@ran-sh/dsh-crew 1.9.0 → 1.10.0

package/src/install/official-frontend-assets.mjs

@@ -1,78 +1,78 @@
-import { createHash, randomUUID } from 'node:crypto';
-import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { homedir } from 'node:os';
-import { pathToFileURL } from 'node:url';
-
-function plan(home, root) {
-  const bridge = join(root, 'official-web-bridge');
-  const metadata = JSON.parse(readFileSync(join(bridge, 'package.json'), 'utf8'));
-  if (metadata.name !== '@ran-sh/dsh-crew-web-bridge') throw new Error('invalid frontend package');
-  const files = new Map([
-    ['official-web-bridge/entry.mjs', readFileSync(join(bridge, 'overlay-entry.mjs'))],
-    ['official-web-bridge/lib/client.js', readFileSync(join(bridge, 'lib', 'client.js'))],
-    ['src/local-request-guard.mjs', readFileSync(join(root, 'src', 'local-request-guard.mjs'))],
-  ]);
-  const hash = createHash('sha256').update(JSON.stringify(metadata));
-  for (const [name, bytes] of files) hash.update(name).update(bytes);
-  const revision = hash.digest('hex');
-  files.set('official-web-bridge/package.json', Buffer.from(JSON.stringify({ ...metadata,
-    dshCrewManagedFrontend: true, dshCrewFrontendRevision: revision,
-    dsh: { ...metadata.dsh, bundle: undefined },
-  }, null, 2) + '\n'));
-  const frontendRoot = join(home, '.config', 'dsh-crew', 'frontend');
-  const snapshotRoot = join(frontendRoot, 'revisions', revision);
-  const overlayFile = join(frontendRoot, 'official-web.patch.json');
-  const overlay = JSON.stringify([{ insert: [{ id: 'dsh-crew-official-web-bridge',
-    name: pathToFileURL(join(snapshotRoot, 'official-web-bridge', 'entry.mjs')).href,
-  }] }], null, 2) + '\n';
-  return { frontendRoot, snapshotRoot, revision, overlayFile, overlay, files };
-}
-
-function matches(p) {
-  try { return [...p.files].every(([name, bytes]) => {
-    const file = join(p.snapshotRoot, name);
-    return lstatSync(file).isFile() && !lstatSync(file).isSymbolicLink() && readFileSync(file).equals(bytes);
-  }); } catch { return false; }
-}
-
-export function officialFrontendAssetsReady({ home = homedir(), root } = {}) {
-  try {
-    const p = plan(home, root);
-    return matches(p) && readFileSync(p.overlayFile, 'utf8') === p.overlay;
-  } catch { return false; }
-}
-
-export function installOfficialFrontendAssets({ home = homedir(), root } = {}) {
-  let stage;
-  let temp;
-  try {
-    const p = plan(home, root);
-    for (const path of [p.frontendRoot, join(p.frontendRoot, 'revisions'), p.snapshotRoot, p.overlayFile]) {
-      if (existsSync(path) && lstatSync(path).isSymbolicLink()) throw new Error('linked frontend destination');
-    }
-    const already = officialFrontendAssetsReady({ home, root });
-    if (already) return { ok: true, changed: false, revision: p.revision, snapshotRoot: p.snapshotRoot, overlayFile: p.overlayFile };
-    mkdirSync(join(p.frontendRoot, 'revisions'), { recursive: true });
-    if (!existsSync(p.snapshotRoot)) {
-      stage = mkdtempSync(join(p.frontendRoot, '.stage-'));
-      for (const [name, bytes] of p.files) {
-        const file = join(stage, name);
-        mkdirSync(dirname(file), { recursive: true });
-        writeFileSync(file, bytes);
-      }
-      try { renameSync(stage, p.snapshotRoot); stage = null; }
-      catch (error) { if (!matches(p)) throw error; }
-    }
-    if (!matches(p)) throw new Error('frontend snapshot conflicts with its revision');
-    temp = `${p.overlayFile}.${randomUUID()}.tmp`;
-    writeFileSync(temp, p.overlay, { flag: 'wx', mode: 0o600 });
-    renameSync(temp, p.overlayFile); temp = null;
-    return { ok: true, changed: true, revision: p.revision, snapshotRoot: p.snapshotRoot, overlayFile: p.overlayFile };
-  } catch (error) {
-    return { ok: false, code: 'OFFICIAL_FRONTEND_ASSETS_FAILED', error: error.message };
