@openrig/cli 0.4.7 → 0.5.0

package/daemon/dist/domain/context-packs/context-pack-library-service.d.ts

@@ -1,26 +1,54 @@
+import { type PlainFileAssembly } from "./bundle-assembler.js";
 import { type ContextPackEntry, type ContextPackSourceType } from "./context-pack-types.js";
 export interface ContextPackLibraryRoot {
-    /** Absolute path to a directory whose immediate children are pack dirs. */
+    /** Absolute path to a discovery root. Slice-03 Atom 2: a pack is any
+     *  NESTED directory containing manifest.yaml; its ref is the relative
+     *  path from this root (spec §2 path-like refs, e.g.
+     *  `packs/compaction-restore`). */
     path: string;
     sourceType: ContextPackSourceType;
 }
 export interface ContextPackLibraryOpts {
     roots: ContextPackLibraryRoot[];
+    /** Narrow test seam for Atom 3's cleanup-on-write-failure contract. */
+    writeFile?: (path: string, data: string | Buffer) => void;
 }
-/** Stable id format: context-pack:<name>:<version>. */
-export declare function contextPackId(name: string, version: string): string;
-export declare function parseContextPackId(id: string): {
-    name: string;
-    version: string;
-} | null;
-/** Daemon-derived per-file token estimate. Same heuristic the existing
- *  context-usage-store uses (≈4 chars/token); cheap, stable, no
- *  dependency on a tokenizer library. */
-export declare function estimateTokensFromBytes(bytes: number): number;
+export interface ComposeContextPackSource {
+    /** Absolute source path, resolved by the local CLI caller. */
+    path: string;
+    /** Original caller spelling retained as YAML-serialized provenance. */
+    label: string;
+}
+export interface ComposeContextPackResult extends PlainFileAssembly {
+    ref: string;
+    entry: ContextPackEntry;
+}
+/** Stable opaque id = `context-pack:<ref>` (Slice-03 Atom 5). The path-like ref
+ *  IS the identity, so the id is unique per pack — two refs that share a manifest
+ *  name+version no longer collide — and it keeps the `context-pack:` prefix the
+ *  UI's library-review dispatch keys on. Colon-id name:version addressing/parsing
+ *  was removed with the legacy index; resolution is by-ref only. */
+export declare function contextPackId(ref: string): string;
+export { estimateTokensFromBytes } from "./token-estimate.js";
 export declare class ContextPackLibraryService {
-    private entries;
+    /** Slice-03 Atom 2 (guard correction b74e4576): the PRIMARY index — the
+     *  normalized safe path-like ref IS the pack identity (spec §2 "refs are
+     *  the contract"). getByRef/list/scan().count all observe THIS map; same
+     *  ref across roots is last-root-wins here, so precedence holds everywhere
+     *  (one row, one count, one resolution). Distinct refs with identical
+     *  manifest name/version are independent entries by construction. */
+    private entriesByRef;
     private readonly roots;
+    private readonly writeFile;
     constructor(opts: ContextPackLibraryOpts);
+    /** Slice-03 Atom 2 — recursive path-addressed discovery: walk a root and
+     *  return every NESTED dir containing manifest.yaml, with its path-like
+     *  ref. Packs are LEAVES: a manifest-bearing dir's subtree belongs to that
+     *  pack, so discovery does not descend below it (a nested manifest would
+     *  make the outer pack's files ambiguous). Symlinked dirs are never
+     *  traversed (dirent.isDirectory() is lstat-shaped — the pre-Atom-2
+     *  semantics, carried into the recursion). */
+    private discoverPackDirs;
     /** Re-walk all roots, replace the in-memory index, return a count. */
     scan(): {
         count: number;
@@ -29,9 +57,36 @@ export declare class ContextPackLibraryService {
             error: string;
         }>;
     };
+    /** Slice-03 Atom 2 — RESOLVE trust boundary: get a pack by its path-like
+     *  ref. An unsafe ref is a structured, fail-visible error BEFORE any
+     *  lookup; a safe-but-absent ref is an honest null. */
+    getByRef(ref: string): ContextPackEntry | null;
+    /** Slice-03 Atom 4 — DELETE trust boundary: remove a pack by its path-like
+     *  ref. Safety ordering mirrors getByRef/compose: an unsafe ref is a
+     *  structured, fail-visible error BEFORE any filesystem op; a safe-but-absent
+     *  ref is an honest pack_not_found; a shipped `builtin` pack is REFUSED — rm
+     *  mirrors add's operator-writable contract (add only ever writes into the
+     *  user_file root, and rm never rmSyncs shipped assets under the package
+     *  directory). On success the pack directory is deleted and a re-scan makes
+     *  the ref stop resolving (durable removal). */
+    removeByRef(ref: string): {
+        removed: boolean;
+        ref: string;
+        removedPath: string;
+    };
     list(): ContextPackEntry[];
-    get(id: string): ContextPackEntry | null;
-    getByNameVersion(name: string, version: string): ContextPackEntry | null;
+    /**
+     * Atom 3: compose named files into one durable path-ref pack.
