@rasensio/aidlc 1.16.0 → 1.18.0

package/dist/compile/capability-resolve.js

@@ -0,0 +1,85 @@
+/**
+ * Capability-map validation and activation-directive resolution.
+ *
+ * Extracted verbatim from `adapters/claude-code.ts`, which held the only
+ * validating implementation, at the moment a second adapter (copilot) needed the
+ * same behaviour. The one generalisation is that `resolveActivation` now takes
+ * the platform id instead of hardcoding `'claude-code'` when reading
+ * `native_mode_hint`.
+ *
+ * Note for anyone adding a third consumer: `adapters/codex.ts` has its own
+ * `getCapabilityDirective`, which does NOT validate the map and emits no
+ * warnings for a malformed one. It is deliberately left alone here — migrating it
+ * would change codex's emitted warnings, which is a behaviour change, not an
+ * extraction. Prefer this module for anything new.
+ *
+ * Requirements: copilot-platform-support/AC-24
+ *
+ * @module
+ */
+/** Valid lifecycle phase names for capability map validation. */
+const VALID_PHASES = new Set([
+    'ideation',
+    'requirements',
+    'design',
+    'implementation',
+    'testing',
+    'deployment',
+    'maintenance',
+]);
+/**
+ * Validate and sanitize a capability map. Returns a clean map with only valid
+ * entries, or null if the map is entirely unusable. Emits warnings for problems.
+ */
+export function validateCapabilityMap(caps, warnings) {
+    const phaseMap = new Map();
+    if (!caps.capabilities || typeof caps.capabilities !== 'object') {
+        warnings.push(`capability map for '${caps.platform}': malformed capabilities object; proceeding capability-free`);
+        return null;
+    }
+    let hasValidEntry = false;
+    for (const [capName, entry] of Object.entries(caps.capabilities)) {
+        if (!entry || typeof entry !== 'object') {
+            warnings.push(`capability map '${caps.platform}': capability '${capName}' is malformed; skipping`);
+            continue;
+        }
+        if (!Array.isArray(entry.phases)) {
+            warnings.push(`capability map '${caps.platform}': capability '${capName}' has invalid phases; skipping`);
+            continue;
+        }
+        if (!entry.activation || typeof entry.activation !== 'string') {
+            warnings.push(`capability map '${caps.platform}': capability '${capName}' missing activation text; skipping`);
+            continue;
+        }
+        for (const phase of entry.phases) {
+            if (!VALID_PHASES.has(phase)) {
+                warnings.push(`capability map '${caps.platform}': unknown phase '${phase}' in capability '${capName}'; skipping phase`);
+                continue;
+            }
+            phaseMap.set(phase, entry);
+            hasValidEntry = true;
+        }
+    }
+    return hasValidEntry ? phaseMap : null;
+}
+/**
+ * Derive the activation directive for a skill given the resolution precedence:
+ *
+ * 1. `skill.meta.native_mode_hint[platform]` → use it
+ * 2. Capability map entry covering the skill's phase → its activation text
+ * 3. Otherwise → null, meaning full structured guidance with no native reference
+ */
+export function resolveActivation(skill, platform, phaseMap) {
+    const hint = skill.meta.native_mode_hint?.[platform];
+    if (hint) {
+        return hint;
+    }
+    if (phaseMap) {
+        const entry = phaseMap.get(skill.meta.phase);
+        if (entry) {
+            return entry.activation;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=capability-resolve.js.map

package/dist/compile/capability-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-resolve.js","sourceRoot":"","sources":["../../src/compile/capability-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,iEAAiE;AACjE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAS;IACxD,UAAU;IACV,cAAc;IACd,QAAQ;IACR,gBAAgB;IAChB,SAAS;IACT,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAmB,EACnB,QAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEvD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CACX,uBAAuB,IAAI,CAAC,QAAQ,8DAA8D,CACnG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,CAAC,QAAQ,kBAAkB,OAAO,0BAA0B,CACpF,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,CAAC,QAAQ,kBAAkB,OAAO,gCAAgC,CAC1F,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,CAAC,QAAQ,kBAAkB,OAAO,qCAAqC,CAC/F,CAAC;YACF,SAAS;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,CAAC,QAAQ,qBAAqB,KAAK,oBAAoB,OAAO,mBAAmB,CACzG,CAAC;gBACF,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,KAAkB,EAAE,KAAK,CAAC,CAAC;YACxC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAY,EACZ,QAAoB,EACpB,QAAgD;IAEhD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,UAAU,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/compile/guidance-install.d.ts