-  } finally {
-    if (stage) rmSync(stage, { recursive: true, force: true });
-    if (temp) rmSync(temp, { force: true });
-  }
-}
+import { createHash, randomUUID } from 'node:crypto';
+import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { pathToFileURL } from 'node:url';
+
+function plan(home, root) {
+  const bridge = join(root, 'official-web-bridge');
+  const metadata = JSON.parse(readFileSync(join(bridge, 'package.json'), 'utf8'));
+  if (metadata.name !== '@ran-sh/dsh-crew-web-bridge') throw new Error('invalid frontend package');
+  const files = new Map([
+    ['official-web-bridge/entry.mjs', readFileSync(join(bridge, 'overlay-entry.mjs'))],
+    ['official-web-bridge/lib/client.js', readFileSync(join(bridge, 'lib', 'client.js'))],
+    ['src/local-request-guard.mjs', readFileSync(join(root, 'src', 'local-request-guard.mjs'))],
+  ]);
+  const hash = createHash('sha256').update(JSON.stringify(metadata));
+  for (const [name, bytes] of files) hash.update(name).update(bytes);
+  const revision = hash.digest('hex');
+  files.set('official-web-bridge/package.json', Buffer.from(JSON.stringify({ ...metadata,
+    dshCrewManagedFrontend: true, dshCrewFrontendRevision: revision,
+    dsh: { ...metadata.dsh, bundle: undefined },
+  }, null, 2) + '\n'));
+  const frontendRoot = join(home, '.config', 'dsh-crew', 'frontend');
+  const snapshotRoot = join(frontendRoot, 'revisions', revision);
+  const overlayFile = join(frontendRoot, 'official-web.patch.json');
+  const overlay = JSON.stringify([{ insert: [{ id: 'dsh-crew-official-web-bridge',
+    name: pathToFileURL(join(snapshotRoot, 'official-web-bridge', 'entry.mjs')).href,
+  }] }], null, 2) + '\n';
+  return { frontendRoot, snapshotRoot, revision, overlayFile, overlay, files };
+}
+
+function matches(p) {
+  try { return [...p.files].every(([name, bytes]) => {
+    const file = join(p.snapshotRoot, name);
+    return lstatSync(file).isFile() && !lstatSync(file).isSymbolicLink() && readFileSync(file).equals(bytes);
+  }); } catch { return false; }
+}
+
+export function officialFrontendAssetsReady({ home = homedir(), root } = {}) {
+  try {
+    const p = plan(home, root);
+    return matches(p) && readFileSync(p.overlayFile, 'utf8') === p.overlay;
+  } catch { return false; }
+}
+
+export function installOfficialFrontendAssets({ home = homedir(), root } = {}) {
+  let stage;
+  let temp;
+  try {
+    const p = plan(home, root);
+    for (const path of [p.frontendRoot, join(p.frontendRoot, 'revisions'), p.snapshotRoot, p.overlayFile]) {
+      if (existsSync(path) && lstatSync(path).isSymbolicLink()) throw new Error('linked frontend destination');
+    }
+    const already = officialFrontendAssetsReady({ home, root });
+    if (already) return { ok: true, changed: false, revision: p.revision, snapshotRoot: p.snapshotRoot, overlayFile: p.overlayFile };
+    mkdirSync(join(p.frontendRoot, 'revisions'), { recursive: true });
+    if (!existsSync(p.snapshotRoot)) {
+      stage = mkdtempSync(join(p.frontendRoot, '.stage-'));
+      for (const [name, bytes] of p.files) {
+        const file = join(stage, name);
+        mkdirSync(dirname(file), { recursive: true });
+        writeFileSync(file, bytes);
+      }
+      try { renameSync(stage, p.snapshotRoot); stage = null; }
+      catch (error) { if (!matches(p)) throw error; }
+    }
+    if (!matches(p)) throw new Error('frontend snapshot conflicts with its revision');
+    temp = `${p.overlayFile}.${randomUUID()}.tmp`;
+    writeFileSync(temp, p.overlay, { flag: 'wx', mode: 0o600 });
+    renameSync(temp, p.overlayFile); temp = null;
+    return { ok: true, changed: true, revision: p.revision, snapshotRoot: p.snapshotRoot, overlayFile: p.overlayFile };
+  } catch (error) {
+    return { ok: false, code: 'OFFICIAL_FRONTEND_ASSETS_FAILED', error: error.message };
