.writeFile(entry.targetPath, updated);
+            }
+            else {
+                // Insert new block at end
+                this.fs.writeFile(entry.targetPath, existing + "\n\n" + block + "\n");
+            }
+        }
+        else {
+            // New file
+            this.fs.writeFile(entry.targetPath, block + "\n");
+        }
+    }
+}
+//# sourceMappingURL=install-engine.js.map

package/daemon/dist/domain/install-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-engine.js","sourceRoot":"","sources":["../../src/domain/install-engine.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA4BzC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,oCAAoC,IAAI,MAAM,CAAC;AACrF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,kCAAkC,IAAI,MAAM,CAAC;AAEjF,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,WAAW,CAAoB;IAC/B,EAAE,CAAc;IAExB,YAAY,WAA8B,EAAE,EAAe;QACzD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,CACH,YAA0B,EAC1B,IAAwB,EACxB,SAAiB,EACjB,UAAkB,EAClB,WAAoB;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACrG,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1C,0BAA0B;gBAC1B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAE/C,oCAAoC;gBACpC,IAAI,UAA8B,CAAC;gBACnC,IAAI,UAA8B,CAAC;gBACnC,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;oBACjE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;oBACjD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;oBACzC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;oBAC/C,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC/D,CAAC;gBAED,wEAAwE;gBACxE,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnD,CAAC;qBAAM,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC5B,yCAAyC;oBACzC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;oBAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACjD,CAAC,CAAC,SAAS,CAAC;gBAEd,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC;wBAClD,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,MAAM,EAAE,KAAK,CAAC,cAAc,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;wBACzE,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,UAAU;wBACV,UAAU;wBACV,SAAS;wBACT,MAAM,EAAE,SAAS;qBAClB,CAAC,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,yEAAyE;oBACzE,IAAI,CAAC;wBACH,IAAI,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;4BAC7C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;wBACjD,CAAC;6BAAM,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;4BAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;wBACvC,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;oBAClC,MAAM,UAAU,CAAC;gBACnB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mCAAmC;YACnC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC3D,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACpE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAEO,eAAe,CACrB,SAAiB,EACjB,OAAuB;QAEvB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,6BAA6B;QAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzD,sBAAsB;oBACtB,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;oBAC/C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;oBACrD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClC,CAAC;qBAAM,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC5C,kCAAkC;oBAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACjC,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC;oBAClC,SAAS;oBACT,MAAM,EAAE,UAAU;oBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,aAAa;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAEO,kBAAkB,CAAC,KAAuB,EAAE,WAAmB;QACrE,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,OAAO,KAAK,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAEnF,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrC,wBAAwB;gBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBAChG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,0BAA0B;gBAC1B,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW;YACX,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;CACF"}

package/daemon/dist/domain/install-planner.d.ts

@@ -0,0 +1,38 @@
+import type { ResolvedPackage, FsOps } from "./package-resolver.js";
+export type ActionClassification = "safe_projection" | "managed_merge" | "config_mutation" | "external_install" | "manual_only";
+export interface ConflictInfo {
+    existingPath: string;
+    existingHash?: string;
+    sourceHash?: string;
+    reason: string;
+}
+export interface InstallPlanEntry {
+    exportType: string;
+    exportName: string;
+    classification: ActionClassification;
+    targetPath: string;
+    scope: string;
+    sourcePath?: string;
+    conflict?: ConflictInfo;
+    deferred: boolean;
+    deferReason?: string;
+}
+export interface InstallPlan {
+    packageId?: string;
+    packageName: string;
+    packageVersion: string;
+    sourceRef: string;
+    entries: InstallPlanEntry[];
+    actionable: InstallPlanEntry[];
+    deferred: InstallPlanEntry[];
+    conflicts: InstallPlanEntry[];
+}
+export interface PlanOptions {
+    roleName?: string;
+}
+export declare class InstallPlanner {
+    private fs;
+    constructor(fs: FsOps);
+    plan(resolved: ResolvedPackage, targetRoot: string, runtime: "claude-code" | "codex", options?: PlanOptions): InstallPlan;
+}
+//# sourceMappingURL=install-planner.d.ts.map

