@rsaglobaltech/specgate 0.8.1

package/dist/packages/core/src/infrastructure/GitMergeDriver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitMergeDriver.js","sourceRoot":"","sources":["../../../../../packages/core/src/infrastructure/GitMergeDriver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBH,sCA4CC;AA1DD,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,2DAA+C;AAElC,QAAA,cAAc,GAAG;IAC5B,KAAK,EAAE,oBAAoB;IAC3B,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,6BAA6B;CACxC,CAAC;AAEF;;GAEG;AACH,SAAgB,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,EAAE;IAC9D,MAAM,GAAG,GAAG,EAAE,GAAG,sBAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAA,8BAAS,EACtB,KAAK,EACL;YACE,YAAY;YACZ,IAAI;YACJ,IAAI;YACJ,GAAG,CAAC,KAAK;YACT,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,IAAI;YACJ,GAAG,CAAC,QAAQ;YACZ,SAAS;YACT,QAAQ;YACR,YAAY;SACb,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;YAC3B,SAAS,EAAE,MAAM,CAAC,MAAM;SACzB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/packages/core/src/infrastructure/HarnessConfigFile.js

@@ -0,0 +1,348 @@
+"use strict";
+/**
+ * Reader for `harness.config.yaml` — optional per-project defaults for
+ * `specgate harness run`, so the test command and agent invocation do not have
+ * to be retyped on every run.
+ *
+ * Format:
+ *   harness_version: 1
+ *   agent: "opencode run \"$(cat {prompt_file})\""
+ *   test_cmd: "mvn -B test"
+ *   max_attempts: 3
+ *   concurrency: 1
+ *   prompt_prefix: "Role: Lead Architect. Hexagonal arch is non-negotiable."
+ *   # or, for a multi-line prefix (parseYamlLite has no block scalar support):
+ *   prompt_prefix_file: ./.harness/prompt-prefix.md
+ *
+ * `prompt_prefix` is prepended to every per-requirement prompt the harness
+ * hands the agent. It is the natural home for your universal Role / Active
+ * Project Boundary / Execution Policy directives — the bits a hand-crafted
+ * "base prompt" used to carry — so they ride along on every REQ without
+ * being duplicated.
+ *
+ * Every key is optional. CLI flags always override the file.
+ *
+ * Pure-ish module: reads `prompt_prefix_file` when present. No logging, no
+ * process.exit. Throws on malformed YAML or a missing prefix file.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HARNESS_CONFIG_FILE = void 0;
+exports.readHarnessConfig = readHarnessConfig;
+exports.resolveProfileAgent = resolveProfileAgent;
+exports.resolveHarnessSettings = resolveHarnessSettings;
+exports.readProfileRules = readProfileRules;
+exports.readCostHints = readCostHints;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const YamlLite_1 = require("../domain/YamlLite");
+exports.HARNESS_CONFIG_FILE = "harness.config.yaml";
+/** Every key this reader understands. Anything else is rejected, not ignored. */
+const KNOWN_KEYS = new Set([
+    "harness_version",
+    "agent",
+    "agent_profile",
+    "test_cmd",
+    "max_attempts",
+    "concurrency",
+    "push",
+    "remote",
+    "pr_cmd",
+    "prompt_prefix",
+    "prompt_prefix_file",
+    "attempt_profiles",
+    "review_profile",
+    "protected_paths",
+    "allow_paths",
+    "message_report",
+]);
+function readHarnessConfig(projectDir) {
+    const filePath = path.join(projectDir, exports.HARNESS_CONFIG_FILE);
+    if (!fs.existsSync(filePath))
+        return null;
+    const parsed = (0, YamlLite_1.parseYamlLite)(fs.readFileSync(filePath, "utf8"));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error(`Invalid ${exports.HARNESS_CONFIG_FILE}: root must be a mapping`);
+    }
+    const config = {};
+    if (parsed.agent !== undefined)
+        config.agent = String(parsed.agent);
+    if (parsed.test_cmd !== undefined)
+        config.testCmd = String(parsed.test_cmd);
+    if (parsed.max_attempts !== undefined) {
+        const n = Number(parsed.max_attempts);
+        if (!Number.isInteger(n) || n < 1) {
+            throw new Error(`Invalid ${exports.HARNESS_CONFIG_FILE}: max_attempts must be a positive integer`);
+        }
+        config.maxAttempts = n;
+    }
+    // How many requirements may be in flight at once. 1 keeps the loop exactly
+    // as it has always been — see the comment on `runLevels` in run.ts for why
+    // that default is deliberate rather than timid.
