@seat-mesh/core 0.1.25 → 0.1.27

package/dist/runtime/dotdir.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotdir.test.js","sourceRoot":"","sources":["../../src/runtime/dotdir.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE7D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,GAAG;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/runtime/global-registry.d.ts

@@ -0,0 +1,28 @@
+import type { LoadedProfile } from "../profile/profile.js";
+export declare const GLOBAL_REGISTRY_VERSION = 1;
+export interface GlobalSessionEntry {
+    /** Stable id — workspace scope hash. */
+    id: string;
+    label: string;
+    profilePath: string;
+    workspace: string;
+    workspaceId: string;
+    sessionName: string;
+    daemonPort: number;
+    lastSeen: string;
+}
+export interface GlobalRegistry {
+    version: number;
+    sessions: GlobalSessionEntry[];
+}
+export declare function globalConfigDir(): string;
+export declare function globalRegistryPath(): string;
+export declare function readGlobalRegistry(): GlobalRegistry;
+/** Project `.sm/` profiles only — not bundled minimal fallback. */
+export declare function isProjectProfilePath(profilePath: string): boolean;
+export declare function sessionLabel(loaded: LoadedProfile): string;
+export declare function entryFromLoaded(loaded: LoadedProfile): GlobalSessionEntry;
+export declare function upsertGlobalSession(loaded: LoadedProfile): Promise<GlobalSessionEntry | null>;
+export declare function forgetGlobalSession(idOrPath: string): Promise<boolean>;
+export declare function findGlobalSession(reg: GlobalRegistry, idOrPath: string): GlobalSessionEntry | undefined;
+//# sourceMappingURL=global-registry.d.ts.map

package/dist/runtime/global-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-registry.d.ts","sourceRoot":"","sources":["../../src/runtime/global-registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAMD,wBAAgB,kBAAkB,IAAI,cAAc,CAUnD;AA6BD,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAE1D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,kBAAkB,CAYzE;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAgBpC;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAkB5E;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,GACf,kBAAkB,GAAG,SAAS,CAWhC"}

