@sema-ai/registry-core 0.10.3

package/dist/config-fns.js

@@ -0,0 +1,272 @@
+import { DOMAIN_SCHEMAS, GOVERNANCE_MIRROR_KEYS, HOSTS_ARRAY_MAX, HOST_NAME_MAX, containsSecretToken } from "./types.js";
+/** Redact secret-shaped tokens from a validation MESSAGE — a zod error echoes the offending value (e.g.
+ *  `received 'sk-live-…'`), so a secret pasted into the WRONG field would leak via the error string. Redacts
+ *  space-spanning auth credentials (`Bearer <token>`) FIRST (the token pass can't see across the space), then
+ *  any secret-shaped run (`%` kept in the run so a percent-encoded secret stays whole for the percent-aware
+ *  containsSecretToken). invariant ①: a secret VALUE never rides an error. R13/R14 (codex). */
+export function redactSecrets(text) {
+    return text
+        .replace(/\b(bearer|basic)(\s+)\S+/gi, "$1$2[redacted-secret]")
+        .replace(/[A-Za-z0-9_./:+=%-]{6,}/g, (tok) => (containsSecretToken(tok) ? "[redacted-secret]" : tok));
+}
+/** Sanitize a ZodError IN PLACE so no surfaced error (message / `received` / nested `unionErrors`) echoes a
+ *  pasted secret. RECURSES into `unionErrors` (a `z.union` failure nests a ZodError per member — e.g. RoleTarget
+ *  `{model}|{select}`) and redacts string path segments too. The ONE sanitizer every validation entry point
+ *  uses (parseDomain / validateDomain / validateRemoteExec / write*). R14 (codex). */
+export function sanitizeZodError(err) {
+    for (const iss of err.issues) {
+        const rec = iss;
+        for (const k of Object.keys(rec)) {
+            const v = rec[k];
+            if (typeof v === "string")
+                rec[k] = redactSecrets(v);
+            else if (Array.isArray(v)) {
+                rec[k] = v.map((el) => {
+                    if (typeof el === "string")
+                        return redactSecrets(el);
+                    if (el && typeof el === "object" && Array.isArray(el.issues))
+                        return sanitizeZodError(el); // nested unionErrors
+                    return el;
+                });
+            }
+        }
+    }
+    return err;
+}
+export const ROLE_RANK = { viewer: 0, editor: 1, publisher: 2, admin: 3 };
+export const USER_ROLES = ["viewer", "editor", "publisher", "admin"];
+/** True if `role` is at least `min` in the hierarchy (e.g. publisher satisfies editor). */
+export function roleAtLeast(role, min) {
+    return ROLE_RANK[role] >= ROLE_RANK[min];
+}
+export function isRole(v) {
+    return typeof v === "string" && USER_ROLES.includes(v);
+}
+/**
+ * Minimum role to WRITE a domain. Default = `editor`; `skills` and `mcp` are raised to `publisher`
+ * because their content goes straight into the agent's system prompt / tool surface — one edit retargets
+ * the prompt of every worker × scenario that loads it (docs/MCP-SKILLS.md §3.3, decision §6 Q3 从严).
+ * Looked up by the [domain] PUT route. Any domain absent here uses {@link DEFAULT_DOMAIN_WRITE_ROLE}.
+ */
+export const DEFAULT_DOMAIN_WRITE_ROLE = "editor";
+export const DOMAIN_WRITE_ROLE = {
+    skills: "publisher",
+    mcp: "publisher",
+    // plugins are an EXECUTABLE surface (commands/hooks/MCP ride in via the materialized plugin) — the same
+    // raised gate as skills/mcp (C2, clay 拍: 可执行面同档).
+    plugins: "publisher",
+    // scenarios carry SYSTEM-PROMPT-level text + can SHADOW built-in scenario names (clay 拍 ①②) — a stronger
+    // injection surface than skills, so at least the same gate.
+    scenarios: "publisher",
+    // systems drive CREDENTIAL minting/delivery/rotation (S2/S3) — the credential lifecycle is ≥ the skills tier.
+    systems: "publisher",
+    // access: DELETED in 0.6.0 (域整删,EXPERT-REDESIGN §9)。
+    // governance (治理三件,0.6.0 从 runtime 拆出): editor(EXPERT-REDESIGN §5 domainWriteRole 同步——与
+    // runtime 残余同档,default 即 editor,故不列条目;此注释即该裁定的落点)。
+    // entitlement governs who-can-USE-what (models/skills/mcp/budget/runtime caps) per principal — a governance +
+    // security surface (budget ceilings, bypass kill-switch) on par with systems. Same raised gate.
