@promptframe/cli 0.1.60 → 0.1.63

package/dist/development-files.js

@@ -0,0 +1,70 @@
+import { constants, closeSync, fstatSync, lstatSync, openSync, readSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, relative, resolve, sep } from 'node:path';
+import { DevelopmentContents } from './development-revisions.js';
+/** Capture declared workspace inputs, never a live path for a compiler to reopen.
+ * Generated output and node_modules are not discovered by this reader. The
+ * workspace consumer supplies the complete, bounded source/dependency list. */
+export function captureDevelopmentFiles(root, paths, limits) {
+    // Reuse the content contract before performing any file I/O. These empty
+    // bytes only validate names/count/options; they are never published.
+    const names = new DevelopmentContents(paths.map(path => ({ path, bytes: new Uint8Array() })), limits)
+        .readFiles().map(file => file.path);
+    const base = realpathSync(root);
+    const files = [];
+    let total = 0;
+    for (const name of names) {
+        const file = resolve(base, ...name.split('/'));
+        const withinRoot = () => {
+            const local = relative(base, realpathSync(file));
+            if (!local || local === '..' || local.startsWith(`..${sep}`) || isAbsolute(local)) {
+                throw new Error('development.capture.outside_root');
+            }
+            // Source links, including directory links, are explicit errors. A
+            // workspace alias resolves to declared real source paths before capture.
+            for (let part = file; part !== base; part = dirname(part)) {
+                const entry = lstatSync(part);
+                if (entry.isSymbolicLink())
+                    throw new Error('development.capture.symlink');
+                if (part === file && !entry.isFile())
+                    throw new Error('development.capture.not_file');
+            }
+        };
+        withinRoot();
+        // NONBLOCK also bounds a replacement by a FIFO between lstat and open.
+        // fstat below still requires a regular file before any bytes are read.
+        const descriptor = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+        try {
+            const before = fstatSync(descriptor, { bigint: true });
+            if (!before.isFile())
+                throw new Error('development.capture.not_file');
+            const remaining = limits.maximumBytes - total;
+            if (before.size > BigInt(remaining))
+                throw new Error('development.contents.byte_limit');
+            // Read at most the observed size plus one probe byte. A concurrently
+            // growing file cannot cause an unbounded readFile allocation.
+            const bytes = Buffer.alloc(Number(before.size) + 1);
+            let used = 0;
+            while (used < bytes.length) {
+                const count = readSync(descriptor, bytes, used, bytes.length - used, null);
+                if (!count)
+                    break;
+                used += count;
+            }
+            const after = fstatSync(descriptor, { bigint: true });
+            withinRoot();
+            const current = lstatSync(file, { bigint: true });
+            if (used !== Number(before.size) || ['dev', 'ino', 'size', 'mtimeNs', 'ctimeNs'].some(key => {
+                const field = key;
+                return before[field] !== after[field] || after[field] !== current[field];
+            }))
+                throw new Error('development.capture.changed_during_read');
+            total += used;
+            files.push({ path: name, bytes: bytes.subarray(0, used) });
+        }
+        finally {
+            closeSync(descriptor);
+        }
+    }
+    return new DevelopmentContents(files, limits);
+}
+//# sourceMappingURL=development-files.js.map

package/dist/development-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-files.js","sourceRoot":"","sources":["../src/development-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AAEzF;;+EAE+E;AAC/E,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,KAAwB,EACxB,MAAyB;IAEzB,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;SAClG,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAA+C,EAAE,CAAC;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,GAAG,EAAE;YACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YACD,kEAAkE;YAClE,yEAAyE;YACzE,KAAK,IAAI,IAAI,GAAG,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,KAAK,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC3E,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACxF,CAAC;QACH,CAAC,CAAC;QACF,UAAU,EAAE,CAAC;QACb,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACxF,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3E,IAAI,CAAC,KAAK;oBAAE,MAAM;gBAClB,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,UAAU,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC1F,MAAM,KAAK,GAAG,GAAqD,CAAC;gBACpE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3E,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC/D,KAAK,IAAI,IAAI,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC"}

