@openrig/cli 0.3.1 → 0.3.3-rc.0

package/daemon/dist/domain/bundle-audit.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Bundle install audit trail (Item 4 / slice-05 Checkpoint 5.1).
+ *
+ * Append-only JSONL log of bundle install events. Matches the JSONL audit-
+ * trail convention used by Transcript / Log Cleanup v0 and UI Enhancement
+ * Pack v0 — no new SQLite schema or migration.
+ *
+ * Default location is ~/.openrig/bundle-audit.jsonl. The writer is a pure
+ * data sink: callers (the /api/bundles/install route handler) compose the
+ * record at the right moment in the install lifecycle and hand it to
+ * BundleAuditWriter.append. The reader exposes a small filter API
+ * (rig name + since timestamp) for the /api/bundles/history endpoint and
+ * the `rig bundle history` CLI subcommand (both land at Checkpoint 5.2).
+ *
+ * FsOps injection mirrors the codebase pattern for testability: real
+ * implementation reads/writes node:fs; tests substitute an in-memory mock.
+ */
+/** A single bundle install audit row. */
+export interface BundleAuditRecord {
+    /** ISO timestamp of when the install event was recorded. */
+    installedAt: string;
+    /** Source bundle path the install operated on. */
+    bundlePath: string;
+    /** SHA-256 archive hash (when available from bundle's sibling digest). */
+    archiveHash?: string;
+    /** ULID of the rig the install targeted (when applicable). */
+    targetRigId?: string;
+    /** Name of the rig the install targeted (when applicable). */
+    targetRigName?: string;
+    /** Hostname recorded in the bundle's provenance (Item 1), when present. */
+    sourceHost?: string;
+    /** Daemon version at install time. */
+    daemonVersion?: string;
+    /** CLI version at install time (when CLI sent it; Item 1 + Item 2 path). */
+    cliVersion?: string;
+    /** Install outcome — keep honest (partial = some stages ok, some not). */
+    outcome: "success" | "failed" | "partial";
+}
+/** Filesystem injection point — real impl wraps node:fs. Tests substitute in-memory. */
+export interface BundleAuditFsOps {
+    appendFile: (path: string, content: string) => void;
+    readFile: (path: string) => string;
+    exists: (path: string) => boolean;
+    mkdirp: (path: string) => void;
+}
+/** Configuration for the audit writer + reader. */
+export interface BundleAuditOpts {
+    /** Absolute path to the JSONL file (default location: ~/.openrig/bundle-audit.jsonl). */
+    auditPath: string;
+}
+/** Append-only writer for bundle install audit records. */
+export declare class BundleAuditWriter {
+    private opts;
+    private fs;
+    constructor(deps: {
+        opts: BundleAuditOpts;
+        fsOps: BundleAuditFsOps;
+    });
+    /**
+     * Append one record to the JSONL file. Creates the parent directory if
+     * missing. Each record is one JSON object on its own line (operator can
+     * tail -f for live monitoring). Throws on filesystem errors via fsOps.
+     */
+    append(record: BundleAuditRecord): void;
+}
+/** Filters supported by the audit reader (subset of /api/bundles/history). */
+export interface BundleAuditFilters {
+    /** When set, only return records whose targetRigName equals this value. */
+    rig?: string;
+    /** When set, only return records whose installedAt is >= this ISO timestamp. */
+    since?: string;
+}
+/** Reader for the bundle install audit JSONL file. */
+export declare class BundleAuditReader {
+    private opts;
+    private fs;
+    constructor(deps: {
+        opts: BundleAuditOpts;
+        fsOps: BundleAuditFsOps;
+    });
+    /**
+     * Return all audit records (optionally filtered). Malformed lines are
+     * skipped silently — forward-compat with future record-shape evolutions
+     * that don't parse under the current shape; the readable lines still
+     * surface. Records are returned in append order (oldest first).
+     */
+    list(filters?: BundleAuditFilters): BundleAuditRecord[];
+}
+//# sourceMappingURL=bundle-audit.d.ts.map

package/daemon/dist/domain/bundle-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-audit.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CAC3C;AAED,wFAAwF;AACxF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2DAA2D;AAC3D,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,EAAE,CAAmB;gBAEjB,IAAI,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE;IAKpE;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;CAKxC;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,sDAAsD;AACtD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,EAAE,CAAmB;gBAEjB,IAAI,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE;IAKpE;;;;;OAKG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,iBAAiB,EAAE;CAiBxD"}