+    entitlement: "publisher",
+    // execution (0.8.0): editor — same档 as governance (治理旋钮同类;真安全边界在 service gate [580],
+    // client-advisory 面不值 publisher 档)。default 即 editor,故不列条目;此注释即该裁定的落点。
+    // projects (0.10.0, 142-S3): editor — 登记簿是身份索引不是注入面(无 prompt/凭据/可执行内容);
+    // mint/claim 动作端点与编辑面同档(草案 §3 "该 scope editor+")。default 即 editor,故不列条目。
+};
+/** The minimum role required to write `domain` (the raised gate for skills/mcp, else editor). */
+export function domainWriteRole(domain) {
+    return DOMAIN_WRITE_ROLE[domain] ?? DEFAULT_DOMAIN_WRITE_ROLE;
+}
+/** The empty/defaults effective config at version 0 — what publish mode serves before the first publish.
+ *  Seeds the epoch (`new Date(0)`) so it's deterministic (the wall-clock default was the original store.ts
+ *  non-determinism — see the file header). */
+export function emptyEffective() {
+    return buildEffective(0, () => undefined, new Date(0).toISOString());
+}
+/** Validate + fill defaults for a domain payload (or the schema's empty default when absent/invalid). */
+export function parseDomain(domain, raw) {
+    // ONLY true absence (undefined) defaults; an explicit `null` (e.g. a `config.d/<d>.json` containing JSON
+    // `null`) is corrupt input → let zod reject it ("expected object, received null"), not silently default. R4.
+    let r;
+    try {
+        r = DOMAIN_SCHEMAS[domain].safeParse(raw === undefined ? {} : raw);
+    }
+    catch {
+        // a hostile getter/Proxy trap threw during traversal — its message may carry a secret; never surface it. R13.
+        throw new Error(`invalid "${domain}" config (a value could not be read during validation)`);
+    }
+    if (r.success)
+        return r.data;
+    throw sanitizeZodError(r.error); // recursive redaction (message/received/unionErrors) — no secret echo. R13/R14.
+}
+/**
+ * Shared GC predicate for worker-status rows (F10) — keeps memory/sqlite/tidb identical. Given the rows'
+ * `{name, updatedAt}` and the GC options, returns the names to prune (A: not in `keepNames`; B: older than
+ * `ttlMs`). Pass neither selector → prunes nothing (guards against a wipe-all). See `ConfigStore.gcWorkerStatuses`.
+ */
+export function statusRowsToPrune(rows, opts) {
+    if (opts.keepNames === undefined && opts.ttlMs === undefined)
+        return [];
+    const keep = opts.keepNames ? new Set(opts.keepNames) : undefined;
+    const cutoff = opts.ttlMs !== undefined ? (opts.now ?? new Date()).getTime() - opts.ttlMs : undefined;
+    return rows
+        .filter((r) => (keep !== undefined && !keep.has(r.name)) || (cutoff !== undefined && Date.parse(r.updatedAt) < cutoff))
+        .map((r) => r.name);
+}
+/**
+ * Merge every domain into the effective config a consumer pulls. Shared by all store impls.
+ * `updatedAt` is REQUIRED (the determinism refactor — the original store.ts defaulted it to the wall clock,
+ * which made `emptyEffective`/the memory store non-deterministic). Every caller now supplies it explicitly.
+ */
+/** Lift the governance trio out of a LEGACY runtime doc (pre-0.6 stored runtime carried autonomy/commandPolicy/
+ *  approvalRequire). Used as the governance domain's read fallback when governance was NEVER set — so a 0.5
+ *  store upgrades with zero data migration and zero gate loss. An explicitly-set governance domain WINS
+ *  (its absence-of-a-key then means "center not managing", never "fall back to legacy runtime"). */
+export function legacyGovernanceFromRuntime(rawRuntime) {
+    if (rawRuntime === null || typeof rawRuntime !== "object")
+        return undefined;
+    const r = rawRuntime;
+    const lifted = {};
+    for (const k of GOVERNANCE_MIRROR_KEYS)
+        if (r[k] !== undefined)
+            lifted[k] = r[k];
+    return Object.keys(lifted).length ? lifted : undefined;
+}
+/** Per-domain READ-corruption policy (0.8.1) — what buildEffective does when a stored domain no longer parses.
+ *  `"default"` = degrade to the schema default + warn (safe: the default only REMOVES capability, fail-closed).
+ *  `"throw"` = keep fail-loud (defaulting would LOOSEN gates or destructively apply — worse than an outage,
+ *  consumers fail-static on last-good). A `satisfies Record<DomainName,…>` forces every FUTURE domain to make
+ *  this call explicitly (compile error until it's classified). Per-domain rationale:
+ *    - models/skills/mcp/plugins/scenarios/systems/collab: additive capability catalogs — empty = the
+ *      capability disappears (fail-closed), no gate is lost.
+ *    - hosts: empty registry = no auto-placement targets (availability-only); self-registration re-lands
+ *      entries as approved:false = 待批 (fail-closed). Plus the precise grandfather clamp runs FIRST.
