@prompd/core 0.5.0-beta.10 → 0.5.0-beta.12

package/dist/index.d.cts

@@ -1,13 +1,5 @@
 import * as nunjucks from 'nunjucks';
 
-/**
- * File System Abstraction (core, environment-agnostic).
- *
- * Defines the IFileSystem interface and the in-memory implementation used for
- * browser + server compilation. The Node-backed NodeFileSystem and the adm-zip
- * .pdpkg helpers live in @prompd/cli (they need Node APIs). Path operations here
- * are inlined as POSIX so this module has zero Node imports.
- */
 /**
  * File system interface that can be implemented for different storage backends.
  */
@@ -27,11 +19,21 @@ interface IFileSystem {
     /** Join path segments. */
     join(...pathSegments: string[]): string;
 }
+/**
+ * Extract a `.pdpkg` (ZIP) buffer to a flat map of entry-relative path -> UTF-8
+ * content. The SINGLE ZIP-extraction primitive shared by package ingestion
+ * (MemoryFileSystem.addPackage) and skill install — so hosts never hand-roll their
+ * own jszip pass. Directories and binary assets are skipped (the consumers store
+ * text only).
+ */
+declare function extractPdpkg(buffer: Uint8Array): Promise<Map<string, string>>;
 /**
  * In-memory file system for browser + server-side compilation.
  * Files are provided as a map of path -> content.
  */
 declare class MemoryFileSystem implements IFileSystem {
+    /** Cap on an ingested package buffer (defends against a hostile/huge .pdpkg). */
+    private static readonly MAX_PACKAGE_SIZE;
     private files;
     constructor(files?: Record<string, string>);
     /** Add or update a file in the in-memory file system. */
@@ -47,6 +49,17 @@ declare class MemoryFileSystem implements IFileSystem {
     join(...pathSegments: string[]): string;
     /** Get the virtual file system path for a package. */
     getPackagePath(packageName: string, version: string): string;
+    /**
+     * Extract a `.pdpkg` (ZIP) buffer into memory under getPackagePath(name, ver).
+     *
+     * Uses JSZip — isomorphic (browser + Node) — so this is the SINGLE package-ingest
+     * path for every host (replacing the CLI's Node-only adm-zip subclass and the
+     * skill installer's ad-hoc unzip). Text files only: binary assets aren't
+     * representable in the string-backed FS, so they're skipped (a `using:` package's
+     * .prmd/.md/.json/.yaml is what matters for compilation). Validates entry paths
+     * can't escape the package directory.
+     */
+    addPackage(packageName: string, version: string, packageBuffer: Uint8Array): Promise<void>;
     /** Get all files under an optional base path. */
     getAllFiles(basePath?: string): Map<string, string>;
     /** Calculate total size (bytes) and file count under a base path. */
@@ -102,6 +115,11 @@ declare class HybridFileSystem implements IFileSystem {
     addFile(filePath: string, content: string): void;
     /** Add multiple in-memory files at once. */
     addFiles(files: Record<string, string>): void;
+    /** Virtual path where a package's files live (delegates to the memory layer). */
+    getPackagePath(packageName: string, version: string): string;
+    /** Ingest a `.pdpkg` (ZIP) buffer into the in-memory layer, so package files are
+     * served synchronously alongside the workspace sources. */
+    addPackage(packageName: string, version: string, packageBuffer: Uint8Array): Promise<void>;
     exists(filePath: string): boolean | Promise<boolean>;
     readFile(filePath: string): string | Promise<string>;
     isDirectory(filePath: string): boolean | Promise<boolean>;
@@ -601,6 +619,7 @@ declare class CompilerPipeline {
  * (`resolvePackage`, base-dir lookups) lives in @prompd/cli and is injected via
  * IPackageResolver. Path operations are inlined as POSIX so this stays node-free.
  */
+
 /**
  * Strip a file path suffix from a package reference.
  * @example "@ns/pkg@1.0.0/prompts/file.prmd" -> "@ns/pkg@1.0.0"
@@ -632,6 +651,24 @@ declare function isValidPackageReference(packageRef: string): boolean;
  * Resolve a file path within a package (POSIX, path-traversal safe).
  */
 declare function resolvePackageFile(packagePath: string, filePath: string): string;
+/** Fetch the raw `.pdpkg` (ZIP) bytes for a package@version. The host injects it —
+ * the browser with `fetch`, the Node CLI with its registry client — so the resolver
+ * itself stays environment-agnostic. */
+type PackageDownloader = (name: string, version: string) => Promise<Uint8Array>;
+/**
+ * The environment-agnostic package resolver: loads `using:`/`inherits:` packages
+ * into an in-memory FS via an injected registry download. This is the ONE resolver
+ * for every host that compiles in memory (the browser, and Node when not using the
+ * disk cache) — so the download/unzip/cache logic isn't duplicated per host.
+ *
+ * `resolvePackage` returns the in-memory directory path; the compiler then reads
+ * the referenced file from `options.fileSystem` via resolvePackageFile.
+ */
+declare class MemoryPackageResolver implements IPackageResolver {
+    private readonly download;
+    constructor(download: PackageDownloader);
+    resolvePackage(packageRef: string, options: ResolvePackageOptions): Promise<string>;
+}
 