package/dist/development-process.d.ts

@@ -0,0 +1,15 @@
+export declare class DevelopmentProcessError extends Error {
+    readonly code: string;
+    readonly diagnosticCode?: string | undefined;
+    constructor(code: string, diagnosticCode?: string | undefined);
+}
+/** A bounded compiler/checker process, never a component execution sandbox. */
+export declare function runDevelopmentProcess(options: {
+    worker: string;
+    cwd: string;
+    input: string;
+    timeoutMs: number;
+    maximumOutputBytes: number;
+    signal?: AbortSignal;
+}): Promise<string>;
+//# sourceMappingURL=development-process.d.ts.map

package/dist/development-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-process.d.ts","sourceRoot":"","sources":["../src/development-process.ts"],"names":[],"mappings":"AAEA,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM;gBAA9C,IAAI,EAAE,MAAM,EAAW,cAAc,CAAC,EAAE,MAAM,YAAA;CAGpE;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAClD,GAAG,OAAO,CAAC,MAAM,CAAC,CAwClB"}

package/dist/development-process.js

@@ -0,0 +1,65 @@
+import { spawn } from 'node:child_process';
+export class DevelopmentProcessError extends Error {
+    code;
+    diagnosticCode;
+    constructor(code, diagnosticCode) {
+        super(code);
+        this.code = code;
+        this.diagnosticCode = diagnosticCode;
+        this.name = 'DevelopmentProcessError';
+    }
+}
+/** A bounded compiler/checker process, never a component execution sandbox. */
+export function runDevelopmentProcess(options) {
+    options.signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(process.execPath, [options.worker], {
+            cwd: options.cwd, stdio: ['pipe', 'pipe', 'pipe'],
+            env: { NO_COLOR: '1', NODE_ENV: 'development',
+                ...(process.platform === 'win32' && process.env.SystemRoot ? { SystemRoot: process.env.SystemRoot } : {}) },
+        });
+        let failed = false, firstError, total = 0;
+        const stdout = [], stderr = [];
+        const fail = (error) => {
+            if (!failed) {
+                failed = true;
+                firstError = error;
+            }
+            child.kill('SIGKILL');
+        };
+        const receive = (target, chunk) => {
+            total += chunk.length;
+            if (total > options.maximumOutputBytes)
+                return fail(new DevelopmentProcessError('development.build.output_limit'));
+            target.push(chunk);
+        };
+        child.stdout.on('data', chunk => receive(stdout, chunk));
+        child.stderr.on('data', chunk => receive(stderr, chunk));
+        child.stdin.on('error', error => { if (!failed)
+            fail(error); });
+        child.once('error', fail);
+        const abort = () => fail(options.signal.reason);
+        options.signal?.addEventListener('abort', abort, { once: true });
+        const timeout = setTimeout(() => fail(new DevelopmentProcessError('development.build.timeout')), options.timeoutMs);
+        child.once('close', code => {
+            clearTimeout(timeout);
+            options.signal?.removeEventListener('abort', abort);
+            if (failed)
+                return reject(firstError);
+            if (code === 0)
+                return resolve(Buffer.concat(stdout).toString('utf8'));
+            let diagnosticCode;
+            try {
+                const parsed = JSON.parse(Buffer.concat(stderr).toString('utf8'));
+                if (typeof parsed.code === 'string' && /^development\.[a-z0-9_.]{1,180}$/u.test(parsed.code))
+                    diagnosticCode = parsed.code;
+            }
+            catch { /* Raw compiler paths/output are not public diagnostics. */ }
+            reject(new DevelopmentProcessError('development.build.rejected', diagnosticCode));
+        });
+        child.stdin.end(options.input);
+        if (options.signal?.aborted)
+            abort();
+    });
+}
+//# sourceMappingURL=development-process.js.map

package/dist/development-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-process.js","sourceRoot":"","sources":["../src/development-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAAuB;IAA5C,YAAqB,IAAY,EAAW,cAAuB;QACjE,KAAK,CAAC,IAAI,CAAC,CAAC;QADO,SAAI,GAAJ,IAAI,CAAQ;QAAW,mBAAc,GAAd,cAAc,CAAS;QACpD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACrD,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,OAGrC;IACC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACtD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YACjD,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa;gBAC3C,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC9G,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,KAAK,EAAE,UAAmB,EAAE,KAAK,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAa,EAAE,EAAE,MAAM,GAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,UAAU,GAAG,KAAK,CAAC;YAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,EAAE;YAClD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,OAAO,CAAC,kBAAkB;gBAAE,OAAO,IAAI,CAAC,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACnH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,2BAA2B,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACpH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3E,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,cAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAuB,CAAC;gBACxF,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7H,CAAC;YAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,uBAAuB,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/development-revisions.d.ts