+ *    - rosters: THROW — a lost roster makes resolveEffectiveForWorker fall back to the FULL models catalog
+ *      ("global(fallback)"), silently WIDENING every restricted worker's model access. 放权,不许.
+ *    - workers: THROW — an empty fleet spec would make the reconciler RETIRE every managed worker
+ *      (destructive apply — far worse than a read outage).
+ *    - runtime: THROW — defaulting drops centrally-published rate/cost ceilings = unbounded spend (fail-open
+ *      on the budget axis).
+ *    - governance: THROW — defaulting drops autonomy/commandPolicy/approvalRequire = the consumer falls back
+ *      to env/defaults with the operator's guardrails silently gone. 放权,不许.
+ *    - entitlement: THROW — defaulting drops the org kill-switch/budget ceilings/tier restrictions for every
+ *      principal. 放权,不许.
+ *    - execution: THROW — defaulting flips required:true (sandbox mandate) back to false. 放权,不许.
+ *      (0.10.1: sessionMirror rides the SAME stance — defaulting would evaporate an org's required:true
+ *      mirror mandate = 审计面静默放权; the shared rationale is exactly WHY it was收编 here, not a new domain.)
+ *    - projects: THROW — defaulting evaporates the whole identity ledger: once the S4 worker gate ships,
+ *      every `proj:*` derivation fails-fast (全租户记忆面停摆 — consumers fail-static on last-good is
+ *      strictly better); WORSE, the claim write face is read-modify-write — reading a defaulted-empty
+ *      ledger and writing it back would CLOBBER existing registrations down to one entry (data loss,
+ *      one layer beyond the rosters "放权" rationale). */
+export const DOMAIN_READ_FALLBACK = {
+    models: "default",
+    rosters: "throw",
+    skills: "default",
+    mcp: "default",
+    plugins: "default",
+    scenarios: "default",
+    systems: "default",
+    collab: "default",
+    workers: "throw",
+    hosts: "default",
+    runtime: "throw",
+    governance: "throw",
+    entitlement: "throw",
+    execution: "throw",
+    projects: "throw",
+};
+/** READ-path grandfather clamp for the 0.8.0 hosts tightening (0.8.1, S3 M-1). Clamps ONLY the two bounds
+ *  0.8.0 added (name > 63 → drop the entry; array > 1024 → slice) so 0.7-era legal stored data keeps reading;
+ *  everything else (regex, types, duplicates) is left for parseDomain — this is a targeted grandfather, not a
+ *  lenient parser. PURE + idempotent; returns the ORIGINAL reference when nothing exceeds the bounds. */
+export function grandfatherHostsRead(raw) {
+    if (raw === null || typeof raw !== "object" || !Array.isArray(raw.hosts)) {
+        return { raw, droppedNames: [] }; // not the expected shape — let parseDomain rule on it
+    }
+    const original = raw.hosts;
+    const droppedNames = [];
+    let hosts = original.filter((h) => {
+        const name = h !== null && typeof h === "object" ? h.name : undefined;
+        if (typeof name === "string" && name.length > HOST_NAME_MAX) {
+            droppedNames.push(name.slice(0, HOST_NAME_MAX) + "…"); // audit label — clipped so the warning itself stays bounded
+            return false;
+        }
+        return true;
+    });
+    let truncatedFrom;
+    if (hosts.length > HOSTS_ARRAY_MAX) {
+        truncatedFrom = hosts.length;
+        hosts = hosts.slice(0, HOSTS_ARRAY_MAX);
+    }
+    if (droppedNames.length === 0 && truncatedFrom === undefined)
+        return { raw, droppedNames }; // identity — byte-stable
+    return { raw: { ...raw, hosts }, droppedNames, truncatedFrom };
+}
+export function buildEffective(version, getRaw, updatedAt, onWarning) {
+    // Generic READ guardrail (0.8.1): a domain that no longer parses degrades to its schema default + a warning
+    // — but ONLY where DOMAIN_READ_FALLBACK says the default is safe; gate-bearing domains keep throwing (决策
+    // 表与逐域理由见 DOMAIN_READ_FALLBACK). The success path is UNCHANGED (same parseDomain, same bytes).
+    const parseOr = (domain, raw) => {
+        try {
+            return parseDomain(domain, raw);
+        }
+        catch (e) {
+            if (DOMAIN_READ_FALLBACK[domain] === "throw")
+                throw e;
+            onWarning?.({ domain, kind: "domain-defaulted", error: e });
+            return parseDomain(domain, undefined); // schema default — always valid
+        }
+    };
+    // governance TRUTH: the domain itself; if it was never set, lift the trio from a legacy runtime doc
+    // (0.5→0.6 upgrade path — a2/local stores keep their gates without a data migration).