+     *
+     * Safety ordering is load-bearing: validate the ref first; reject every
+     * existing/hidden/unsafe namespace and preflight every source before the
+     * first mutation. Members are written before manifest.yaml, so discovery
+     * can never observe a partial pack. A failed write removes the new target.
+     */
+    composeFromFiles(opts: {
+        outRef: string;
+        sources: ComposeContextPackSource[];
+    }): ComposeContextPackResult;
     /** Resolve the absolute file path for a pack entry's file, with a
      *  containment check that prevents path-traversal escaping the pack
      *  directory. */

package/daemon/dist/domain/context-packs/context-pack-library-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-pack-library-service.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-library-service.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,sBAAsB;IACrC,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAED,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMvF;AAED;;yCAEyC;AACzC,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,qBAAa,yBAAyB;IACpC,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;gBAErC,IAAI,EAAE,sBAAsB;IAIxC,sEAAsE;IACtE,IAAI,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;IAqC3E,IAAI,IAAI,gBAAgB,EAAE;IAI1B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIxC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAIxE;;qBAEiB;IACjB,qBAAqB,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAmB3E,OAAO,CAAC,aAAa;CAoDtB"}
+{"version":3,"file":"context-pack-library-service.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-library-service.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAInF,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,sBAAsB;IACrC;;;uCAGmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC,uEAAuE;IACvE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;CAC3D;AAED,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED;;;;oEAIoE;AACpE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,qBAAa,yBAAyB;IACpC;;;;;yEAKqE;IACrE,OAAO,CAAC,YAAY,CAAuC;IAC3D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgD;gBAE9D,IAAI,EAAE,sBAAsB;IAKxC;;;;;;kDAM8C;IAC9C,OAAO,CAAC,gBAAgB;IAuBxB,sEAAsE;IACtE,IAAI,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;IAoC3E;;2DAEuD;IACvD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAS9C;;;;;;;oDAOgD;IAChD,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAuBhF,IAAI,IAAI,gBAAgB,EAAE;IAS1B;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,wBAAwB,EAAE,CAAC;KACrC,GAAG,wBAAwB;IAqL5B;;qBAEiB;IACjB,qBAAqB,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAmB3E,OAAO,CAAC,aAAa;CAuDtB"}

package/daemon/dist/domain/context-packs/context-pack-library-service.js

@@ -6,61 +6,93 @@
 // daemon HTTP routes + UI library + send mechanism. Workspace-surface
 // reconciliation: the operator's filesystem edit always wins on next
 // scan() (matches PL-004 Phase D's contract for workflow_specs).
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { join, relative } from "node:path";
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { dirname, extname, join, relative, sep } from "node:path";
+import { stringify as stringifyYaml } from "yaml";
+import { assemblePlainFiles } from "./bundle-assembler.js";
+import { assertSafePackRef } from "./ref-safety.js";
 import { parseManifest } from "./manifest-parser.js";
+import { estimateTokensFromBytes } from "./token-estimate.js";
 import { ContextPackError, } from "./context-pack-types.js";
-/** Stable id format: context-pack:<name>:<version>. */
-export function contextPackId(name, version) {
-    return `context-pack:${name}:${version}`;
-}
-export function parseContextPackId(id) {
-    if (!id.startsWith("context-pack:"))
-        return null;
-    const rest = id.slice("context-pack:".length);
-    const last = rest.lastIndexOf(":");
-    if (last === -1)
-        return null;
-    return { name: rest.slice(0, last), version: rest.slice(last + 1) };
-}
-/** Daemon-derived per-file token estimate. Same heuristic the existing
- *  context-usage-store uses (≈4 chars/token); cheap, stable, no
- *  dependency on a tokenizer library. */
-export function estimateTokensFromBytes(bytes) {
-    return Math.ceil(bytes / 4);
+/** Stable opaque id = `context-pack:<ref>` (Slice-03 Atom 5). The path-like ref
+ *  IS the identity, so the id is unique per pack — two refs that share a manifest
+ *  name+version no longer collide — and it keeps the `context-pack:` prefix the
+ *  UI's library-review dispatch keys on. Colon-id name:version addressing/parsing
+ *  was removed with the legacy index; resolution is by-ref only. */
+export function contextPackId(ref) {
+    return `context-pack:${ref}`;
 }
+export { estimateTokensFromBytes } from "./token-estimate.js";
 export class ContextPackLibraryService {
-    entries = new Map();
+    /** Slice-03 Atom 2 (guard correction b74e4576): the PRIMARY index — the
+     *  normalized safe path-like ref IS the pack identity (spec §2 "refs are
+     *  the contract"). getByRef/list/scan().count all observe THIS map; same
+     *  ref across roots is last-root-wins here, so precedence holds everywhere
+     *  (one row, one count, one resolution). Distinct refs with identical
+     *  manifest name/version are independent entries by construction. */
+    entriesByRef = new Map();
     roots;
+    writeFile;
     constructor(opts) {
         this.roots = opts.roots;
+        this.writeFile = opts.writeFile ?? ((path, data) => writeFileSync(path, data));
     }
-    /** Re-walk all roots, replace the in-memory index, return a count. */
-    scan() {
-        const next = new Map();
-        const errors = [];
-        for (const root of this.roots) {
+    /** Slice-03 Atom 2 — recursive path-addressed discovery: walk a root and
+     *  return every NESTED dir containing manifest.yaml, with its path-like
+     *  ref. Packs are LEAVES: a manifest-bearing dir's subtree belongs to that
