@phyzess/pappra 0.1.0-beta.2 → 0.1.0-beta.4

package/dist/hosts/pilot.d.ts

@@ -26,13 +26,8 @@ export declare function readClaudeSessionId(file: string): string | null;
 export declare function readPiSessionId(file: string): string | null;
 export declare function runNativePilot({ harness, profile, cwd, promptFile, evidenceDir, sessionId, resume, timeoutMs, maxBudgetUsd, outputName, phase, trustProject, extraDirs, clock, assignmentFile, capabilitiesFile, taskRoot, maxAgeMinutes, launchKind, discovery, }: PilotOptions): Promise<{
     reservation?: never;
-    settlement?: never;
-    reservation_id?: never;
     refused: boolean;
     admission: {
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
@@ -41,6 +36,10 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -51,12 +50,7 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
@@ -64,6 +58,11 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        expected?: never;
+        actual?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -74,19 +73,19 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        expected?: never;
+        actual?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -97,11 +96,7 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
@@ -110,6 +105,10 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -120,11 +119,7 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
@@ -138,6 +133,10 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -148,10 +147,7 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        owner_epoch?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
@@ -161,6 +157,9 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -171,19 +170,19 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
         required_skills: number;
         required_tools: number;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        expected?: never;
+        actual?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -194,13 +193,7 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         required_skills?: never;
         required_tools?: never;
         ok: false;
@@ -213,9 +206,9 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
             warnings: never[];
             task_id?: never;
             assignment_id?: never;
+            attempt?: never;
             checked_at?: never;
             limits?: never;
-            attempt?: never;
         } | {
             status: string;
             task_id: string;
@@ -227,6 +220,12 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
             warnings: import("../collab/preflight.js").Check[];
             limits: string[];
         };
+        state?: never;
+        detail?: never;
+        expected?: never;
+        actual?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -237,12 +236,7 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        detail?: never;
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
@@ -250,6 +244,11 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         reason: string;
         checks: Record<string, unknown>[];
         state: string;
+        detail?: never;
+        expected?: never;
+        actual?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -260,19 +259,19 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
         expected: (string | null)[];
         actual: string;
+        detail?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         resources?: never;
         mode?: never;
@@ -283,20 +282,20 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        state?: never;
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
         resources: Record<string, unknown>[];
         detail: string;
+        expected?: never;
+        actual?: never;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         mode?: never;
         launch_kind?: never;
@@ -306,20 +305,20 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
         resources: Record<string, unknown>[];
         expected: number | undefined;
         actual: number;
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         mode?: never;
         launch_kind?: never;
@@ -329,20 +328,20 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     } | {
-        expected?: never;
-        actual?: never;
-        owner_epoch?: never;
-        detail?: never;
-        state?: never;
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        expected?: never;
+        actual?: never;
         ok: false;
         reason: string;
         checks: Record<string, unknown>[];
         resources: Record<string, unknown>[];
+        state_revision?: never;
+        owner_epoch?: never;
         attempt_state?: never;
         mode?: never;
         launch_kind?: never;
@@ -352,7 +351,6 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
         capability_evidence?: never;
         assignment_digest?: never;
         input_revision?: never;
-        state_revision?: never;
     };
     reason: string;
     process?: never;
@@ -363,19 +361,19 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
     stdoutFile?: never;
     stderrFile?: never;
     nativeEvidence?: never;
-} | {
-    settlement?: never;
     reservation_id?: never;
+    settlement?: never;
+} | {
     refused: boolean;
     admission: {
-        reason?: never;
-        expected?: never;
-        actual?: never;
-        detail?: never;
-        state?: never;
         required_skills?: never;
         required_tools?: never;
         preflight?: never;
+        state?: never;
+        detail?: never;
+        expected?: never;
+        actual?: never;
+        reason?: never;
         ok: true;
         checks: Record<string, unknown>[];
         state_revision: number;
@@ -405,12 +403,13 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
     stdoutFile?: never;
     stderrFile?: never;
     nativeEvidence?: never;
+    reservation_id?: never;
+    settlement?: never;
 } | {
     reason?: never;
     reservation?: never;
-    admission?: never;
     refused?: never;
-    reservation_id?: never;
+    admission?: never;
     execution: null;
     evidenceError: string;
     settlement: {
@@ -436,12 +435,12 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
     stdoutFile?: never;
     stderrFile?: never;
     nativeEvidence?: never;
+    reservation_id?: never;
 } | {
     reason?: never;
     reservation?: never;
-    admission?: never;
     refused?: never;
-    reservation_id?: never;
+    admission?: never;
     process?: never;
     execution: Record<string, unknown> | null;
     evidenceError: string;
@@ -459,11 +458,12 @@ export declare function runNativePilot({ harness, profile, cwd, promptFile, evid
     stdoutFile?: never;
     stderrFile?: never;
     nativeEvidence?: never;
+    reservation_id?: never;
 } | {
     reason?: never;
     reservation?: never;
-    admission?: never;
     refused?: never;
+    admission?: never;
     process?: never;
     evidenceError?: never;
     execution: Record<string, unknown>;