package/daemon/dist/domain/bundle-audit.js

@@ -0,0 +1,87 @@
+/**
+ * Bundle install audit trail (Item 4 / slice-05 Checkpoint 5.1).
+ *
+ * Append-only JSONL log of bundle install events. Matches the JSONL audit-
+ * trail convention used by Transcript / Log Cleanup v0 and UI Enhancement
+ * Pack v0 — no new SQLite schema or migration.
+ *
+ * Default location is ~/.openrig/bundle-audit.jsonl. The writer is a pure
+ * data sink: callers (the /api/bundles/install route handler) compose the
+ * record at the right moment in the install lifecycle and hand it to
+ * BundleAuditWriter.append. The reader exposes a small filter API
+ * (rig name + since timestamp) for the /api/bundles/history endpoint and
+ * the `rig bundle history` CLI subcommand (both land at Checkpoint 5.2).
+ *
+ * FsOps injection mirrors the codebase pattern for testability: real
+ * implementation reads/writes node:fs; tests substitute an in-memory mock.
+ */
+import nodePath from "node:path";
+/** Append-only writer for bundle install audit records. */
+export class BundleAuditWriter {
+    opts;
+    fs;
+    constructor(deps) {
+        this.opts = deps.opts;
+        this.fs = deps.fsOps;
+    }
+    /**
+     * Append one record to the JSONL file. Creates the parent directory if
+     * missing. Each record is one JSON object on its own line (operator can
+     * tail -f for live monitoring). Throws on filesystem errors via fsOps.
+     */
+    append(record) {
+        this.fs.mkdirp(nodePath.dirname(this.opts.auditPath));
+        const line = `${JSON.stringify(record)}\n`;
+        this.fs.appendFile(this.opts.auditPath, line);
+    }
+}
+/** Reader for the bundle install audit JSONL file. */
+export class BundleAuditReader {
+    opts;
+    fs;
+    constructor(deps) {
+        this.opts = deps.opts;
+        this.fs = deps.fsOps;
+    }
+    /**
+     * Return all audit records (optionally filtered). Malformed lines are
+     * skipped silently — forward-compat with future record-shape evolutions
+     * that don't parse under the current shape; the readable lines still
+     * surface. Records are returned in append order (oldest first).
+     */
+    list(filters) {
+        if (!this.fs.exists(this.opts.auditPath))
+            return [];
+        const content = this.fs.readFile(this.opts.auditPath);
+        const lines = content.split("\n").filter((l) => l.length > 0);
+        const records = [];
+        for (const line of lines) {
+            try {
+                const parsed = JSON.parse(line);
+                if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                    records.push(parsed);
+                }
+            }
+            catch {
+                // Malformed line — skip silently.
+            }
+        }
+        return applyFilters(records, filters);
+    }
+}
+/** Apply the supported filters to an in-memory record array. */
+function applyFilters(records, filters) {
+    if (!filters)
+        return records;
+    let out = records;
+    if (filters.rig !== undefined && filters.rig.length > 0) {
+        const rigName = filters.rig;
+        out = out.filter((r) => r.targetRigName === rigName);
+    }
+    if (filters.since !== undefined && filters.since.length > 0) {
+        const since = filters.since;
+        out = out.filter((r) => r.installedAt >= since);
+    }
+    return out;
+}
+//# sourceMappingURL=bundle-audit.js.map