 /**
  * Language Mapping Utilities
@@ -2926,4 +2963,4 @@ declare function validateWorkflow(workflow: WorkflowFile): ValidationResult;
  */
 declare function validateWorkflowQuick(workflow: WorkflowFile): Pick<ValidationResult, 'isValid'>;
 
-export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
+export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, MemoryPackageResolver, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageDownloader, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };

package/dist/index.d.ts

@@ -1,13 +1,5 @@
 import * as nunjucks from 'nunjucks';
 
-/**
- * File System Abstraction (core, environment-agnostic).
- *
- * Defines the IFileSystem interface and the in-memory implementation used for
- * browser + server compilation. The Node-backed NodeFileSystem and the adm-zip
- * .pdpkg helpers live in @prompd/cli (they need Node APIs). Path operations here
- * are inlined as POSIX so this module has zero Node imports.
- */
 /**
  * File system interface that can be implemented for different storage backends.
  */
@@ -27,11 +19,21 @@ interface IFileSystem {
     /** Join path segments. */
     join(...pathSegments: string[]): string;
 }
+/**
+ * Extract a `.pdpkg` (ZIP) buffer to a flat map of entry-relative path -> UTF-8
+ * content. The SINGLE ZIP-extraction primitive shared by package ingestion
+ * (MemoryFileSystem.addPackage) and skill install — so hosts never hand-roll their
+ * own jszip pass. Directories and binary assets are skipped (the consumers store
+ * text only).
+ */
+declare function extractPdpkg(buffer: Uint8Array): Promise<Map<string, string>>;
 /**
  * In-memory file system for browser + server-side compilation.
  * Files are provided as a map of path -> content.
  */
 declare class MemoryFileSystem implements IFileSystem {
+    /** Cap on an ingested package buffer (defends against a hostile/huge .pdpkg). */
+    private static readonly MAX_PACKAGE_SIZE;
     private files;
     constructor(files?: Record<string, string>);
     /** Add or update a file in the in-memory file system. */
@@ -47,6 +49,17 @@ declare class MemoryFileSystem implements IFileSystem {
     join(...pathSegments: string[]): string;
     /** Get the virtual file system path for a package. */
     getPackagePath(packageName: string, version: string): string;
+    /**
+     * Extract a `.pdpkg` (ZIP) buffer into memory under getPackagePath(name, ver).
+     *
+     * Uses JSZip — isomorphic (browser + Node) — so this is the SINGLE package-ingest
+     * path for every host (replacing the CLI's Node-only adm-zip subclass and the
+     * skill installer's ad-hoc unzip). Text files only: binary assets aren't
+     * representable in the string-backed FS, so they're skipped (a `using:` package's
+     * .prmd/.md/.json/.yaml is what matters for compilation). Validates entry paths
+     * can't escape the package directory.
+     */
+    addPackage(packageName: string, version: string, packageBuffer: Uint8Array): Promise<void>;
     /** Get all files under an optional base path. */
     getAllFiles(basePath?: string): Map<string, string>;
     /** Calculate total size (bytes) and file count under a base path. */
@@ -102,6 +115,11 @@ declare class HybridFileSystem implements IFileSystem {
     addFile(filePath: string, content: string): void;
     /** Add multiple in-memory files at once. */
     addFiles(files: Record<string, string>): void;
+    /** Virtual path where a package's files live (delegates to the memory layer). */
+    getPackagePath(packageName: string, version: string): string;
+    /** Ingest a `.pdpkg` (ZIP) buffer into the in-memory layer, so package files are
+     * served synchronously alongside the workspace sources. */
+    addPackage(packageName: string, version: string, packageBuffer: Uint8Array): Promise<void>;
     exists(filePath: string): boolean | Promise<boolean>;
     readFile(filePath: string): string | Promise<string>;
     isDirectory(filePath: string): boolean | Promise<boolean>;
@@ -601,6 +619,7 @@ declare class CompilerPipeline {
  * (`resolvePackage`, base-dir lookups) lives in @prompd/cli and is injected via
  * IPackageResolver. Path operations are inlined as POSIX so this stays node-free.
  */
+
 /**
  * Strip a file path suffix from a package reference.
  * @example "@ns/pkg@1.0.0/prompts/file.prmd" -> "@ns/pkg@1.0.0"
@@ -632,6 +651,24 @@ declare function isValidPackageReference(packageRef: string): boolean;
  * Resolve a file path within a package (POSIX, path-traversal safe).
  */
 declare function resolvePackageFile(packagePath: string, filePath: string): string;
+/** Fetch the raw `.pdpkg` (ZIP) bytes for a package@version. The host injects it —
+ * the browser with `fetch`, the Node CLI with its registry client — so the resolver
+ * itself stays environment-agnostic. */
+type PackageDownloader = (name: string, version: string) => Promise<Uint8Array>;
+/**
+ * The environment-agnostic package resolver: loads `using:`/`inherits:` packages
+ * into an in-memory FS via an injected registry download. This is the ONE resolver
+ * for every host that compiles in memory (the browser, and Node when not using the
+ * disk cache) — so the download/unzip/cache logic isn't duplicated per host.
+ *
+ * `resolvePackage` returns the in-memory directory path; the compiler then reads
+ * the referenced file from `options.fileSystem` via resolvePackageFile.
+ */
+declare class MemoryPackageResolver implements IPackageResolver {
+    private readonly download;
+    constructor(download: PackageDownloader);
+    resolvePackage(packageRef: string, options: ResolvePackageOptions): Promise<string>;
+}
 