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { getPackageInfo } from './package-info.js';
+export { getPackageInfo, getPackageRoot } from './package-info.js';
 export type { PackageInfo } from './package-info.js';
 export { HostAdapter, HostIntegrationService, type HostIntegrationOptions, type HostTargetOptions, } from './hosts/integration/service.js';
 export { mapNativeHookEvent, runHostHook, type HostHookOptions, type NativeHookMapping, } from './hosts/integration/hook.js';

package/dist/index.js

@@ -1,4 +1,4 @@
-export { getPackageInfo } from './package-info.js';
+export { getPackageInfo, getPackageRoot } from './package-info.js';
 export { HostAdapter, HostIntegrationService, } from './hosts/integration/service.js';
 export { mapNativeHookEvent, runHostHook, } from './hosts/integration/hook.js';
 export * from './app/collaboration.js';

package/dist/install/runtime.d.ts

@@ -12,7 +12,7 @@ export interface RuntimeInstallResult {
     readonly residualPaths: readonly string[];
 }
 export interface RuntimeInstallSource {
-    readonly kind: 'version' | 'tarball';
+    readonly kind: 'version' | 'tarball' | 'self';
     /** Required for tarball sources. */
     readonly path?: string;
 }

package/dist/install/runtime.js

@@ -1,9 +1,10 @@
 import { randomUUID } from 'node:crypto';
 import { spawn } from 'node:child_process';
-import { mkdir, readFile, readdir, readlink, rename, rm, writeFile, } from 'node:fs/promises';
+import { cp, mkdir, mkdtemp, readFile, readdir, readlink, rename, rm, writeFile, } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { dirname, join, relative, resolve, sep } from 'node:path';
-import { homedir } from 'node:os';
+import { homedir, tmpdir } from 'node:os';
+import { getPackageInfo } from '../package-info.js';
 import { createDiagnostic } from '../schemas/diagnostics.js';
 import { diagnosticCodes } from '../schemas/errors.js';
 import { installJournalSchema, runtimeManifestSchema, runtimePackageManifestSchema, runtimeSourceSchema, } from '../schemas/install.js';
@@ -156,6 +157,81 @@ function npmCommand() {
         args: [],
     };
 }
+/**
+ * Packs the package that is currently executing so it can be installed as a
+ * durable runtime before an ephemeral (npx/dlx) checkout is collected. The
+ * existing build output is packed as-is; scripts never run here.
+ */
+async function packSelfPackage(packageRoot, packageName, version) {
+    const manifestRead = await readFileBounded(join(packageRoot, 'package.json'), 1024 * 1024);
+    if (!manifestRead.ok) {
+        throw new Error(`Cannot read the running package manifest: ${manifestRead.code}`);
+    }
+    const decoded = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(manifestRead.value.bytes));
+    if (typeof decoded !== 'object' || decoded === null) {
+        throw new Error('The running package manifest is not an object.');
+    }
+    const manifest = decoded;
+    if (manifest.name !== packageName || manifest.version !== version) {
+        throw new Error(`Running package ${String(manifest.name)}@${String(manifest.version)} does not match ${packageName}@${version}.`);
+    }
+    const directory = await mkdtemp(join(tmpdir(), 'pappra-self-'));
+    // Pack a staging copy: npm refuses to pack reliably from inside a dependency
+    // tree (a known "Exit handler never called!" failure on Linux CI).
+    const staging = join(directory, 'package');
+    await mkdir(staging, { recursive: true });
+    for (const entry of [
+        'package.json',
+        'README.md',
+        'LICENSE',
+        'THIRD_PARTY_NOTICES.md',
+        'dist',
+        'assets',
+        'skills',
+    ]) {
+        const source = join(packageRoot, entry);
+        if ((await observePath(source)).kind === 'missing')
+            continue;
+        await cp(source, join(staging, entry), {
+            recursive: true,
+            dereference: true,
+            force: true,
+        });
+    }
+    const npm = npmCommand();
+    const packed = await runCommand(npm.executable, [
+        ...npm.args,
+        'pack',
+        '--ignore-scripts',
+        '--json',
+        '--pack-destination',
+        directory,
+        staging,
+    ], { cwd: directory, timeoutMs: 120_000 });
+    if (packed.timedOut || packed.code !== 0) {
+        throw new Error(`Cannot pack the running package: ${packed.stderr.slice(0, 500)}`);
+    }
+    let report;
+    try {
+        report = JSON.parse(packed.stdout.trim());
+    }
+    catch {
+        throw new Error('npm pack did not return a JSON report.');
+    }
+    const first = Array.isArray(report) ? report[0] : null;
+    const filename = typeof first === 'object' &&
+        first !== null &&
+        'filename' in first &&
+        typeof first.filename === 'string'
+        ? first.filename
+        : null;
+    if (filename === null || filename.includes('/') || filename.includes('\\')) {
+        throw new Error('npm pack did not report a safe tarball filename.');
+    }
+    const tarball = join(directory, filename);
+    const bytes = await readFile(tarball);
+    return { directory, tarball, digest: sha256Digest(bytes) };
+}
 async function readPackageManifest(directory, boundaryRoot) {
     const manifestPath = join(directory, 'package.json');
     const real = await resolveRealpath(manifestPath);
@@ -343,7 +419,7 @@ function updateJournal(journal, status, step, detail, failed = false) {
 }
 export async function installRuntime(options) {
     const version = options.version;
-    const packageName = options.packageName ?? 'pappra';