package/daemon/dist/domain/install-planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-planner.d.ts","sourceRoot":"","sources":["../../src/domain/install-planner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAKpE,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,aAAa,CAAC;AAElB,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,oBAAoB,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,qBAAa,cAAc;IACzB,OAAO,CAAC,EAAE,CAAQ;gBAEN,EAAE,EAAE,KAAK;IAIrB,IAAI,CACF,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,GAAG,OAAO,EAChC,OAAO,CAAC,EAAE,WAAW,GACpB,WAAW;CAqQf"}

package/daemon/dist/domain/install-planner.js

@@ -0,0 +1,243 @@
+import path from "node:path";
+import { resolveExports } from "./role-resolver.js";
+// --- Planner ---
+export class InstallPlanner {
+    fs;
+    constructor(fs) {
+        this.fs = fs;
+    }
+    plan(resolved, targetRoot, runtime, options) {
+        // R2-H2: Compatibility check — runtime must be in manifest's runtimes
+        if (!resolved.manifest.compatibility.runtimes.includes(runtime)) {
+            throw new Error(`Package '${resolved.manifest.name}' does not support runtime '${runtime}'. Supported: ${resolved.manifest.compatibility.runtimes.join(", ")}`);
+        }
+        const exports = resolveExports(resolved.manifest, options?.roleName);
+        const entries = [];
+        // Plan skills
+        for (const skill of exports.skills) {
+            // R2-H2: Scope enforcement — skip/defer entries that don't support project_shared
+            if (skill.supportedScopes && !skill.supportedScopes.includes("project_shared")) {
+                entries.push({
+                    exportType: "skill",
+                    exportName: skill.name,
+                    classification: "config_mutation",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: `Skill '${skill.name}' does not support project_shared scope`,
+                });
+                continue;
+            }
+            // R2-H1: Enumerate all files in the skill source directory
+            const sourceDir = path.join(resolved.sourceRef, skill.source);
+            const files = this.fs.listFiles ? this.fs.listFiles(sourceDir) : ["SKILL.md"];
+            for (const file of files) {
+                const targetPath = runtime === "claude-code"
+                    ? path.join(targetRoot, ".claude", "skills", skill.name, file)
+                    : path.join(targetRoot, ".agents", "skills", skill.name, file);
+                const exists = this.fs.exists(targetPath);
+                const entry = {
+                    exportType: "skill",
+                    exportName: `${skill.name}/${file}`,
+                    classification: "safe_projection",
+                    targetPath,
+                    sourcePath: path.join(sourceDir, file),
+                    scope: "project_shared",
+                    deferred: false,
+                };
+                // F2.1: Source file existence check
+                if (!this.fs.exists(entry.sourcePath)) {
+                    throw new Error(`Source file not found: ${entry.sourcePath}`);
+                }
+                if (exists) {
+                    entry.conflict = {
+                        existingPath: targetPath,
+                        reason: `Skill '${skill.name}/${file}' already exists at target`,
+                    };
+                }
+                entries.push(entry);
+            }
+        }
+        // Plan guidance
+        for (const g of exports.guidance) {
+            // R2-H2: Scope enforcement
+            if (g.supportedScopes && !g.supportedScopes.includes("project_shared")) {
+                entries.push({
+                    exportType: "guidance",
+                    exportName: g.name,
+                    classification: "config_mutation",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: `Guidance '${g.name}' does not support project_shared scope`,
+                });
+                continue;
+            }
+            // Runtime/guidance kind mismatch → defer
+            if (g.kind === "agents_md" && runtime === "claude-code") {
+                entries.push({
+                    exportType: "guidance",
+                    exportName: g.name,
+                    classification: "config_mutation",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: "agents_md guidance not applicable to claude-code",
+                });
+                continue;
+            }
+            if (g.kind === "claude_md" && runtime === "codex") {
+                entries.push({
+                    exportType: "guidance",
+                    exportName: g.name,
+                    classification: "config_mutation",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: "claude_md guidance not applicable to codex",
+                });
+                continue;
+            }
+            // generic_rules_overlay → defer
+            if (g.kind === "generic_rules_overlay") {
+                entries.push({
+                    exportType: "guidance",
+                    exportName: g.name,
+                    classification: "config_mutation",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: "generic_rules_overlay not supported in Phase 4",
+                });
+                continue;
+            }
+            // replace/manual strategy → defer