+    const governanceRaw = getRaw("governance");
+    const governance = parseDomain("governance", governanceRaw === undefined ? legacyGovernanceFromRuntime(getRaw("runtime")) : governanceRaw);
+    // runtime slot = limit residue ONLY. 0.7.1(BREAKING,黑板 [549] 回执收账):E1 的 governance→runtime
+    // 六闸双写镜像已撤——service 1.150.0 已切优先读 eff.governance 并回帖确认(撤双写以其确认为门槛,
+    // ask⑤ 顺序契约兑现)。READ 方向的 legacy lift(governance 域从未设时从旧 runtime 文档抬升三闸,
+    // 见 legacyGovernanceFromRuntime)保留——那是 0.5→0.6 升级路径,与写出镜像无关。
+    const runtime = parseDomain("runtime", getRaw("runtime"));
+    // hosts: the PRECISE grandfather for the 0.8.0 tightening runs BEFORE parse (0.7-era legal data over the
+    // new bounds reads on, clamped + warned); any residual corruption falls to the generic guardrail above.
+    const hostsGf = grandfatherHostsRead(getRaw("hosts"));
+    if (hostsGf.droppedNames.length > 0 || hostsGf.truncatedFrom !== undefined) {
+        onWarning?.({ domain: "hosts", kind: "hosts-grandfathered", droppedNames: hostsGf.droppedNames, truncatedFrom: hostsGf.truncatedFrom });
+    }
+    return {
+        version,
+        updatedAt,
+        models: parseOr("models", getRaw("models")),
+        rosters: parseDomain("rosters", getRaw("rosters")),
+        skills: parseOr("skills", getRaw("skills")),
+        mcp: parseOr("mcp", getRaw("mcp")),
+        plugins: parseOr("plugins", getRaw("plugins")),
+        scenarios: parseOr("scenarios", getRaw("scenarios")),
+        systems: parseOr("systems", getRaw("systems")),
+        collab: parseOr("collab", getRaw("collab")),
+        workers: parseDomain("workers", getRaw("workers")),
+        hosts: parseOr("hosts", hostsGf.raw),
+        runtime,
+        governance,
+        entitlement: parseDomain("entitlement", getRaw("entitlement")),
+        // execution (0.8.0, S3): plain scope-level parse — MIRRORS governance (no overlay/merge invented here).
+        execution: parseDomain("execution", getRaw("execution")),
+        // projects (0.10.0, 142-S3): THROW policy → parseDomain, never parseOr (defaulting would evaporate the
+        // identity ledger AND expose the claim read-modify-write face to clobbering stored registrations).
+        projects: parseDomain("projects", getRaw("projects")),
+    };
+}
+/** [599]③ 档位组→引擎单表的唯一解析点(0.9.0)。返回 ACTIVE 档位组的绑定表(剔除未绑档),即 core
+ *  `RunnerDeps.tiers` 要吃的那张单表——组切换=center 换这张表下发,零新引擎机制。无 active 组/未命中/
+ *  组内一档未绑 → `undefined`(引擎档位层恒惰性,与「未配 tiers」逐字同义)。消费方(center /effective
+ *  投影、service applyEffective 接线)都走这一个函数,不要各自解析。 */
+export function resolveActiveTiers(models) {
+    if (!models.activeTierGroup)
+        return undefined;
+    const group = (models.tierGroups ?? []).find((g) => g.name === models.activeTierGroup);
+    if (!group)
+        return undefined; // schema 已 fail-loud 悬空 active;这里兜底旧数据,静默=INERT 与缺表同义
+    const bound = Object.entries(group.tiers).filter((e) => typeof e[1] === "string" && e[1].length > 0);
+    if (bound.length === 0)
+        return undefined;
+    return Object.fromEntries(bound);
+}
+//# sourceMappingURL=config-fns.js.map

package/dist/config-fns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-fns.js","sourceRoot":"","sources":["../src/config-fns.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAA4D,MAAM,YAAY,CAAC;AAEnL;;;;+FAI+F;AAC/F,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,OAAO,CAAC,4BAA4B,EAAE,uBAAuB,CAAC;SAC9D,OAAO,CAAC,0BAA0B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,GAAe;IAC9C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAyC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;iBAChD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;oBACpB,IAAI,OAAO,EAAE,KAAK,QAAQ;wBAAE,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC;oBACrD,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,EAAiB,CAAC,MAAM,CAAC;wBAAE,OAAO,gBAAgB,CAAC,EAAgB,CAAC,CAAC,CAAC,qBAAqB;oBAC9I,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD,MAAM,CAAC,MAAM,SAAS,GAA6B,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACpG,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC1F,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,IAAc,EAAE,GAAa;IACvD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAK,UAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAa,QAAQ,CAAC;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAA0C;IACtE,MAAM,EAAE,WAAW;IACnB,GAAG,EAAE,WAAW;IAChB,wGAAwG;IACxG,kDAAkD;IAClD,OAAO,EAAE,WAAW;IACpB,yGAAyG;IACzG,4DAA4D;IAC5D,SAAS,EAAE,WAAW;IACtB,8GAA8G;IAC9G,OAAO,EAAE,WAAW;IACpB,qDAAqD;IACrD,wFAAwF;IACxF,mDAAmD;IACnD,8GAA8G;IAC9G,gGAAgG;IAChG,WAAW,EAAE,WAAW;IACxB,qFAAqF;IACrF,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;CAC1E,CAAC;AACF,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,yBAAyB,CAAC;AAChE,CAAC;AA0DD;;8CAE8C;AAC9C,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,WAAW,CAAuB,MAAS,EAAE,GAAY;IACvE,yGAAyG;IACzG,6GAA6G;IAC7G,IAAI,CAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAa,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,8GAA8G;QAC9G,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,wDAAwD,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,IAAuB,CAAC;IAChD,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gFAAgF;AACnH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA2C,EAC3C,IAA0D;IAE1D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC;SACtH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH;;;oGAGoG;AACpG,MAAM,UAAU,2BAA2B,CAAC,UAAmB;IAC7D,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,sBAAsB;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;wDA0BwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,SAAS;IACd,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,OAAO;IACnB,WAAW,EAAE,OAAO;IACpB,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,OAAO;CACyC,CAAC;AAa7D;;;yGAGyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,GAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,sDAAsD;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAI,GAA4B,CAAC,KAAK,CAAC;IACrD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAC5D,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,4DAA4D;YACnH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,aAAiC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACnC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,yBAAyB;IACrH,OAAO,EAAE,GAAG,EAAE,EAAE,GAAI,GAA+B,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAkC,EAAE,SAAiB,EAAE,SAA6C;IAClJ,4GAA4G;IAC5G,yGAAyG;IACzG,+FAA+F;IAC/F,MAAM,OAAO,GAAG,CAAuB,MAAS,EAAE,GAAY,EAAmB,EAAE;QACjF,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,OAAO;gBAAE,MAAM,CAAC,CAAC;YACtD,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,gCAAgC;QACzE,CAAC;IACH,CAAC,CAAC;IACF,oGAAoG;IACpG,sFAAsF;IACtF,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC3I,2FAA2F;IAC3F,mEAAmE;IACnE,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,OAAO,GAA+B,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACtF,yGAAyG;IACzG,wGAAwG;IACxG,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3E,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1I,CAAC;IACD,OAAO;QACL,OAAO;QACP,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;QACpC,OAAO;QACP,UAAU;QACV,WAAW,EAAE,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9D,wGAAwG;QACxG,SAAS,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,uGAAuG;QACvG,mGAAmG;QACnG,QAAQ,EAAE,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;mDAGmD;AACnD,MAAM,UAAU,kBAAkB,CAAC,MAAsE;IACvG,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,eAAe,CAAC,CAAC;IACvF,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC,CAAC,sDAAsD;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/cross-domain.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Cross-domain referential integrity — the PURE half, shared by the single-domain PUT and the batch write so
+ * BOTH enforce the same rules (docs/MULTI-ROSTER.md §6). The FLEET-coupled `applyAutoPlacement` (which imports
+ * `../fleet/placement`) STAYS in sema-registry — it's not pure and not portable. This package carries only
+ * `refIntegrityIssues` + `siblingResolver` + the ref-issue types.
+ *
+ * BATCH-AWARE: a sibling domain (the models a roster references, the rosters a worker references) may be
+ * changing in the SAME batch. So checks resolve siblings through a {@link SiblingResolver} that prefers a
+ * value being written NOW over the stored one — otherwise "add a model AND a roster that uses it" in one
+ * batch would wrongly fail. The single-domain PUT passes no pending writes, so its resolver is just the
+ * reader (behaviour unchanged).
+ */
+import type { ConfigReader } from "./reader.js";
+import type { DomainConfig } from "./types.js";
+export interface RefIssue {
+    path: (string | number)[];
+    message: string;
+    code: string;
+}
+/** Resolve a sibling domain's effective value for integrity checks. */
+export type SiblingResolver = <K extends keyof DomainConfig>(domain: K) => Promise<DomainConfig[K] | undefined>;
+/** A resolver over the reader, optionally shadowed by pending (same-operation) writes keyed by domain.