+     *  pack, so discovery does not descend below it (a nested manifest would
+     *  make the outer pack's files ambiguous). Symlinked dirs are never
+     *  traversed (dirent.isDirectory() is lstat-shaped — the pre-Atom-2
+     *  semantics, carried into the recursion). */
+    discoverPackDirs(rootPath) {
+        const found = [];
+        const walk = (dir) => {
             let dirents;
             try {
-                dirents = existsSync(root.path)
-                    ? readdirSync(root.path, { withFileTypes: true })
-                    : [];
+                dirents = readdirSync(dir, { withFileTypes: true });
             }
             catch {
-                continue;
+                return;
             }
             for (const dirent of dirents) {
                 if (!dirent.isDirectory())
                     continue;
-                const packDir = join(root.path, dirent.name);
-                const manifestPath = join(packDir, "manifest.yaml");
-                if (!existsSync(manifestPath))
+                const child = join(dir, dirent.name);
+                if (existsSync(join(child, "manifest.yaml"))) {
+                    found.push({ packDir: child, ref: relative(rootPath, child).split(sep).join("/") });
+                }
+                else {
+                    walk(child);
+                }
+            }
+        };
+        if (existsSync(rootPath))
+            walk(rootPath);
+        return found;
+    }
+    /** Re-walk all roots, replace the in-memory index, return a count. */
+    scan() {
+        const nextByRef = new Map();
+        const errors = [];
+        for (const root of this.roots) {
+            for (const { packDir, ref } of this.discoverPackDirs(root.path)) {
+                // DISCOVERY trust boundary (Atom 2): every discovered ref passes the
+                // sealed per-segment contract; an unsafe on-disk ref is a STRUCTURED,
+                // FAIL-VISIBLE error and the pack is skipped — never indexed.
+                try {
+                    assertSafePackRef(ref);
+                }
+                catch (err) {
+                    errors.push({ source: packDir, error: err.message });
                     continue;
+                }
                 try {
-                    const entry = this.readPackEntry(packDir, manifestPath, root);
-                    // Last-wins: workspace > user_file > builtin in the discovery
-                    // order configured by startup.
-                    next.set(entry.id, entry);
+                    const entry = this.readPackEntry(packDir, join(packDir, "manifest.yaml"), root, ref);
+                    // PRIMARY identity = the ref. Same ref across roots: last root wins
+                    // (workspace > user_file > builtin in the startup-configured discovery
+                    // order), so list/count/resolve agree. Distinct refs never collide,
+                    // whatever their manifests say.
+                    nextByRef.set(ref, entry);
                 }
                 catch (err) {
                     errors.push({
@@ -72,17 +104,198 @@ export class ContextPackLibraryService {
                 }
             }
         }
-        this.entries = next;
-        return { count: next.size, errors };
+        this.entriesByRef = nextByRef;
+        return { count: nextByRef.size, errors };
     }
-    list() {
-        return Array.from(this.entries.values()).sort((a, b) => a.name.localeCompare(b.name) || a.version.localeCompare(b.version));
+    /** Slice-03 Atom 2 — RESOLVE trust boundary: get a pack by its path-like
+     *  ref. An unsafe ref is a structured, fail-visible error BEFORE any
+     *  lookup; a safe-but-absent ref is an honest null. */
+    getByRef(ref) {
+        try {
+            assertSafePackRef(ref);
+        }
+        catch (err) {
+            throw new ContextPackError("unsafe_ref", err.message, { ref });
+        }
+        return this.entriesByRef.get(ref) ?? null;
+    }
+    /** Slice-03 Atom 4 — DELETE trust boundary: remove a pack by its path-like
+     *  ref. Safety ordering mirrors getByRef/compose: an unsafe ref is a
+     *  structured, fail-visible error BEFORE any filesystem op; a safe-but-absent
+     *  ref is an honest pack_not_found; a shipped `builtin` pack is REFUSED — rm
+     *  mirrors add's operator-writable contract (add only ever writes into the
+     *  user_file root, and rm never rmSyncs shipped assets under the package
+     *  directory). On success the pack directory is deleted and a re-scan makes
+     *  the ref stop resolving (durable removal). */
+    removeByRef(ref) {
+        try {
+            assertSafePackRef(ref);
+        }
+        catch (err) {
+            throw new ContextPackError("unsafe_ref", err.message, { ref });
+        }
+        const entry = this.entriesByRef.get(ref);
+        if (!entry) {
+            throw new ContextPackError("pack_not_found", `context pack ref '${ref}' not found in the library`, { ref });
+        }
+        if (entry.sourceType === "builtin") {
+            throw new ContextPackError("pack_not_removable", `context pack ref '${ref}' is a shipped builtin pack and cannot be removed`, { ref, sourceType: entry.sourceType });
+        }
+        const removedPath = entry.sourcePath;
+        rmSync(removedPath, { recursive: true, force: true });
+        this.scan();
+        return { removed: true, ref, removedPath };
     }
-    get(id) {
-        return this.entries.get(id) ?? null;
+    list() {
+        // primary-ref-index view: one row per ref; ref is the deterministic
+        // tiebreaker for identical manifest name/version
+        return Array.from(this.entriesByRef.values()).sort((a, b) => a.name.localeCompare(b.name) || a.version.localeCompare(b.version) || a.relativePath.localeCompare(b.relativePath));
     }
-    getByNameVersion(name, version) {
-        return this.entries.get(contextPackId(name, version)) ?? null;
+    /**
+     * Atom 3: compose named files into one durable path-ref pack.