+  } finally {
+    if (stage) rmSync(stage, { recursive: true, force: true });
+    if (temp) rmSync(temp, { force: true });
+  }
+}

package/src/install/official-web.mjs

@@ -1,95 +1,95 @@
-import {
-  existsSync,
-  lstatSync,
-  readFileSync,
-  realpathSync,
-} from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-
-export const OFFICIAL_BRIDGE_PACKAGE = '@ran-sh/dsh-crew-web-bridge';
-const STATE_FILENAME = 'official-web.json';
-
-export function officialWebProfileDir({ home = homedir() } = {}) {
-  return join(home, '.dsh', 'profiles', 'web');
-}
-
-export function officialWebIntegrationStateFile({ home = homedir() } = {}) {
-  return join(home, '.config', 'dsh-crew', STATE_FILENAME);
-}
-
-function readState(home) {
-  try {
-    const value = JSON.parse(readFileSync(officialWebIntegrationStateFile({ home }), 'utf8'));
-    return value && typeof value === 'object' ? value : null;
-  } catch { return null; }
-}
-
-function validOfficialManifest(file) {
-  if (!existsSync(file)) return { ok: false, code: 'OFFICIAL_WEB_PROFILE_NOT_FOUND' };
-  try {
-    const raw = readFileSync(file, 'utf8');
-    const manifest = JSON.parse(raw);
-    if (!manifest || typeof manifest !== 'object'
-      || (manifest.dependencies !== undefined && (!manifest.dependencies || typeof manifest.dependencies !== 'object' || Array.isArray(manifest.dependencies)))
-      || !Array.isArray(manifest.dsh?.profile?.bundles)) {
-      return { ok: false, code: 'OFFICIAL_WEB_PROFILE_INVALID' };
-    }
-    return { ok: true, raw, manifest };
-  } catch { return { ok: false, code: 'OFFICIAL_WEB_PROFILE_INVALID' }; }
-}
-
-export const OFFICIAL_WEB_READ_ONLY_CODE = 'OFFICIAL_WEB_PROFILE_READ_ONLY';
-
-// The official ~/.dsh/profiles/web tree is a read-only boundary. Crew must
-// never install, update, register, unlink, repair, or mutate anything under
-// ~/.dsh; the isolated 3210 Crew backend is the only runtime Crew owns.
-// ensure/remove therefore fail closed instead of writing the official
-// profile. Status probing stays read-only.
-export function ensureOfficialWebIntegration({ home = homedir(), releaseDir } = {}) {
-  return { ok: false, code: OFFICIAL_WEB_READ_ONLY_CODE };
-}
-
-// Project the legacy full-bridge state file. The old `enabled: true` shape
-// is DEPRECATED: dsh-crew no longer desires any control of the 3080 official
-// web profile (the native 3210 page is the full control plane, and the 3080
-// quick surface is optional). Status probing stays read-only; the projection
-// makes the legacy record diagnostic instead of an active intent.
-function projectLegacyState(state, home, releaseDir) {
-  if (!state || state?.enabled !== true) {
-    return { enabled: false, legacy_present: false, desired: false, healthy: false, state };
-  }
-  const expectedRelease = releaseDir ?? state.release_dir;
-  let expectedBridge;
-  try { expectedBridge = realpathSync(join(expectedRelease, 'official-web-bridge')); } catch {
-    return { enabled: false, legacy_present: true, desired: false, healthy: false, code: 'BRIDGE_RELEASE_MISSING', state };
-  }
-  const profileRoot = officialWebProfileDir({ home });
-  const profile = validOfficialManifest(join(profileRoot, 'package.json'));
-  if (!profile.ok) {
-    return { enabled: false, legacy_present: true, desired: false, healthy: false, code: profile.code, state };
-  }
-  const dependency = profile.manifest.dependencies?.[OFFICIAL_BRIDGE_PACKAGE];
-  const bundled = profile.manifest.dsh.profile.bundles.includes(OFFICIAL_BRIDGE_PACKAGE);
-  const linkPath = join(profileRoot, 'node_modules', ...OFFICIAL_BRIDGE_PACKAGE.split('/'));
-  let linked = false;
-  try { linked = lstatSync(linkPath).isSymbolicLink() && realpathSync(linkPath) === expectedBridge; } catch {}
-  return {
-    enabled: false,