@@ -0,0 +1,58 @@
+export interface DevelopmentFile {
+    path: string;
+    bytes: Uint8Array;
+}
+export interface DevelopmentLimits {
+    maximumFiles: number;
+    maximumBytes: number;
+}
+/** A private copy of one complete input set, including declared dependencies. */
+export declare class DevelopmentContents {
+    #private;
+    readonly revision: string;
+    readonly byteLength: number;
+    constructor(files: readonly DevelopmentFile[], limits: DevelopmentLimits);
+    /** Consumers receive independent bytes; the checked capture remains immutable. */
+    readFiles(): DevelopmentFile[];
+}
+export interface DevelopmentCheck {
+    readonly moduleId: string;
+    readonly sourceRevision: string;
+    readonly sequence: number;
+}
+export interface CheckedDevelopmentModule {
+    readonly moduleId: string;
+    readonly sourceRevision: string;
+    readonly checkerKey: string;
+    readonly artifacts: DevelopmentContents;
+}
+export interface DevelopmentModuleState {
+    readonly moduleId: string;
+    /** Absent if current inputs cannot be captured; lastChecked stays explicit. */
+    readonly sourceRevision?: string;
+    readonly status: 'checking' | 'checked' | 'failed';
+    readonly diagnostic?: string;
+    /** Passed checks, not an assertion that a Player has loaded this revision. */
+    readonly lastChecked?: CheckedDevelopmentModule;
+}
+/**
+ * Adoption only. The caller captures dependencies, runs the common checks/build,
+ * and recaptures current inputs before publish/reject. Watcher events alone do
+ * not authorize a revision. This helper never executes component code.
+ */
+export declare class DevelopmentRevisionGate {
+    #private;
+    constructor(options: {
+        checkerKey: string;
+        maximumModules: number;
+    });
+    begin(moduleId: string, source: DevelopmentContents): DevelopmentCheck;
+    invalidate(moduleId: string, diagnostic: string): void;
+    private assertIdentity;
+    publish(check: DevelopmentCheck, current: DevelopmentContents, artifacts: DevelopmentContents): boolean;
+    reject(check: DevelopmentCheck, current: DevelopmentContents, diagnostic: string): boolean;
+    state(moduleId: string): DevelopmentModuleState | undefined;
+    remove(moduleId: string): void;
+    private currentCheck;
+}
+//# sourceMappingURL=development-revisions.d.ts.map

package/dist/development-revisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-revisions.d.ts","sourceRoot":"","sources":["../src/development-revisions.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,iFAAiF;AACjF,qBAAa,mBAAmB;;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAGhB,KAAK,EAAE,SAAS,eAAe,EAAE,EAAE,MAAM,EAAE,iBAAiB;IAqCxE,kFAAkF;IAClF,SAAS,IAAI,eAAe,EAAE;CAG/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACjD;AAED;;;;GAIG;AACH,qBAAa,uBAAuB;;gBAMtB,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;IASnE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,gBAAgB;IAWtE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAStD,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,GAAG,OAAO;IAUvG,MAAM,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAQ1F,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAI3D,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B,OAAO,CAAC,YAAY;CAUrB"}