package/daemon/dist/domain/bundle-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-audit.js","sourceRoot":"","sources":["../../src/domain/bundle-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,QAAQ,MAAM,WAAW,CAAC;AAsCjC,2DAA2D;AAC3D,MAAM,OAAO,iBAAiB;IACpB,IAAI,CAAkB;IACtB,EAAE,CAAmB;IAE7B,YAAY,IAAwD;QAClE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAyB;QAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;CACF;AAUD,sDAAsD;AACtD,MAAM,OAAO,iBAAiB;IACpB,IAAI,CAAkB;IACtB,EAAE,CAAmB;IAE7B,YAAY,IAAwD;QAClE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,OAA4B;QAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnE,OAAO,CAAC,IAAI,CAAC,MAA2B,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;CACF;AAED,gEAAgE;AAChE,SAAS,YAAY,CAAC,OAA4B,EAAE,OAA4B;IAC9E,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QAC5B,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/daemon/dist/domain/bundle-conflict-detector.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Bundle conflict detector (Item 3 / slice-05 Checkpoint 4.1).
+ *
+ * Pure function. Compares a bundle's declared identifiers against the daemon's
+ * current state and returns a structured conflict report. Callers (route
+ * handlers in Checkpoint 4.2) provide the daemon state (listRigs() etc.); the
+ * detector itself has no daemon dependencies — fully unit-testable.
+ *
+ * Fails CLOSED: the conflict list is the source of truth. Missing or ambiguous
+ * input is treated as no-conflict-detectable, NOT as bypass — Items 4.2+ will
+ * surface ambiguity as a conflict where appropriate. This commit ships the
+ * rig-name collision check only; agent / port / managed-app / sibling-primitive
+ * checks land in Checkpoint 4.3 + 4.4.
+ *
+ * Extends, does NOT replace, the existing 409 "install already in progress"
+ * guard at /api/bundles/install (concurrency lock) per PRD Item 3 §
+ * "extends, does NOT replace".
+ */
+/** A rig-name collision: bundle declares a rig name that a currently-running rig already uses. */
+export interface RigNameCollision {
+    kind: "rig_name_collision";
+    /** Name declared by the bundle's rig spec. */
+    bundleRigName: string;
+    /** Identity of the running rig that holds the same name. */
+    collisionWith: {
+        rigId: string;
+        rigName: string;
+    };
+    /** Human-readable summary suitable for the 3-part error description line. */
+    description: string;
+    /** Operator-actionable resolutions (3-part error what-to-do line). */
+    resolutions: string[];
+}
+/** Discriminated union over all conflict kinds. Extends in Checkpoint 4.3+. */
+export type BundleConflict = RigNameCollision;
+/** Result of a conflict check. */
+export interface ConflictReport {
+    conflicts: BundleConflict[];
+    hasConflicts: boolean;
+}
+/** Input to detectBundleConflicts. Pure data; no daemon handles. */
+export interface DetectConflictsInput {
+    /** Rig name declared in the bundle's rig spec (rig.yaml `name:` field). */
+    bundleRigName: string;
+    /** Snapshot of currently-running rigs from rigRepo.listRigs(). */
+    runningRigs: Array<{
+        rigId: string;
+        name: string;
+    }>;
+}
+/**
+ * Run the conflict checks for an install candidate. Returns the full conflict
+ * list (Checkpoint 4.2 returns it via /install --plan; --apply blocks on
+ * non-empty unless --force).
+ */
+export declare function detectBundleConflicts(input: DetectConflictsInput): ConflictReport;
+//# sourceMappingURL=bundle-conflict-detector.d.ts.map

package/daemon/dist/domain/bundle-conflict-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-conflict-detector.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-conflict-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,kGAAkG;AAClG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,aAAa,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE9C,kCAAkC;AAClC,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,WAAW,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,oBAAoB,GAAG,cAAc,CA0BjF"}

