@telorun/kernel 0.2.4

package/LICENSE

@@ -0,0 +1,17 @@
+# SUSTAINABLE USE LICENSE (Fair-code)
+
+Copyright (c) 2026 DiglyAI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to use, copy, modify, and distribute the Software for any purpose—including commercial purposes—subject to the following conditions:
+
+1. ANTI-COMPETITION RESTRICTION: The Software may not be provided to third parties as a managed service, commercial SaaS (Software-as-a-Service), PaaS (Platform-as-a-Service), BaaS (Backend-as-a-Service), or similar offering where the primary value provided to the user is the functionality of the Software itself, without a separate commercial license from the copyright holder.
+
+2. PERMITTED COMMERCIAL USE: You are free to use the Software to build, host, and monetize your own commercial applications, products, and services, provided such use does not violate Clause 1.
+
+3. ATTRIBUTION: This copyright notice and license must be included in all copies or substantial portions of the Software.
+
+4. CONTRIBUTIONS: Contributions to the Software are welcome and encouraged. By contributing, you agree that your contributions may be incorporated into the Software and distributed under this license.
+
+5. DISCLAIMER: The Software is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, whether in an action of contract, tort or otherwise, arising from, out of or in connection with the Software or the use or other dealings in the Software.
+
+For commercial licensing, managed hosting exemptions, or enterprise inquiries, please contact DiglyAI.

package/dist/boot-context-registry.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Accumulates ContextProvider contributions during the AOT boot initialization
+ * multi-pass loop and enforces RBAC visibility rules.
+ *
+ * Lifecycle:
+ *   1. A provider resource is created + init()'d → kernel calls register().
+ *   2. Before a consumer resource is created → kernel calls buildContext() to
+ *      obtain a per-consumer CEL evaluation context.
+ *   3. buildContext() enforces grants and scans the raw manifest for unauthorized
+ *      references, throwing ERR_VISIBILITY_DENIED on violations.
+ */
+export declare class BootContextRegistry {
+    private providers;
+    /**
+     * Register a new context provider after its init() has completed.
+     * Called by the kernel for every resource instance that passes isContextProvider().
+     */
+    register(kind: string, name: string, module: string, grants: string[] | undefined, context: Record<string, unknown>): void;
+    /**
+     * Returns true if at least one provider has been registered.
+     * Used by the kernel to skip context resolution when there are no providers yet.
+     */
+    hasProviders(): boolean;
+    /**
+     * Build a CEL evaluation context for a specific consumer resource, enforcing
+     * RBAC grants.
+     *
+     * For each registered provider:
+     *  - `grants === undefined` → unrestricted, always included.
+     *  - `grants` defined and consumer key in grants → included.
+     *  - `grants` defined and consumer key NOT in grants:
+     *      - Scan the raw manifest JSON for `${{ ... }}` expressions that reference
+     *        the provider's namespace prefix (`"${kind}.${name}."`).
+     *      - If a reference is found → throw ERR_VISIBILITY_DENIED immediately.
+     *      - If no reference → silently exclude the provider from the context.
+     *
+     * CEL context structure mirrors the kind hierarchy:
+     *   kind="Config", name="database"     → { Config: { database: { host, port } } }
+     *   kind="MyApp.Secrets", name="vault" → { MyApp: { Secrets: { vault: { ... } } } }
+     *
+     * @param consumerKind - kind of the resource being initialized (e.g. "MyApp.Api.Server")
+     * @param consumerName - name of the resource being initialized (e.g. "api")
+     * @param rawManifest  - the unresolved manifest object (used for namespace reference scan)
+     */
+    buildContext(consumerKind: string, consumerName: string, rawManifest: Record<string, unknown>): Record<string, unknown>;
+}
+//# sourceMappingURL=boot-context-registry.d.ts.map

package/dist/boot-context-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-context-registry.d.ts","sourceRoot":"","sources":["../src/boot-context-registry.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;GAUG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,SAAS,CAAuB;IAExC;;;OAGG;IACH,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI;IAIP;;;OAGG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,YAAY,CACV,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CA4B3B"}