-    legacy_present: true,
-    desired: false,
-    healthy: Boolean(dependency && bundled && linked),
-    removal_requires_manual_official_profile_action: true,
-    state,
-    linkPath,
-    expectedBridge,
-  };
-}
-
-export function officialWebIntegrationStatus({ home = homedir(), releaseDir } = {}) {
-  return projectLegacyState(readState(home), home, releaseDir);
-}
-
-export function removeOfficialWebIntegration({ home = homedir(), remember = true, preserveIntent = false } = {}) {
-  return { ok: false, code: OFFICIAL_WEB_READ_ONLY_CODE };
-}
+import {
+  existsSync,
+  lstatSync,
+  readFileSync,
+  realpathSync,
+} from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+export const OFFICIAL_BRIDGE_PACKAGE = '@ran-sh/dsh-crew-web-bridge';
+const STATE_FILENAME = 'official-web.json';
+
+export function officialWebProfileDir({ home = homedir() } = {}) {
+  return join(home, '.dsh', 'profiles', 'web');
+}
+
+export function officialWebIntegrationStateFile({ home = homedir() } = {}) {
+  return join(home, '.config', 'dsh-crew', STATE_FILENAME);
+}
+
+function readState(home) {
+  try {
+    const value = JSON.parse(readFileSync(officialWebIntegrationStateFile({ home }), 'utf8'));
+    return value && typeof value === 'object' ? value : null;
+  } catch { return null; }
+}
+
+function validOfficialManifest(file) {
+  if (!existsSync(file)) return { ok: false, code: 'OFFICIAL_WEB_PROFILE_NOT_FOUND' };
+  try {
+    const raw = readFileSync(file, 'utf8');
+    const manifest = JSON.parse(raw);
+    if (!manifest || typeof manifest !== 'object'
+      || (manifest.dependencies !== undefined && (!manifest.dependencies || typeof manifest.dependencies !== 'object' || Array.isArray(manifest.dependencies)))
+      || !Array.isArray(manifest.dsh?.profile?.bundles)) {
+      return { ok: false, code: 'OFFICIAL_WEB_PROFILE_INVALID' };
+    }
+    return { ok: true, raw, manifest };
+  } catch { return { ok: false, code: 'OFFICIAL_WEB_PROFILE_INVALID' }; }
+}
+
+export const OFFICIAL_WEB_READ_ONLY_CODE = 'OFFICIAL_WEB_PROFILE_READ_ONLY';
+
+// The official ~/.dsh/profiles/web tree is a read-only boundary. Crew must
+// never install, update, register, unlink, repair, or mutate anything under
+// ~/.dsh; the isolated 3210 Crew backend is the only runtime Crew owns.
+// ensure/remove therefore fail closed instead of writing the official
+// profile. Status probing stays read-only.
+export function ensureOfficialWebIntegration({ home = homedir(), releaseDir } = {}) {
+  return { ok: false, code: OFFICIAL_WEB_READ_ONLY_CODE };
+}
+
+// Project the legacy full-bridge state file. The old `enabled: true` shape
+// is DEPRECATED: dsh-crew no longer desires any control of the 3080 official
+// web profile (the native 3210 page is the full control plane, and the 3080
+// quick surface is optional). Status probing stays read-only; the projection
+// makes the legacy record diagnostic instead of an active intent.
+function projectLegacyState(state, home, releaseDir) {
+  if (!state || state?.enabled !== true) {
+    return { enabled: false, legacy_present: false, desired: false, healthy: false, state };
+  }
+  const expectedRelease = releaseDir ?? state.release_dir;
+  let expectedBridge;
+  try { expectedBridge = realpathSync(join(expectedRelease, 'official-web-bridge')); } catch {
+    return { enabled: false, legacy_present: true, desired: false, healthy: false, code: 'BRIDGE_RELEASE_MISSING', state };
+  }
+  const profileRoot = officialWebProfileDir({ home });
+  const profile = validOfficialManifest(join(profileRoot, 'package.json'));
+  if (!profile.ok) {
+    return { enabled: false, legacy_present: true, desired: false, healthy: false, code: profile.code, state };
+  }
+  const dependency = profile.manifest.dependencies?.[OFFICIAL_BRIDGE_PACKAGE];