+    const packageName = options.packageName ?? getPackageInfo().name;
     if (!validVersion(version)) {
         return failureResult('failed', `Invalid runtime version: ${version}`, {
             version,
@@ -408,6 +484,7 @@ export async function installRuntime(options) {
         await releaseInstallLock(paths.lockPath, lock.lock.token);
         return afterLock;
     }
+    let selfPackage = null;
     let source;
     try {
         if (options.source.kind === 'tarball') {
@@ -425,6 +502,18 @@ export async function installRuntime(options) {
                 digest: sha256Digest(bytes),
             };
         }
+        else if (options.source.kind === 'self') {
+            const packageRoot = resolve(options.source.path ?? '');
+            selfPackage = await packSelfPackage(packageRoot, packageName, version);
+            source = {
+                kind: 'self',
+                packageName,
+                version,
+                packageRoot,
+                tarball: selfPackage.tarball,
+                digest: selfPackage.digest,
+            };
+        }
         else {
             source = {
                 kind: 'version',
@@ -486,6 +575,9 @@ export async function installRuntime(options) {
     let published = false;
     const fail = async (message, stageResidual) => {
         let residual = [];
+        if (selfPackage !== null) {
+            await rm(selfPackage.directory, { recursive: true, force: true }).catch(() => undefined);
+        }
         if (stageResidual) {
             try {
                 await rm(stage, { recursive: true, force: true });
@@ -528,8 +620,10 @@ export async function installRuntime(options) {
             '--no-package-lock',
             '--save-exact',
             ...(options.offline === true ? ['--offline'] : []),
-            source.kind === 'tarball'
-                ? source.path
+            source.kind === 'tarball' || source.kind === 'self'
+                ? source.kind === 'tarball'
+                    ? source.path
+                    : source.tarball
                 : `${source.packageName}@${source.version}`,
         ];
         const installed = await runCommand(npm.executable, installArgs, {
@@ -539,6 +633,9 @@ export async function installRuntime(options) {
         if (installed.timedOut || installed.code !== 0) {
             throw new Error(`Package manager install failed (${installed.timedOut ? 'timeout' : `exit ${String(installed.code)}`}): ${installed.stderr.slice(0, 1000)}`);
         }
+        if (selfPackage !== null) {
+            await rm(selfPackage.directory, { recursive: true, force: true }).catch(() => undefined);
+        }
         journal = updateJournal(journal, 'applying', 'package-installed', null);
         if (!(await writeJournal()))
             throw new Error('Cannot update install journal.');
@@ -643,6 +740,10 @@ export async function installRuntime(options) {
         return fail(errorMessage(error), true);
     }
 }
+async function runtimePackageName(runtimeRoot) {
+    const read = await readJsonDocument(join(runtimeRoot, 'install-manifest.json'), runtimeManifestSchema);
+    return read.value?.packageName ?? getPackageInfo().name;
+}
 export async function inspectRuntimeState(version, dataDir = resolveUserDataDir()) {
     const paths = runtimePaths(version, dataDir);
     if (!validVersion(version)) {
@@ -720,7 +821,8 @@ export async function inspectRuntimeState(version, dataDir = resolveUserDataDir(
             ],
         };
     }
-    const complete = await completeExistingRuntime(version, paths, 'pappra', 30_000);
+    const packageName = await runtimePackageName(paths.runtimeRoot);
+    const complete = await completeExistingRuntime(version, paths, packageName, 30_000);
     if (complete === null) {
         return {
             version,
@@ -1042,8 +1144,13 @@ export async function inspectRuntimeStatePassive(version, dataDir = resolveUserD
             ],
         };
     }
-    if (manifest.packageName !== 'pappra' ||
-        manifest.runtimeRoot !== paths.runtimeRoot) {
+    const packageSegments = manifest.packageName.split('/');
+    const safePackageName = packageSegments.length <= 2 &&
+        packageSegments.every((segment) => segment !== '' &&
+            segment !== '.' &&
+            segment !== '..' &&
+            /^[A-Za-z0-9@._-]+$/.test(segment));
+    if (!safePackageName || manifest.runtimeRoot !== paths.runtimeRoot) {
         return {
             version,
             status: 'corrupt',
@@ -1065,7 +1172,7 @@ export async function inspectRuntimeStatePassive(version, dataDir = resolveUserD
             ],
         };
     }
-    const packageRoot = join(paths.runtimeRoot, 'node_modules', 'pappra');
+    const packageRoot = join(paths.runtimeRoot, 'node_modules', ...manifest.packageName.split('/'));
     const packageObservation = await observePath(packageRoot);
     const packageReal = packageObservation.kind === 'directory'
         ? await resolveRealpath(packageRoot)
@@ -1105,7 +1212,7 @@ export async function inspectRuntimeStatePassive(version, dataDir = resolveUserD
         digest === manifest.packageDigest &&
         packageObservation.kind === 'directory' &&
         packageManifest !== null &&
-        packageManifest.name === 'pappra' &&
+        packageManifest.name === manifest.packageName &&
         packageManifest.version === version;
     const executableExists = executableInsideRuntime && executableObservation.kind === 'file';
     if (!packageDigestMatch || !executableExists) {