package/dist/development-revisions.js

@@ -0,0 +1,130 @@
+import { createHash } from 'node:crypto';
+import { posix } from 'node:path';
+/** A private copy of one complete input set, including declared dependencies. */
+export class DevelopmentContents {
+    revision;
+    byteLength;
+    #files;
+    constructor(files, limits) {
+        if (!Number.isSafeInteger(limits.maximumFiles) || limits.maximumFiles < 1
+            || !Number.isSafeInteger(limits.maximumBytes) || limits.maximumBytes < 1) {
+            throw new Error('development.contents.invalid_limits');
+        }
+        if (!files.length || files.length > limits.maximumFiles) {
+            throw new Error('development.contents.file_count');
+        }
+        const names = new Set();
+        let total = 0;
+        const captured = files.map(file => {
+            const name = file.path;
+            if (!name || name.length > 1024 || name.includes('\\') || name.includes('\0')
+                || posix.isAbsolute(name) || posix.normalize(name) !== name
+                || name.split('/').some(part => part === '.' || part === '..' || !part)
+                || names.has(name)) {
+                throw new Error('development.contents.invalid_path');
+            }
+            names.add(name);
+            if (!(file.bytes instanceof Uint8Array) || file.bytes.byteLength > limits.maximumBytes - total) {
+                throw new Error('development.contents.byte_limit');
+            }
+            total += file.bytes.byteLength;
+            // Copy now: a caller's Buffer must not change what was checked later.
+            return { path: name, bytes: Buffer.from(file.bytes) };
+        }).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+        const hash = createHash('sha256').update('promptframe-development-contents/v1\0');
+        this.#files = Object.freeze(captured.map(file => {
+            hash.update(`${Buffer.byteLength(file.path)}:`).update(file.path)
+                .update(`${file.bytes.length}:`).update(file.bytes);
+            return Object.freeze({ path: file.path, base64: file.bytes.toString('base64') });
+        }));
+        this.revision = `sha256:${hash.digest('hex')}`;
+        this.byteLength = total;
+        Object.freeze(this);
+    }
+    /** Consumers receive independent bytes; the checked capture remains immutable. */
+    readFiles() {
+        return this.#files.map(file => ({ path: file.path, bytes: Buffer.from(file.base64, 'base64') }));
+    }
+}
+/**
+ * Adoption only. The caller captures dependencies, runs the common checks/build,
+ * and recaptures current inputs before publish/reject. Watcher events alone do
+ * not authorize a revision. This helper never executes component code.
+ */
+export class DevelopmentRevisionGate {
+    #states = new Map();
+    #checkerKey;
+    #maximumModules;
+    #sequence = 0;
+    constructor(options) {
+        if (!options.checkerKey.trim() || options.checkerKey.length > 512
+            || !Number.isSafeInteger(options.maximumModules) || options.maximumModules < 1) {
+            throw new Error('development.registry.invalid_options');
+        }
+        this.#checkerKey = options.checkerKey;
+        this.#maximumModules = options.maximumModules;
+    }
+    begin(moduleId, source) {
+        this.assertIdentity(moduleId);
+        const previous = this.#states.get(moduleId);
+        const check = Object.freeze({ moduleId, sourceRevision: source.revision, sequence: ++this.#sequence });
+        this.#states.set(moduleId, { check, state: Object.freeze({
+                moduleId, sourceRevision: source.revision, status: 'checking',
+                ...(previous?.state.lastChecked ? { lastChecked: previous.state.lastChecked } : {}),
+            }) });
+        return check;
+    }
+    invalidate(moduleId, diagnostic) {
+        this.assertIdentity(moduleId);
+        const previous = this.#states.get(moduleId);
+        this.#states.set(moduleId, { state: Object.freeze({ moduleId, status: 'failed',
+                diagnostic: diagnostic.slice(0, 1024) || 'development.capture.failed',
+                ...(previous?.state.lastChecked ? { lastChecked: previous.state.lastChecked } : {}),
+            }) });
+    }
+    assertIdentity(moduleId) {
+        if (!moduleId.trim() || moduleId.length > 256 || /[\u0000-\u001f]/.test(moduleId)) {
+            throw new Error('development.module.invalid_identity');
+        }
+        if (!this.#states.has(moduleId) && this.#states.size >= this.#maximumModules) {
+            throw new Error('development.registry.module_limit');
+        }
+    }
+    publish(check, current, artifacts) {
+        const entry = this.currentCheck(check, current);
+        if (!entry)
+            return false;
+        const lastChecked = Object.freeze({ moduleId: check.moduleId,
+            sourceRevision: check.sourceRevision, checkerKey: this.#checkerKey, artifacts });
+        entry.state = Object.freeze({ moduleId: check.moduleId,
+            sourceRevision: check.sourceRevision, status: 'checked', lastChecked });
+        return true;
+    }
+    reject(check, current, diagnostic) {
+        const entry = this.currentCheck(check, current);
+        if (!entry)
+            return false;
+        entry.state = Object.freeze({ ...entry.state, status: 'failed',
+            diagnostic: diagnostic.slice(0, 1024) || 'development.check.failed' });
+        return true;
+    }
+    state(moduleId) {
+        return this.#states.get(moduleId)?.state;
+    }
+    remove(moduleId) {
+        // A late completion retains its old token and cannot recreate this entry.
+        this.#states.delete(moduleId);
+    }
+    currentCheck(check, current) {
+        const entry = this.#states.get(check.moduleId);
+        if (!entry || entry.check !== check || entry.state.status !== 'checking')
+            return undefined;
+        if (current.revision !== check.sourceRevision) {
+            // Even a missed final filesystem notification cannot publish old bytes.
+            this.begin(check.moduleId, current);
+            return undefined;
+        }
+        return entry;
+    }
+}
+//# sourceMappingURL=development-revisions.js.map