+ *  Widened from the fat ConfigStore to the narrow {@link ConfigReader} (it only calls `getDomain`) so a TOC
+ *  file source can use it without the full store. */
+export declare function siblingResolver(store: ConfigReader, pending?: Partial<{
+    [K in keyof DomainConfig]: DomainConfig[K];
+}>): SiblingResolver;
+/** The domains whose writes carry cross-domain model/roster references we validate at save time. */
+export type RefCheckedDomain = "rosters" | "workers" | "models" | "collab" | "systems" | "entitlement";
+/** Cross-domain ref integrity for a rosters/workers/models/collab/systems value. Paths start with the domain
+ *  key (e.g. `["rosters", i, "models", j]`) so a caller can prefix a batch index. Empty = ok. Runtime
+ *  resolution stays tolerant (falls back); this is purely a save-time guard — a precise 400 at save time is
+ *  friendlier than a silently-wrong roster. */
+export declare function refIntegrityIssues(domain: RefCheckedDomain, value: unknown, resolve: SiblingResolver): Promise<RefIssue[]>;
+//# sourceMappingURL=cross-domain.d.ts.map

package/dist/cross-domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-domain.d.ts","sourceRoot":"","sources":["../src/cross-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uEAAuE;AACvE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,SAAS,MAAM,YAAY,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;AAEhH;;qDAEqD;AACrD,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC;KAAG,CAAC,IAAI,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC;CAAE,CAAC,GAAG,eAAe,CAKvI;AAED,oGAAoG;AACpG,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;AAEvG;;;+CAG+C;AAC/C,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAkFhI"}

package/dist/cross-domain.js

@@ -0,0 +1,119 @@
+/** A resolver over the reader, optionally shadowed by pending (same-operation) writes keyed by domain.
+ *  Widened from the fat ConfigStore to the narrow {@link ConfigReader} (it only calls `getDomain`) so a TOC
+ *  file source can use it without the full store. */
+export function siblingResolver(store, pending) {
+    return async (domain) => {
+        if (pending && Object.prototype.hasOwnProperty.call(pending, domain))
+            return pending[domain];
+        return store.getDomain(domain);
+    };
+}
+/** Cross-domain ref integrity for a rosters/workers/models/collab/systems value. Paths start with the domain
+ *  key (e.g. `["rosters", i, "models", j]`) so a caller can prefix a batch index. Empty = ok. Runtime
+ *  resolution stays tolerant (falls back); this is purely a save-time guard — a precise 400 at save time is
+ *  friendlier than a silently-wrong roster. */
+export async function refIntegrityIssues(domain, value, resolve) {
+    const issues = [];
+    if (domain === "rosters") {
+        const catalog = new Set(((await resolve("models"))?.models ?? []).map((m) => m.name));
+        value.rosters.forEach((r, i) => {
+            r.models.forEach((name, j) => {
+                if (!catalog.has(name))
+                    issues.push({ path: ["rosters", i, "models", j], message: `roster "${r.name}" references unknown model "${name}" (not in the models catalog)`, code: "custom" });
+            });
+            for (const [role, target] of Object.entries(r.roles ?? {})) {
+                if (target && "model" in target && !catalog.has(target.model))
+                    issues.push({ path: ["rosters", i, "roles", role], message: `roster "${r.name}" role.${role} → unknown model "${target.model}"`, code: "custom" });
+            }
+            // 0.6.3 markers (primaryModel/cheapModel) reference the catalog like a {model}-form role does — same
+            // save-time guard (a dangling marker would silently derive nothing at resolution).
+            if (r.primaryModel && !catalog.has(r.primaryModel))
+                issues.push({ path: ["rosters", i, "primaryModel"], message: `roster "${r.name}" primaryModel → unknown model "${r.primaryModel}" (not in the models catalog)`, code: "custom" });
+            if (r.cheapModel && !catalog.has(r.cheapModel))
+                issues.push({ path: ["rosters", i, "cheapModel"], message: `roster "${r.name}" cheapModel → unknown model "${r.cheapModel}" (not in the models catalog)`, code: "custom" });
+            (r.atModelAllowlist ?? []).forEach((name, j) => {
+                if (!catalog.has(name))
+                    issues.push({ path: ["rosters", i, "atModelAllowlist", j], message: `roster "${r.name}" atModelAllowlist "${name}" not in the models catalog`, code: "custom" });
+            });
+        });
+    }
+    else if (domain === "workers") {
+        const rosterNames = new Set(((await resolve("rosters"))?.rosters ?? []).map((r) => r.name));
+        value.workers.forEach((w, i) => {
+            if (w.roster && !rosterNames.has(w.roster))
+                issues.push({ path: ["workers", i, "roster"], message: `worker "${w.name}" references unknown roster "${w.roster}"`, code: "custom" });
+        });
+    }
+    else if (domain === "models") {
+        // The roles map + @-allowlist reference models in THIS payload's OWN catalog (they ship together in the
+        // models domain), so validate against `value`, not the stored/sibling models.
+        const m = value;
+        const catalog = new Set(m.models.map((x) => x.name));
+        for (const [role, target] of Object.entries(m.roles ?? {})) {
+            if (target && "model" in target && !catalog.has(target.model))
+                issues.push({ path: ["models", "roles", role], message: `models.roles.${role} → unknown model "${target.model}" (not in the catalog)`, code: "custom" });
+        }
+        (m.atModelAllowlist ?? []).forEach((name, j) => {
+            if (!catalog.has(name))
+                issues.push({ path: ["models", "atModelAllowlist", j], message: `atModelAllowlist "${name}" not in the models catalog`, code: "custom" });
+        });
+    }
+    else if (domain === "collab") {
+        // collab (0.7.0, replaces teams): a slot member's `modelRef` is a models-CATALOG name (T1 — never a
+        // roster, never a gateway id) and must resolve against the catalog (sibling — batch-aware). ABSENT
+        // modelRef is the legal "跟随用户当前模型" state, not a dangle. This is the SAVE-time guard; a model
+        // deleted/renamed LATER still dangles → the web renders the 悬空 destructive badge (§11-6), same as
+        // groupBindings.