package/daemon/dist/domain/bundle-conflict-detector.js

@@ -0,0 +1,49 @@
+/**
+ * Bundle conflict detector (Item 3 / slice-05 Checkpoint 4.1).
+ *
+ * Pure function. Compares a bundle's declared identifiers against the daemon's
+ * current state and returns a structured conflict report. Callers (route
+ * handlers in Checkpoint 4.2) provide the daemon state (listRigs() etc.); the
+ * detector itself has no daemon dependencies — fully unit-testable.
+ *
+ * Fails CLOSED: the conflict list is the source of truth. Missing or ambiguous
+ * input is treated as no-conflict-detectable, NOT as bypass — Items 4.2+ will
+ * surface ambiguity as a conflict where appropriate. This commit ships the
+ * rig-name collision check only; agent / port / managed-app / sibling-primitive
+ * checks land in Checkpoint 4.3 + 4.4.
+ *
+ * Extends, does NOT replace, the existing 409 "install already in progress"
+ * guard at /api/bundles/install (concurrency lock) per PRD Item 3 §
+ * "extends, does NOT replace".
+ */
+/**
+ * Run the conflict checks for an install candidate. Returns the full conflict
+ * list (Checkpoint 4.2 returns it via /install --plan; --apply blocks on
+ * non-empty unless --force).
+ */
+export function detectBundleConflicts(input) {
+    const conflicts = [];
+    // Rig-name collision: bundle declares a name a running rig already holds.
+    // O(n) scan over runningRigs — acceptable for the seat-scale rig counts the
+    // daemon manages (tens, not thousands).
+    if (input.bundleRigName && input.bundleRigName.length > 0) {
+        for (const rig of input.runningRigs) {
+            if (rig.name === input.bundleRigName) {
+                conflicts.push({
+                    kind: "rig_name_collision",
+                    bundleRigName: input.bundleRigName,
+                    collisionWith: { rigId: rig.rigId, rigName: rig.name },
+                    description: `bundle declares rig name '${input.bundleRigName}' but a running rig with this name already exists (rigId: ${rig.rigId})`,
+                    resolutions: [
+                        "use --target <newname> on install to rename the rig on install (lands at Checkpoint 4.2)",
+                        `stop the running rig first (e.g. rig down ${rig.name}) and re-attempt install`,
+                        "use --force on install for an operator-explicit override (lands at Checkpoint 4.2; NOT recommended for routine use)",
+                    ],
+                });
+                break;
+            }
+        }
+    }
+    return { conflicts, hasConflicts: conflicts.length > 0 };
+}
+//# sourceMappingURL=bundle-conflict-detector.js.map

package/daemon/dist/domain/bundle-conflict-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-conflict-detector.js","sourceRoot":"","sources":["../../src/domain/bundle-conflict-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAgCH;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA2B;IAC/D,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,0EAA0E;IAC1E,4EAA4E;IAC5E,wCAAwC;IACxC,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBACrC,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,oBAAoB;oBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;oBACtD,WAAW,EAAE,6BAA6B,KAAK,CAAC,aAAa,6DAA6D,GAAG,CAAC,KAAK,GAAG;oBACtI,WAAW,EAAE;wBACX,0FAA0F;wBAC1F,6CAA6C,GAAG,CAAC,IAAI,0BAA0B;wBAC/E,qHAAqH;qBACtH;iBACF,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC"}