package/dist/runtime/global-registry.js

@@ -0,0 +1,124 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import lockfile from "proper-lockfile";
+import { profilePaths } from "../profile/profile.js";
+import { SM_DIR } from "./dotdir.js";
+export const GLOBAL_REGISTRY_VERSION = 1;
+export function globalConfigDir() {
+    const xdg = process.env.XDG_CONFIG_HOME;
+    const base = xdg && xdg.length > 0 ? xdg : path.join(os.homedir(), ".config");
+    return path.join(base, "seatmesh");
+}
+export function globalRegistryPath() {
+    return path.join(globalConfigDir(), "sessions.json");
+}
+function emptyRegistry() {
+    return { version: GLOBAL_REGISTRY_VERSION, sessions: [] };
+}
+export function readGlobalRegistry() {
+    const file = globalRegistryPath();
+    if (!fs.existsSync(file))
+        return emptyRegistry();
+    try {
+        const raw = JSON.parse(fs.readFileSync(file, "utf8"));
+        if (!raw || !Array.isArray(raw.sessions))
+            return emptyRegistry();
+        return { version: GLOBAL_REGISTRY_VERSION, sessions: raw.sessions };
+    }
+    catch {
+        return emptyRegistry();
+    }
+}
+async function withRegistryLock(fn) {
+    const file = globalRegistryPath();
+    fs.mkdirSync(globalConfigDir(), { recursive: true });
+    if (!fs.existsSync(file)) {
+        fs.writeFileSync(file, `${JSON.stringify(emptyRegistry(), null, 2)}\n`);
+    }
+    let release;
+    try {
+        release = await lockfile.lock(file, { retries: { retries: 5, minTimeout: 20 } });
+        return await fn();
+    }
+    finally {
+        if (release)
+            await release();
+    }
+}
+function writeGlobalRegistrySync(reg) {
+    const file = globalRegistryPath();
+    fs.mkdirSync(globalConfigDir(), { recursive: true });
+    const sorted = {
+        ...reg,
+        sessions: [...reg.sessions].sort((a, b) => new Date(b.lastSeen).getTime() - new Date(a.lastSeen).getTime()),
+    };
+    fs.writeFileSync(file, `${JSON.stringify(sorted, null, 2)}\n`);
+}
+/** Project `.sm/` profiles only — not bundled minimal fallback. */
+export function isProjectProfilePath(profilePath) {
+    const norm = profilePath.split(path.sep).join("/");
+    return norm.includes(`/${SM_DIR}/`) || norm.endsWith(`/${SM_DIR}/mesh.config.yaml`);
+}
+export function sessionLabel(loaded) {
+    return loaded.profile.name || path.basename(loaded.workspace);
+}
+export function entryFromLoaded(loaded) {
+    const paths = profilePaths(loaded);
+    return {
+        id: loaded.workspaceId,
+        label: sessionLabel(loaded),
+        profilePath: loaded.profilePath,
+        workspace: loaded.workspace,
+        workspaceId: loaded.workspaceId,
+        sessionName: loaded.sessionName,
+        daemonPort: paths.daemonPort,
+        lastSeen: new Date().toISOString(),
+    };
+}
+export async function upsertGlobalSession(loaded) {
+    if (!isProjectProfilePath(loaded.profilePath))
+        return null;
+    const entry = entryFromLoaded(loaded);
+    await withRegistryLock(() => {
+        const reg = readGlobalRegistry();
+        const idx = reg.sessions.findIndex((s) => s.id === entry.id || s.profilePath === entry.profilePath);
+        if (idx >= 0) {
+            reg.sessions[idx] = { ...reg.sessions[idx], ...entry };
+        }
+        else {
+            reg.sessions.push(entry);
+        }
+        writeGlobalRegistrySync(reg);
+    });
+    return entry;
+}
+export async function forgetGlobalSession(idOrPath) {
+    let removed = false;
+    await withRegistryLock(() => {
+        const reg = readGlobalRegistry();
+        const key = idOrPath.trim();
+        const next = reg.sessions.filter((s) => {
+            const hit = s.id === key ||
+                s.profilePath === key ||
+                path.resolve(s.profilePath) === path.resolve(key) ||
+                s.workspace === key ||
+                path.resolve(s.workspace) === path.resolve(key);
+            if (hit)
+                removed = true;
+            return !hit;
+        });
+        writeGlobalRegistrySync({ ...reg, sessions: next });
+    });
+    return removed;
+}
+export function findGlobalSession(reg, idOrPath) {
+    const key = idOrPath.trim();
+    return reg.sessions.find((s) => s.id === key ||
+        s.profilePath === key ||
+        path.resolve(s.profilePath) === path.resolve(key) ||
+        s.sessionName === key ||
+        s.workspace === key ||
+        path.resolve(s.workspace) === path.resolve(key));
+}
+//# sourceMappingURL=global-registry.js.map

package/dist/runtime/global-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-registry.js","sourceRoot":"","sources":["../../src/runtime/global-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAmBzC,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;QACxE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,aAAa,EAAE,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAI,EAAwB;IACzD,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,OAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjF,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAmB;IAClD,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG;QACb,GAAG,GAAG;QACN,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAC1E;KACF,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,mBAAmB,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,WAAW;QACtB,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAqB;IAErB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,gBAAgB,CAAC,GAAG,EAAE;QAC1B,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAChE,CAAC;QACF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAE,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,gBAAgB,CAAC,GAAG,EAAE;QAC1B,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACrC,MAAM,GAAG,GACP,CAAC,CAAC,EAAE,KAAK,GAAG;gBACZ,CAAC,CAAC,WAAW,KAAK,GAAG;gBACrB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBACjD,CAAC,CAAC,SAAS,KAAK,GAAG;gBACnB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,GAAG;gBAAE,OAAO,GAAG,IAAI,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC;QACd,CAAC,CAAC,CAAC;QACH,uBAAuB,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,QAAgB;IAEhB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,EAAE,KAAK,GAAG;QACZ,CAAC,CAAC,WAAW,KAAK,GAAG;QACrB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,WAAW,KAAK,GAAG;QACrB,CAAC,CAAC,SAAS,KAAK,GAAG;QACnB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAClD,CAAC;AACJ,CAAC"}