+     *
+     * Safety ordering is load-bearing: validate the ref first; reject every
+     * existing/hidden/unsafe namespace and preflight every source before the
+     * first mutation. Members are written before manifest.yaml, so discovery
+     * can never observe a partial pack. A failed write removes the new target.
+     */
+    composeFromFiles(opts) {
+        // FIRST trust-boundary operation: the sealed Atom-1 validator.
+        try {
+            assertSafePackRef(opts.outRef);
+        }
+        catch (err) {
+            throw new ContextPackError("unsafe_ref", err.message, { ref: opts.outRef });
+        }
+        if (opts.sources.length === 0) {
+            throw new ContextPackError("missing_files", "context composition requires at least one --from file", { missingFiles: [] });
+        }
+        // Complete source preflight precedes every output/store conflict check.
+        const missingFiles = opts.sources
+            .filter((source) => !existsSync(source.path))
+            .map((source) => source.path);
+        if (missingFiles.length > 0) {
+            throw new ContextPackError("missing_files", `context composition source file(s) not found: ${missingFiles.join(", ")}`, { missingFiles });
+        }
+        const allowedSuffixes = new Set([".md", ".markdown", ".yaml", ".yml", ".txt"]);
+        const members = opts.sources.map((source, index) => {
+            let content;
+            try {
+                if (!statSync(source.path).isFile())
+                    throw new Error("source is not a regular file");
+                content = readFileSync(source.path);
+            }
+            catch (err) {
+                throw new ContextPackError("file_read_failed", `failed to read composition source ${source.path}: ${err.message}`, { path: source.path });
+            }
+            const candidateSuffix = extname(source.label).toLowerCase();
+            const suffix = allowedSuffixes.has(candidateSuffix) ? candidateSuffix : ".txt";
+            return {
+                path: `source-${String(index + 1).padStart(4, "0")}${suffix}`,
+                label: source.label,
+                content,
+            };
+        });
+        const writeRoot = this.roots.find((root) => root.sourceType === "user_file");
+        if (!writeRoot) {
+            throw new ContextPackError("store_unavailable", "context pack composition requires a writable user_file store root");
+        }
+        // Refresh before checking so the exact ref is rejected in ANY root, not
+        // merely at the user target path. This preserves Atom-2 precedence truth.
+        this.scan();
+        if (this.entriesByRef.has(opts.outRef)) {
+            throw new ContextPackError("pack_exists", `context pack ref '${opts.outRef}' already exists in the library`, { ref: opts.outRef });
+        }
+        const segments = opts.outRef.split("/");
+        const targetDir = join(writeRoot.path, ...segments);
+        // lstat sees dangling symlinks too; any physical exact target is a
+        // conflict and is never overwritten or merged.
+        try {
+            lstatSync(targetDir);
+            throw new ContextPackError("pack_exists", `context pack target '${targetDir}' already exists`, { ref: opts.outRef, targetDir });
+        }
+        catch (err) {
+            if (err instanceof ContextPackError)
+                throw err;
+            const code = err.code;
+            // ENOTDIR means an ancestor is a file; the namespace walk below turns
+            // that into the structured unsafe_ref_namespace contract.
+            if (code !== "ENOENT" && code !== "ENOTDIR")
+                throw err;
+        }
+        // Atom-2 treats manifest-bearing dirs as leaves. Reject an undiscoverable
+        // child, and reject symlink/non-directory namespace segments before any
+        // mkdir can follow them.