+            if (g.mergeStrategy === "replace" || g.mergeStrategy === "manual") {
+                entries.push({
+                    exportType: "guidance",
+                    exportName: g.name,
+                    classification: "manual_only",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: `${g.mergeStrategy} merge not supported in Phase 4`,
+                });
+                continue;
+            }
+            // Determine target path
+            const targetFile = g.kind === "agents_md" ? "AGENTS.md" : "CLAUDE.md";
+            const targetPath = path.join(targetRoot, targetFile);
+            const exists = this.fs.exists(targetPath);
+            const guidanceSourcePath = path.join(resolved.sourceRef, g.source);
+            // F2.1: Source file existence check
+            if (!this.fs.exists(guidanceSourcePath)) {
+                throw new Error(`Source file not found: ${guidanceSourcePath}`);
+            }
+            entries.push({
+                exportType: "guidance",
+                exportName: g.name,
+                classification: exists ? "managed_merge" : "safe_projection",
+                targetPath,
+                sourcePath: guidanceSourcePath,
+                scope: "project_shared",
+                deferred: false,
+            });
+        }
+        // Plan agents (single YAML files, not directories)
+        for (const agent of exports.agents) {
+            const agentName = agent.name ?? path.basename(agent.source, path.extname(agent.source));
+            // R2-H2: Scope enforcement
+            if (agent.supportedScopes && !agent.supportedScopes.includes("project_shared")) {
+                entries.push({
+                    exportType: "agent",
+                    exportName: agentName,
+                    classification: "config_mutation",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: `Agent '${agentName}' does not support project_shared scope`,
+                });
+                continue;
+            }
+            const targetPath = runtime === "claude-code"
+                ? path.join(targetRoot, ".claude", "agents", `${agentName}.yaml`)
+                : path.join(targetRoot, ".agents", `${agentName}.yaml`);
+            const agentSourcePath = path.join(resolved.sourceRef, agent.source);
+            // F2.1: Source file existence check
+            if (!this.fs.exists(agentSourcePath)) {
+                throw new Error(`Source file not found: ${agentSourcePath}`);
+            }
+            const exists = this.fs.exists(targetPath);
+            const entry = {
+                exportType: "agent",
+                exportName: agentName,
+                classification: "safe_projection",
+                targetPath,
+                sourcePath: agentSourcePath,
+                scope: "project_shared",
+                deferred: false,
+            };
+            if (exists) {
+                entry.conflict = {
+                    existingPath: targetPath,
+                    reason: `Agent '${agentName}' already exists at target`,
+                };
+            }
+            entries.push(entry);
+        }
+        // Plan deferred (hooks, mcp from role resolver)
+        for (const d of exports.deferred) {
+            entries.push({
+                exportType: d.exportType,
+                exportName: d.source,
+                classification: "config_mutation",
+                targetPath: "",
+                scope: "project_shared",
+                deferred: true,
+                deferReason: d.reason,
+            });
+        }
+        // Plan requirements as deferred
+        if (resolved.manifest.requirements?.cliTools) {
+            for (const tool of resolved.manifest.requirements.cliTools) {
+                entries.push({
+                    exportType: "requirement",
+                    exportName: tool.name,
+                    classification: "external_install",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: `CLI tool '${tool.name}' requires external install (Phase 5)`,
+                });
+            }
+        }
+        if (resolved.manifest.requirements?.systemPackages) {
+            for (const pkg of resolved.manifest.requirements.systemPackages) {
+                entries.push({
+                    exportType: "requirement",
+                    exportName: pkg.name,
+                    classification: "external_install",
+                    targetPath: "",
+                    scope: "project_shared",
+                    deferred: true,
+                    deferReason: `System package '${pkg.name}' requires external install (Phase 5)`,
+                });
+            }
+        }
+        // Split into categories
+        const actionable = entries.filter((e) => !e.deferred && !e.conflict);
+        const deferred = entries.filter((e) => e.deferred);
+        const conflicts = entries.filter((e) => !!e.conflict && !e.deferred);
+        return {
+            // packageId is undefined until caller persists to DB
+            packageName: resolved.manifest.name,
+            packageVersion: resolved.manifest.version,
+            sourceRef: resolved.sourceRef,
+            entries,
+            actionable,
+            deferred,
+            conflicts,
+        };
+    }
+}
+//# sourceMappingURL=install-planner.js.map