+    if (parsed.concurrency !== undefined) {
+        const n = Number(parsed.concurrency);
+        if (!Number.isInteger(n) || n < 1) {
+            throw new Error(`Invalid ${exports.HARNESS_CONFIG_FILE}: concurrency must be a positive integer`);
+        }
+        config.concurrency = n;
+    }
+    if (parsed.push !== undefined)
+        config.push = parsed.push === true || parsed.push === "true";
+    if (parsed.remote !== undefined)
+        config.remote = String(parsed.remote);
+    if (parsed.pr_cmd !== undefined)
+        config.prCmd = String(parsed.pr_cmd);
+    // prompt_prefix_file wins over inline prompt_prefix when both are set —
+    // file is the realistic source for the multi-line bootstrap directives.
+    if (parsed.prompt_prefix_file !== undefined) {
+        const rel = String(parsed.prompt_prefix_file);
+        const abs = path.resolve(projectDir, rel);
+        if (!fs.existsSync(abs)) {
+            throw new Error(`${exports.HARNESS_CONFIG_FILE}: prompt_prefix_file not found at ${rel} (resolved to ${abs})`);
+        }
+        config.promptPrefix = fs.readFileSync(abs, "utf8");
+    }
+    else if (parsed.prompt_prefix !== undefined) {
+        config.promptPrefix = String(parsed.prompt_prefix);
+    }
+    // `agent_profile` names an entry in .harness/profiles.yaml. It exists so a
+    // team can commit the agent commands it uses — local, CI, a different vendor
+    // — and pick one by name, instead of committing a single default that
+    // somebody eventually pays for by accident.
+    //
+    // An explicit `agent:` wins: the narrower statement beats the indirection.
+    // A1: which paths the agent may not modify, and the explicit exceptions.
+    // Both are lists of globs; a malformed value is rejected rather than ignored,
+    // because a guard that silently protects nothing is worse than no guard.
+    if (parsed.protected_paths !== undefined) {
+        config.protectedPaths = asStringList(parsed.protected_paths, "protected_paths");
+    }
+    if (parsed.allow_paths !== undefined) {
+        config.allowPaths = asStringList(parsed.allow_paths, "allow_paths");
+    }
+    // F5: where the runner writes its `--format message` stream, for projects
+    // whose test command the harness cannot safely rewrite (`npm test` may well
+    // run Cucumber, and there is no way to know from here).
+    if (parsed.message_report !== undefined) {
+        config.messageReport = String(parsed.message_report);
+    }
+    if (config.agent === undefined && parsed.agent_profile !== undefined) {
+        config.agent = resolveProfileAgent(projectDir, String(parsed.agent_profile));
+    }
+    // The roles ladder: a profile per attempt, and an advisory reviewer that runs
+    // before each retry. Resolved to commands here, once, so a worker process
+    // cannot resolve a profile differently from the parent that dispatched it.
+    if (parsed.attempt_profiles !== undefined) {
+        const names = asStringList(parsed.attempt_profiles, "attempt_profiles");
+        config.attemptProfiles = names;
+        config.profileAgents = { ...(config.profileAgents || {}) };
+        for (const name of names) {
+            config.profileAgents[name] = resolveProfileAgent(projectDir, name);
+        }
+    }
+    if (parsed.review_profile !== undefined) {
+        const name = String(parsed.review_profile);
+        const agent = resolveProfileAgent(projectDir, name);
+        if (!isAdvisoryProfile(projectDir, name)) {
+            throw new Error(`.harness/profiles.yaml: profile '${name}' is used as review_profile but does not ` +
+                "declare `advisory: true`.\n" +
+                "Fix: add `advisory: true` to it. A reviewer that is not marked advisory would have " +
+                "its work gated and committed, which is not what a reviewer is for.");
+        }
+        config.reviewProfile = name;
+        config.profileAgents = { ...(config.profileAgents || {}), [name]: agent };
+    }
+    // C1: what each profile says a run of it costs. Read once, from the same
+    // file the agents come from.