@@ -13,27 +13,24 @@
  * replaced so registrations the project owns (notably the retrospective-fed
  * `lessons` layer) survive.
  *
+ * The mechanics now live in `./layer-install.ts`, which takes an explicit entry
+ * list. This module is the framework's caller of it: it passes the content
+ * package's whole guidance index and the bundled-body comparison. Compliance
+ * packs deliberately do **not** come through here — a pack layer registered in
+ * the content guidance index would be installed by every caller of this function,
+ * and one of those callers is a `safe`-tier doctor migration that auto-applies
+ * without prompting (compliance-packs/AC-53, AC-54).
+ *
  * Requirements: guidance-layers-never-resolve/AC-1, AC-3, AC-4
  */
-/** Outcome of an installation pass. */
-export interface GuidanceInstallReport {
-    /** Layer names newly written to disk. */
-    installed: string[];
-    /**
-     * Repo-relative paths newly written, including `index.yaml` when it changed.
-     * Kept alongside `installed` so callers never have to reconstruct a filename
-     * from a layer name — the two differ whenever a layer registers a filename
-     * that is not `<name>.md`.
-     */
-    installedPaths: string[];
-    /** Layer names already present with identical content. */
-    alreadyCurrent: string[];
-    /** Layer names present but locally edited — left untouched. */
-    locallyModified: string[];
-    /** True when the project's `index.yaml` gained entries. */
-    indexUpdated: boolean;
-    warnings: string[];
-}
+import { type LayerInstallReport } from './layer-install.js';
+/**
+ * Outcome of an installation pass.
+ *
+ * Structurally identical to `LayerInstallReport`; kept as a named alias because
+ * `init`, `update` and the doctor migration all import this name.
+ */
+export type GuidanceInstallReport = LayerInstallReport;
 /**
  * Install every guidance layer registered in the content package into a project.
  *

package/dist/compile/guidance-install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guidance-install.d.ts","sourceRoot":"","sources":["../../src/compile/guidance-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH,uCAAuC;AACvC,MAAM,WAAW,qBAAqB;IACpC,yCAAyC;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0DAA0D;IAC1D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,+DAA+D;IAC/D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,2DAA2D;IAC3D,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAuDD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,qBAAqB,CAgFvB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CASrF"}
+{"version":3,"file":"guidance-install.d.ts","sourceRoot":"","sources":["../../src/compile/guidance-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEvD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,qBAAqB,CAuBvB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CASrF"}