package/dist/runtime/mesh-state-merge.d.ts

@@ -0,0 +1,7 @@
+import type { MeshProfile } from "../schema/profile.js";
+import type { MeshAgents, SavedMinisLayout } from "../schema/agents.js";
+/** Effective minis layout: saved mesh-agents.json wins over profile yaml defaults. */
+export declare function effectiveMinisLayout(profile: MeshProfile, saved?: SavedMinisLayout | null): SavedMinisLayout;
+/** Merge saved mesh-agents layout into a loaded profile (session.miniMax synced). */
+export declare function mergeMeshAgentsIntoProfile(profile: MeshProfile, mesh: Pick<MeshAgents, "layout"> | null): MeshProfile;
+//# sourceMappingURL=mesh-state-merge.d.ts.map

package/dist/runtime/mesh-state-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-state-merge.d.ts","sourceRoot":"","sources":["../../src/runtime/mesh-state-merge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAExE,sFAAsF;AACtF,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,WAAW,EACpB,KAAK,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAC9B,gBAAgB,CAiBlB;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,IAAI,GACtC,WAAW,CA8Bb"}

package/dist/runtime/mesh-state-merge.js

@@ -0,0 +1,48 @@
+/** Effective minis layout: saved mesh-agents.json wins over profile yaml defaults. */
+export function effectiveMinisLayout(profile, saved) {
+    const base = profile.layout?.minis;
+    if (!base) {
+        throw new Error("profile missing layout.minis");
+    }
+    if (!saved) {
+        return {
+            grid: base.grid,
+            max: base.max,
+            leads: Array.isArray(base.leads) ? base.leads : [1, 2],
+        };
+    }
+    return {
+        grid: saved.grid,
+        max: saved.max,
+        leads: saved.leads,
+    };
+}
+/** Merge saved mesh-agents layout into a loaded profile (session.miniMax synced). */
+export function mergeMeshAgentsIntoProfile(profile, mesh) {
+    const saved = mesh?.layout;
+    if (!saved || !profile.layout)
+        return profile;
+    const minisSaved = saved.minis;
+    const minis = minisSaved
+        ? { ...profile.layout.minis, ...minisSaved }
+        : profile.layout.minis;
+    const workers = saved.workers
+        ? { ...profile.layout.workers, ...saved.workers }
+        : profile.layout.workers;
+    const nvim = saved.nvim ? { ...profile.layout.nvim, ...saved.nvim } : profile.layout.nvim;
+    const base = saved.base
+        ? { ...profile.layout.base, ...saved.base }
+        : profile.layout.base;
+    return {
+        ...profile,
+        layout: {
+            ...profile.layout,
+            base,
+            nvim,
+            workers,
+            minis,
+        },
+        session: { ...profile.session, miniMax: minis.max },
+    };
+}
+//# sourceMappingURL=mesh-state-merge.js.map

package/dist/runtime/mesh-state-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-state-merge.js","sourceRoot":"","sources":["../../src/runtime/mesh-state-merge.ts"],"names":[],"mappings":"AAGA,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAClC,OAAoB,EACpB,KAA+B;IAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,0BAA0B,CACxC,OAAoB,EACpB,IAAuC;IAEvC,MAAM,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAE9C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;IAC/B,MAAM,KAAK,GAAG,UAAU;QACtB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,UAAU,EAAE;QAC5C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAEzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;QAC3B,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE;QACjD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;IAE3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IAE1F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;QACrB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QAC3C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IAExB,OAAO;QACL,GAAG,OAAO;QACV,MAAM,EAAE;YACN,GAAG,OAAO,CAAC,MAAM;YACjB,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,KAAK;SACN;QACD,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;KACpD,CAAC;AACJ,CAAC"}

package/dist/runtime/mesh-state-merge.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mesh-state-merge.test.d.ts.map