+    const hints = readCostHints(projectDir);
+    if (Object.keys(hints).length > 0)
+        config.costPerRunHint = hints;
+    // D1: a profile selected by `match:` still needs its command resolved, and
+    // nothing names it in `harness.config.yaml` — that is the point of matching.
+    const rules = readProfileRules(projectDir);
+    if (rules.length > 0) {
+        config.profileRules = rules;
+        config.profileAgents = { ...(config.profileAgents || {}) };
+        for (const rule of rules) {
+            if (!config.profileAgents[rule.name]) {
+                config.profileAgents[rule.name] = resolveProfileAgent(projectDir, rule.name);
+            }
+        }
+    }
+    // Anything left is a key nobody reads. Silently ignoring it is how the HIE
+    // pilot ended up configured against a feature that did not exist: the file
+    // named a profile, the CLI never looked, and `harness run` reported no agent
+    // configured while the config plainly declared one.
+    const unknown = Object.keys(parsed).filter((k) => !KNOWN_KEYS.has(k));
+    if (unknown.length > 0) {
+        throw new Error(`${exports.HARNESS_CONFIG_FILE}: unknown key(s): ${unknown.join(", ")}.\n` +
+            `Known keys: ${[...KNOWN_KEYS].sort().join(", ")}.\n` +
+            "Fix: remove the key, or correct the spelling. A key nobody reads is worse " +
+            "than a missing one, because the file looks configured.");
+    }
+    return config;
+}
+/**
+ * Resolve a named profile from `.harness/profiles.yaml` to its agent command.
+ */
+function resolveProfileAgent(projectDir, profileName) {
+    const profilesPath = path.join(projectDir, ".harness", "profiles.yaml");
+    if (!fs.existsSync(profilesPath)) {
+        throw new Error(`${exports.HARNESS_CONFIG_FILE}: agent_profile '${profileName}' needs .harness/profiles.yaml, ` +
+            `which does not exist.\n` +
+            "Fix: create it, or set `agent:` directly in harness.config.yaml.");
+    }
+    const doc = (0, YamlLite_1.parseYamlLite)(fs.readFileSync(profilesPath, "utf8")) || {};
+    const profiles = doc.profiles || {};
+    const profile = profiles[profileName];
+    if (!profile || !profile.agent) {
+        const available = Object.keys(profiles);
+        throw new Error(`.harness/profiles.yaml: no profile '${profileName}' with an \`agent\`.\n` +
+            (available.length
+                ? `Available: ${available.join(", ")}.`
+                : "The file declares no profiles.") +
+            "\nFix: add the profile, or point agent_profile at one that exists.");
+    }
+    return String(profile.agent);
+}
+/**
+ * Merge file config with CLI args. CLI wins on every key; the file fills gaps.
+ */
+function resolveHarnessSettings(fileConfig, cliArgs) {
+    const file = fileConfig || {};
+    return {
+        agent: cliArgs.agent || file.agent || "",
+        testCmd: cliArgs.testCmd || file.testCmd || "",
+        maxAttempts: cliArgs.maxAttempts || file.maxAttempts || 3,
+        concurrency: cliArgs.concurrency || file.concurrency || 1,
+        promptPrefix: cliArgs.promptPrefix || file.promptPrefix || "",
+        push: cliArgs.push || file.push || false,
+        remote: cliArgs.remote || file.remote || "origin",
+        prCmd: cliArgs.prCmd || file.prCmd || "",
+        // Roles come from the file only: a ladder is a team decision that belongs
+        // in the repository, not a flag somebody types differently each run.
+        attemptProfiles: file.attemptProfiles || [],
+        reviewProfile: file.reviewProfile || "",
+        profileAgents: file.profileAgents || {},
+        // From the file only, for the same reason as the role ladder: a flag that
+        // widens what the agent may edit is a flag somebody types to go green.