package/dist/compile/guidance-install.js

@@ -13,58 +13,18 @@
  * replaced so registrations the project owns (notably the retrospective-fed
  * `lessons` layer) survive.
  *
- * Requirements: guidance-layers-never-resolve/AC-1, AC-3, AC-4
- */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { isAbsolute, join, resolve, sep } from 'node:path';
-import { parse as parseYaml } from 'yaml';
-import { serializeYaml } from '../state/yaml-helpers.js';
-/**
- * Read and validate a guidance `index.yaml`, returning its entries.
- *
- * @returns Entries, or null when the file is absent or unusable.
- */
-function readIndexEntries(indexPath) {
-    if (!existsSync(indexPath)) {
-        return null;
-    }
-    let parsed;
-    try {
-        parsed = parseYaml(readFileSync(indexPath, 'utf8'));
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== 'object' || parsed === null || !('layers' in parsed)) {
-        return null;
-    }
-    const layers = parsed.layers;
-    if (!Array.isArray(layers)) {
-        return null;
-    }
-    return layers.filter((e) => typeof e === 'object' &&
-        e !== null &&
-        typeof e.name === 'string' &&
-        typeof e.file === 'string');
-}
-/**
- * True when `file` is a safe relative name that stays inside `dir`.
+ * The mechanics now live in `./layer-install.ts`, which takes an explicit entry
+ * list. This module is the framework's caller of it: it passes the content
+ * package's whole guidance index and the bundled-body comparison. Compliance
+ * packs deliberately do **not** come through here — a pack layer registered in
+ * the content guidance index would be installed by every caller of this function,
+ * and one of those callers is a `safe`-tier doctor migration that auto-applies
+ * without prompting (compliance-packs/AC-53, AC-54).
  *
- * `file` comes out of a YAML index, so it is data, not a constant: an absolute
- * path or a `..` segment would make `join` escape `.aidlc/guidance/` and, on the
- * target side, write outside it. Checked lexically **before** any disk access —
- * ordering this after an existence check is how a sibling defect in this repo
- * turned an error path into an out-of-bounds oracle.
+ * Requirements: guidance-layers-never-resolve/AC-1, AC-3, AC-4
  */
-function isContainedRelative(dir, file) {
-    if (file === '' || isAbsolute(file))
-        return false;
-    if (file.split(/[\\/]/).includes('..'))
-        return false;
-    const root = resolve(dir);
-    const target = resolve(dir, file);
-    return target !== root && target.startsWith(root + sep);
-}
+import { join } from 'node:path';
+import { bundledBodyDiffers, installLayers, readIndexEntries, } from './layer-install.js';
 /**
  * Install every guidance layer registered in the content package into a project.
  *
@@ -73,71 +33,26 @@ function isContainedRelative(dir, file) {
  * @param opts.dryRun - Compute the report without writing anything.
  */
 export function installBundledGuidance(projectRoot, contentRoot, opts = {}) {
-    const report = {
-        installed: [],
-        installedPaths: [],
-        alreadyCurrent: [],
-        locallyModified: [],
-        indexUpdated: false,
-        warnings: [],
-    };
     const bundledDir = join(contentRoot, 'guidance');
     const bundledEntries = readIndexEntries(join(bundledDir, 'index.yaml'));
     if (!bundledEntries) {
-        report.warnings.push(`content package has no readable guidance index at ${join(bundledDir, 'index.yaml')}`);
-        return report;
-    }
-    const targetDir = join(projectRoot, '.aidlc', 'guidance');
-    const existingEntries = readIndexEntries(join(targetDir, 'index.yaml'));
-    const mergedEntries = existingEntries ? [...existingEntries] : [];
-    const registeredNames = new Set(mergedEntries.map((e) => e.name));
-    for (const entry of bundledEntries) {
-        // Bounds before existence: a registration naming an absolute path or a `..`
-        // segment is rejected outright rather than resolved and then stat'd.
-        if (!isContainedRelative(bundledDir, entry.file) || !isContainedRelative(targetDir, entry.file)) {
-            report.warnings.push(`guidance layer '${entry.name}' registers an out-of-bounds file and was skipped: ${entry.file}`);
-            continue;
-        }
-        const source = join(bundledDir, entry.file);
-        if (!existsSync(source)) {
-            report.warnings.push(`guidance layer '${entry.name}' is registered in the content package but its file is missing: ${entry.file}`);
-            continue;
-        }
-        const bundledBody = readFileSync(source, 'utf8');
-        const target = join(targetDir, entry.file);
-        if (existsSync(target)) {
-            // A layer the project has edited is the project's, not ours (AC-4).
-            if (readFileSync(target, 'utf8') === bundledBody) {
-                report.alreadyCurrent.push(entry.name);
-            }
-            else {
-                report.locallyModified.push(entry.name);
-            }
-        }
-        else {
-            report.installed.push(entry.name);
-            report.installedPaths.push(`.aidlc/guidance/${entry.file}`);
-            if (!opts.dryRun) {
-                mkdirSync(targetDir, { recursive: true });
-                writeFileSync(target, bundledBody, 'utf8');
-            }
-        }
-        // Register by name regardless of whether the body was written, so a
-        // locally-modified layer that is missing from the index still becomes active.
-        if (!registeredNames.has(entry.name)) {
-            mergedEntries.push({ name: entry.name, file: entry.file });
-            registeredNames.add(entry.name);
-            report.indexUpdated = true;
-        }
-    }
-    if (report.indexUpdated) {
-        report.installedPaths.push('.aidlc/guidance/index.yaml');
-        if (!opts.dryRun) {
-            mkdirSync(targetDir, { recursive: true });
-            writeFileSync(join(targetDir, 'index.yaml'), serializeYaml({ layers: mergedEntries }), 'utf8');
-        }
+        return {
+            installed: [],
+            installedPaths: [],
+            alreadyCurrent: [],
+            locallyModified: [],
+            indexUpdated: false,
+            warnings: [
+                `content package has no readable guidance index at ${join(bundledDir, 'index.yaml')}`,
+            ],
+        };
     }
-    return report;
+    return installLayers(bundledDir, join(projectRoot, '.aidlc', 'guidance'), bundledEntries, {
+        isModified: bundledBodyDiffers,
+        relPrefix: '.aidlc/guidance',
+        label: 'guidance layer',
+        ...(opts.dryRun !== undefined && { dryRun: opts.dryRun }),
+    });
 }
 /**
  * Render a one-line summary of an installation pass, or null when nothing happened.

