@sapiom/agent-core 0.6.0

package/CHANGELOG.md

@@ -0,0 +1,246 @@
+# @sapiom/orchestration-core
+
+## 0.6.0
+
+### Minor Changes
+
+- cc1261e: Rename the composition SDK to **agents** and the coding/LLM capability to **models**.
+
+  **Breaking — the package names changed. Install the new names; the old ones are deprecated.**
+
+  - Packages: `@sapiom/orchestration` → `@sapiom/agent`, `@sapiom/orchestration-core` → `@sapiom/agent-core`, `@sapiom/orchestration-runtime` → `@sapiom/agent-runtime`. (`@sapiom/create-orchestration` is retired — scaffold with the CLI or the developer MCP.)
+  - API: `defineOrchestration` → `defineAgent`; `Orchestration*` types/errors → `Agent*`.
+  - `@sapiom/tools`: the `agent` capability namespace is now `models` (e.g. `sapiom.models.coding`); the `orchestrations` namespace is now `agents`.
+  - CLI: `sapiom orchestrations …` → `sapiom agents …`.
+  - Developer MCP tools: `sapiom_dev_orchestrations_*` → `sapiom_dev_agents_*`.
+
+### Patch Changes
+
+- Updated dependencies [cc1261e]
+  - @sapiom/agent@0.5.0
+  - @sapiom/agent-runtime@0.3.0
+  - @sapiom/tools@0.16.0
+
+## 0.5.0
+
+### Minor Changes
+
+- f2f4fec: Bring `inspect()` / `listExecutions()` to REST `ExecutionProjection` parity (tree + per-node cost + trace refs), replacing the flat inspection shape.
+
+  **Breaking (return shapes):**
+
+  - `inspect(opts, client)` now resolves the decoded `ExecutionProjection` **directly** (previously `{ execution }`). It carries the dispatch tree (`traceRoot`/`traceParent`/`traceId`/`spanId`, `parentExecutionId`/`rootExecutionId`, typed `children`), per-step `spanId`/`events`/`dispatch`, and a structured `StepError` (`trace` is now a `StepErrorTrace` of source-mapped frames, not a string).
+  - `listExecutions(client)` now resolves `ExecutionRef[]` **directly** (previously `{ executions }`).
+  - The flat `ExecutionDetail` / `StepRecord` types are removed; import the new projection types (`ExecutionProjection`, `StepProjection`, `CostNode`, `ExecutionRef`, `DispatchRef`, `StepError`, `StepEvent`) instead.
+
+  **Cost is honest, never fabricated:** `cost` is `CostNode | null` at run and step granularity. The execution-detail read is cost-agnostic today (authoritative cost lives at `/executions/:id/spend`), so an absent cost decodes to `null`, not a misleading `$0`. `authorizedUsd`/`capturedUsd`/`settleState` are never collapsed when cost is present.
+
+  The engine must emit the corresponding fields (per-node cost, list lineage, named child edges) for the projection to be fully populated; until then `inspect()`/`listExecutions()` degrade honestly rather than throwing. SDK pins move in lockstep with the engine.
+
+## 0.4.5
+
+### Patch Changes
+
+- Updated dependencies [8fd3f71]
+  - @sapiom/tools@0.15.0
+  - @sapiom/orchestration@0.4.9
+
+## 0.4.4
+
+### Patch Changes
+
+- Updated dependencies [aaf633c]
+  - @sapiom/tools@0.14.0
+  - @sapiom/orchestration@0.4.8
+
+## 0.4.3
+
+### Patch Changes
+
+- Updated dependencies [cc2bde2]
+  - @sapiom/tools@0.13.0
+  - @sapiom/orchestration@0.4.7
+
+## 0.4.2
+
+### Patch Changes
+
+- Updated dependencies [019ef30]
+  - @sapiom/tools@0.12.0
+  - @sapiom/orchestration@0.4.6
+
+## 0.4.1
+
+### Patch Changes
+
+- Updated dependencies [84e44e2]
+  - @sapiom/tools@0.11.0
+  - @sapiom/orchestration@0.4.5
+
+## 0.4.0
+
+### Minor Changes
+
+- ae1df3c: Scaffold honors `npm_config_registry` / `@scope:registry` when resolving the
+  `@sapiom/*` versions to pin
+
+  Version resolution previously hardcoded the public npm registry, so a scaffold
+  always pinned public-npm `latest` even when the environment pointed at a