+  const bundled = profile.manifest.dsh.profile.bundles.includes(OFFICIAL_BRIDGE_PACKAGE);
+  const linkPath = join(profileRoot, 'node_modules', ...OFFICIAL_BRIDGE_PACKAGE.split('/'));
+  let linked = false;
+  try { linked = lstatSync(linkPath).isSymbolicLink() && realpathSync(linkPath) === expectedBridge; } catch {}
+  return {
+    enabled: false,
+    legacy_present: true,
+    desired: false,
+    healthy: Boolean(dependency && bundled && linked),
+    removal_requires_manual_official_profile_action: true,
+    state,
+    linkPath,
+    expectedBridge,
+  };
+}
+
+export function officialWebIntegrationStatus({ home = homedir(), releaseDir } = {}) {
+  return projectLegacyState(readState(home), home, releaseDir);
+}
+
+export function removeOfficialWebIntegration({ home = homedir(), remember = true, preserveIntent = false } = {}) {
+  return { ok: false, code: OFFICIAL_WEB_READ_ONLY_CODE };
+}

package/src/install/payload-content.mjs

@@ -1,88 +1,88 @@
-import { createHash } from 'node:crypto';
-import { existsSync, lstatSync, readdirSync, readFileSync } from 'node:fs';
-import { isAbsolute, join, posix } from 'node:path';
-
-function canonical(value) {
-  if (Array.isArray(value)) return value.map(canonical);
-  if (value && typeof value === 'object') return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonical(value[key])]));
-  return value;
-}
-
-function runtimeManifest(manifest) {
-  const normalized = { ...manifest, dependencies: { ...manifest.peerDependencies, ...manifest.dependencies } };
-  delete normalized.devDependencies;
-  delete normalized.peerDependencies;
-  delete normalized.peerDependenciesMeta;
-  return canonical(normalized);
-}
-
-/** Capture bounded first-party package bytes once for both validation and copying. */
-export function capturePayloadContent(root, suppliedManifest) {
-  try {
-    const manifest = suppliedManifest ?? JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
-    if (!Array.isArray(manifest.files)) return null;
-    const files = new Map();
-    const modes = new Map();
-    const directories = new Set();
-    let bytes = 0;
-    const visit = relative => {
-      let parent = root;
-      for (const segment of posix.dirname(relative).split('/').filter(part => part && part !== '.')) {
-        parent = join(parent, segment);
-        const info = lstatSync(parent);
-        if (!info.isDirectory() || info.isSymbolicLink()) throw new Error('unsupported payload parent');
-      }
-      const file = join(root, relative);
-      const stat = lstatSync(file);
-      if (stat.isSymbolicLink()) throw new Error('unsupported payload symlink');
-      if (stat.isDirectory()) {
-        if (directories.size >= 4096) throw new Error('payload directory limit exceeded');
-        directories.add(relative);
-        for (const name of readdirSync(file)) visit(posix.join(relative, name));
-        return;
-      }
-      if (!stat.isFile() || files.size >= 4096) throw new Error('unsupported payload entry');
-      if (files.has(relative)) return;
-      bytes += stat.size;
-      if (bytes > 64 * 1024 * 1024) throw new Error('payload content limit exceeded');
-      const content = relative === 'package.json'
-        ? Buffer.from(JSON.stringify(runtimeManifest(manifest))) : readFileSync(file);
-      if (content.length > stat.size && relative !== 'package.json') throw new Error('payload changed while being read');
-      files.set(relative, content);
-      modes.set(relative, stat.mode & 0o777);
-    };
-    visit('package.json');
-    for (const entry of manifest.files ?? []) {
-      if (typeof entry !== 'string') throw new Error('invalid payload pattern');
-      const pattern = entry.replaceAll('\\', '/');
-      const segments = pattern.split('/');
-      if (!pattern.trim() || entry.includes('\\') || posix.normalize(pattern) === '.'