package/dist/compile/guidance-install.js.map

@@ -1 +1 @@
-{"version":3,"file":"guidance-install.js","sourceRoot":"","sources":["../../src/compile/guidance-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AA6BzD;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAI,MAA8B,CAAC,MAAM,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,CAAC,EAA2B,EAAE,CAC7B,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,OAAQ,CAA6B,CAAC,IAAI,KAAK,QAAQ;QACvD,OAAQ,CAA6B,CAAC,IAAI,KAAK,QAAQ,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,GAAW,EAAE,IAAY;IACpD,IAAI,IAAI,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,WAAmB,EACnB,OAA6B,EAAE;IAE/B,MAAM,MAAM,GAA0B;QACpC,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,EAAE;QAClB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAExE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,qDAAqD,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CACtF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IACxE,MAAM,aAAa,GAAyB,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAElE,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,mBAAmB,KAAK,CAAC,IAAI,sDAAsD,KAAK,CAAC,IAAI,EAAE,CAChG,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,mBAAmB,KAAK,CAAC,IAAI,mEAAmE,KAAK,CAAC,IAAI,EAAE,CAC7G,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,oEAAoE;YACpE,IAAI,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;gBACjD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,8EAA8E;QAC9E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA6B;IACpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,uBAAuB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,eAAe,CAAC,MAAM,sBAAsB,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC"}
+{"version":3,"file":"guidance-install.js","sourceRoot":"","sources":["../../src/compile/guidance-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAU5B;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,WAAmB,EACnB,OAA6B,EAAE;IAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAExE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,EAAE;YAClB,eAAe,EAAE,EAAE;YACnB,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE;gBACR,qDAAqD,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE;aACtF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,cAAc,EAAE;QACxF,UAAU,EAAE,kBAAkB;QAC9B,SAAS,EAAE,iBAAiB;QAC5B,KAAK,EAAE,gBAAgB;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA6B;IACpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,uBAAuB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,eAAe,CAAC,MAAM,sBAAsB,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC"}