+        let cursor = writeRoot.path;
+        for (const segment of segments.slice(0, -1)) {
+            cursor = join(cursor, segment);
+            let stat;
+            try {
+                stat = lstatSync(cursor);
+            }
+            catch (err) {
+                if (err.code === "ENOENT")
+                    break;
+                throw err;
+            }
+            if (stat.isSymbolicLink() || !stat.isDirectory()) {
+                throw new ContextPackError("unsafe_ref_namespace", `context pack ref '${opts.outRef}' crosses a symlink or non-directory namespace segment '${cursor}'`, { ref: opts.outRef, segmentPath: cursor });
+            }
+            if (existsSync(join(cursor, "manifest.yaml"))) {
+                throw new ContextPackError("pack_ref_below_pack", `context pack ref '${opts.outRef}' is below existing pack leaf '${cursor}'`, { ref: opts.outRef, ancestor: cursor });
+            }
+        }
+        const name = segments.at(-1);
+        const manifest = stringifyYaml({
+            name,
+            version: "1",
+            purpose: `Composed from ${members.length} ordered files`,
+            files: members.map((member) => ({
+                path: member.path,
+                role: "source",
+                summary: member.label,
+            })),
+        });
+        let createdTarget = false;
+        try {
+            mkdirSync(dirname(targetDir), { recursive: true });
+            try {
+                mkdirSync(targetDir);
+                createdTarget = true;
+            }
+            catch (err) {
+                if (err.code === "EEXIST") {
+                    throw new ContextPackError("pack_exists", `context pack target '${targetDir}' already exists`, { ref: opts.outRef, targetDir });
+                }
+                throw err;
+            }
+            for (const member of members) {
+                this.writeFile(join(targetDir, member.path), member.content);
+            }
+            // Manifest last: only complete packs become discoverable.
+            this.writeFile(join(targetDir, "manifest.yaml"), manifest);
+        }
+        catch (err) {
+            if (createdTarget)
+                rmSync(targetDir, { recursive: true, force: true });
+            if (err instanceof ContextPackError)
+                throw err;
+            throw new ContextPackError("pack_write_failed", `failed to write context pack '${opts.outRef}': ${err.message}`, { ref: opts.outRef, targetDir });
+        }
+        this.scan();
+        const entry = this.entriesByRef.get(opts.outRef);
+        if (!entry || entry.sourcePath !== targetDir) {
+            rmSync(targetDir, { recursive: true, force: true });
+            this.scan();
+            throw new ContextPackError("pack_write_failed", `composed context pack '${opts.outRef}' was not discoverable at its durable ref`, { ref: opts.outRef, targetDir });
+        }
+        const assembled = assemblePlainFiles({
+            files: members.map((member) => ({
+                path: member.path,
+                content: member.content.toString("utf-8"),
+            })),
+        });
+        return { ref: opts.outRef, entry, ...assembled };
     }
     /** Resolve the absolute file path for a pack entry's file, with a
      *  containment check that prevents path-traversal escaping the pack
@@ -97,7 +310,7 @@ export class ContextPackLibraryService {
         }
         return abs;
     }
-    readPackEntry(packDir, manifestPath, root) {
+    readPackEntry(packDir, manifestPath, root, ref) {
         const raw = readFileSync(manifestPath, "utf-8");
         const manifest = parseManifest(raw, manifestPath);
         let mostRecentMtime = 0;
@@ -130,14 +343,16 @@ export class ContextPackLibraryService {
         });
         const derivedEstimatedTokens = files.reduce((acc, f) => acc + (f.estimatedTokens ?? 0), 0);
         return {
-            id: contextPackId(manifest.name, manifest.version),
+            // id and relativePath share ONE source of truth: the discovered path-like
+            // ref (posix-joined). The id is `context-pack:<ref>` — opaque, unique.