package/daemon/dist/domain/install-planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-planner.js","sourceRoot":"","sources":["../../src/domain/install-planner.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAA6C,MAAM,oBAAoB,CAAC;AA6C/F,kBAAkB;AAElB,MAAM,OAAO,cAAc;IACjB,EAAE,CAAQ;IAElB,YAAY,EAAS;QACnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,IAAI,CACF,QAAyB,EACzB,UAAkB,EAClB,OAAgC,EAChC,OAAqB;QAErB,sEAAsE;QACtE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,QAAQ,CAAC,IAAI,+BAA+B,OAAO,iBAAiB,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClK,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,OAAO,GAAuB,EAAE,CAAC;QAEvC,cAAc;QACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,kFAAkF;YAClF,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC/E,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,OAAO;oBACnB,UAAU,EAAE,KAAK,CAAC,IAAI;oBACtB,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,UAAU,KAAK,CAAC,IAAI,yCAAyC;iBAC3E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,2DAA2D;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAE9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,OAAO,KAAK,aAAa;oBAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;oBAC9D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAqB;oBAC9B,UAAU,EAAE,OAAO;oBACnB,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE;oBACnC,cAAc,EAAE,iBAAiB;oBACjC,UAAU;oBACV,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;oBACtC,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,KAAK;iBAChB,CAAC;gBAEF,oCAAoC;gBACpC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,CAAC,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;gBAChE,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,KAAK,CAAC,QAAQ,GAAG;wBACf,YAAY,EAAE,UAAU;wBACxB,MAAM,EAAE,UAAU,KAAK,CAAC,IAAI,IAAI,IAAI,4BAA4B;qBACjE,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,2BAA2B;YAC3B,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,UAAU;oBACtB,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,aAAa,CAAC,CAAC,IAAI,yCAAyC;iBAC1E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,yCAAyC;YACzC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,UAAU;oBACtB,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,kDAAkD;iBAChE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,UAAU;oBACtB,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,4CAA4C;iBAC1D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,gCAAgC;YAChC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,UAAU;oBACtB,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,gDAAgD;iBAC9D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,kCAAkC;YAClC,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,UAAU;oBACtB,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,cAAc,EAAE,aAAa;oBAC7B,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,GAAG,CAAC,CAAC,aAAa,iCAAiC;iBACjE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;YACtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAE1C,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAEnE,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,kBAAkB,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,UAAU;gBACtB,UAAU,EAAE,CAAC,CAAC,IAAI;gBAClB,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;gBAC5D,UAAU;gBACV,UAAU,EAAE,kBAAkB;gBAC9B,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;QAED,mDAAmD;QACnD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAExF,2BAA2B;YAC3B,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC/E,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,OAAO;oBACnB,UAAU,EAAE,SAAS;oBACrB,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,UAAU,SAAS,yCAAyC;iBAC1E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,KAAK,aAAa;gBAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,OAAO,CAAC;gBACjE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAE1D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpE,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,0BAA0B,eAAe,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAqB;gBAC9B,UAAU,EAAE,OAAO;gBACnB,UAAU,EAAE,SAAS;gBACrB,cAAc,EAAE,iBAAiB;gBACjC,UAAU;gBACV,UAAU,EAAE,eAAe;gBAC3B,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,KAAK;aAChB,CAAC;YAEF,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,QAAQ,GAAG;oBACf,YAAY,EAAE,UAAU;oBACxB,MAAM,EAAE,UAAU,SAAS,4BAA4B;iBACxD,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,gDAAgD;QAChD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,UAAU,EAAE,CAAC,CAAC,MAAM;gBACpB,cAAc,EAAE,iBAAiB;gBACjC,UAAU,EAAE,EAAE;gBACd,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,CAAC,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,aAAa;oBACzB,UAAU,EAAE,IAAI,CAAC,IAAI;oBACrB,cAAc,EAAE,kBAAkB;oBAClC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,aAAa,IAAI,CAAC,IAAI,uCAAuC;iBAC3E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC;YACnD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,aAAa;oBACzB,UAAU,EAAE,GAAG,CAAC,IAAI;oBACpB,cAAc,EAAE,kBAAkB;oBAClC,UAAU,EAAE,EAAE;oBACd,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,mBAAmB,GAAG,CAAC,IAAI,uCAAuC;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAErE,OAAO;YACL,qDAAqD;YACrD,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACnC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;YACzC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO;YACP,UAAU;YACV,QAAQ;YACR,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/install-policy.d.ts