package/dist/development-revisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-revisions.js","sourceRoot":"","sources":["../src/development-revisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAYlC,iFAAiF;AACjF,MAAM,OAAO,mBAAmB;IACrB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,MAAM,CAA4D;IAE3E,YAAY,KAAiC,EAAE,MAAyB;QACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC;eACpE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;mBACxE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI;mBACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;mBACpE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,sEAAsE;YACtE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,QAAQ,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,kFAAkF;IAClF,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;CACF;AAyBD;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACzB,OAAO,GAAG,IAAI,GAAG,EAAuE,CAAC;IACzF,WAAW,CAAS;IACpB,eAAe,CAAS;IACjC,SAAS,GAAG,CAAC,CAAC;IAEd,YAAY,OAAuD;QACjE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;eAC5D,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,QAAgB,EAAE,MAA2B;QACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACvD,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU;gBAC7D,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,EAAE,CAAC,CAAC;QACN,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,QAAgB,EAAE,UAAkB;QAC7C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;gBAC5E,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,4BAA4B;gBACrE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,EAAE,CAAC,CAAC;IACR,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAuB,EAAE,OAA4B,EAAE,SAA8B;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YAC1D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACnF,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAuB,EAAE,OAA4B,EAAE,UAAkB;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ;YAC5D,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,0EAA0E;QAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEO,YAAY,CAAC,KAAuB,EAAE,OAA4B;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9C,wEAAwE;YACxE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/development-validation.d.ts

@@ -0,0 +1,22 @@
+import type { DevelopmentContents } from './development-revisions.js';
+export interface DevelopmentValidationReceipt {
+    readonly sourceRevision: string;
+    readonly securityPolicyVersion: string;
+    readonly securityPolicyDigest: string;
+    readonly securityEvaluatorMode: 'ast';
+    readonly checkedRuleIds: readonly string[];
+}
+export declare class DevelopmentValidationError extends Error {
+    readonly code: string;
+    readonly diagnosticCode?: string | undefined;
+    constructor(code: string, diagnosticCode?: string | undefined);
+}
+/** The ordinary CLI validates a private materialization of the capture. It
+ * never reopens the live workspace, runs package scripts, or grants a platform
+ * admission. The caller must still build these bytes, recapture and publish. */
+export declare function validateDevelopmentContents(contents: DevelopmentContents, options?: {
+    temporaryParent?: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): Promise<DevelopmentValidationReceipt>;
+//# sourceMappingURL=development-validation.d.ts.map

package/dist/development-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-validation.d.ts","sourceRoot":"","sources":["../src/development-validation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM;gBAA9C,IAAI,EAAE,MAAM,EAAW,cAAc,CAAC,EAAE,MAAM,YAAA;CAGpE;AAED;;gFAEgF;AAChF,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GACnF,OAAO,CAAC,4BAA4B,CAAC,CA0CvC"}