+            id: contextPackId(ref),
             kind: "context-pack",
             name: manifest.name,
             version: manifest.version,
             purpose: manifest.purpose ?? null,
             sourceType: root.sourceType,
             sourcePath: packDir,
-            relativePath: relative(root.path, packDir) || ".",
+            relativePath: ref,
             updatedAt: new Date(mostRecentMtime || Date.now()).toISOString(),
             manifestEstimatedTokens: typeof manifest.estimatedTokens === "number" ? manifest.estimatedTokens : null,
             derivedEstimatedTokens,

package/daemon/dist/domain/context-packs/context-pack-library-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-pack-library-service.js","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-library-service.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,WAAW;AACX,EAAE;AACF,2DAA2D;AAC3D,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,gBAAgB,GAIjB,MAAM,yBAAyB,CAAC;AAYjC,uDAAuD;AACvD,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,OAAO,gBAAgB,IAAI,IAAI,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,OAAO,yBAAyB;IAC5B,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrC,KAAK,CAA2B;IAEjD,YAAY,IAA4B;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,sEAAsE;IACtE,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;QACjD,MAAM,MAAM,GAA6C,EAAE,CAAC;QAE5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,OAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC7B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;oBACjD,CAAC,CAAC,EAAE,CAAC;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;oBAAE,SAAS;gBACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBACpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAS;gBACxC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;oBAC9D,8DAA8D;oBAC9D,+BAA+B;oBAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC;wBACV,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,GAAG,YAAY,gBAAgB;4BACpC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE;4BAC/B,CAAC,CAAE,GAAa,CAAC,OAAO;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9H,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,gBAAgB,CAAC,IAAY,EAAE,OAAe;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IAChE,CAAC;IAED;;qBAEiB;IACjB,qBAAqB,CAAC,SAA2B,EAAE,OAAe;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,kBAAkB,OAAO,+DAA+D,EACxF,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;YAChF,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,kBAAkB,GAAG,yBAAyB,SAAS,CAAC,UAAU,GAAG,EACrE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CACnB,OAAe,EACf,YAAoB,EACpB,IAA4B;QAE5B,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAElD,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;QAE3D,MAAM,KAAK,GAA2B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACzB,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC;gBAChB,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,KAAK,GAAG,eAAe;gBAAE,eAAe,GAAG,KAAK,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI;gBAC3B,YAAY,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;gBACzC,KAAK;gBACL,eAAe,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC;aACxE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3F,OAAO;YACL,EAAE,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC;YAClD,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG;YACjD,SAAS,EAAE,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAChE,uBAAuB,EAAE,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;YACvG,sBAAsB;YACtB,KAAK;SACN,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"context-pack-library-service.js","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-library-service.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,WAAW;AACX,EAAE;AACF,2DAA2D;AAC3D,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,iEAAiE;AAEjE,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAA0B,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,gBAAgB,GAIjB,MAAM,yBAAyB,CAAC;AA6BjC;;;;oEAIoE;AACpE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,gBAAgB,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,OAAO,yBAAyB;IACpC;;;;;yEAKqE;IAC7D,YAAY,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC1C,KAAK,CAA2B;IAChC,SAAS,CAAgD;IAE1E,YAAY,IAA4B;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACjF,CAAC;IAED;;;;;;kDAM8C;IACtC,gBAAgB,CAAC,QAAgB;QACvC,MAAM,KAAK,GAA4C,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;YACjC,IAAI,OAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;oBAAE,SAAS;gBACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;oBAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtF,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IACtE,IAAI;QACF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;QACtD,MAAM,MAAM,GAA6C,EAAE,CAAC;QAE5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,KAAK,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,qEAAqE;gBACrE,sEAAsE;gBACtE,8DAA8D;gBAC9D,IAAI,CAAC;oBACH,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;oBAChE,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACrF,oEAAoE;oBACpE,uEAAuE;oBACvE,oEAAoE;oBACpE,gCAAgC;oBAChC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC;wBACV,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,GAAG,YAAY,gBAAgB;4BACpC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE;4BAC/B,CAAC,CAAE,GAAa,CAAC,OAAO;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED;;2DAEuD;IACvD,QAAQ,CAAC,GAAW;QAClB,IAAI,CAAC;YACH,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,YAAY,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED;;;;;;;oDAOgD;IAChD,WAAW,CAAC,GAAW;QACrB,IAAI,CAAC;YACH,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,YAAY,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,qBAAqB,GAAG,4BAA4B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,qBAAqB,GAAG,mDAAmD,EAC3E,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACtC,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACrC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI;QACF,oEAAoE;QACpE,iDAAiD;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAC7H,CAAC;IACJ,CAAC;IAGD;;;;;;;OAOG;IACH,gBAAgB,CAAC,IAGhB;QACC,+DAA+D;QAC/D,IAAI,CAAC;YACH,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,YAAY,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CACxB,eAAe,EACf,uDAAuD,EACvD,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO;aAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aAC5C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,eAAe,EACf,iDAAiD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC1E,EAAE,YAAY,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACjD,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBACrF,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,qCAAqC,MAAM,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAC7E,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/E,OAAO;gBACL,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,EAAE;gBAC7D,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO;aACR,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,aAAa,EACb,qBAAqB,IAAI,CAAC,MAAM,iCAAiC,EACjE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;QACpD,mEAAmE;QACnE,+CAA+C;QAC/C,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,CAAC,CAAC;YACrB,MAAM,IAAI,gBAAgB,CACxB,aAAa,EACb,wBAAwB,SAAS,kBAAkB,EACnD,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAChC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,gBAAgB;gBAAE,MAAM,GAAG,CAAC;YAC/C,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,sEAAsE;YACtE,0DAA0D;YAC1D,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,GAAG,CAAC;QACzD,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,yBAAyB;QACzB,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,IAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM;gBAC5D,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjD,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,qBAAqB,IAAI,CAAC,MAAM,2DAA2D,MAAM,GAAG,EACpG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAC1C,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,EACrB,qBAAqB,IAAI,CAAC,MAAM,kCAAkC,MAAM,GAAG,EAC3E,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,IAAI;YACJ,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,iBAAiB,OAAO,CAAC,MAAM,gBAAgB;YACxD,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,MAAM,CAAC,KAAK;aACtB,CAAC,CAAC;SACJ,CAAC,CAAC;QAEH,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC;gBACH,SAAS,CAAC,SAAS,CAAC,CAAC;gBACrB,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,MAAM,IAAI,gBAAgB,CACxB,aAAa,EACb,wBAAwB,SAAS,kBAAkB,EACnD,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAChC,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC;YACD,0DAA0D;YAC1D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,aAAa;gBAAE,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,GAAG,YAAY,gBAAgB;gBAAE,MAAM,GAAG,CAAC;YAC/C,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,iCAAiC,IAAI,CAAC,MAAM,MAAO,GAAa,CAAC,OAAO,EAAE,EAC1E,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAChC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,0BAA0B,IAAI,CAAC,MAAM,2CAA2C,EAChF,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAChC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC;YACnC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aAC1C,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;qBAEiB;IACjB,qBAAqB,CAAC,SAA2B,EAAE,OAAe;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,kBAAkB,OAAO,+DAA+D,EACxF,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;YAChF,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,kBAAkB,GAAG,yBAAyB,SAAS,CAAC,UAAU,GAAG,EACrE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,aAAa,CACnB,OAAe,EACf,YAAoB,EACpB,IAA4B,EAC5B,GAAW;QAEX,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAElD,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;QAE3D,MAAM,KAAK,GAA2B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACzB,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC;gBAChB,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,KAAK,GAAG,eAAe;gBAAE,eAAe,GAAG,KAAK,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI;gBAC3B,YAAY,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;gBACzC,KAAK;gBACL,eAAe,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC;aACxE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3F,OAAO;YACL,0EAA0E;YAC1E,uEAAuE;YACvE,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,GAAG;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAChE,uBAAuB,EAAE,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;YACvG,sBAAsB;YACtB,KAAK;SACN,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/context-packs/context-pack-types.d.ts

@@ -57,8 +57,8 @@ export interface ContextPackEntryFile {
     estimatedTokens: number | null;
 }
 export declare class ContextPackError extends Error {
-    readonly code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "pack_not_found" | "file_outside_pack" | "file_read_failed";
+    readonly code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "pack_not_found" | "file_outside_pack" | "file_read_failed" | "unsafe_ref" | "missing_files" | "pack_exists" | "pack_ref_below_pack" | "unsafe_ref_namespace" | "pack_write_failed" | "store_unavailable" | "pack_not_removable";
     readonly details?: Record<string, unknown> | undefined;
-    constructor(code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "pack_not_found" | "file_outside_pack" | "file_read_failed", message: string, details?: Record<string, unknown> | undefined);
+    constructor(code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "pack_not_found" | "file_outside_pack" | "file_read_failed" | "unsafe_ref" | "missing_files" | "pack_exists" | "pack_ref_below_pack" | "unsafe_ref_namespace" | "pack_write_failed" | "store_unavailable" | "pack_not_removable", message: string, details?: Record<string, unknown> | undefined);
 }
 //# sourceMappingURL=context-pack-types.d.ts.map

package/daemon/dist/domain/context-packs/context-pack-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-pack-types.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-types.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb;wEACoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,uBAAuB,EAAE,CAAC;IACjC;;uEAEmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAE1E,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B;2CACuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,qBAAqB,CAAC;IAClC,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;oEACgE;IAChE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;oDAEgD;IAChD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kEAAkE;IAClE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB;aAEN,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBARjC,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,EACtB,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD"}
+{"version":3,"file":"context-pack-types.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-types.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb;wEACoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,uBAAuB,EAAE,CAAC;IACjC;;uEAEmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAE1E,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B;2CACuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,qBAAqB,CAAC;IAClC,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;oEACgE;IAChE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;oDAEgD;IAChD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kEAAkE;IAClE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAGlB,YAAY,GAEZ,eAAe,GACf,aAAa,GACb,qBAAqB,GACrB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GAInB,oBAAoB;aAER,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAtBjC,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAGlB,YAAY,GAEZ,eAAe,GACf,aAAa,GACb,qBAAqB,GACrB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GAInB,oBAAoB,EACxB,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD"}

package/daemon/dist/domain/context-packs/context-pack-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-pack-types.js","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-types.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,2DAA2D;AAC3D,4DAA4D;AAC5D,sEAAsE;AACtE,oCAAoC;AAiEpC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IAQA;IATlB,YACkB,IAMM,EACtB,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAVC,SAAI,GAAJ,IAAI,CAME;QAEN,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"context-pack-types.js","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-types.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,2DAA2D;AAC3D,4DAA4D;AAC5D,sEAAsE;AACtE,oCAAoC;AAiEpC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IAsBA;IAvBlB,YACkB,IAoBQ,EACxB,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAxBC,SAAI,GAAJ,IAAI,CAoBI;QAER,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/daemon/dist/domain/context-packs/manifest-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-parser.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/manifest-parser.ts"],"names":[],"mappings":"AAQA,OAAO,EAAoB,KAAK,mBAAmB,EAAgC,MAAM,yBAAyB,CAAC;AAInH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,CA4GtF"}
+{"version":3,"file":"manifest-parser.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/manifest-parser.ts"],"names":[],"mappings":"AAQA,OAAO,EAAoB,KAAK,mBAAmB,EAAgC,MAAM,yBAAyB,CAAC;AAKnH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,CA0HtF"}

package/daemon/dist/domain/context-packs/manifest-parser.js

@@ -6,6 +6,7 @@
 // (no fs touches in the parser itself; caller hands in raw YAML).