package/dist/compile/layer-install.d.ts

@@ -0,0 +1,122 @@
+/**
+ * The guidance-layer install primitive.
+ *
+ * Extracted from `guidance-install.ts` so compliance packs can reuse the copy,
+ * the containment check and the index merge without reusing its entry point.
+ * `installBundledGuidance` installs *every* layer registered in the content
+ * package's guidance index and is called from `init`, `update`, and a `safe`-tier
+ * doctor migration that auto-applies without prompting — so a pack layer
+ * registered in that index would land in every upgrading project with no pack
+ * requested. This primitive takes an explicit entry list and has no
+ * install-everything mode.
+ *
+ * **The modified-detector is injected, not shared.** `installBundledGuidance`
+ * decides "locally modified" by comparing the on-disk body against the
+ * *currently bundled* body. That is right for framework layers, whose bundled
+ * body is the only reference available, and wrong for packs: a pack whose content
+ * is updated upstream would make every installed layer read as locally edited, so
+ * `remove` would refuse to delete anything and corrected control text would never
+ * land. Packs compare against the hash recorded at install instead. A primitive
+ * that hard-coded either rule would be wrong for one caller.
+ *
+ * Requirements: compliance-packs/AC-63 (single containment definition), and the
+ * behaviour `guidance-layers-never-resolve/AC-1, AC-3, AC-4, AC-5, AC-14`
+ * established, which this file now carries.
+ */
+/** One entry in a guidance `index.yaml`. Extra keys are data and are preserved. */
+export interface GuidanceIndexEntry {
+    name: string;
+    file: string;
+    [key: string]: unknown;
+}
+/** Outcome of an installation pass. */
+export interface LayerInstallReport {
+    /** Layer names newly written to disk. */
+    installed: string[];
+    /**
+     * Repo-relative paths newly written, including `index.yaml` when it changed.
+     * Kept alongside `installed` so callers never have to reconstruct a filename
+     * from a layer name — the two differ whenever a layer registers a filename
+     * that is not `<name>.md`.
+     */
+    installedPaths: string[];
+    /** Layer names already present with identical content. */
+    alreadyCurrent: string[];
+    /** Layer names present but modified per the injected detector — left untouched. */
+    locallyModified: string[];
+    /** True when the target `index.yaml` gained entries. */
+    indexUpdated: boolean;
+    warnings: string[];
+}
+/** How a caller decides a layer on disk is not ours to overwrite. */
+export type ModifiedDetector = (targetPath: string, bundledBody: string) => boolean;
+export interface InstallLayersOptions {
+    /** Decides whether an existing target counts as locally modified. */
+    isModified: ModifiedDetector;
+    /** Repo-relative prefix for `installedPaths`, e.g. `.aidlc/guidance`. */
+    relPrefix: string;
+    /** Compute the report without writing anything. */
+    dryRun?: boolean;
+    /** Label used in warnings, e.g. `guidance layer` or `pack 'soc2' layer`. */
+    label?: string;
+}
+/**
+ * Read and validate a guidance `index.yaml`, returning its entries.
+ *
+ * @returns Entries, or null when the file is absent or unusable.
+ */
+export declare function readIndexEntries(indexPath: string): GuidanceIndexEntry[] | null;
+/**
+ * True when `file` is a safe relative name that stays inside `dir`.
+ *
+ * `file` comes out of a YAML index, so it is data, not a constant: an absolute
+ * path or a `..` segment would make `join` escape the guidance directory and, on
+ * the target side, write outside it. Checked lexically **before** any disk access
+ * — ordering this after an existence check is how a sibling defect in this repo
+ * turned an error path into an out-of-bounds oracle.
+ *
+ * Exported so there is exactly one definition of the rule; a pack loader calls
+ * this rather than writing a second one (compliance-packs/AC-63).
+ */
+export declare function isContainedRelative(dir: string, file: string): boolean;
+/**
+ * Copy an explicit list of layers into `targetDir` and merge the target index.
+ *
+ * Non-destructive by construction: a layer the injected detector reports as
+ * modified is left alone, and existing index entries are preserved wholesale
+ * rather than rebuilt, so fields the target owns (notably the retrospective-fed
+ * `lessons` layer's `last_consolidated`) survive.
+ *
+ * @param sourceDir - Directory holding the layer bodies to copy from.
+ * @param targetDir - Directory to install into, e.g. `<root>/.aidlc/guidance`.
+ * @param entries - The layers to install. There is no "everything" mode.
+ * @param opts - Injected detector, path prefix, dry-run flag, warning label.
+ */
+export declare function installLayers(sourceDir: string, targetDir: string, entries: GuidanceIndexEntry[], opts: InstallLayersOptions): LayerInstallReport;
+/**
+ * The framework's modified-detector: the on-disk body differs from the bundled one.
+ *
+ * Correct for bundled framework layers, whose bundled body is the only reference
+ * that exists. Deliberately **not** used for packs — see the module note.
+ */
+export declare const bundledBodyDiffers: ModifiedDetector;
+/**
+ * Drop layer registrations from a target index by name.
+ *
+ * Removing the registration is what makes a layer *inert*, and it is separate from
+ * deleting the file on purpose. When a pack is removed but one of its layers has
+ * been locally edited, the bytes stay (they are the project's now) while the
+ * registration goes — otherwise `loadGuidanceLayers` keeps handing an uninstalled
+ * pack's constraints to every agent, which is the drift state `doctor` classifies
+ * as a defect.
+ *
+ * Never touches the files themselves, and never touches a registration it was not
+ * asked about.
+ *
+ * @returns The names actually removed, so a caller can report accurately rather
+ *   than assuming.
+ */
+export declare function unregisterLayers(targetDir: string, names: string[], opts?: {
+    dryRun?: boolean;
+}): string[];
+//# sourceMappingURL=layer-install.d.ts.map