+        protectedPaths: file.protectedPaths || [],
+        allowPaths: file.allowPaths || [],
+        messageReport: file.messageReport || "",
+        costPerRunHint: file.costPerRunHint || {},
+        profileRules: file.profileRules || [],
+    };
+}
+/** A YAML value that must be a list of names. */
+function asStringList(value, key) {
+    if (!Array.isArray(value)) {
+        throw new Error(`${exports.HARNESS_CONFIG_FILE}: ${key} must be a list of profile names.\n` +
+            "Fix: write it as a YAML sequence, one profile per line.");
+    }
+    return value.map((v) => String(v));
+}
+/** Does this profile declare itself advisory? */
+/**
+ * `cost_per_run_hint` for every profile that declares one (C1).
+ *
+ * Optional and per profile, so a team can say "this ladder costs about this
+ * much" without the harness pretending to measure tokens it cannot see. A
+ * hint that is not a finite number is ignored rather than fatal — a wrong
+ * estimate must not stop a run.
+ *
+ * Exported and independent of `harness.config.yaml`: the hints live in
+ * `profiles.yaml`, and `harness report` needs them in projects that never wrote
+ * a harness config at all. Reaching them through the config reader made the
+ * estimate silently absent there.
+ */
+/**
+ * The `match:` rules profiles declare, in file order (D1).
+ *
+ * Order is the priority — first match wins — so the file's order is preserved
+ * rather than sorted. A profile with no `match:` is not a rule and does not
+ * appear here: it is selected by name through `agent_profile`, and treating an
+ * absent `match:` as "matches everything" would make the first profile in the
+ * file swallow every requirement the moment somebody adds a rule to another.
+ */
+function readProfileRules(projectDir) {
+    const profilesPath = path.join(projectDir, ".harness", "profiles.yaml");
+    if (!fs.existsSync(profilesPath))
+        return [];
+    let doc;
+    try {
+        doc = (0, YamlLite_1.parseYamlLite)(fs.readFileSync(profilesPath, "utf8")) || {};
+    }
+    catch {
+        return [];
+    }
+    const rules = [];
+    for (const [name, profile] of Object.entries((doc.profiles || {}))) {
+        const match = profile && profile.match;
+        if (!match || typeof match !== "object" || Array.isArray(match))
+            continue;
+        const criteria = {};
+        for (const [key, value] of Object.entries(match))
+            criteria[key] = String(value);
+        if (Object.keys(criteria).length > 0)
+            rules.push({ name, match: criteria });
+    }
+    return rules;
+}
+function readCostHints(projectDir) {
+    const profilesPath = path.join(projectDir, ".harness", "profiles.yaml");
+    if (!fs.existsSync(profilesPath))
+        return {};
+    let doc;
+    try {
+        doc = (0, YamlLite_1.parseYamlLite)(fs.readFileSync(profilesPath, "utf8")) || {};
+    }
+    catch {
+        return {};
+    }
+    const hints = {};
+    for (const [name, profile] of Object.entries((doc.profiles || {}))) {
+        const value = Number(profile && profile.cost_per_run_hint);
+        if (Number.isFinite(value) && value >= 0)
+            hints[name] = value;
+    }
+    return hints;
+}
+function isAdvisoryProfile(projectDir, profileName) {
+    const profilesPath = path.join(projectDir, ".harness", "profiles.yaml");
+    const doc = (0, YamlLite_1.parseYamlLite)(fs.readFileSync(profilesPath, "utf8")) || {};
+    const profile = (doc.profiles || {})[profileName];
+    return Boolean(profile && profile.advisory === true);
+}
+//# sourceMappingURL=HarnessConfigFile.js.map

package/dist/packages/core/src/infrastructure/HarnessConfigFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HarnessConfigFile.js","sourceRoot":"","sources":["../../../../../packages/core/src/infrastructure/HarnessConfigFile.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCH,8CAyIC;AAKD,kDAuBC;AAKD,wDA2BC;AAoCD,4CAqBC;AAED,sCAeC;AA/SD,4CAA8B;AAC9B,gDAAkC;AAClC,iDAAmD;AAGtC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAOzD,iFAAiF;AACjF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,iBAAiB;IACjB,OAAO;IACP,eAAe;IACf,UAAU;IACV,cAAc;IACd,aAAa;IACb,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,aAAa;IACb,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAgB,iBAAiB,CAAC,UAAU;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,2BAAmB,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,WAAW,2BAAmB,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,2BAAmB,2CAA2C,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,WAAW,2BAAmB,0CAA0C,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;IAC5F,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtE,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,2BAAmB,qCAAqC,GAAG,iBAAiB,GAAG,GAAG,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;SAAM,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,4CAA4C;IAC5C,EAAE;IACF,2EAA2E;IAC3E,yEAAyE;IACzE,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,CAAC,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtE,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,CAAC,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACxE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;QAC/B,MAAM,CAAC,aAAa,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,2CAA2C;gBACjF,6BAA6B;gBAC7B,qFAAqF;gBACrF,oEAAoE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,aAAa,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IAC5E,CAAC;IAED,yEAAyE;IACzE,6BAA6B;IAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;IAEjE,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,MAAM,CAAC,aAAa,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,2BAAmB,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAChE,eAAe,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACrD,4EAA4E;YAC5E,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,UAAU,EAAE,WAAW;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,GAAG,2BAAmB,oBAAoB,WAAW,kCAAkC;YACrF,yBAAyB;YACzB,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,uCAAuC,WAAW,wBAAwB;YACxE,CAAC,SAAS,CAAC,MAAM;gBACf,CAAC,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACvC,CAAC,CAAC,gCAAgC,CAAC;YACrC,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CACpC,UAA2C,EAC3C,OAAiC;IAEjC,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,CAAC;IAC9B,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;QACzD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;QACzD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE;QAC7D,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QACjD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;QACxC,0EAA0E;QAC1E,qEAAqE;QACrE,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE;QAC3C,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;QACvC,0EAA0E;QAC1E,uEAAuE;QACvE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;QACvC,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;QACzC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,SAAS,YAAY,CAAC,KAAK,EAAE,GAAW;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,2BAAmB,KAAK,GAAG,qCAAqC;YACjE,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,iDAAiD;AACjD;;;;;;;;;;;;GAYG;AACH;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC9B,UAAU;IAEV,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAA2D,EAAE,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAC,EAAE,CAAC;QAC1F,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,UAAU;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAC,EAAE,CAAC;QAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAU,EAAE,WAAW;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,OAAO,GAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAyB,CAAC,WAAW,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/dist/packages/core/src/infrastructure/PackChangeDeposit.js

@@ -0,0 +1,106 @@
+"use strict";
+/**
+ * Packs that distribute changes.
+ *
+ * A pack can ship a `changes/` directory alongside its templates. On `sync`
+ * those land in the project as **proposed** changes — never applied, never
+ * archived. The consuming team reviews and archives them like any other
+ * change, which is what keeps the pack from silently rewriting a project's
+ * specification.
+ *
+ * It also gives the pack a semantic changelog: `changes/archive/` upstream is
+ * the record of what each version actually decided, in requirements rather
+ * than in commit messages.
+ *
+ * Deliberately additive and non-destructive: an existing change folder in the
+ * project is never touched. A pack cannot clobber local work in flight.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.depositPackChanges = depositPackChanges;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const ChangeWorkspace_1 = require("./ChangeWorkspace");
+function copyTree(from, to) {
+    const written = [];
+    const walk = (src, dest) => {
+        fs.mkdirSync(dest, { recursive: true });
+        for (const entry of fs.readdirSync(src, { withFileTypes: true })) {
+            const s = path.join(src, entry.name);
+            const d = path.join(dest, entry.name);
+            if (entry.isDirectory())
+                walk(s, d);
+            else if (entry.isFile()) {
+                fs.copyFileSync(s, d);
+                written.push(d);
+            }
+        }
+    };
+    walk(from, to);
+    return written;
+}
+/**
+ * Deposit a pack's `changes/` into the project as proposed changes.
+ *
+ * @param packRoot   the resolved pack repository root
+ * @param packId     e.g. `parking-management/backend`
+ * @returns { deposited, skipped } — change ids, not file paths
+ */
+function depositPackChanges(projectDir, packRoot, packId, opts) {
+    const o = opts || {};
+    const source = path.join(packRoot, packId, "changes");
+    const deposited = [];
+    const skipped = [];
+    if (!fs.existsSync(source) || !fs.statSync(source).isDirectory()) {
+        return { deposited, skipped };
+    }
+    const p = (0, ChangeWorkspace_1.paths)(projectDir);
+    for (const entry of fs.readdirSync(source, { withFileTypes: true })) {
+        // A pack's own archive is history, not a proposal — never deposited.