 /**
  * Language Mapping Utilities
@@ -2926,4 +2963,4 @@ declare function validateWorkflow(workflow: WorkflowFile): ValidationResult;
  */
 declare function validateWorkflowQuick(workflow: WorkflowFile): Pick<ValidationResult, 'isValid'>;
 
-export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
+export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, MemoryPackageResolver, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageDownloader, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };

package/dist/index.js

@@ -1,6 +1,7 @@
 import * as yaml from 'yaml';
 import semver from 'semver';
 import * as nunjucks from 'nunjucks';
+import JSZip from 'jszip';
 
 // src/lib/parser.ts
 var PrompdParser = class {
@@ -546,6 +547,30 @@ function resolvePackageFile(packagePath, filePath) {
   }
   return resolvedPath;
 }
+function isPackageCapable(fs) {
+  const f = fs;
+  return !!f && typeof f.getPackagePath === "function" && typeof f.addPackage === "function" && typeof f.isDirectory === "function";
+}
+var MemoryPackageResolver = class {
+  constructor(download) {
+    this.download = download;
+  }
+  async resolvePackage(packageRef, options) {
+    const fs = options.fileSystem;
+    if (!isPackageCapable(fs)) {
+      throw new Error("MemoryPackageResolver requires a package-capable in-memory file system (MemoryFileSystem or HybridFileSystem)");
+    }
+    if (!isValidPackageReference(packageRef)) {
+      throw new SecurityError(`Invalid package reference format: ${packageRef}`);
+    }
+    const { name, version } = parsePackageReference(packageRef);
+    const packagePath = fs.getPackagePath(name, version);
+    if (await fs.isDirectory(packagePath)) return packagePath;
+    const buffer = await this.download(name, version);
+    await fs.addPackage(name, version, buffer);
+    return packagePath;
+  }
+};
 