package/dist/runtime/mesh-state-merge.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-state-merge.test.d.ts","sourceRoot":"","sources":["../../src/runtime/mesh-state-merge.test.ts"],"names":[],"mappings":""}

package/dist/runtime/mesh-state-merge.test.js

@@ -0,0 +1,36 @@
+import { describe, expect, it } from "vitest";
+import { mergeMeshAgentsIntoProfile } from "./mesh-state-merge.js";
+const baseProfile = {
+    name: "test",
+    workspace: ".",
+    session: { name: "mesh", workerCount: 6, miniMax: 8 },
+    layout: {
+        nvim: { window: "nvim" },
+        base: { window: "base", columns: ["manager", "secretary"] },
+        workers: { window: "workers", grid: "3x2", slots: 6 },
+        minis: { window: "minis", grid: "4x2", max: 8, leads: [1, 2] },
+    },
+};
+describe("mergeMeshAgentsIntoProfile", () => {
+    it("overrides yaml minis layout when mesh-agents.json has layout.minis", () => {
+        const merged = mergeMeshAgentsIntoProfile(baseProfile, {
+            layout: { minis: { grid: "2x2", max: 4, leads: [1] } },
+        });
+        expect(merged.layout?.minis.grid).toBe("2x2");
+        expect(merged.layout?.minis.max).toBe(4);
+        expect(merged.layout?.minis.leads).toEqual([1]);
+        expect(merged.session.miniMax).toBe(4);
+    });
+    it("returns profile unchanged when no saved layout", () => {
+        const merged = mergeMeshAgentsIntoProfile(baseProfile, null);
+        expect(merged.layout?.minis.grid).toBe("4x2");
+        expect(merged.session.miniMax).toBe(8);
+    });
+    it("merges layout.base.coordSync from saved layout", () => {
+        const merged = mergeMeshAgentsIntoProfile(baseProfile, {
+            layout: { base: { coordSync: { reload: true, attach: false } } },
+        });
+        expect(merged.layout?.base.coordSync).toEqual({ reload: true, attach: false });
+    });
+});
+//# sourceMappingURL=mesh-state-merge.test.js.map

package/dist/runtime/mesh-state-merge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-state-merge.test.js","sourceRoot":"","sources":["../../src/runtime/mesh-state-merge.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGnE,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,GAAG;IACd,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;IACrD,MAAM,EAAE;QACN,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;QACxB,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;QAC3D,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9D,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;KAC/D;CACwB,CAAC;AAE5B,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,EAAE;YACrD,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,EAAE;YACrD,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/runtime/role-index.d.ts

@@ -0,0 +1,53 @@
+export interface RoleIndexEntry {
+    path: string;
+    note?: string;
+}
+export interface RolePolicy {
+    id: string;
+    text?: string;
+    path?: string;
+    rule?: string;
+    cmd?: string;
+}
+export interface RoleAllowDeny {
+    allow?: string[];
+    deny?: string[];
+}
+export interface RoleIndex {
+    kind: string;
+    /** Parent role file name (no .yaml) — merged before this file. */
+    extends?: string;
+    /** Printed first on whoami (patterns.md / ONE-PATH). */
+    banner?: string[];
+    read_first?: RoleIndexEntry[];
+    policies?: RolePolicy[];
+    files?: string[];
+    inject?: string[];
+    vars?: Record<string, string>;
+    /** Comms + builtin command guards (AGENT-FUNC-GUARDS.md / ROLE-YAML.md). */
+    guards?: RoleAllowDeny;
+    /** Attached-external (seatmesh func) allow/deny per role. */
+    funcs?: RoleAllowDeny;
+}
+/**
+ * True when `id` is usable for this merged role: explicit deny always wins;
+ * otherwise an explicit allow list restricts to just that list; with neither,
+ * default to allowed (profile-level `external.default` is the real gate for funcs).
+ */
+export declare function roleAllows(rule: RoleAllowDeny | undefined, id: string): boolean;
+/**
+ * Pane column id -> merged role index.
+ * 1. Seat kind file (`manager.yaml`) with optional `extends:` chain (+ implicit common).
+ * 2. Optional column overlay `.sm/roles/columns/<columnId>.yaml` with `extends: manager` (etc.).
+ * Never load `roles/<columnId>.yaml` as a kind — use `columns/<columnId>.yaml`.
+ */
+export declare function loadRoleIndex(rolesDir: string, paneRoleId: string): RoleIndex;
+export declare function renderRoleIndex(index: RoleIndex, vars?: Record<string, string>, opts?: {
+    skipBanner?: boolean;
+    skipFiles?: boolean;
+}): string;
+export declare function validateRoleIndex(index: RoleIndex, workspace: string): {
+    ok: boolean;
+    missing: string[];
+};
+//# sourceMappingURL=role-index.d.ts.map