-        || isAbsolute(pattern) || pattern.includes(':')
-        || segments.some(segment => ['..', '.git', 'node_modules'].includes(segment.toLowerCase()))) throw new Error('invalid payload path');
-      if (!pattern.includes('*')) {
-        if (existsSync(join(root, pattern))) visit(pattern);
-        continue;
-      }
-      const base = posix.dirname(pattern);
-      if (base.includes('*')) throw new Error('unsupported payload wildcard');
-      const expression = new RegExp('^' + posix.basename(pattern).split('*').map(part => part.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('[^/]*') + '$');
-      if (existsSync(join(root, base))) {
-        for (const name of readdirSync(join(root, base))) if (expression.test(name)) visit(posix.join(base, name));
-      }
-    }
-    return { files, directories, modes };
-  } catch { return null; }
-}
-
-/** This digest covers first-party shipped files, not dependency tamper attestation. */
-export function payloadContentDigest(root) {
-  const snapshot = capturePayloadContent(root);
-  if (!snapshot) return null;
-  const hashes = [...snapshot.files].map(([name, bytes]) => [name, createHash('sha256').update(bytes).digest('hex')]);
-  return createHash('sha256').update(JSON.stringify(hashes.sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0))).digest('hex');
-}
-
-export function samePayloadContent(sourceRoot, installedRoot) {
-  const source = payloadContentDigest(sourceRoot);
-  return source !== null && source === payloadContentDigest(installedRoot);
-}
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, readdirSync, readFileSync } from 'node:fs';
+import { isAbsolute, join, posix } from 'node:path';
+
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (value && typeof value === 'object') return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonical(value[key])]));
+  return value;
+}
+
+function runtimeManifest(manifest) {
+  const normalized = { ...manifest, dependencies: { ...manifest.peerDependencies, ...manifest.dependencies } };
+  delete normalized.devDependencies;
+  delete normalized.peerDependencies;
+  delete normalized.peerDependenciesMeta;
+  return canonical(normalized);
+}
+
+/** Capture bounded first-party package bytes once for both validation and copying. */
+export function capturePayloadContent(root, suppliedManifest) {
+  try {
+    const manifest = suppliedManifest ?? JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+    if (!Array.isArray(manifest.files)) return null;
+    const files = new Map();
+    const modes = new Map();
+    const directories = new Set();
+    let bytes = 0;
+    const visit = relative => {
+      let parent = root;
+      for (const segment of posix.dirname(relative).split('/').filter(part => part && part !== '.')) {
+        parent = join(parent, segment);
+        const info = lstatSync(parent);
+        if (!info.isDirectory() || info.isSymbolicLink()) throw new Error('unsupported payload parent');
+      }
+      const file = join(root, relative);
+      const stat = lstatSync(file);
+      if (stat.isSymbolicLink()) throw new Error('unsupported payload symlink');
+      if (stat.isDirectory()) {
+        if (directories.size >= 4096) throw new Error('payload directory limit exceeded');
+        directories.add(relative);
+        for (const name of readdirSync(file)) visit(posix.join(relative, name));
+        return;
+      }
+      if (!stat.isFile() || files.size >= 4096) throw new Error('unsupported payload entry');
+      if (files.has(relative)) return;
+      bytes += stat.size;
+      if (bytes > 64 * 1024 * 1024) throw new Error('payload content limit exceeded');
+      const content = relative === 'package.json'
+        ? Buffer.from(JSON.stringify(runtimeManifest(manifest))) : readFileSync(file);
+      if (content.length > stat.size && relative !== 'package.json') throw new Error('payload changed while being read');
+      files.set(relative, content);
+      modes.set(relative, stat.mode & 0o777);
+    };
+    visit('package.json');
+    for (const entry of manifest.files ?? []) {
+      if (typeof entry !== 'string') throw new Error('invalid payload pattern');
+      const pattern = entry.replaceAll('\\', '/');
+      const segments = pattern.split('/');
+      if (!pattern.trim() || entry.includes('\\') || posix.normalize(pattern) === '.'
+        || isAbsolute(pattern) || pattern.includes(':')
+        || segments.some(segment => ['..', '.git', 'node_modules'].includes(segment.toLowerCase()))) throw new Error('invalid payload path');
+      if (!pattern.includes('*')) {
+        if (existsSync(join(root, pattern))) visit(pattern);
+        continue;
+      }
+      const base = posix.dirname(pattern);
+      if (base.includes('*')) throw new Error('unsupported payload wildcard');
+      const expression = new RegExp('^' + posix.basename(pattern).split('*').map(part => part.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('[^/]*') + '$');
+      if (existsSync(join(root, base))) {
+        for (const name of readdirSync(join(root, base))) if (expression.test(name)) visit(posix.join(base, name));
+      }
+    }
+    return { files, directories, modes };
+  } catch { return null; }
+}
+
+/** This digest covers first-party shipped files, not dependency tamper attestation. */
+export function payloadContentDigest(root) {
+  const snapshot = capturePayloadContent(root);
+  if (!snapshot) return null;
+  const hashes = [...snapshot.files].map(([name, bytes]) => [name, createHash('sha256').update(bytes).digest('hex')]);
+  return createHash('sha256').update(JSON.stringify(hashes.sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0))).digest('hex');
+}
+
+export function samePayloadContent(sourceRoot, installedRoot) {
+  const source = payloadContentDigest(sourceRoot);
+  return source !== null && source === payloadContentDigest(installedRoot);
+}