package/daemon/dist/domain/bundle-context-packs-router.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Bundle context_packs router (Item 6 / slice-05 Checkpoint 7.3f step 2).
+ *
+ * Pure function. Copies context-pack directories declared in a bundle
+ * manifest's context_packs[] block from the bundle's extracted tree to
+ * the operator context-packs library. No daemon dependencies — fully
+ * unit-testable via FsOps injection.
+ *
+ * Per PRD §Item 6 line 196: context_packs entries are paths to a
+ * context-pack's manifest.yaml file inside the bundle. The PACK is the
+ * PARENT DIRECTORY of that manifest.yaml (per context-pack-types.ts:9-10
+ * and context-pack-library-service.ts:50-77: a pack is a directory whose
+ * immediate children include manifest.yaml + the referenced content
+ * files). The router copies that parent dir to
+ * <targetContextPacksDir>/<basename(parentDir)>/ — the operator-host
+ * canonical layout the live consumer scans.
+ *
+ * Banked degenerate-input dogfood discipline (extended from the
+ * workflow_specs basename-collision + non-YAML cycles): every router
+ * commit explicitly probes the failure-class edges through the live
+ * consumer's contract before claiming routedCount truthful. For
+ * context_packs the consumer-invisibility classes are:
+ *   - Declared path basename is NOT "manifest.yaml" → consumer never
+ *     scans (it looks for manifest.yaml at the pack dir root). status=
+ *     not_manifest.
+ *   - Two declared paths whose parent-dir basename collide → second
+ *     would silently overwrite the first; status=conflict; first wins.
+ *   - Source pack dir not present in bundle → status=missing (honest skip).
+ *   - Source path escapes bundleRoot → status=unsafe.
+ *
+ * Both-sides containment (banked
+ * feedback_pre_existing_trust_boundary_reuse_canonical_helper addendum):
+ * source-side under bundleRoot, target-side under targetContextPacksDir
+ * (target via basename so structurally safe; defensive check retained).
+ *
+ * /install handler integration lands at Checkpoint 7.3f step 3 with a
+ * real consumer-scan() proof against the routed dir (mirror of the
+ * workflow_specs scanWorkflowSpecFolder reachability proof at d81456dc).
+ */
+/** Filesystem injection point — real impl wraps node:fs. Tests substitute in-memory. */
+export interface ContextPacksRouterFsOps {
+    exists: (path: string) => boolean;
+    isDirectory: (path: string) => boolean;
+    mkdirp: (path: string) => void;
+    copyDir: (src: string, dest: string) => void;
+}
+/** Inputs to routeContextPacks. */
+export interface RouteContextPacksInput {
+    /** Absolute path to the bundle's extracted root (tmp dir from unpack). */
+    bundleRoot: string;
+    /** Relative paths to context-pack manifest.yaml files declared in the
+     *  bundle manifest's context_packs[] block. */
+    declaredContextPacks: string[];
+    /** Absolute path to the operator context-packs library (per
+     *  context-pack-types.ts:9-10: typically `<openrigHome>/context-packs`
+     *  or a workspace-local `.openrig/context-packs`). Caller resolves. */
+    targetContextPacksDir: string;
+}
+/** One routed context_pack (or one rejection). */
+export interface RoutedContextPackRecord {
+    /** Declared path from manifest.context_packs[]. */
+    declaredPath: string;
+    /** "routed" = pack dir copied successfully and consumer-visible.
+     * "missing" = pack manifest source not in bundle (honest skip).
+     * "unsafe" = source escapes bundleRoot OR target escapes
+     * targetContextPacksDir (structurally impossible given basename, kept
+     * defensive).
+     * "not_manifest" = declared path basename is not "manifest.yaml" —
+     * consumer (context-pack-library-service.scan) scans pack dirs for a
+     * top-level manifest.yaml file; any other basename is invisible-by-
+     * construction.
+     * "not_directory" = parent of the declared manifest path is not a
+     * directory in the bundle tree.
+     * "conflict" = parent-dir basename collides with an earlier routed
+     * pack; first wins, second flagged so routedCount stays truthful at
+     * the consumer-visible boundary (banked 16ebb8af lesson). */
+    status: "routed" | "missing" | "unsafe" | "not_manifest" | "not_directory" | "conflict";
+    /** Where the pack landed in the target library (absolute pack dir
+     *  path), if routed. */
+    installedAt?: string;
+    /** Human-readable detail (3-part error shape input for caller). */
+    detail?: string;
+}
+/** Aggregate routing result. */
+export interface RouteContextPacksResult {
+    records: RoutedContextPackRecord[];
+    routedCount: number;
+    rejectedCount: number;
+}
+/**
+ * Route each declared context_pack from the bundle tree to the operator
+ * context-packs library. Per-entry safety: SOURCE containment under
+ * bundleRoot + TARGET containment under targetContextPacksDir.
+ * Degenerate inputs the consumer ignores (non-manifest.yaml basename;
+ * parent-dir basename collisions) are caught BEFORE write so the
+ * routedCount stays truthful at the consumer-visible boundary. Caller
+ * writes the install audit record using the records returned here.
+ */
+export declare function routeContextPacks(input: RouteContextPacksInput, fs: ContextPacksRouterFsOps): RouteContextPacksResult;
+//# sourceMappingURL=bundle-context-packs-router.d.ts.map

package/daemon/dist/domain/bundle-context-packs-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-context-packs-router.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-context-packs-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,wFAAwF;AACxF,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9C;AAED,mCAAmC;AACnC,MAAM,WAAW,sBAAsB;IACrC,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB;mDAC+C;IAC/C,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B;;2EAEuE;IACvE,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,kDAAkD;AAClD,MAAM,WAAW,uBAAuB;IACtC,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;iEAa6D;IAC7D,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,cAAc,GAAG,eAAe,GAAG,UAAU,CAAC;IACxF;4BACwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gCAAgC;AAChC,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,EAC7B,EAAE,EAAE,uBAAuB,GAC1B,uBAAuB,CA6GzB"}