package/dist/boot-context-registry.js

@@ -0,0 +1,131 @@
+import { RuntimeError } from './types.js';
+/**
+ * Accumulates ContextProvider contributions during the AOT boot initialization
+ * multi-pass loop and enforces RBAC visibility rules.
+ *
+ * Lifecycle:
+ *   1. A provider resource is created + init()'d → kernel calls register().
+ *   2. Before a consumer resource is created → kernel calls buildContext() to
+ *      obtain a per-consumer CEL evaluation context.
+ *   3. buildContext() enforces grants and scans the raw manifest for unauthorized
+ *      references, throwing ERR_VISIBILITY_DENIED on violations.
+ */
+export class BootContextRegistry {
+    constructor() {
+        this.providers = [];
+    }
+    /**
+     * Register a new context provider after its init() has completed.
+     * Called by the kernel for every resource instance that passes isContextProvider().
+     */
+    register(kind, name, module, grants, context) {
+        this.providers.push({ kind, name, module, grants, context });
+    }
+    /**
+     * Returns true if at least one provider has been registered.
+     * Used by the kernel to skip context resolution when there are no providers yet.
+     */
+    hasProviders() {
+        return this.providers.length > 0;
+    }
+    /**
+     * Build a CEL evaluation context for a specific consumer resource, enforcing
+     * RBAC grants.
+     *
+     * For each registered provider:
+     *  - `grants === undefined` → unrestricted, always included.
+     *  - `grants` defined and consumer key in grants → included.
+     *  - `grants` defined and consumer key NOT in grants:
+     *      - Scan the raw manifest JSON for `${{ ... }}` expressions that reference
+     *        the provider's namespace prefix (`"${kind}.${name}."`).
+     *      - If a reference is found → throw ERR_VISIBILITY_DENIED immediately.
+     *      - If no reference → silently exclude the provider from the context.
+     *
+     * CEL context structure mirrors the kind hierarchy:
+     *   kind="Config", name="database"     → { Config: { database: { host, port } } }
+     *   kind="MyApp.Secrets", name="vault" → { MyApp: { Secrets: { vault: { ... } } } }
+     *
+     * @param consumerKind - kind of the resource being initialized (e.g. "MyApp.Api.Server")
+     * @param consumerName - name of the resource being initialized (e.g. "api")
+     * @param rawManifest  - the unresolved manifest object (used for namespace reference scan)
+     */
+    buildContext(consumerKind, consumerName, rawManifest) {
+        const consumerKey = `${consumerKind}/${consumerName}`;
+        const celContext = {};
+        const manifestJson = JSON.stringify(rawManifest);
+        for (const provider of this.providers) {
+            const isGranted = provider.grants === undefined || provider.grants.includes(consumerKey);
+            if (!isGranted) {
+                const namespacePrefix = buildProviderNamespacePrefix(provider.kind, provider.name);
+                if (manifestReferencesNamespace(manifestJson, namespacePrefix)) {
+                    throw new RuntimeError('ERR_VISIBILITY_DENIED', `Resource "${consumerKind}/${consumerName}" references context from ` +
+                        `provider "${provider.kind}/${provider.name}" but is not listed in its grants. ` +
+                        `Add "${consumerKey}" to the provider's grants field to allow access.`);
+                }
+                // Not referenced and not granted — silently exclude
+                continue;
+            }
+            mergeProviderIntoContext(celContext, provider.kind, provider.name, provider.context);
+        }
+        return celContext;
+    }
+}
+/**
+ * Build the namespace prefix string that appears inside a `${{ }}` expression
+ * when a consumer references this provider.
+ *
+ * The trailing dot ensures we match the start of a property access without
+ * false-matching a shared prefix substring:
+ *   kind="Config", name="database"    → "Config.database."
+ *   kind="MyApp.Secrets", name="vault" → "MyApp.Secrets.vault."
+ */
+function buildProviderNamespacePrefix(kind, name) {
+    return `${kind}.${name}.`;
+}
+/**
+ * Scan serialized manifest JSON for any `${{ expression }}` block that contains
+ * the provider's namespace prefix.
+ *
+ * Using JSON.stringify() as the scan target covers all nested fields uniformly.
+ * The approach cannot produce false positives from field names or non-template
+ * values because `${{` is not valid JSON syntax outside a string value.
+ */
+function manifestReferencesNamespace(manifestJson, namespacePrefix) {
+    let searchFrom = 0;
+    while (true) {
+        const start = manifestJson.indexOf('${{', searchFrom);
+        if (start === -1)
+            break;
+        const end = manifestJson.indexOf('}}', start + 3);
+        if (end === -1)
+            break;
+        const expression = manifestJson.slice(start + 3, end);
+        if (expression.includes(namespacePrefix)) {
+            return true;
+        }
+        searchFrom = end + 2;
+    }
+    return false;
+}
+/**
+ * Place provider.context into the CEL context object under the path
+ * defined by the provider's kind segments and name.
+ *
+ *   kind="Config", name="database":
+ *     context.Config = { database: { host, port } }
+ *
+ *   kind="MyApp.Api", name="server":
+ *     context.MyApp = { Api: { server: { ... } } }
+ */
+function mergeProviderIntoContext(celContext, kind, name, providerData) {
+    const kindSegments = kind.split('.');
+    let cursor = celContext;
+    for (const segment of kindSegments) {
+        if (typeof cursor[segment] !== 'object' || cursor[segment] === null) {
+            cursor[segment] = {};
+        }
+        cursor = cursor[segment];
+    }
+    cursor[name] = providerData;
+}
+//# sourceMappingURL=boot-context-registry.js.map