+  different registry. It now resolves `latest` from the same registry a plain
+  `npm install` would (a scoped `@<scope>:registry` wins over the global
+  `npm_config_registry`, which wins over the public default). When that registry
+  is non-default, the scaffolded project also gets a matching `.npmrc` so its
+  pinned versions are installable. This makes a local registry dev loop work
+  end-to-end with no manual pin edits; default scaffolds are unchanged.
+
+### Patch Changes
+
+- a85e665: Add schedules: run a deployed orchestration on a recurring cron schedule or once at a set time.
+
+  - `@sapiom/orchestration-core`: `createSchedule`, `listSchedules`, `getSchedule`, `cancelSchedule`, and `previewCron`.
+  - `@sapiom/tools`: a `schedules` namespace (`create`, `list`, `get`, `cancel`).
+  - `@sapiom/cli`: `sapiom orchestrations schedule create | list | inspect | cancel | preview`.
+  - `@sapiom/mcp`: schedule tools — create, inspect (list/detail + recent fires), cancel, and cron preview.
+
+- Updated dependencies [a85e665]
+  - @sapiom/tools@0.10.1
+
+## 0.3.8
+
+### Patch Changes
+
+- Updated dependencies [6ebf569]
+  - @sapiom/tools@0.10.0
+  - @sapiom/orchestration@0.4.4
+
+## 0.3.7
+
+### Patch Changes
+
+- 30bac1c: Improve the initial git + deploy experience for workflow authoring. Adds `bundleForDeploy` — a local, no-network bundler that inlines local/shared source and externalizes npm dependencies — and smooths first-time git init / deploy so a fresh workflow project deploys cleanly.
+
+  ```ts
+  import { bundleForDeploy } from "@sapiom/orchestration-core";
+
+  const bundle = await bundleForDeploy(/* … */);
+  ```
+
+- Updated dependencies [30bac1c]
+- Updated dependencies [30bac1c]
+- Updated dependencies [0361fa7]
+  - @sapiom/tools@0.9.0
+  - @sapiom/orchestration@0.4.3
+
+## 0.3.6
+
+### Patch Changes
+
+- Updated dependencies [2b94dff]
+- Updated dependencies [ac71754]
+- Updated dependencies [f078ed5]
+  - @sapiom/tools@0.8.0
+  - @sapiom/orchestration@0.4.2
+
+## 0.3.5
+
+### Patch Changes
+
+- Updated dependencies [a3cc368]
+  - @sapiom/tools@0.7.0
+  - @sapiom/orchestration@0.4.1
+
+## 0.3.4
+
+### Patch Changes
+
+- Updated dependencies [56fd77d]
+  - @sapiom/orchestration@0.4.0
+  - @sapiom/orchestration-runtime@0.2.2
+
+## 0.3.3
+
+### Patch Changes
+
+- Updated dependencies [f41ab95]
+  - @sapiom/orchestration@0.3.0
+  - @sapiom/orchestration-runtime@0.2.1
+
+## 0.3.2
+
+### Patch Changes
+
+- b2c5612: Move the orchestration authoring SDK onto zod 4 via the bare `zod` import (no
+  more `zod/v4` subpath), so installing is just:
+
+  ```sh
+  npm install @sapiom/orchestration
+  ```
+
+  `zod` is now a regular dependency rather than a peer. Author your step schemas
+  with your own `import { z } from "zod"` as usual; a compatibility re-export
+  (`import { z } from "@sapiom/orchestration"`) is available for projects pinned
+  to an incompatible zod. Scaffolded projects now pin zod 4.
+
+- Updated dependencies [b2c5612]
+- Updated dependencies [b2c5612]
+  - @sapiom/orchestration@0.2.0
+  - @sapiom/orchestration-runtime@0.2.0
+  - @sapiom/tools@0.6.0
+
+## 0.3.1
+
+### Patch Changes
+
+- Updated dependencies [5c974b1]
+  - @sapiom/tools@0.5.0
+  - @sapiom/orchestration@0.1.9
+
+## 0.3.0
+
+### Minor Changes
+
+- e17b2d1: `scaffold` now initializes a git repository with an initial commit, so a freshly scaffolded project is immediately deployable (deploy requires a repo with at least one commit). Best-effort: if `git` is unavailable the project is left uninitialized. `ScaffoldResult` gains `gitInitialized`.