package/dist/package-info.d.ts

@@ -4,3 +4,5 @@ export interface PackageInfo {
     readonly description: string;
 }
 export declare function getPackageInfo(): PackageInfo;
+/** Absolute root of the package that is currently executing. */
+export declare function getPackageRoot(): string;

package/dist/package-info.js

@@ -1,4 +1,6 @@
 import { readFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 export function getPackageInfo() {
     const value = JSON.parse(readFileSync(new URL(import.meta.resolve('@phyzess/pappra/package.json')), 'utf8'));
     if (typeof value !== 'object' ||
@@ -17,3 +19,7 @@ export function getPackageInfo() {
         description: value.description,
     };
 }
+/** Absolute root of the package that is currently executing. */
+export function getPackageRoot() {
+    return dirname(fileURLToPath(import.meta.resolve('@phyzess/pappra/package.json')));
+}

package/dist/schemas/host.js

@@ -7,6 +7,8 @@ export const HOST_HOOK_INPUT_SCHEMA = 'pappra/host-hook-input/1';
 export const HOST_HOOK_RESULT_SCHEMA = 'pappra/host-hook-result/1';
 const digestSchema = z.string().regex(/^sha256:[0-9a-f]{64}$/);
 const digestOrNull = digestSchema.nullable();
+/** A host hook path may be absolute or a host placeholder expression. */
+const hookPathSchema = z.string().min(1).max(4096);
 const absolutePathSchema = z
     .string()
     .min(1)
@@ -75,7 +77,7 @@ export const hostIntegrationPlanSchema = z.strictObject({
     host: hostNameSchema,
     workspaceRoot: absolutePathSchema,
     hostRoot: absolutePathSchema,
-    runtimeEntry: absolutePathSchema,
+    runtimeEntry: hookPathSchema,
     bundleDigest: digestSchema,
     files: z.array(hostPlanFileSchema).max(64),
     reloadRequired: z.boolean(),
@@ -189,7 +191,7 @@ export const hostInstallManifestSchema = z.strictObject({
     bundleDigest: digestSchema,
     installedAt: z.iso.datetime({ offset: true }),
     hostRoot: absolutePathSchema,
-    runtimeEntry: absolutePathSchema,
+    runtimeEntry: hookPathSchema,
     configPath: z.string().min(1).max(2048).nullable(),
     files: z.array(z.strictObject({
         path: z.string().min(1).max(2048),