package/dist/development-validation.js

@@ -0,0 +1,122 @@
+import { spawn } from 'node:child_process';
+import { mkdtemp, mkdir, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export class DevelopmentValidationError extends Error {
+    code;
+    diagnosticCode;
+    constructor(code, diagnosticCode) {
+        super(code);
+        this.code = code;
+        this.diagnosticCode = diagnosticCode;
+        this.name = 'DevelopmentValidationError';
+    }
+}
+/** The ordinary CLI validates a private materialization of the capture. It
+ * never reopens the live workspace, runs package scripts, or grants a platform
+ * admission. The caller must still build these bytes, recapture and publish. */
+export async function validateDevelopmentContents(contents, options = {}) {
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 120_000) {
+        throw new DevelopmentValidationError('development.validation.invalid_timeout');
+    }
+    options.signal?.throwIfAborted();
+    const files = contents.readFiles();
+    for (const file of files) {
+        if (file.path.split('/').some(part => ['node_modules', 'dist', '.git', '.component-packages', '.promptframe'].includes(part))) {
+            throw new DevelopmentValidationError('development.validation.excluded_input');
+        }
+    }
+    const directory = await mkdtemp(join(options.temporaryParent ?? tmpdir(), 'promptframe-check-'));
+    let hadFailure = false;
+    try {
+        for (const file of files) {
+            options.signal?.throwIfAborted();
+            const path = join(directory, ...file.path.split('/'));
+            await mkdir(dirname(path), { recursive: true });
+            await writeFile(path, file.bytes, { flag: 'wx', mode: 0o400 });
+        }
+        const result = await runCapturedValidation(directory, timeoutMs, options.signal);
+        const output = JSON.parse(result);
+        if (output.command !== 'validate' || output.securityEvaluatorMode !== 'ast'
+            || typeof output.securityPolicyVersion !== 'string' || typeof output.securityPolicyDigest !== 'string'
+            || !Array.isArray(output.checkedRuleIds) || !output.checkedRuleIds.every(rule => typeof rule === 'string')) {
+            throw new DevelopmentValidationError('development.validation.invalid_receipt');
+        }
+        return Object.freeze({ sourceRevision: contents.revision,
+            securityPolicyVersion: output.securityPolicyVersion, securityPolicyDigest: output.securityPolicyDigest,
+            securityEvaluatorMode: 'ast', checkedRuleIds: Object.freeze([...output.checkedRuleIds]) });
+    }
+    catch (error) {
+        hadFailure = true;
+        throw error;
+    }
+    finally {
+        // runCapturedValidation waits for actual child close, also after abort or
+        // timeout. Its reader cannot outlive this private input directory.
+        try {
+            await rm(directory, { recursive: true, force: true });
+        }
+        catch (error) {
+            if (!hadFailure)
+                throw error;
+            process.stderr.write(JSON.stringify({ code: 'development.validation.cleanup_failed', directory }) + '\n');
+        }
+    }
+}
+function runCapturedValidation(directory, timeoutMs, signal) {
+    signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(process.execPath, [fileURLToPath(new URL('./index.js', import.meta.url)), 'validate', directory, '--json'], {
+            cwd: directory, stdio: ['ignore', 'pipe', 'pipe'],
+            // Validation is local. Neither endpoint/auth configuration nor arbitrary
+            // Node preload options from the host belong in this subprocess.
+            env: { NO_COLOR: '1', ...(process.platform === 'win32' && process.env.SystemRoot ? { SystemRoot: process.env.SystemRoot } : {}) },
+        });
+        let firstError, failed = false, total = 0;
+        const stdout = [], stderr = [];
+        const fail = (error) => {
+            if (!failed) {
+                failed = true;
+                firstError = error;
+            }
+            child.kill('SIGKILL');
+        };
+        const receive = (target, chunk) => {
+            total += chunk.length;
+            if (total > 512 * 1024)
+                return fail(new DevelopmentValidationError('development.validation.output_limit'));
+            target.push(chunk);
+        };
+        child.stdout.on('data', chunk => receive(stdout, chunk));
+        child.stderr.on('data', chunk => receive(stderr, chunk));
+        const abort = () => fail(signal.reason);
+        signal?.addEventListener('abort', abort, { once: true });
+        const timeout = setTimeout(() => fail(new DevelopmentValidationError('development.validation.timeout')), timeoutMs);
+        child.once('error', error => { if (!failed) {
+            failed = true;
+            firstError = error;
+        } });
+        child.once('close', code => {
+            clearTimeout(timeout);
+            signal?.removeEventListener('abort', abort);
+            if (failed)
+                return reject(firstError);
+            if (code === 0)
+                return resolve(Buffer.concat(stdout).toString('utf8'));
+            let diagnosticCode;
+            try {
+                const output = JSON.parse(Buffer.concat(stderr).toString('utf8'));
+                const candidate = output.diagnostic?.code;
+                if (typeof candidate === 'string' && /^[a-z0-9_]+(?:\.[a-z0-9_]+)+$/u.test(candidate) && candidate.length <= 256)
+                    diagnosticCode = candidate;
+            }
+            catch { /* Unstructured child output is not a diagnostic contract. */ }
+            reject(new DevelopmentValidationError('development.validation.rejected', diagnosticCode));
+        });
+        if (signal?.aborted)
+            abort();
+    });
+}
+//# sourceMappingURL=development-validation.js.map