+
+  Adds `waitForExecution` (and `isExecutionTerminal`) to poll an execution until it reaches a terminal state, settles on a pause that needs a signal, or a wait budget elapses — so callers don't hand-roll a poll loop. The `sapiom_dev_orchestrations_inspect` MCP tool gains opt-in `wait` / `maxWaitSeconds` options that use it and return `done` / `waiting` / `hint`; a non-blocking inspect of a still-running execution now also hints to use `wait`.
+
+  Fixes `sapiom_dev_orchestrations_link`: omitting `name` no longer sends an empty name (which the gateway rejected). It now defaults to the orchestration's name read from `index.ts` (matching `defineOrchestration({ name })`), and returns a clear error if no name is available.
+
+### Patch Changes
+
+- e17b2d1: **BREAKING (`@sapiom/tools`):** align the coding-run resume payload with the shape a resumed step actually receives. `CodingResultPayload` now carries `executionEnvironment: { type, id } | null` instead of `sandbox: { name, workspaceRoot }`. Re-attach a resumed run's sandbox with `ctx.sapiom.sandboxes.attach(result.executionEnvironment.id)` (for a `blaxel_sandbox`).
+
+  Adds `codingResultSchema` (runtime validation of the resume payload), `toResumePayload`, `ExecutionEnvironmentRef`, and `EXECUTION_ENVIRONMENT_BLAXEL_SANDBOX`. The stub client now emits the same payload shape a resumed step receives, so a step written against the local loop runs identically once deployed.
+
+  The `coding-pause` template and its guidance are updated to the new shape.
+
+- Updated dependencies [e17b2d1]
+  - @sapiom/tools@0.4.0
+  - @sapiom/orchestration@0.1.8
+
+## 0.2.0
+
+### Minor Changes
+
+- 704c9ac: Make the local development loop (`run_local`) production-faithful and trustworthy for the dispatch/pause pattern (`agent.coding.launch` + `pauseUntilSignal`).
+
+  - Stub capability handles now survive JSON serialization, so a paused/resumed coding workflow runs end-to-end locally instead of failing with an opaque `'sandbox.toJSON' is not a method or field` error.
+  - The payload a paused step resumes with is delivered as plain JSON — the same shape production sends over the wire — so authors re-attach handles by name (`sandboxes.attach(...)`) locally exactly as they would in prod.
+  - `@sapiom/tools` exports `CodingResultPayload`: the shape a step resumed from `pauseUntilSignal(codingHandle, …)` receives, so resumed steps can be annotated instead of hand-rolling the type.
+  - Stubbing a handle-returning capability with plain JSON no longer strips the handle's instance methods (e.g. `repo.pushFromSandbox`), and `repositories.list` stubs are coerced and shape-checked.
+  - A dispatched `launch()` accepts the `agent.coding.launch` stub key as well as the shared `agent.coding.run` (ordered candidate resolution), so the stub key matching the call the author wrote takes effect.
+  - `run_local` now reports `unusedStubs` (a supplied key that matched no call) and `stubWarnings` (a key that matched but carried the wrong shape), surfacing stubs that silently didn't take effect; the MCP `run_local` also serializes its result defensively.
+  - New `coding-pause` scaffold template for the launch + pause + resume pattern, and AGENTS docs documenting the resume-input contract, list stub item shape, failure-branch stubbing, and step determinism under replay.
+
+### Patch Changes
+
+- Updated dependencies [704c9ac]
+  - @sapiom/tools@0.3.0
+  - @sapiom/orchestration@0.1.7
+
+## 0.1.1
+
+### Patch Changes
+
+- Updated dependencies [7f6859e]
+  - @sapiom/tools@0.2.0
+  - @sapiom/orchestration@0.1.6