package/dist/runtime/role-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-index.d.ts","sourceRoot":"","sources":["../../src/runtime/role-index.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAuCD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAK/E;AA8DD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,CAa7E;AAMD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAChB,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACjC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACvD,MAAM,CA0CR;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,SAAS,EAChB,SAAS,EAAE,MAAM,GAChB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAcpC"}

package/dist/runtime/role-index.js

@@ -0,0 +1,179 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+import { seatKindFromId } from "../schema/seat-kind.js";
+/** Deny accumulates from base; child role's own allow list wins over base's allow. */
+function mergeAllowDeny(base, role) {
+    if (!base && !role)
+        return undefined;
+    const deny = [...new Set([...(base?.deny ?? []), ...(role?.deny ?? [])])];
+    const allow = role?.allow ?? base?.allow;
+    return { ...(allow ? { allow } : {}), ...(deny.length ? { deny } : {}) };
+}
+function mergeRoleIndex(base, role) {
+    const readFirst = [...(base.read_first ?? []), ...(role.read_first ?? [])];
+    const seen = new Set();
+    const dedupedReadFirst = readFirst.filter((item) => {
+        if (seen.has(item.path))
+            return false;
+        seen.add(item.path);
+        return true;
+    });
+    const policyById = new Map();
+    for (const p of [...(base.policies ?? []), ...(role.policies ?? [])]) {
+        policyById.set(p.id, p);
+    }
+    const policies = [...policyById.values()];
+    return {
+        ...role,
+        kind: role.kind ?? base.kind ?? "worker",
+        banner: [...(base.banner ?? []), ...(role.banner ?? [])],
+        read_first: dedupedReadFirst,
+        policies,
+        files: [...new Set([...(base.files ?? []), ...(role.files ?? [])])],
+        inject: [...(base.inject ?? []), ...(role.inject ?? [])],
+        vars: { ...(base.vars ?? {}), ...(role.vars ?? {}) },
+        guards: mergeAllowDeny(base.guards, role.guards),
+        funcs: mergeAllowDeny(base.funcs, role.funcs),
+    };
+}
+/**
+ * True when `id` is usable for this merged role: explicit deny always wins;
+ * otherwise an explicit allow list restricts to just that list; with neither,
+ * default to allowed (profile-level `external.default` is the real gate for funcs).
+ */
+export function roleAllows(rule, id) {
+    if (!rule)
+        return true;
+    if (rule.deny?.includes(id))
+        return false;
+    if (rule.allow?.length)
+        return rule.allow.includes(id);
+    return true;
+}
+/** Deprecated alias: prefer "manager" not "master" for the coordinator pane. */
+function normalizeRoleKind(kind) {
+    return kind === "master" ? "manager" : kind;
+}
+function roleYamlPath(rolesDir, name) {
+    return path.join(rolesDir, `${name}.yaml`);
+}
+function columnOverlayPath(rolesDir, columnId) {
+    return path.join(rolesDir, "columns", `${columnId}.yaml`);
+}
+/** Load one yaml file and merge its `extends` chain (child wins on conflicts). */
+function loadRoleFileChain(rolesDir, name, filePath, visiting) {
+    const key = `${filePath}`;
+    if (visiting.has(key)) {
+        throw new Error(`role extends cycle at ${filePath}`);
+    }
+    visiting.add(key);
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`role index missing: ${filePath}`);
+    }
+    const raw = YAML.parse(fs.readFileSync(filePath, "utf8"));
+    const extendsName = raw.extends?.trim();
+    let merged = { kind: raw.kind ?? name };
+    if (extendsName) {
+        const parentNorm = normalizeRoleKind(extendsName);
+        const parentPath = roleYamlPath(rolesDir, parentNorm);
+        const parent = loadRoleFileChain(rolesDir, parentNorm, parentPath, visiting);