@@ -0,0 +1,20 @@
+import type { InstallPlanEntry } from "./install-planner.js";
+import type { RefinedInstallPlan } from "./conflict-detector.js";
+export interface PolicyRejection {
+    entry: InstallPlanEntry;
+    reason: string;
+}
+export interface PolicyResult {
+    approved: InstallPlanEntry[];
+    rejected: PolicyRejection[];
+}
+/**
+ * Thin policy gate for install plan entries.
+ * Processes plan.actionable for classification-based approval,
+ * and plan.conflicts as always-rejected. Does not double-process
+ * entries that appear in both arrays.
+ */
+export declare function applyPolicy(plan: RefinedInstallPlan, options?: {
+    allowMerge?: boolean;
+}): PolicyResult;
+//# sourceMappingURL=install-policy.d.ts.map

package/daemon/dist/domain/install-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-policy.d.ts","sourceRoot":"","sources":["../../src/domain/install-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,kBAAkB,EACxB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,YAAY,CAuDd"}

package/daemon/dist/domain/install-policy.js

@@ -0,0 +1,56 @@
+/**
+ * Thin policy gate for install plan entries.
+ * Processes plan.actionable for classification-based approval,
+ * and plan.conflicts as always-rejected. Does not double-process
+ * entries that appear in both arrays.
+ */
+export function applyPolicy(plan, options = {}) {
+    const approved = [];
+    const rejected = [];
+    // Track processed entry identities to prevent double-rejection
+    const processed = new Set();
+    // Conflicts are always rejected first
+    for (const entry of plan.conflicts) {
+        const key = `${entry.exportType}:${entry.exportName}`;
+        if (!processed.has(key)) {
+            processed.add(key);
+            rejected.push({
+                entry,
+                reason: "Conflicts must be resolved before install",
+            });
+        }
+    }
+    // Actionable entries — classify
+    for (const entry of plan.actionable) {
+        const key = `${entry.exportType}:${entry.exportName}`;
+        if (processed.has(key))
+            continue; // Already handled as conflict
+        switch (entry.classification) {
+            case "safe_projection":
+                approved.push(entry);
+                break;
+            case "managed_merge":
+                if (options.allowMerge) {
+                    approved.push(entry);
+                }
+                else {
+                    rejected.push({
+                        entry,
+                        reason: "managed_merge requires allowMerge flag",
+                    });
+                }
+                break;
+            case "config_mutation":
+                rejected.push({ entry, reason: "Deferred to Phase 5" });
+                break;
+            case "external_install":
+                rejected.push({ entry, reason: "Deferred to Phase 5" });
+                break;
+            case "manual_only":
+                rejected.push({ entry, reason: "Manual merge not supported in Phase 4" });
+                break;
+        }
+    }
+    return { approved, rejected };
+}
+//# sourceMappingURL=install-policy.js.map