+        if (!entry.isDirectory() || entry.name === "archive")
+            continue;
+        const target = p.change(entry.name);
+        if (fs.existsSync(target)) {
+            // Local work in flight under the same id always wins.
+            skipped.push(entry.name);
+            continue;
+        }
+        if (!o.dryRun)
+            copyTree(path.join(source, entry.name), target);
+        deposited.push(entry.name);
+    }
+    return { deposited, skipped };
+}
+//# sourceMappingURL=PackChangeDeposit.js.map

package/dist/packages/core/src/infrastructure/PackChangeDeposit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PackChangeDeposit.js","sourceRoot":"","sources":["../../../../../packages/core/src/infrastructure/PackChangeDeposit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCH,gDA2BC;AAzDD,4CAA8B;AAC9B,gDAAkC;AAElC,uDAA0C;AAE1C,SAAS,QAAQ,CAAC,IAAI,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;iBAC/B,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAK;IACpE,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACjE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,GAAG,IAAA,uBAAK,EAAC,UAAU,CAAC,CAAC;IAE5B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,qEAAqE;QACrE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QAE/D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,sDAAsD;YACtD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/dist/packages/core/src/infrastructure/RemotePackResolver.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * Resolves a remote pack repository to a local on-disk path.
+ *
+ * Behaviour:
+ *   resolveRemotePack({ repo, version, cacheDir? })
+ *     → { packRoot: <local-dir>, commit: <sha>, version: <ref-as-provided> }
+ *
+ * Caching:
+ *   ~/.cache/csda/packs/<repo-hash>/<version>/
+ *   The cache key is sha256(repo) so different repos with the same tag
+ *   never collide. `cacheDir` can be overridden (used by tests).
+ *
+ * Side effects: spawns `git` and writes inside the cache directory.
+ * Throws on any failure with a contextual message.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_CACHE_DIR = void 0;
+exports.repoHash = repoHash;
+exports.safeVersionDir = safeVersionDir;
+exports.gitAvailable = gitAvailable;
+exports.resolveRemotePack = resolveRemotePack;
+exports.createPackBundle = createPackBundle;
+const fs = __importStar(require("node:fs"));
+const GitSafety_1 = require("../domain/GitSafety");
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const crypto = __importStar(require("node:crypto"));
+const node_child_process_1 = require("node:child_process");
+exports.DEFAULT_CACHE_DIR = path.join(os.homedir(), ".cache", "csda", "packs");
+const GIT_TIMEOUT_MS = 60_000;
+function repoHash(repo) {
+    return crypto.createHash("sha256").update(String(repo)).digest("hex").slice(0, 16);
+}
+function safeVersionDir(version) {
+    return String(version).replace(/[^a-zA-Z0-9._-]/g, "_");
+}
+function runGit(args, options = {}) {
+    const result = (0, node_child_process_1.spawnSync)("git", args, {
+        encoding: "utf8",
+        timeout: options.timeout || GIT_TIMEOUT_MS,
+        cwd: options.cwd,
+    });
+    if (result.error) {
+        throw new Error(`git ${args[0]} failed: ${result.error.message}`);
+    }
+    if (result.status !== 0) {
+        const stderr = (result.stderr || "").trim();
+        throw new Error(`git ${args[0]} exited ${result.status}: ${stderr || "unknown error"}`);
+    }
+    return (result.stdout || "").trim();
+}
+function gitAvailable() {
+    const result = (0, node_child_process_1.spawnSync)("git", ["--version"], { encoding: "utf8" });
+    return result.status === 0;
+}
+/** Offline mode: opt-in via option or the CSDA_OFFLINE env var (CI-friendly). */
+function isOffline(opts) {
+    if (typeof opts.offline === "boolean")
+        return opts.offline;
+    const env = process.env.CSDA_OFFLINE;
+    return env === "1" || env === "true";
+}
+/**
+ * @param {{ repo: string, version: string, cacheDir?: string, force?: boolean, offline?: boolean }} options
+ * @returns {{ packRoot: string, commit: string, version: string, cached: boolean }}
+ */