+        merged = mergeRoleIndex(parent, { ...merged, ...stripExtends(raw), kind: raw.kind ?? name });
+    }
+    else if (name === "common") {
+        merged = mergeRoleIndex({}, { ...merged, ...stripExtends(raw), kind: "common" });
+    }
+    else {
+        const commonPath = roleYamlPath(rolesDir, "common");
+        if (fs.existsSync(commonPath)) {
+            const common = loadRoleFileChain(rolesDir, "common", commonPath, visiting);
+            merged = mergeRoleIndex(common, { ...merged, ...stripExtends(raw), kind: raw.kind ?? name });
+        }
+        else {
+            merged = mergeRoleIndex({}, { ...merged, ...stripExtends(raw), kind: raw.kind ?? name });
+        }
+    }
+    visiting.delete(key);
+    return merged;
+}
+function stripExtends(raw) {
+    const { extends: _e, ...rest } = raw;
+    return rest;
+}
+/**
+ * Pane column id -> merged role index.
+ * 1. Seat kind file (`manager.yaml`) with optional `extends:` chain (+ implicit common).
+ * 2. Optional column overlay `.sm/roles/columns/<columnId>.yaml` with `extends: manager` (etc.).
+ * Never load `roles/<columnId>.yaml` as a kind — use `columns/<columnId>.yaml`.
+ */
+export function loadRoleIndex(rolesDir, paneRoleId) {
+    const columnId = normalizeRoleKind(paneRoleId);
+    const seatKind = seatKindFromId(columnId);
+    const overlayPath = columnOverlayPath(rolesDir, columnId);
+    if (columnId !== seatKind && fs.existsSync(overlayPath)) {
+        const merged = loadRoleFileChain(rolesDir, columnId, overlayPath, new Set());
+        merged.kind = seatKind;
+        return merged;
+    }
+    const kindPath = roleYamlPath(rolesDir, seatKind);
+    const merged = loadRoleFileChain(rolesDir, seatKind, kindPath, new Set());
+    merged.kind = seatKind;
+    return merged;
+}
+function substituteVars(text, vars) {
+    return text.replace(/\{\{(\w+)\}\}/g, (_, key) => vars[key] ?? "");
+}
+export function renderRoleIndex(index, vars = {}, opts = {}) {
+    const lines = [];
+    if (!opts.skipBanner) {
+        for (const line of index.banner ?? []) {
+            lines.push(substituteVars(line, vars));
+        }
+    }
+    for (const item of index.read_first ?? []) {
+        const p = substituteVars(item.path, vars);
+        const note = item.note ? substituteVars(item.note, vars) : "";
+        lines.push(`file=${p}${note ? ` | ${note}` : ""}`);
+    }
+    for (const pol of index.policies ?? []) {
+        if (pol.path) {
+            lines.push(`policy_${pol.id}=${substituteVars(pol.path, vars)}${pol.rule ? ` | ${substituteVars(pol.rule, vars)}` : ""}`);
+        }
+        else if (pol.text) {
+            lines.push(`policy_${pol.id}=${substituteVars(pol.text, vars)}`);
+        }
+        else if (pol.cmd) {
+            lines.push(`policy_${pol.id}=${substituteVars(pol.cmd, vars)}`);
+        }
+    }
+    if (!opts.skipFiles) {
+        for (const f of index.files ?? []) {
+            lines.push(`file=${substituteVars(f, vars)}`);
+        }
+    }
+    for (const [k, v] of Object.entries(index.vars ?? {})) {
+        lines.push(`${k}=${substituteVars(v, vars)}`);
+    }
+    for (const line of index.inject ?? []) {
+        lines.push(`inject=${substituteVars(line, vars)}`);
+    }
+    return lines.join("\n");
+}
+export function validateRoleIndex(index, workspace) {
+    const missing = [];
+    const check = (rel) => {
+        const p = path.isAbsolute(rel) ? rel : path.resolve(workspace, rel);
+        if (!fs.existsSync(p))
+            missing.push(rel);
+    };
+    for (const item of index.read_first ?? [])
+        check(item.path);
+    for (const pol of index.policies ?? []) {
+        if (pol.path)
+            check(pol.path);
+    }
+    for (const f of index.files ?? [])
+        check(f);
+    return { ok: missing.length === 0, missing };
+}
+//# sourceMappingURL=role-index.js.map