package/dist/boot-context-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-context-registry.js","sourceRoot":"","sources":["../src/boot-context-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAgB1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,mBAAmB;IAAhC;QACU,cAAS,GAAoB,EAAE,CAAC;IA6E1C,CAAC;IA3EC;;;OAGG;IACH,QAAQ,CACN,IAAY,EACZ,IAAY,EACZ,MAAc,EACd,MAA4B,EAC5B,OAAgC;QAEhC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,YAAY,CACV,YAAoB,EACpB,YAAoB,EACpB,WAAoC;QAEpC,MAAM,WAAW,GAAG,GAAG,YAAY,IAAI,YAAY,EAAE,CAAC;QACtD,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAEjD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEzE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,eAAe,GAAG,4BAA4B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACnF,IAAI,2BAA2B,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;oBAC/D,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,aAAa,YAAY,IAAI,YAAY,4BAA4B;wBACnE,aAAa,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,qCAAqC;wBAChF,QAAQ,WAAW,mDAAmD,CACzE,CAAC;gBACJ,CAAC;gBACD,oDAAoD;gBACpD,SAAS;YACX,CAAC;YAED,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,SAAS,4BAA4B,CAAC,IAAY,EAAE,IAAY;IAC9D,OAAO,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,2BAA2B,CAAC,YAAoB,EAAE,eAAuB;IAChF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM;QACxB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM;QACtB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAC/B,UAAmC,EACnC,IAAY,EACZ,IAAY,EACZ,YAAqC;IAErC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,UAAU,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAA4B,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;AAC9B,CAAC"}

package/dist/capabilities/capabilities/component.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: component

package/dist/capabilities/capabilities/executable.yaml

@@ -0,0 +1,7 @@
+kind: Runtime.Capability
+metadata:
+  name: executable
+schema:
+  type: object
+  properties:
+    foo: { type: string }

package/dist/capabilities/capabilities/handler.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: handler

package/dist/capabilities/capabilities/listener.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: listener

package/dist/capabilities/capabilities/provider.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: provider

package/dist/capabilities/capabilities/template.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: template

package/dist/capabilities/capabilities/type.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: type

package/dist/capabilities/component.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: component

package/dist/capabilities/executable.yaml

@@ -0,0 +1,7 @@
+kind: Runtime.Capability
+metadata:
+  name: executable
+schema:
+  type: object
+  properties:
+    foo: { type: string }

package/dist/capabilities/handler.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: handler

package/dist/capabilities/listener.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: listener

package/dist/capabilities/provider.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: provider

package/dist/capabilities/template.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: template