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Sapiom
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/cjs/__tests__/execution-detail.wire.fixture.json

@@ -0,0 +1,101 @@
+{
+    "id": "exec_0001",
+    "name": "daily-digest",
+    "organizationId": "org_0001",
+    "tenantId": "tenant_0001",
+    "status": "failed",
+    "currentStep": "render",
+    "currentStepAttempt": 2,
+    "version": 3,
+    "definitionId": "def_0001",
+    "buildRunId": "build_0001",
+    "idempotencyKey": null,
+    "pausedSignalName": null,
+    "pausedSignalCorrelationId": null,
+    "pausedUntil": null,
+    "startedAt": "2026-01-01T00:00:00.000Z",
+    "finishedAt": "2026-01-01T00:02:30.000Z",
+    "input": { "topic": "weekly-summary" },
+    "sharedState": { "count": 2 },
+    "output": null,
+    "error": null,
+    "pausedStepInputSchema": null,
+    "pausedStepInputExample": null,
+    "repoFullName": "example-org/example-workflows",
+    "pinnedCommitSha": "0000000000000000000000000000000000000000",
+    "traceId": "trace_0001",
+    "traceRoot": "exec_0001",
+    "rootExecutionId": "exec_0001",
+    "traceParent": null,
+    "parentExecutionId": null,
+    "children": [
+        {
+            "executionId": "exec_0002",
+            "targetType": "agent",
+            "correlationId": "exec_0002",
+            "status": "resolved"
+        }
+    ],
+    "steps": [
+        {
+            "id": "step_0001",
+            "stepName": "gather",
+            "stepOrder": 0,
+            "attempt": 1,
+            "status": "completed",
+            "input": { "topic": "weekly-summary" },
+            "output": { "items": 12 },
+            "error": null,
+            "nextDirective": { "kind": "continue" },
+            "sharedStateAfter": { "count": 1 },
+            "logs": [{ "ts": "2026-01-01T00:00:05.000Z", "level": "info", "msg": "fetched 12 items" }],
+            "events": [
+                {
+                    "sourceId": "run_0001",
+                    "sequence": 1,
+                    "kind": "tool_use",
+                    "payload": { "tool": "web.search" },
+                    "eventTs": "2026-01-01T00:00:10.000Z"
+                }
+            ],
+            "spanId": "span_0001",
+            "dispatch": null,
+            "startedAt": "2026-01-01T00:00:00.000Z",
+            "finishedAt": "2026-01-01T00:00:45.000Z"
+        },
+        {
+            "id": "step_0002",
+            "stepName": "render",
+            "stepOrder": 1,
+            "attempt": 2,
+            "status": "failed",
+            "input": { "items": 12 },
+            "output": null,
+            "error": {
+                "message": "template not found",
+                "trace": {
+                    "frames": [
+                        { "function": "render", "file": "src/steps/render.ts", "line": 12, "column": 11 },
+                        { "function": "run", "file": "src/engine/runner.ts", "line": 88, "column": 5 }
+                    ],
+                    "sourceMapped": true,
+                    "raw": "Error: template not found\n    at render (dist/steps/render.mjs:8:9)"
+                },
+                "traceUnavailableReason": null
+            },
+            "nextDirective": null,
+            "sharedStateAfter": { "count": 2 },
+            "logs": null,
+            "events": [],
+            "spanId": "span_0002",
+            "dispatch": {
+                "targetId": "exec_0002",
+                "targetType": "agent",
+                "correlationId": "exec_0002",
+                "status": "resolved"
+            },
+            "startedAt": "2026-01-01T00:00:45.000Z",
+            "finishedAt": "2026-01-01T00:02:30.000Z"
+        }
+    ]
+}