package/dist/runtime/role-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-index.js","sourceRoot":"","sources":["../../src/runtime/role-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAuCxD,sFAAsF;AACtF,SAAS,cAAc,CAAC,IAAoB,EAAE,IAAoB;IAChE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;IACzC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,IAAwB,EAAE,IAAe;IAC/D,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACjD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACrE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ;QACxC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,UAAU,EAAE,gBAAgB;QAC5B,QAAQ;QACR,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;QACpD,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QAChD,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAA+B,EAAE,EAAU;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,IAAY;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CACxB,QAAgB,EAChB,IAAY,EACZ,QAAgB,EAChB,QAAqB;IAErB,MAAM,GAAG,GAAG,GAAG,QAAQ,EAAE,CAAC;IAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAElB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAa,CAAC;IACtE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,MAAM,GAAc,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAEnD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC3E,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAa;IACjC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,UAAkB;IAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAA4B;IAChE,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAgB,EAChB,OAA+B,EAAE,EACjC,OAAsD,EAAE;IAExD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CACR,UAAU,GAAG,CAAC,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9G,CAAC;QACJ,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,UAAU,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAgB,EAChB,SAAiB;IAEjB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5C,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC"}

package/dist/runtime/role-index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=role-index.test.d.ts.map

package/dist/runtime/role-index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-index.test.d.ts","sourceRoot":"","sources":["../../src/runtime/role-index.test.ts"],"names":[],"mappings":""}