package/daemon/dist/domain/install-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-policy.js","sourceRoot":"","sources":["../../src/domain/install-policy.ts"],"names":[],"mappings":"AAaA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,IAAwB,EACxB,UAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,+DAA+D;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,sCAAsC;IACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK;gBACL,MAAM,EAAE,2CAA2C;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtD,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,8BAA8B;QAEhE,QAAQ,KAAK,CAAC,cAAc,EAAE,CAAC;YAC7B,KAAK,iBAAiB;gBACpB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,MAAM;YAER,KAAK,eAAe;gBAClB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC;wBACZ,KAAK;wBACL,MAAM,EAAE,wCAAwC;qBACjD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;YAER,KAAK,iBAAiB;gBACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACxD,MAAM;YAER,KAAK,kBAAkB;gBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACxD,MAAM;YAER,KAAK,aAAa;gBAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC1E,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/daemon/dist/domain/install-repository.d.ts

@@ -0,0 +1,55 @@
+import type Database from "better-sqlite3";
+export interface Install {
+    id: string;
+    packageId: string;
+    targetRoot: string;
+    scope: string;
+    status: string;
+    riskTier: string | null;
+    createdAt: string;
+    appliedAt: string | null;
+    rolledBackAt: string | null;
+}
+export interface InstallSummary extends Install {
+    appliedCount: number;
+    deferredCount: null;
+}
+export interface JournalEntry {
+    id: string;
+    installId: string;
+    seq: number;
+    action: string;
+    exportType: string;
+    classification: string;
+    targetPath: string;
+    backupPath: string | null;
+    beforeHash: string | null;
+    afterHash: string | null;
+    status: string;
+    createdAt: string;
+}
+export declare class InstallRepository {
+    readonly db: Database.Database;
+    constructor(db: Database.Database);
+    createInstall(packageId: string, targetRoot: string, scope: string, bootstrapId?: string): Install;
+    updateInstallStatus(installId: string, status: string): void;
+    getInstall(installId: string): Install | null;
+    listInstallSummaries(packageId: string): InstallSummary[];
+    listInstalls(packageId?: string): Install[];
+    createJournalEntry(opts: {
+        installId: string;
+        action: string;
+        exportType: string;
+        classification: string;
+        targetPath: string;
+        backupPath?: string;
+        beforeHash?: string;
+        afterHash?: string;
+        status?: string;
+    }): JournalEntry;
+    getJournalEntries(installId: string): JournalEntry[];
+    private getJournalEntry;
+    private rowToInstall;
+    private rowToJournalEntry;
+}
+//# sourceMappingURL=install-repository.d.ts.map

package/daemon/dist/domain/install-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-repository.d.ts","sourceRoot":"","sources":["../../src/domain/install-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,cAAe,SAAQ,OAAO;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AA6BD,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBAEnB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAclG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAa5D,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI;IAO7C,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,EAAE;IAiBzD,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE;IAa3C,kBAAkB,CAAC,IAAI,EAAE;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,YAAY;IAqBhB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAOpD,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,iBAAiB;CAgB1B"}