 import { parse as parseYaml } from "yaml";
 import { ContextPackError } from "./context-pack-types.js";
+import { isSafePackVersion } from "./ref-safety.js";
 const ALLOWED_FILE_SUFFIXES = [".md", ".markdown", ".yaml", ".yml", ".txt"];
 export function parseManifest(rawYaml, sourcePath) {
     let parsed;
@@ -30,6 +31,16 @@ export function parseManifest(rawYaml, sourcePath) {
         throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'version'`, { sourcePath });
     }
     const version = String(versionRaw);
+    // Slice-03 lineage repair (R2 HIGH-2): enforce the bounded, delimiter-free
+    // version predicate at the ingestion chokepoint — a colon-bearing version
+    // forges a `<name>:<version>` store id and an overlong one breaches the OS
+    // filename bound. Rejecting here covers every scan/install path that flows
+    // through the parser.
+    if (!isSafePackVersion(version)) {
+        throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} has an invalid version '${version}' — a version must be a single bounded token ` +
+            `[A-Za-z0-9][A-Za-z0-9._+-]{0,31} (no ':' or other separator, no whitespace, ≤32 chars) so it cannot ` +
+            `forge a '<name>:<version>' store id or breach the OS filename bound.`, { sourcePath });
+    }
     const purpose = typeof obj["purpose"] === "string" ? obj["purpose"] : undefined;
     const filesRaw = obj["files"];
     if (!Array.isArray(filesRaw)) {

package/daemon/dist/domain/context-packs/manifest-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-parser.js","sourceRoot":"","sources":["../../../src/domain/context-packs/manifest-parser.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,UAAU;AACV,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,kEAAkE;AAElE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAA0D,MAAM,yBAAyB,CAAC;AAEnH,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5E,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,UAAkB;IAC/D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,eAAe,UAAU,uBAAwB,GAAa,CAAC,OAAO,EAAE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,oCAAoC,EAC7D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,4CAA4C,EACrE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,EAC/D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,OAAO,QAAQ,GAAG,EACjF,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,iCAAiC,CAAC,4CAA4C,EACvG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,2BAA2B,EAC/D,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,8EAA8E,EACjI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,2BAA2B,EAC/D,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,yCAAyC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9H,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"manifest-parser.js","sourceRoot":"","sources":["../../../src/domain/context-packs/manifest-parser.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,UAAU;AACV,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,kEAAkE;AAElE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAA0D,MAAM,yBAAyB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5E,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,UAAkB;IAC/D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,eAAe,UAAU,uBAAwB,GAAa,CAAC,OAAO,EAAE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,oCAAoC,EAC7D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,4CAA4C,EACrE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,EAC/D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,sBAAsB;IACtB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,4BAA4B,OAAO,+CAA+C;YACzG,sGAAsG;YACtG,sEAAsE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,OAAO,QAAQ,GAAG,EACjF,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,iCAAiC,CAAC,4CAA4C,EACvG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,2BAA2B,EAC/D,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,8EAA8E,EACjI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,2BAA2B,EAC/D,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,yCAAyC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9H,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/context-packs/ref-safety.d.ts

@@ -0,0 +1,11 @@
+/**
+ * A path-like pack ref is one or more `/`-separated segments, each a safe segment. Empty ref, an
+ * absolute path (empty leading segment), a double/trailing slash (empty segment), a '.'/'..'
+ * traversal segment, or any injection char in a segment → NOT safe.
+ */
+export declare function isSafePackRef(ref: string): boolean;
+/** Throwing form for write/resolve sites — packs must stay inside the context store root. */
+export declare function assertSafePackRef(ref: string): void;
+/** A pack version must be a single bounded token (no separators, whitespace, '@', or ':'). */
+export declare function isSafePackVersion(version: string): boolean;
+//# sourceMappingURL=ref-safety.d.ts.map

package/daemon/dist/domain/context-packs/ref-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ref-safety.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/ref-safety.ts"],"names":[],"mappings":"AAkBA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQlD;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAQnD;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D"}