package/dist/compile/layer-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layer-install.d.ts","sourceRoot":"","sources":["../../src/compile/layer-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,uCAAuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0DAA0D;IAC1D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mFAAmF;IACnF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,wDAAwD;IACxD,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qEAAqE;AACrE,MAAM,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;AAEpF,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,UAAU,EAAE,gBAAgB,CAAC;IAC7B,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,EAAE,GAAG,IAAI,CA4B/E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOtE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kBAAkB,EAAE,EAC7B,IAAI,EAAE,oBAAoB,GACzB,kBAAkB,CA4EpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBACiB,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,MAAM,EAAE,CAaV"}

package/dist/compile/layer-install.js

@@ -0,0 +1,195 @@
+/**
+ * The guidance-layer install primitive.
+ *
+ * Extracted from `guidance-install.ts` so compliance packs can reuse the copy,
+ * the containment check and the index merge without reusing its entry point.
+ * `installBundledGuidance` installs *every* layer registered in the content
+ * package's guidance index and is called from `init`, `update`, and a `safe`-tier
+ * doctor migration that auto-applies without prompting — so a pack layer
+ * registered in that index would land in every upgrading project with no pack
+ * requested. This primitive takes an explicit entry list and has no
+ * install-everything mode.
+ *
+ * **The modified-detector is injected, not shared.** `installBundledGuidance`
+ * decides "locally modified" by comparing the on-disk body against the
+ * *currently bundled* body. That is right for framework layers, whose bundled
+ * body is the only reference available, and wrong for packs: a pack whose content
+ * is updated upstream would make every installed layer read as locally edited, so
+ * `remove` would refuse to delete anything and corrected control text would never
+ * land. Packs compare against the hash recorded at install instead. A primitive
+ * that hard-coded either rule would be wrong for one caller.
+ *
+ * Requirements: compliance-packs/AC-63 (single containment definition), and the
+ * behaviour `guidance-layers-never-resolve/AC-1, AC-3, AC-4, AC-5, AC-14`
+ * established, which this file now carries.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, resolve, sep } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { serializeYaml } from '../state/yaml-helpers.js';
+/**
+ * Read and validate a guidance `index.yaml`, returning its entries.
+ *
+ * @returns Entries, or null when the file is absent or unusable.
+ */
+export function readIndexEntries(indexPath) {
+    if (!existsSync(indexPath)) {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(readFileSync(indexPath, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== 'object' || parsed === null || !('layers' in parsed)) {
+        return null;
+    }
+    const layers = parsed.layers;
+    if (!Array.isArray(layers)) {
+        return null;
+    }
+    return layers.filter((e) => typeof e === 'object' &&
+        e !== null &&
+        typeof e.name === 'string' &&
+        typeof e.file === 'string');
+}
+/**
+ * True when `file` is a safe relative name that stays inside `dir`.
+ *
+ * `file` comes out of a YAML index, so it is data, not a constant: an absolute
+ * path or a `..` segment would make `join` escape the guidance directory and, on
+ * the target side, write outside it. Checked lexically **before** any disk access
+ * — ordering this after an existence check is how a sibling defect in this repo
+ * turned an error path into an out-of-bounds oracle.
+ *
+ * Exported so there is exactly one definition of the rule; a pack loader calls
+ * this rather than writing a second one (compliance-packs/AC-63).
+ */
+export function isContainedRelative(dir, file) {
+    if (file === '' || isAbsolute(file))
+        return false;
+    if (file.split(/[\\/]/).includes('..'))
+        return false;
+    const root = resolve(dir);
+    const target = resolve(dir, file);
+    return target !== root && target.startsWith(root + sep);
+}
+/**
+ * Copy an explicit list of layers into `targetDir` and merge the target index.
+ *
+ * Non-destructive by construction: a layer the injected detector reports as
+ * modified is left alone, and existing index entries are preserved wholesale
+ * rather than rebuilt, so fields the target owns (notably the retrospective-fed
+ * `lessons` layer's `last_consolidated`) survive.
+ *
+ * @param sourceDir - Directory holding the layer bodies to copy from.
+ * @param targetDir - Directory to install into, e.g. `<root>/.aidlc/guidance`.