package/daemon/dist/domain/bundle-context-packs-router.js

@@ -0,0 +1,158 @@
+/**
+ * Bundle context_packs router (Item 6 / slice-05 Checkpoint 7.3f step 2).
+ *
+ * Pure function. Copies context-pack directories declared in a bundle
+ * manifest's context_packs[] block from the bundle's extracted tree to
+ * the operator context-packs library. No daemon dependencies — fully
+ * unit-testable via FsOps injection.
+ *
+ * Per PRD §Item 6 line 196: context_packs entries are paths to a
+ * context-pack's manifest.yaml file inside the bundle. The PACK is the
+ * PARENT DIRECTORY of that manifest.yaml (per context-pack-types.ts:9-10
+ * and context-pack-library-service.ts:50-77: a pack is a directory whose
+ * immediate children include manifest.yaml + the referenced content
+ * files). The router copies that parent dir to
+ * <targetContextPacksDir>/<basename(parentDir)>/ — the operator-host
+ * canonical layout the live consumer scans.
+ *
+ * Banked degenerate-input dogfood discipline (extended from the
+ * workflow_specs basename-collision + non-YAML cycles): every router
+ * commit explicitly probes the failure-class edges through the live
+ * consumer's contract before claiming routedCount truthful. For
+ * context_packs the consumer-invisibility classes are:
+ *   - Declared path basename is NOT "manifest.yaml" → consumer never
+ *     scans (it looks for manifest.yaml at the pack dir root). status=
+ *     not_manifest.
+ *   - Two declared paths whose parent-dir basename collide → second
+ *     would silently overwrite the first; status=conflict; first wins.
+ *   - Source pack dir not present in bundle → status=missing (honest skip).
+ *   - Source path escapes bundleRoot → status=unsafe.
+ *
+ * Both-sides containment (banked
+ * feedback_pre_existing_trust_boundary_reuse_canonical_helper addendum):
+ * source-side under bundleRoot, target-side under targetContextPacksDir
+ * (target via basename so structurally safe; defensive check retained).
+ *
+ * /install handler integration lands at Checkpoint 7.3f step 3 with a
+ * real consumer-scan() proof against the routed dir (mirror of the
+ * workflow_specs scanWorkflowSpecFolder reachability proof at d81456dc).
+ */
+import nodePath from "node:path";
+/**
+ * Route each declared context_pack from the bundle tree to the operator
+ * context-packs library. Per-entry safety: SOURCE containment under
+ * bundleRoot + TARGET containment under targetContextPacksDir.
+ * Degenerate inputs the consumer ignores (non-manifest.yaml basename;
+ * parent-dir basename collisions) are caught BEFORE write so the
+ * routedCount stays truthful at the consumer-visible boundary. Caller
+ * writes the install audit record using the records returned here.
+ */
+export function routeContextPacks(input, fs) {
+    const records = [];
+    const bundleRootResolved = nodePath.resolve(input.bundleRoot);
+    const targetRootResolved = nodePath.resolve(input.targetContextPacksDir);
+    fs.mkdirp(input.targetContextPacksDir);
+    // Track parent-dir basenames already routed so collisions surface as
+    // conflict records, not silent overwrites (banked workflow_specs lesson
+    // 16ebb8af).
+    const routedDirNames = new Set();
+    for (const declared of input.declaredContextPacks) {
+        // Consumer-visibility prefilter: context-pack-library-service scans
+        // pack dirs whose immediate child is manifest.yaml. Any declared path
+        // whose basename isn't "manifest.yaml" routes to a dir the consumer
+        // will never recognize as a pack. Reject pre-write so routedCount
+        // stays truthful at the consumer-visible boundary.
+        if (nodePath.basename(declared) !== "manifest.yaml") {
+            records.push({
+                declaredPath: declared,
+                status: "not_manifest",
+                detail: `context_pack '${declared}' basename is not 'manifest.yaml'; context-pack-library scans pack dirs for a top-level manifest.yaml`,
+            });
+            continue;
+        }
+        const sourceAbs = nodePath.resolve(input.bundleRoot, declared);
+        // Defense-in-depth path-containment on SOURCE (mirrors skills/
+        // workflow_specs routers).
+        if (sourceAbs !== bundleRootResolved && !sourceAbs.startsWith(bundleRootResolved + nodePath.sep)) {
+            records.push({
+                declaredPath: declared,
+                status: "unsafe",
+                detail: `context_pack path '${declared}' escapes bundle workspace; rejected`,
+            });
+            continue;
+        }
+        // Manifest-file existence check (banked B1 from a0e7e0e1 guard catch):
+        // the consumer (context-pack-library-service.scan, line 76) skips any
+        // pack dir whose manifest.yaml is absent. A parent-dir-exists-but-
+        // manifest-missing pack would route as status=routed but be invisible
+        // to the consumer — false-positive routedCount class. Check the file
+        // ITSELF, not just the parent, to keep routedCount truthful at the
+        // consumer-visible boundary.
+        if (!fs.exists(sourceAbs)) {
+            records.push({
+                declaredPath: declared,
+                status: "missing",
+                detail: `context_pack manifest '${declared}' not present in bundle; skipped (consumer requires the file itself)`,
+            });
+            continue;
+        }
+        // Manifest-type check (banked B2 from d491eca9 guard catch): exists()
+        // returns true for both files AND directories. If sourceAbs exists as
+        // a directory (named manifest.yaml, but a dir not a file), the live
+        // consumer's readFileSync(manifestPath) throws and scan() records an
+        // error diagnostic instead of indexing a visible pack — false-positive
+        // routedCount class. Reject pre-write so routedCount stays truthful at
+        // the consumer-visible boundary.
+        if (fs.isDirectory(sourceAbs)) {
+            records.push({
+                declaredPath: declared,
+                status: "not_manifest",
+                detail: `context_pack manifest '${declared}' exists but is a directory, not a file; consumer requires manifest.yaml to be a readable file`,
+            });
+            continue;
+        }
+        const sourcePackDir = nodePath.dirname(sourceAbs);
+        if (!fs.isDirectory(sourcePackDir)) {
+            records.push({
+                declaredPath: declared,
+                status: "not_directory",
+                detail: `context_pack parent of '${declared}' is not a directory; skipped`,
+            });
+            continue;
+        }
+        const dirName = nodePath.basename(sourcePackDir);
+        // Target = <targetContextPacksDir>/<basename(parentDir)>/ (the operator-
+        // host canonical layout per context-pack-types.ts:9-10).
+        const targetAbs = nodePath.resolve(input.targetContextPacksDir, dirName);
+        // Sanity check (basename is structurally safe but the resolve could
+        // theoretically be a no-op for "" → keep the check, expected always-
+        // true).
+        if (targetAbs !== targetRootResolved && !targetAbs.startsWith(targetRootResolved + nodePath.sep)) {
+            records.push({
+                declaredPath: declared,
+                status: "unsafe",
+                detail: `context_pack target path for '${declared}' escapes target context-packs library; rejected`,
+            });
+            continue;
+        }
+        if (routedDirNames.has(dirName)) {
+            records.push({
+                declaredPath: declared,
+                status: "conflict",
+                detail: `context_pack parent-dir basename '${dirName}' collides with an earlier declared path; only the first is routed (banked collision-detection lesson)`,
+            });
+            continue;
+        }
+        fs.copyDir(sourcePackDir, targetAbs);
+        routedDirNames.add(dirName);
+        records.push({
+            declaredPath: declared,
+            status: "routed",
+            installedAt: targetAbs,
+        });
+    }
+    const routedCount = records.filter((r) => r.status === "routed").length;
+    const rejectedCount = records.length - routedCount;
+    return { records, routedCount, rejectedCount };
+}
+//# sourceMappingURL=bundle-context-packs-router.js.map