package/dist/cjs/__tests__/execution-projection.preseam.fixture.json

@@ -0,0 +1,37 @@
+{
+    "id": "exec_legacy_0001",
+    "name": "old-run",
+    "organizationId": "org_0001",
+    "tenantId": "tenant_0001",
+    "status": "completed",
+    "currentStep": null,
+    "currentStepAttempt": 1,
+    "version": 1,
+    "definitionId": null,
+    "buildRunId": null,
+    "idempotencyKey": null,
+    "pausedSignalName": null,
+    "pausedSignalCorrelationId": null,
+    "pausedUntil": null,
+    "startedAt": "2025-06-01T00:00:00.000Z",
+    "finishedAt": "2025-06-01T00:00:20.000Z",
+    "input": {},
+    "sharedState": {},
+    "output": { "ok": true },
+    "error": null,
+    "steps": [
+        {
+            "stepName": "run",
+            "stepOrder": 0,
+            "attempt": 1,
+            "status": "completed",
+            "input": {},
+            "output": { "ok": true },
+            "error": null,
+            "nextDirective": { "kind": "complete" },
+            "sharedStateAfter": {},
+            "startedAt": "2025-06-01T00:00:00.000Z",
+            "finishedAt": "2025-06-01T00:00:20.000Z"
+        }
+    ]
+}

package/dist/cjs/__tests__/execution-projection.with-cost.fixture.json

@@ -0,0 +1,60 @@
+{
+    "id": "exec_0001",
+    "name": "daily-digest",
+    "organizationId": "org_0001",
+    "tenantId": "tenant_0001",
+    "status": "completed",
+    "currentStep": null,
+    "currentStepAttempt": 1,
+    "version": 3,
+    "definitionId": "def_0001",
+    "buildRunId": "build_0001",
+    "idempotencyKey": null,
+    "pausedSignalName": null,
+    "pausedSignalCorrelationId": null,
+    "pausedUntil": null,
+    "startedAt": "2026-01-01T00:00:00.000Z",
+    "finishedAt": "2026-01-01T00:02:30.000Z",
+    "input": { "topic": "weekly-summary" },
+    "sharedState": { "count": 2 },
+    "output": { "url": "https://example.com/report/exec_0001" },
+    "error": null,
+    "pausedStepInputSchema": null,
+    "pausedStepInputExample": null,
+    "traceId": "trace_0001",
+    "traceRoot": "exec_0001",
+    "rootExecutionId": "exec_0001",
+    "traceParent": null,
+    "parentExecutionId": null,
+    "children": [],
+    "cost": {
+        "authorizedUsd": "1.50",
+        "capturedUsd": "1.20",
+        "settleState": "settling"
+    },
+    "steps": [
+        {
+            "id": "step_0001",
+            "stepName": "gather",
+            "stepOrder": 0,
+            "attempt": 1,
+            "status": "completed",
+            "input": { "topic": "weekly-summary" },
+            "output": { "items": 12 },
+            "error": null,
+            "nextDirective": { "kind": "continue" },
+            "sharedStateAfter": { "count": 1 },
+            "logs": null,
+            "events": [],
+            "spanId": "span_0001",
+            "dispatch": null,
+            "cost": {
+                "authorizedUsd": "0.50",
+                "capturedUsd": "0.50",
+                "settleState": "final"
+            },
+            "startedAt": "2026-01-01T00:00:00.000Z",
+            "finishedAt": "2026-01-01T00:00:45.000Z"
+        }
+    ]
+}

package/dist/cjs/bundle.d.ts

@@ -0,0 +1,5 @@
+export interface DeployBundle {
+    code: string;
+    dependencies: Record<string, string>;
+}
+export declare function bundleForDeploy(sourceDir: string): Promise<DeployBundle>;