+ * @param entries - The layers to install. There is no "everything" mode.
+ * @param opts - Injected detector, path prefix, dry-run flag, warning label.
+ */
+export function installLayers(sourceDir, targetDir, entries, opts) {
+    const label = opts.label ?? 'guidance layer';
+    const report = {
+        installed: [],
+        installedPaths: [],
+        alreadyCurrent: [],
+        locallyModified: [],
+        indexUpdated: false,
+        warnings: [],
+    };
+    const indexPath = join(targetDir, 'index.yaml');
+    const existingEntries = readIndexEntries(indexPath);
+    const mergedEntries = existingEntries ? [...existingEntries] : [];
+    const registeredNames = new Set(mergedEntries.map((e) => e.name));
+    for (const entry of entries) {
+        // Bounds before existence: a registration naming an absolute path or a `..`
+        // segment is rejected outright rather than resolved and then stat'd.
+        if (!isContainedRelative(sourceDir, entry.file) || !isContainedRelative(targetDir, entry.file)) {
+            report.warnings.push(`${label} '${entry.name}' registers an out-of-bounds file and was skipped: ${entry.file}`);
+            continue;
+        }
+        const source = join(sourceDir, entry.file);
+        if (!existsSync(source)) {
+            report.warnings.push(`${label} '${entry.name}' is registered but its file is missing: ${entry.file}`);
+            continue;
+        }
+        const bundledBody = readFileSync(source, 'utf8');
+        const target = join(targetDir, entry.file);
+        if (existsSync(target)) {
+            // A layer the project has changed is the project's, not ours.
+            if (opts.isModified(target, bundledBody)) {
+                report.locallyModified.push(entry.name);
+            }
+            else {
+                report.alreadyCurrent.push(entry.name);
+            }
+        }
+        else {
+            report.installed.push(entry.name);
+            report.installedPaths.push(`${opts.relPrefix}/${entry.file}`);
+            if (!opts.dryRun) {
+                mkdirSync(targetDir, { recursive: true });
+                writeFileSync(target, bundledBody, 'utf8');
+            }
+        }
+        // Register by name regardless of whether the body was written, so a
+        // locally-modified layer that is missing from the index still becomes active.
+        //
+        // The whole entry is spread rather than rebuilt as `{name, file}`: rebuilding
+        // silently drops every other key on first registration, which is where a pack
+        // layer's `always_pointer` flag would be lost. Safe because `readIndexEntries`
+        // already guarantees `name` and `file` are strings.
+        if (!registeredNames.has(entry.name)) {
+            mergedEntries.push({ ...entry });
+            registeredNames.add(entry.name);
+            report.indexUpdated = true;
+        }
+    }
+    if (report.indexUpdated) {
+        report.installedPaths.push(`${opts.relPrefix}/index.yaml`);
+        if (!opts.dryRun) {
+            mkdirSync(targetDir, { recursive: true });
+            writeFileSync(indexPath, serializeYaml({ layers: mergedEntries }), 'utf8');
+        }
+    }
+    return report;
+}
+/**
+ * The framework's modified-detector: the on-disk body differs from the bundled one.
+ *
+ * Correct for bundled framework layers, whose bundled body is the only reference
+ * that exists. Deliberately **not** used for packs — see the module note.
+ */
+export const bundledBodyDiffers = (targetPath, bundledBody) => readFileSync(targetPath, 'utf8') !== bundledBody;
+/**
+ * Drop layer registrations from a target index by name.
+ *
+ * Removing the registration is what makes a layer *inert*, and it is separate from
+ * deleting the file on purpose. When a pack is removed but one of its layers has
+ * been locally edited, the bytes stay (they are the project's now) while the
+ * registration goes — otherwise `loadGuidanceLayers` keeps handing an uninstalled
+ * pack's constraints to every agent, which is the drift state `doctor` classifies
+ * as a defect.
+ *
+ * Never touches the files themselves, and never touches a registration it was not
+ * asked about.
+ *
+ * @returns The names actually removed, so a caller can report accurately rather
+ *   than assuming.
+ */
+export function unregisterLayers(targetDir, names, opts = {}) {
+    const indexPath = join(targetDir, 'index.yaml');
+    const entries = readIndexEntries(indexPath);
+    if (!entries)
+        return [];
+    const wanted = new Set(names);
+    const kept = entries.filter((e) => !wanted.has(e.name));
+    const removed = entries.filter((e) => wanted.has(e.name)).map((e) => e.name);
+    if (removed.length > 0 && !opts.dryRun) {
+        writeFileSync(indexPath, serializeYaml({ layers: kept }), 'utf8');
+    }
+    return removed;
+}
+//# sourceMappingURL=layer-install.js.map