package/daemon/dist/domain/bundle-context-packs-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-context-packs-router.js","sourceRoot":"","sources":["../../src/domain/bundle-context-packs-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,QAAQ,MAAM,WAAW,CAAC;AAwDjC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA6B,EAC7B,EAA2B;IAE3B,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACvC,qEAAqE;IACrE,wEAAwE;IACxE,aAAa;IACb,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAClD,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,mDAAmD;QACnD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,eAAe,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,iBAAiB,QAAQ,uGAAuG;aACzI,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,+DAA+D;QAC/D,2BAA2B;QAC3B,IAAI,SAAS,KAAK,kBAAkB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,sBAAsB,QAAQ,sCAAsC;aAC7E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,6BAA6B;QAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,0BAA0B,QAAQ,sEAAsE;aACjH,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,sEAAsE;QACtE,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,iCAAiC;QACjC,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,0BAA0B,QAAQ,gGAAgG;aAC3I,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,2BAA2B,QAAQ,+BAA+B;aAC3E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QACzE,oEAAoE;QACpE,qEAAqE;QACrE,SAAS;QACT,IAAI,SAAS,KAAK,kBAAkB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,iCAAiC,QAAQ,kDAAkD;aACpG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,qCAAqC,OAAO,wGAAwG;aAC7J,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACrC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AACjD,CAAC"}