+function resolveRemotePack(options) {
+    const opts = options || {};
+    if (!opts.repo)
+        throw new Error("resolveRemotePack: 'repo' is required");
+    if (!opts.version)
+        throw new Error("resolveRemotePack: 'version' is required");
+    if (!gitAvailable())
+        throw new Error("resolveRemotePack: 'git' is not available on PATH");
+    const cacheRoot = opts.cacheDir || exports.DEFAULT_CACHE_DIR;
+    const targetDir = path.join(cacheRoot, repoHash(opts.repo), safeVersionDir(opts.version));
+    const cached = fs.existsSync(path.join(targetDir, ".git"));
+    if (cached && !opts.force) {
+        const commit = runGit(["rev-parse", "HEAD"], { cwd: targetDir });
+        return { packRoot: targetDir, commit, version: opts.version, cached: true };
+    }
+    if (isOffline(opts)) {
+        throw new Error(`Offline mode: pack ${opts.repo}@${opts.version} is not in the local cache (${targetDir}).\n` +
+            "Fix: on a connected machine run `specgate pack bundle --repo <url> --out pack.bundle`,\n" +
+            "copy the bundle across, and use it as --pack-repo /path/to/pack.bundle.");
+    }
+    if (cached && opts.force) {
+        fs.rmSync(targetDir, { recursive: true, force: true });
+    }
+    // Checked before git sees it: a value starting with `-` is an option to git,
+    // and `--upload-pack=<cmd>` runs a command. `--` below stops the parsing; this
+    // stops what `--` cannot (js/second-order-command-line-injection).
+    const repo = (0, GitSafety_1.assertSafeGitRepo)(opts.repo, "pack repository");
+    const version = (0, GitSafety_1.assertSafeGitRef)(opts.version, "pack version");
+    fs.mkdirSync(path.dirname(targetDir), { recursive: true });
+    // Shallow clone with the specific ref. Works for tags and branches.
+    // Falls back to a full clone + checkout when --branch fails (e.g. for SHAs).
+    try {
+        runGit(["clone", "--depth", "1", "--branch", version, "--", repo, targetDir]);
+    }
+    catch {
+        // Either the ref is a SHA or shallow-with-branch isn't supported.
+        fs.rmSync(targetDir, { recursive: true, force: true });
+        runGit(["clone", "--", repo, targetDir]);
+        runGit(["checkout", "--detach", version, "--"], { cwd: targetDir });
+    }
+    const commit = runGit(["rev-parse", "HEAD"], { cwd: targetDir });
+    return { packRoot: targetDir, commit, version: opts.version, cached: false };
+}
+/**
+ * Create a single-file git bundle of a pack repository (all refs and tags),
+ * transportable into air-gapped environments. The bundle is a valid clone
+ * source, so `--pack-repo /path/to/pack.bundle` works everywhere a URL does.
+ *
+ * @param {{ repo: string, out: string, tmpDir?: string }} options
+ * @returns {{ out: string, refs: string[] }}
+ */
+function createPackBundle(options) {
+    const opts = options || {};
+    if (!opts.repo)
+        throw new Error("createPackBundle: 'repo' is required");
+    if (!opts.out)
+        throw new Error("createPackBundle: 'out' is required");
+    if (!gitAvailable())
+        throw new Error("createPackBundle: 'git' is not available on PATH");
+    const tmpRoot = opts.tmpDir || fs.mkdtempSync(path.join(os.tmpdir(), "csda-bundle-"));
+    const mirrorDir = path.join(tmpRoot, "mirror.git");
+    try {
+        // A mirror clone carries every branch and tag — bundles from shallow
+        // clones are rejected by git, so this must be a full mirror.
+        runGit(["clone", "--mirror", "--", (0, GitSafety_1.assertSafeGitRepo)(opts.repo, "pack repository"), mirrorDir], {
+            timeout: 300_000,
+        });
+        const outAbs = path.resolve(opts.out);
+        fs.mkdirSync(path.dirname(outAbs), { recursive: true });
+        runGit(["bundle", "create", outAbs, "--all"], { cwd: mirrorDir });
+        const refs = runGit(["bundle", "list-heads", outAbs])
+            .split("\n")
+            .filter(Boolean)
+            .map((line) => line.split(" ").slice(1).join(" "));
+        return { out: outAbs, refs };
+    }
+    finally {
+        fs.rmSync(tmpRoot, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=RemotePackResolver.js.map