+        const catalog = new Set(((await resolve("models"))?.models ?? []).map((x) => x.name));
+        value.templates.forEach((t, i) => {
+            t.slots.forEach((s, j) => {
+                s.members.forEach((mem, k) => {
+                    if (mem.modelRef && !catalog.has(mem.modelRef))
+                        issues.push({ path: ["templates", i, "slots", j, "members", k, "modelRef"], message: `collab template "${t.id}" slot "${s.id}" → unknown model "${mem.modelRef}" (not in the catalog)`, code: "custom" });
+                });
+            });
+        });
+    }
+    else if (domain === "systems") {
+        // systems.callsWorkers → workers domain (a dangling name would mint a credential routed at nobody;
+        // resolution stays tolerant — this is the save-time guard, same as the other ref-checked domains).
+        const workers = new Set((await resolve("workers"))?.workers.map((w) => w.name) ?? []);
+        value.systems.forEach((sys, i) => {
+            sys.callsWorkers.forEach((name, j) => {
+                if (!workers.has(name))
+                    issues.push({ path: ["systems", i, "callsWorkers", j], message: `system "${sys.name}" references unknown worker "${name}"`, code: "custom" });
+            });
+        });
+    }
+    else if (domain === "entitlement") {
+        // A tier references FIVE sibling domains by name (roster→rosters, models[]→models catalog, visibleSkills→
+        // skills, visibleMcp→mcp, visiblePlugins→plugins). A dangling ref otherwise resolves silently (e.g. a typo'd roster → resolve-
+        // entitlement yields an empty set → the principal is silently denied) — a precise 400 at save time is
+        // friendlier, matching the rosters/workers guards.
+        const rosterNames = new Set(((await resolve("rosters"))?.rosters ?? []).map((r) => r.name));
+        const modelCatalog = new Set(((await resolve("models"))?.models ?? []).map((m) => m.name));
+        const skillNames = new Set((await resolve("skills"))?.skills.map((s) => s.name) ?? []);
+        const mcpNames = new Set((await resolve("mcp"))?.servers.map((s) => s.name) ?? []);
+        const pluginNames = new Set((await resolve("plugins"))?.plugins.map((p) => p.name) ?? []);
+        value.tiers.forEach((t, i) => {
+            if (t.roster && !rosterNames.has(t.roster))
+                issues.push({ path: ["tiers", i, "roster"], message: `tier "${t.id}" references unknown roster "${t.roster}"`, code: "custom" });
+            (t.models ?? []).forEach((name, j) => { if (!modelCatalog.has(name))
+                issues.push({ path: ["tiers", i, "models", j], message: `tier "${t.id}" model "${name}" not in the models catalog`, code: "custom" }); });
+            (t.visibleSkills ?? []).forEach((name, j) => { if (!skillNames.has(name))
+                issues.push({ path: ["tiers", i, "visibleSkills", j], message: `tier "${t.id}" visibleSkill "${name}" not in skills`, code: "custom" }); });
+            (t.visibleMcp ?? []).forEach((name, j) => { if (!mcpNames.has(name))
+                issues.push({ path: ["tiers", i, "visibleMcp", j], message: `tier "${t.id}" visibleMcp "${name}" not in mcp`, code: "custom" }); });
+            (t.visiblePlugins ?? []).forEach((name, j) => { if (!pluginNames.has(name))
+                issues.push({ path: ["tiers", i, "visiblePlugins", j], message: `tier "${t.id}" visiblePlugin "${name}" not in plugins`, code: "custom" }); });
+        });
+    }
+    else {
+        // Exhaustiveness guard: a new RefCheckedDomain MUST add its own branch above, not silently inherit another
+        // domain's validation. `never` makes that a compile error; the throw is the runtime backstop.