package/dist/runtime/role-index.test.js

@@ -0,0 +1,85 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { describe, expect, it } from "vitest";
+import { loadRoleIndex, roleAllows, validateRoleIndex } from "./role-index.js";
+describe("role-index", () => {
+    it("merges common + role and validates paths", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "sm-role-"));
+        const rolesDir = path.join(root, "roles");
+        fs.mkdirSync(rolesDir, { recursive: true });
+        fs.writeFileSync(path.join(rolesDir, "common.yaml"), `banner:\n  - "test=common"\nread_first:\n  - path: docs/a.md\n    note: shared\n`);
+        fs.writeFileSync(path.join(rolesDir, "worker.yaml"), `kind: worker\nfiles:\n  - docs/b.md\npolicies:\n  - id: p1\n    path: docs/c.md\n`);
+        fs.mkdirSync(path.join(root, "docs"), { recursive: true });
+        for (const f of ["a.md", "b.md", "c.md"]) {
+            fs.writeFileSync(path.join(root, "docs", f), "# ok\n");
+        }
+        const index = loadRoleIndex(rolesDir, "worker");
+        expect(index.banner).toContain("test=common");
+        expect(index.read_first?.map((x) => x.path)).toContain("docs/a.md");
+        expect(index.files).toContain("docs/b.md");
+        const ok = validateRoleIndex(index, root);
+        expect(ok.ok).toBe(true);
+        expect(ok.missing).toEqual([]);
+    });
+    it("reports missing role-index paths", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "sm-role-"));
+        const rolesDir = path.join(root, "roles");
+        fs.mkdirSync(rolesDir, { recursive: true });
+        fs.writeFileSync(path.join(rolesDir, "manager.yaml"), `kind: manager\nread_first:\n  - path: missing/playbook.md\n`);
+        const index = loadRoleIndex(rolesDir, "manager");
+        const result = validateRoleIndex(index, root);
+        expect(result.ok).toBe(false);
+        expect(result.missing).toEqual(["missing/playbook.md"]);
+    });
+    it("merges funcs/guards — common deny accumulates, role's own allow wins", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "sm-role-"));
+        const rolesDir = path.join(root, "roles");
+        fs.mkdirSync(rolesDir, { recursive: true });
+        fs.writeFileSync(path.join(rolesDir, "common.yaml"), `guards:\n  deny: [merge, board.mutate]\nfuncs:\n  allow: [dc-sh, notify]\n`);
+        fs.writeFileSync(path.join(rolesDir, "worker.yaml"), `kind: worker\nfuncs:\n  allow: [dc-sh]\n  deny: [docker-exec]\n`);
+        const index = loadRoleIndex(rolesDir, "worker");
+        // common's deny accumulates even though worker's own funcs has no deny for it
+        expect(index.guards?.deny).toEqual(["merge", "board.mutate"]);
+        // worker's own allow list wins over common's broader one
+        expect(index.funcs?.allow).toEqual(["dc-sh"]);
+        expect(index.funcs?.deny).toEqual(["docker-exec"]);
+        expect(roleAllows(index.funcs, "dc-sh")).toBe(true);
+        expect(roleAllows(index.funcs, "notify")).toBe(false); // not in worker's own allow list
+        expect(roleAllows(index.funcs, "docker-exec")).toBe(false); // denied
+    });
+    it("roleAllows defaults to true with no rule and true with an empty rule", () => {
+        expect(roleAllows(undefined, "anything")).toBe(true);
+        expect(roleAllows({}, "anything")).toBe(true);
+    });
+    it("inherits manager via columns/manager-2.yaml extends (ignores roles/manager-2.yaml)", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "sm-role-"));
+        const rolesDir = path.join(root, "roles");
+        fs.mkdirSync(path.join(rolesDir, "columns"), { recursive: true });
+        fs.writeFileSync(path.join(rolesDir, "common.yaml"), `banner:\n  - "from=common"\n`);
+        fs.writeFileSync(path.join(rolesDir, "manager.yaml"), `kind: manager\nextends: common\nbanner:\n  - "from=manager"\n`);
+        fs.writeFileSync(path.join(rolesDir, "manager-2.yaml"), `kind: manager-2\nbanner:\n  - "from=legacy-kind-file"\n`);
+        fs.writeFileSync(path.join(rolesDir, "columns", "manager-2.yaml"), `extends: manager\nbanner:\n  - "from=column-overlay"\n`);
+        const index = loadRoleIndex(rolesDir, "manager-2");
+        expect(index.banner).toEqual(["from=common", "from=manager", "from=column-overlay"]);
+        expect(index.banner).not.toContain("from=legacy-kind-file");
+    });
+    it("extends chain merges policies by id (child wins)", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "sm-role-"));
+        const rolesDir = path.join(root, "roles");
+        fs.mkdirSync(rolesDir, { recursive: true });
+        fs.writeFileSync(path.join(rolesDir, "worker.yaml"), `kind: worker\npolicies:\n  - id: p1\n    text: base\n`);
+        fs.writeFileSync(path.join(rolesDir, "mini.yaml"), `kind: mini\nextends: worker\npolicies:\n  - id: p1\n    text: mini override\n`);
+        const index = loadRoleIndex(rolesDir, "mini-3");
+        expect(index.policies?.find((p) => p.id === "p1")?.text).toBe("mini override");
+    });
+    it("normalizes master alias to manager", () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), "sm-role-"));
+        const rolesDir = path.join(root, "roles");
+        fs.mkdirSync(rolesDir, { recursive: true });
+        fs.writeFileSync(path.join(rolesDir, "manager.yaml"), `kind: manager\n`);
+        const index = loadRoleIndex(rolesDir, "master");
+        expect(index.kind).toBe("manager");
+    });
+});
+//# sourceMappingURL=role-index.test.js.map