package/dist/capabilities/type.yaml

@@ -0,0 +1,3 @@
+kind: Runtime.Capability
+metadata:
+  name: type

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const kernel_1 = require("./kernel");
+async function main() {
+    const args = process.argv.slice(2);
+    const verbose = args.includes('--verbose');
+    const debug = args.includes('--debug');
+    const snapshotOnExit = args.includes('--snapshot-on-exit');
+    const filteredArgs = args.filter((arg) => arg !== '--verbose' && arg !== '--debug' && arg !== '--snapshot-on-exit');
+    if (filteredArgs.length === 0) {
+        console.error('Usage: digly [--verbose] [--debug] [--snapshot-on-exit] <runtime.yaml|directory>');
+        console.error('Example: digly --verbose --debug ./runtime.yaml');
+        process.exit(1);
+    }
+    const inputPath = path.resolve(filteredArgs[0]);
+    let inputStat;
+    try {
+        inputStat = await fs.stat(inputPath);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`Error reading path: ${inputPath}: ${message}`);
+        process.exit(1);
+    }
+    const isDirectory = inputStat.isDirectory();
+    const log = createLogger(verbose);
+    // log.info(`Digly Runtime v1.0`);
+    // log.info(`Loading from: ${inputPath}`);
+    try {
+        const kernel = new kernel_1.Kernel();
+        if (verbose) {
+            kernel.on('*', (event) => {
+                log.info(`${event.name}: ${JSON.stringify(event.payload)}`);
+            });
+        }
+        // Enable event streaming if debug flag is set
+        if (debug) {
+            const debugDir = path.join(process.cwd(), '.digly-debug');
+            const eventStreamPath = path.join(debugDir, 'events.jsonl');
+            await kernel.enableEventStream(eventStreamPath);
+            log.info(`Event stream enabled: ${eventStreamPath}`);
+        }
+        // Load from manifest or directory
+        if (isDirectory) {
+            await kernel.loadDirectory(inputPath);
+        }
+        else {
+            await kernel.loadFromConfig(inputPath);
+        }
+        await kernel.start();
+    }
+    catch (error) {
+        console.error('Error loading runtime:', error instanceof Error ? error.stack : String(error));
+        process.exit(1);
+    }
+}
+function createLogger(verbose) {
+    const useColor = process.stdout.isTTY;
+    const wrap = (code, text) => useColor ? `\x1b[${code}m${text}\x1b[0m` : text;
+    return {
+        info: (...args) => console.log(...args),
+        ok: (text) => wrap('32', text),
+        warn: (text) => wrap('33', text),
+        error: (text) => wrap('31', text),
+        dim: (text) => wrap('2', text),
+        verbose,
+    };
+}
+main().catch((error) => {
+    console.error('Fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,gDAAkC;AAClC,2CAA6B;AAC7B,qCAAkC;AAElC,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC9B,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,oBAAoB,CAC3E,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CACX,kFAAkF,CACnF,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,SAA8C,CAAC;IACnD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,uBAAuB,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAElC,kCAAkC;IAClC,0CAA0C;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAM,EAAE,CAAC;QAC5B,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;gBACvB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC;QAED,8CAA8C;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;YAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5D,MAAM,MAAM,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,yBAAyB,eAAe,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,kCAAkC;QAClC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,wBAAwB,EACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACrD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAC1C,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9C,EAAE,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACtC,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACzC,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;QACtC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/controller-loader.d.ts

@@ -0,0 +1,24 @@
+import { ControllerInstance } from "./types.js";
+export declare class ControllerLoader {
+    /**
+     * Load controller instance from URI in format:
+     *
+     * <runtime>:<registry>:<path>@<version-spec>
+     */
+    load(purlCandidates: string[], baseUri: string): Promise<ControllerInstance>;
+    private ensureNpmPackageInstalled;
+    private getPackageName;
+    private getInstalledPackageRoot;
+    private getLocalPackageName;
+    private resolvePackageEntry;
+    private resolvePackageExportTarget;
+    private resolveExportTargetValue;
+    /**
+     * For Node.js, resolve .ts paths to their compiled .js equivalents in dist/.
+     * Bun can load .ts directly, so it returns the path unchanged.
+     */
+    private resolveForRuntime;
+    private findInNodeModules;
+    private pathExists;
+}
+//# sourceMappingURL=controller-loader.d.ts.map

package/dist/controller-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-loader.d.ts","sourceRoot":"","sources":["../src/controller-loader.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAgB,MAAM,YAAY,CAAC;AAO9D,qBAAa,gBAAgB;IAC3B;;;;OAIG;IACG,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAqDpE,yBAAyB;IAmCvC,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,uBAAuB;YAKjB,mBAAmB;YAanB,mBAAmB;IAuEjC,OAAO,CAAC,0BAA0B;IAUlC,OAAO,CAAC,wBAAwB;IA8BhC;;;OAGG;YACW,iBAAiB;YAqBjB,iBAAiB;YAejB,UAAU;CAQzB"}