 // src/lib/compiler/path-utils.ts
 function normalizePosix(p) {
@@ -3045,8 +3070,54 @@ var CodeGenerationStage = class {
     return "Code Generation";
   }
 };
-
-// src/lib/compiler/file-system.ts
+var BINARY_ASSET_EXT = /* @__PURE__ */ new Set([
+  "png",
+  "jpg",
+  "jpeg",
+  "gif",
+  "webp",
+  "svg",
+  "ico",
+  "bmp",
+  "tiff",
+  "pdf",
+  "xlsx",
+  "xls",
+  "docx",
+  "doc",
+  "pptx",
+  "ppt",
+  "zip",
+  "pdpkg",
+  "gz",
+  "tar",
+  "wasm",
+  "woff",
+  "woff2",
+  "ttf",
+  "otf",
+  "eot",
+  "mp3",
+  "mp4",
+  "wav",
+  "ogg",
+  "webm",
+  "mov",
+  "avi"
+]);
+function isBinaryAsset(name) {
+  const dot = name.lastIndexOf(".");
+  return dot >= 0 && BINARY_ASSET_EXT.has(name.slice(dot + 1).toLowerCase());
+}
+async function extractPdpkg(buffer) {
+  const zip = await JSZip.loadAsync(buffer);
+  const out = /* @__PURE__ */ new Map();
+  for (const entry of Object.values(zip.files)) {
+    if (entry.dir || isBinaryAsset(entry.name)) continue;
+    out.set(entry.name, await entry.async("string"));
+  }
+  return out;
+}
 function normalizePosix2(p) {
   const isAbs = p.startsWith("/");
   const out = [];
@@ -3084,7 +3155,7 @@ function toRelKey(filePath) {
   if (n.endsWith("/") && n.length > 1) n = n.substring(0, n.length - 1);
   return n;
 }
-var MemoryFileSystem = class {
+var _MemoryFileSystem = class _MemoryFileSystem {
   constructor(files = {}) {
     this.files = /* @__PURE__ */ new Map();
     for (const [filePath, content] of Object.entries(files)) {
@@ -3151,6 +3222,33 @@ var MemoryFileSystem = class {
   getPackagePath(packageName, version) {
     return `/packages/${packageName}@${version}`;
   }
+  /**
+   * Extract a `.pdpkg` (ZIP) buffer into memory under getPackagePath(name, ver).
+   *
+   * Uses JSZip — isomorphic (browser + Node) — so this is the SINGLE package-ingest
+   * path for every host (replacing the CLI's Node-only adm-zip subclass and the
+   * skill installer's ad-hoc unzip). Text files only: binary assets aren't
+   * representable in the string-backed FS, so they're skipped (a `using:` package's
+   * .prmd/.md/.json/.yaml is what matters for compilation). Validates entry paths
+   * can't escape the package directory.
+   */
+  async addPackage(packageName, version, packageBuffer) {
+    if (packageBuffer.length > _MemoryFileSystem.MAX_PACKAGE_SIZE) {
+      throw new Error(`Package too large: ${packageBuffer.length} bytes (max ${_MemoryFileSystem.MAX_PACKAGE_SIZE})`);
+    }
+    const files = await extractPdpkg(packageBuffer);
+    const packagePath = this.getPackagePath(packageName, version);
+    const packagePrefix = this.normalizePath(packagePath.endsWith("/") ? packagePath : packagePath + "/");
+    const packageRoot = this.normalizePath(packagePath);
+    for (const [rel, content] of files) {
+      const filePath = this.join(packagePath, rel);
+      const normalized = this.normalizePath(filePath);
+      if (!normalized.startsWith(packagePrefix) && normalized !== packageRoot) {
+        throw new Error(`Security violation: extracted path escapes package directory: ${rel}`);
+      }
+      this.addFile(filePath, content);
+    }
+  }
   /** Get all files under an optional base path. */
   getAllFiles(basePath) {
     if (!basePath) {
@@ -3180,6 +3278,9 @@ var MemoryFileSystem = class {
     return toRelKey(filePath);
   }
 };
+/** Cap on an ingested package buffer (defends against a hostile/huge .pdpkg). */
+_MemoryFileSystem.MAX_PACKAGE_SIZE = 50 * 1024 * 1024;
+var MemoryFileSystem = _MemoryFileSystem;
 var HybridFileSystem = class {
   constructor(files = {}, backend) {
     this.mem = new MemoryFileSystem(files);
@@ -3193,6 +3294,15 @@ var HybridFileSystem = class {
   addFiles(files) {
     this.mem.addFiles(files);
   }
+  /** Virtual path where a package's files live (delegates to the memory layer). */
+  getPackagePath(packageName, version) {
+    return this.mem.getPackagePath(packageName, version);
+  }
+  /** Ingest a `.pdpkg` (ZIP) buffer into the in-memory layer, so package files are
+   * served synchronously alongside the workspace sources. */
+  addPackage(packageName, version, packageBuffer) {
+    return this.mem.addPackage(packageName, version, packageBuffer);
+  }
   exists(filePath) {
     if (this.mem.exists(filePath)) return true;
     return this.backend.readFile(this.normalize(filePath)).then((content) => content !== null).catch(() => false);
@@ -4622,6 +4732,6 @@ function getExecutionOrder(workflow) {
   return order;
 }
 
-export { AnthropicFormatter, BUILTIN_COMMAND_EXECUTABLES, CODE_EXTENSIONS, CONTENT_TYPES, CodeGenerationStage, CompilationContext, CompilationError, CompilationStage, CompilerPipeline, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, HybridFileSystem, LexicalAnalysisStage, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, MemoryFileSystem, OpenAIFormatter, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, ParseError, PrompdCompiler, PrompdError, PrompdLoader, PrompdParser, SectionOverrideProcessor, SecurityError, SemanticAnalysisStage, TOOL_DEPLOY_DIRS, TemplateProcessingStage, VALID_PACKAGE_TYPES, ValidationError, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
+export { AnthropicFormatter, BUILTIN_COMMAND_EXECUTABLES, CODE_EXTENSIONS, CONTENT_TYPES, CodeGenerationStage, CompilationContext, CompilationError, CompilationStage, CompilerPipeline, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, HybridFileSystem, LexicalAnalysisStage, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, MemoryFileSystem, MemoryPackageResolver, OpenAIFormatter, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, ParseError, PrompdCompiler, PrompdError, PrompdLoader, PrompdParser, SectionOverrideProcessor, SecurityError, SemanticAnalysisStage, TOOL_DEPLOY_DIRS, TemplateProcessingStage, VALID_PACKAGE_TYPES, ValidationError, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map