package/dist/cjs/bundle.js

@@ -0,0 +1,134 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bundleForDeploy = bundleForDeploy;
+const node_fs_1 = require("node:fs");
+const node_module_1 = require("node:module");
+const node_os_1 = require("node:os");
+const node_path_1 = __importDefault(require("node:path"));
+const esbuild = __importStar(require("esbuild"));
+const errors_js_1 = require("./errors.js");
+async function bundleForDeploy(sourceDir) {
+    const entryFile = node_path_1.default.join(sourceDir, 'index.ts');
+    if (!(0, node_fs_1.existsSync)(entryFile)) {
+        throw new errors_js_1.AgentOperationError({
+            code: 'NO_ENTRY',
+            message: `No index.ts found in ${sourceDir}.`,
+            hint: 'Run this from an agent project, or pass its directory.',
+        });
+    }
+    const tmp = (0, node_fs_1.mkdtempSync)(node_path_1.default.join((0, node_os_1.tmpdir)(), 'sapiom-deploy-bundle-'));
+    const outfile = node_path_1.default.join(tmp, 'index.js');
+    try {
+        let result;
+        try {
+            result = await esbuild.build({
+                entryPoints: [entryFile],
+                outfile,
+                bundle: true,
+                platform: 'node',
+                target: 'node20',
+                format: 'esm',
+                packages: 'external',
+                metafile: true,
+                logLevel: 'silent',
+            });
+        }
+        catch (err) {
+            throw new errors_js_1.AgentOperationError({
+                code: 'BUNDLE_FAILED',
+                message: 'Failed to bundle the agent for deploy.',
+                hint: err instanceof Error ? err.message : String(err),
+            });
+        }
+        const code = (0, node_fs_1.readFileSync)(outfile, 'utf8');
+        const externals = collectExternalPackages(result.metafile, outfile);
+        const dependencies = resolveInstalledVersions(sourceDir, externals);
+        return { code, dependencies };
+    }
+    finally {
+        (0, node_fs_1.rmSync)(tmp, { recursive: true, force: true });
+    }
+}
+function collectExternalPackages(metafile, outfile) {
+    const key = Object.keys(metafile.outputs).find((k) => node_path_1.default.resolve(k) === node_path_1.default.resolve(outfile));
+    const imports = key ? metafile.outputs[key].imports : [];
+    const names = new Set();
+    for (const imp of imports) {
+        if (!imp.external)
+            continue;
+        const name = packageNameOf(imp.path);
+        if (name && !(0, node_module_1.isBuiltin)(name))
+            names.add(name);
+    }
+    return [...names].sort();
+}
+function packageNameOf(importPath) {
+    if (importPath.startsWith('node:'))
+        return null;
+    const parts = importPath.split('/');
+    if (importPath.startsWith('@'))
+        return parts.length >= 2 ? `${parts[0]}/${parts[1]}` : null;
+    return parts[0] || null;
+}
+function resolveInstalledVersions(sourceDir, packages) {
+    const deps = {};
+    for (const pkg of packages) {
+        deps[pkg] = readInstalledVersion(sourceDir, pkg) ?? 'latest';
+    }
+    return deps;
+}
+function readInstalledVersion(fromDir, pkg) {
+    let dir = node_path_1.default.resolve(fromDir);
+    while (true) {
+        const pkgJson = node_path_1.default.join(dir, 'node_modules', ...pkg.split('/'), 'package.json');
+        if ((0, node_fs_1.existsSync)(pkgJson)) {
+            try {
+                const version = JSON.parse((0, node_fs_1.readFileSync)(pkgJson, 'utf8')).version;
+                if (version)
+                    return version;
+            }
+            catch {
+            }
+        }
+        const parent = node_path_1.default.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}

package/dist/cjs/check.d.ts

@@ -0,0 +1,10 @@
+export interface CheckOptions {
+    sourceDir: string;
+}
+export interface CheckResult {
+    name: string;
+    stepCount: number;
+    warnings: string[];
+    manifest: unknown;
+}
+export declare function check(opts: CheckOptions): Promise<CheckResult>;