package/dist/development-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-validation.js","sourceRoot":"","sources":["../src/development-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAWzC,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC9B;IAAuB;IAA5C,YAAqB,IAAY,EAAW,cAAuB;QACjE,KAAK,CAAC,IAAI,CAAC,CAAC;QADO,SAAI,GAAJ,IAAI,CAAQ;QAAW,mBAAc,GAAd,cAAc,CAAS;QACpD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IACxD,CAAC;CACF;AAED;;gFAEgF;AAChF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAA6B,EAC7B,UAAkF,EAAE;IAEpF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,EAAE,CAAC;QAC7E,MAAM,IAAI,0BAA0B,CAAC,wCAAwC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9H,MAAM,IAAI,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,MAAM,CAAC,qBAAqB,KAAK,KAAK;eACtE,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;eACnG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,0BAA0B,CAAC,wCAAwC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ;YACtD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACtG,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9D,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,SAAiB,EAAE,MAAoB;IACvF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;YAC9H,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjD,yEAAyE;YACzE,gEAAgE;YAChE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAClI,CAAC,CAAC;QACH,IAAI,UAAmB,EAAE,MAAM,GAAG,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAa,EAAE,EAAE,MAAM,GAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,UAAU,GAAG,KAAK,CAAC;YAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,EAAE;YAClD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,gCAAgC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACpH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,GAAG,KAAK,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,cAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwC,CAAC;gBACzG,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;gBAC1C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,GAAG;oBAAE,cAAc,GAAG,SAAS,CAAC;YAC/I,CAAC;YAAC,MAAM,CAAC,CAAC,6DAA6D,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,0BAA0B,CAAC,iCAAiC,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/development-workspace.d.ts

@@ -0,0 +1,25 @@
+import { DevelopmentContents } from './development-revisions.js';
+export interface DevelopmentWorkspaceModule {
+    id: string;
+    path: string;
+}
+/** One capture includes the module and its real shared pnpm lock bytes. Source
+ * aliases/parent imports remain explicitly unsupported by the common policy. */
+export declare function captureDevelopmentModule(root: string, module: DevelopmentWorkspaceModule): DevelopmentContents;
+/** A single root Vite watcher plus a closed HTTP surface. Vite's raw-source,
+ * HTML, /@fs, HMR and plugin/config serving middleware is never attached. */
+export declare function startDevelopmentWorkspace(options: {
+    root: string;
+    modules: readonly DevelopmentWorkspaceModule[];
+    studioOrigin: string;
+    host?: '127.0.0.1' | '::1';
+    port?: number;
+}): Promise<Readonly<{
+    connectionId: string;
+    url: `http://${string}`;
+    studioOrigin: string;
+    credential: string;
+    expiresAt: string;
+    close(): Promise<void>;
+}>>;
+//# sourceMappingURL=development-workspace.d.ts.map

package/dist/development-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-workspace.d.ts","sourceRoot":"","sources":["../src/development-workspace.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKjE,MAAM,WAAW,0BAA0B;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAExE;gFACgF;AAChF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,GAAG,mBAAmB,CAuD9G;AAED;6EAC6E;AAC7E,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACnF,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CAC3C;;;;;;;IAsMA"}