package/dist/compile/layer-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layer-install.js","sourceRoot":"","sources":["../../src/compile/layer-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AA2CzD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAI,MAA8B,CAAC,MAAM,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,CAAC,EAA2B,EAAE,CAC7B,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,OAAQ,CAA6B,CAAC,IAAI,KAAK,QAAQ;QACvD,OAAQ,CAA6B,CAAC,IAAI,KAAK,QAAQ,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,IAAY;IAC3D,IAAI,IAAI,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,SAAiB,EACjB,OAA6B,EAC7B,IAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,gBAAgB,CAAC;IAC7C,MAAM,MAAM,GAAuB;QACjC,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,EAAE;QAClB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,aAAa,GAAyB,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAElE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/F,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,KAAK,KAAK,KAAK,CAAC,IAAI,sDAAsD,KAAK,CAAC,IAAI,EAAE,CAC1F,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,KAAK,KAAK,KAAK,CAAC,IAAI,4CAA4C,KAAK,CAAC,IAAI,EAAE,CAChF,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,8DAA8D;YAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;gBACzC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,8EAA8E;QAC9E,EAAE;QACF,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,oDAAoD;QACpD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACjC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAqB,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,CAC9E,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,WAAW,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,KAAe,EACf,OAA6B,EAAE;IAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}