package/daemon/dist/domain/bundle-plugins-router.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Bundle plugins router (Item 6 / slice-05 Checkpoint 7.3c).
+ *
+ * Pure function. Copies plugin trees declared in a bundle manifest's
+ * plugins[] block from the bundle's extracted tree to the operator plugins
+ * library (per-id subdir). Mirrors the bundle-skills-router pattern: FsOps
+ * injection; both-sides path containment (banked
+ * feedback_pre_existing_trust_boundary_reuse_canonical_helper addendum:
+ * contain BOTH source AND target when handling untrusted path input);
+ * missing source surfaces as status=missing; unsafe paths rejected with
+ * status=unsafe.
+ *
+ * Per orch-ratified HYBRID decision: v0 source.kind is local only (path
+ * under the bundle's extracted tree). Other kinds (external operator-host
+ * paths, remote fetch) reserved for future.
+ *
+ * /install handler integration lands at Checkpoint 7.3d.
+ */
+/** Filesystem injection point — real impl wraps node:fs. Tests substitute in-memory. */
+export interface PluginsRouterFsOps {
+    exists: (path: string) => boolean;
+    isDirectory: (path: string) => boolean;
+    mkdirp: (path: string) => void;
+    copyDir: (src: string, dest: string) => void;
+}
+/** A plugin reference in the bundle manifest. Matches the daemon's BundlePluginReference shape. */
+export interface PluginRoutingInput {
+    id: string;
+    source: {
+        kind: "local";
+        path: string;
+    };
+}
+/** Inputs to routePlugins. */
+export interface RoutePluginsInput {
+    /** Absolute path to the bundle's extracted root (tmp dir from unpack). */
+    bundleRoot: string;
+    /** Plugin references declared in the manifest. */
+    declaredPlugins: PluginRoutingInput[];
+    /** Absolute path to the operator plugins library (default ~/.openrig/plugins). */
+    targetPluginsDir: string;
+}
+/** One routed plugin (or one rejection). */
+export interface RoutedPluginRecord {
+    /** Plugin id from manifest.plugins[].id. */
+    id: string;
+    /** "routed" = directory copied; "missing" = source not in bundle; "unsafe"
+     * = source or target escapes its bounding directory; "not_directory" =
+     * source path is not a directory. */
+    status: "routed" | "missing" | "unsafe" | "not_directory";
+    /** Where the plugin landed in the target library (absolute path), if routed. */
+    installedAt?: string;
+    /** Human-readable detail. */
+    detail?: string;
+}
+/** Aggregate routing result. */
+export interface RoutePluginsResult {
+    records: RoutedPluginRecord[];
+    routedCount: number;
+    rejectedCount: number;
+}
+/**
+ * Route each declared plugin from the bundle tree to the operator plugins
+ * library as <targetPluginsDir>/<id>/. Per-plugin safety: BOTH source path
+ * (under bundleRoot) AND target path (under targetPluginsDir) are
+ * containment-checked. Banked both-sides-of-trust-boundary lesson applied.
+ */
+export declare function routePlugins(input: RoutePluginsInput, fs: PluginsRouterFsOps): RoutePluginsResult;
+//# sourceMappingURL=bundle-plugins-router.d.ts.map

package/daemon/dist/domain/bundle-plugins-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-plugins-router.d.ts","sourceRoot":"","sources":["../../src/domain/bundle-plugins-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,wFAAwF;AACxF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9C;AAED,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,eAAe,EAAE,kBAAkB,EAAE,CAAC;IACtC,kFAAkF;IAClF,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX;;yCAEqC;IACrC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,eAAe,CAAC;IAC1D,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gCAAgC;AAChC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,kBAAkB,GAAG,kBAAkB,CA8DjG"}