+        const unhandled = domain;
+        throw new Error(`refIntegrityIssues: unhandled domain "${String(unhandled)}"`);
+    }
+    return issues;
+}
+//# sourceMappingURL=cross-domain.js.map

package/dist/cross-domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-domain.js","sourceRoot":"","sources":["../src/cross-domain.ts"],"names":[],"mappings":"AAwBA;;qDAEqD;AACrD,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,OAAiE;IACpH,OAAO,KAAK,EAAgC,MAAS,EAAwC,EAAE;QAC7F,IAAI,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAKD;;;+CAG+C;AAC/C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAwB,EAAE,KAAc,EAAE,OAAwB;IACzG,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,KAAiC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,+BAA+B,IAAI,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3L,CAAC,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3D,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,UAAU,IAAI,qBAAqB,MAAM,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpN,CAAC;YACD,qGAAqG;YACrG,mFAAmF;YACnF,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,mCAAmC,CAAC,CAAC,YAAY,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtO,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,iCAAiC,CAAC,CAAC,UAAU,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5N,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,uBAAuB,IAAI,6BAA6B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3L,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,KAAiC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,gCAAgC,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,wGAAwG;QACxG,8EAA8E;QAC9E,MAAM,CAAC,GAAG,KAA+B,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3D,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,IAAI,qBAAqB,MAAM,CAAC,KAAK,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1N,CAAC;QACD,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,qBAAqB,IAAI,6BAA6B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpK,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,oGAAoG;QACpG,mGAAmG;QACnG,6FAA6F;QAC7F,kGAAkG;QAClG,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,KAAgC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3D,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACvB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;oBAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,sBAAsB,GAAG,CAAC,QAAQ,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC5P,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,mGAAmG;QACnG,mGAAmG;QACnG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAE,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9H,KAAiC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC5D,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,CAAC,IAAI,gCAAgC,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxK,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,0GAA0G;QAC1G,+HAA+H;QAC/H,sGAAsG;QACtG,mDAAmD;QACnD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAE,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAwC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAE,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAqC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAE,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAyC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClI,KAAqC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC5D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7K,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,YAAY,IAAI,6BAA6B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/M,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,mBAAmB,IAAI,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtN,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,iBAAiB,IAAI,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzM,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,oBAAoB,IAAI,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7N,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,2GAA2G;QAC3G,8FAA8F;QAC9F,MAAM,SAAS,GAAU,MAAM,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/file-edit.d.ts

@@ -0,0 +1,37 @@
+import type { z } from "zod";
+import { RemoteExecSpec } from "./remote-exec.js";
+import { type DomainConfig, type DomainName, type EffectiveConfig } from "./types.js";
+export type ValidateResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    issues: z.ZodIssue[];
+};
+/** VALIDATE a domain payload against its zod schema WITHOUT writing — the editor's "is this form valid?" check.
+ *  Returns the parsed+defaulted value or the zod issues. Identical rules to the server's parseDomain. Throws
+ *  (clear message) if `domain` is not a real domain name (a misuse, not invalid user data). */
+export declare function validateDomain<K extends DomainName>(domain: K, raw: unknown): ValidateResult<DomainConfig[K]>;
+/** Same, for the remote-exec contract (a standalone contract, not a DOMAIN_SCHEMAS member). */
+export declare function validateRemoteExec(raw: unknown): ValidateResult<RemoteExecSpec>;
+/** Absolute path to a domain's JSON file under a config root (mirrors FileConfigStore.domainPath). Guards the
+ *  name (no `../../secret` traversal even if a caller bypasses the DomainName type). */
+export declare function domainFilePath(root: string, domain: DomainName): string;
+/** WRITE a domain file ATOMICALLY (write a tmp in the same dir → rename) so a crash never leaves a half-written
+ *  config.d/<domain>.json. VALIDATES first (throws on invalid — never persists garbage); persists the parsed +
+ *  defaulted value so the file is canonical. */
+export declare function writeDomainFile<K extends DomainName>(root: string, domain: K, value: unknown): Promise<DomainConfig[K]>;
+export interface RequiredEnvName {
+    envName: string;
+    refs: {
+        domain: string;
+        detail: string;
+    }[];
+    /** true if this env-NAME resolves in the supplied environment (.env merged over process.env). */
+    present: boolean;
+}
+/** LIST every env-NAME the current local config requires (across models/workers/mcp + the
+ *  remote-exec backend), marking which are MISSING from the resolved env — the TOC "you still need to set
+ *  these secrets" panel. Reuses collectEnvRefs for the domain side, then appends the remoteExec secret refs. */
+export declare function listRequiredEnvNames(eff: EffectiveConfig, remoteExec: RemoteExecSpec | undefined, resolvedEnv: Record<string, string | undefined>): RequiredEnvName[];
+//# sourceMappingURL=file-edit.d.ts.map

package/dist/file-edit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-edit.d.ts","sourceRoot":"","sources":["../src/file-edit.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAgC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpH,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;CAAE,CAAC;AAiB7F;;+FAE+F;AAC/F,wBAAgB,cAAc,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAW7G;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAQ/E;AAED;wFACwF;AACxF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAGvE;AAED;;gDAEgD;AAChD,wBAAsB,eAAe,CAAC,CAAC,SAAS,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAe7H;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3C,iGAAiG;IACjG,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;gHAEgH;AAChH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,eAAe,EACpB,UAAU,EAAE,cAAc,GAAG,SAAS,EACtC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC9C,eAAe,EAAE,CAqCnB"}