@x12i/memorix-package-seed 1.0.0

package/dist/lease.js

@@ -0,0 +1,113 @@
+import { randomUUID } from "node:crypto";
+import { DEFAULT_LEASE_POLL_MS, DEFAULT_LEASE_TTL_MS, DEFAULT_LEASE_WAIT_MS, MEMORIX_PACKAGE_SEED_LEASES_COLLECTION, } from "./constants.js";
+import { MemorixPackageSeedError } from "./errors.js";
+export async function acquireSeedLease(db, key, options = {}) {
+    const ttlMs = options.ttlMs ?? DEFAULT_LEASE_TTL_MS;
+    const waitMs = options.waitMs ?? DEFAULT_LEASE_WAIT_MS;
+    const pollMs = options.pollMs ?? DEFAULT_LEASE_POLL_MS;
+    const col = db.collection(MEMORIX_PACKAGE_SEED_LEASES_COLLECTION);
+    const owner = randomUUID();
+    const started = Date.now();
+    let fence = 0;
+    while (Date.now() - started <= waitMs) {
+        const now = new Date();
+        const leaseUntil = new Date(now.getTime() + ttlMs);
+        const acquired = await col.findOneAndUpdate({
+            _id: key,
+            $or: [
+                { leaseUntil: { $lte: now } },
+                { leaseUntil: { $exists: false } },
+            ],
+        }, {
+            $set: { owner, leaseUntil },
+            $inc: { fence: 1 },
+            $setOnInsert: { _id: key },
+        }, { upsert: true, returnDocument: "after" });
+        if (acquired && acquired.owner === owner) {
+            fence = acquired.fence;
+            break;
+        }
+        // create if missing without race win
+        const existing = await col.findOne({ _id: key });
+        if (!existing) {
+            try {
+                await col.insertOne({
+                    _id: key,
+                    owner,
+                    fence: 1,
+                    leaseUntil,
+                });
+                fence = 1;
+                break;
+            }
+            catch {
+                /* raced */
+            }
+        }
+        await new Promise((r) => setTimeout(r, pollMs));
+    }
+    if (!fence) {
+        throw new MemorixPackageSeedError({
+            code: "APPLY_FAILED",
+            message: `Timed out acquiring seed lease for ${key}`,
+            field: "lease",
+            value: key,
+        });
+    }
+    const abort = new AbortController();
+    let stopped = false;
+    const heartbeat = async () => {
+        if (stopped)
+            return false;
+        const now = new Date();
+        const leaseUntil = new Date(now.getTime() + ttlMs);
+        const updated = await col.findOneAndUpdate({ _id: key, owner, fence }, { $set: { leaseUntil } }, { returnDocument: "after" });
+        if (!updated) {
+            abort.abort();
+            return false;
+        }
+        return true;
+    };
+    const interval = setInterval(() => {
+        void heartbeat();
+    }, Math.max(250, Math.floor(ttlMs / 3)));
+    const checkFence = async () => {
+        const current = await col.findOne({ _id: key });
+        if (!current || current.owner !== owner || current.fence !== fence) {
+            abort.abort();
+            throw new MemorixPackageSeedError({
+                code: "LEASE_LOST",
+                message: `Lost seed lease for ${key}`,
+                field: "lease",
+                value: key,
+            });
+        }
+        if (abort.signal.aborted) {
+            throw new MemorixPackageSeedError({
+                code: "LEASE_LOST",
+                message: `Seed lease aborted for ${key}`,
+                field: "lease",
+            });
+        }
+    };
+    const release = async () => {
+        stopped = true;
+        clearInterval(interval);
+        await col.deleteOne({ _id: key, owner, fence });
+    };
+    const stop = () => {
+        stopped = true;
+        clearInterval(interval);
+    };
+    return {
+        key,
+        owner,
+        fence,
+        release,
+        heartbeat,
+        checkFence,
+        abortSignal: abort.signal,
+        stop,
+    };
+}
+//# sourceMappingURL=lease.js.map

package/dist/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../src/lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,sCAAsC,GACvC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAoBtD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAM,EACN,GAAW,EACX,UAII,EAAE;IAEN,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,oBAAoB,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,qBAAqB,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,qBAAqB,CAAC;IACvD,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAW,sCAAsC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CACzC;YACE,GAAG,EAAE,GAAG;YACR,GAAG,EAAE;gBACH,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBAC7B,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;aACnC;SACF,EACD;YACE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;YAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAClB,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;SAC3B,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAC1C,CAAC;QAEF,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACzC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;YACvB,MAAM;QACR,CAAC;QAED,qCAAqC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC;oBAClB,GAAG,EAAE,GAAG;oBACR,KAAK;oBACL,KAAK,EAAE,CAAC;oBACR,UAAU;iBACX,CAAC,CAAC;gBACH,KAAK,GAAG,CAAC,CAAC;gBACV,MAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,sCAAsC,GAAG,EAAE;YACpD,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,SAAS,GAAG,KAAK,IAAsB,EAAE;QAC7C,IAAI,OAAO;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,gBAAgB,CACxC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAC1B,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EACxB,EAAE,cAAc,EAAE,OAAO,EAAE,CAC5B,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,KAAK,SAAS,EAAE,CAAC;IACnB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACnE,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,uBAAuB,GAAG,EAAE;gBACrC,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,0BAA0B,GAAG,EAAE;gBACxC,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,OAAO,GAAG,IAAI,CAAC;QACf,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,OAAO,GAAG,IAAI,CAAC;QACf,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,OAAO;QACL,GAAG;QACH,KAAK;QACL,KAAK;QACL,OAAO;QACP,SAAS;QACT,UAAU;QACV,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/ledger.d.ts

@@ -0,0 +1,20 @@
+import type { CataloxBound } from "@x12i/catalox";
+import type { PackageSeedLedgerItem, PlaneWriteReport } from "./types.js";
+export declare function readLedgerItem(catalox: CataloxBound, packageId: string, targetAgentId: string): Promise<PackageSeedLedgerItem | null>;
+export declare function writeLedgerItem(catalox: CataloxBound, item: PackageSeedLedgerItem): Promise<void>;
+export declare function buildLedgerItem(input: {
+    packageId: string;
+    primaryAgentId: string;
+    targetAgentId: string;
+    packageVersion: string;
+    seedRevision: string;
+    payloadHash: string;
+    contentHash: string;
+    status: PackageSeedLedgerItem["status"];
+    attempts: number;
+    appliedBy?: string;
+    planes?: PlaneWriteReport[];
+    lastError?: PackageSeedLedgerItem["lastError"];
+}): PackageSeedLedgerItem;
+export declare function deleteLedgerItem(catalox: CataloxBound, packageId: string, targetAgentId: string): Promise<void>;
+//# sourceMappingURL=ledger.d.ts.map

package/dist/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../src/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAKlD,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE1E,wBAAsB,cAAc,CAClC,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAUvC;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;CAChD,GAAG,qBAAqB,CAoBxB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/ledger.js

@@ -0,0 +1,48 @@
+import { MEMORIX_PACKAGE_SEED_LEDGER_CATALOG, } from "./constants.js";
+import { ledgerItemId } from "./hash.js";
+export async function readLedgerItem(catalox, packageId, targetAgentId) {
+    const id = ledgerItemId(packageId, targetAgentId);
+    const result = await catalox.getCatalogItem(MEMORIX_PACKAGE_SEED_LEDGER_CATALOG, id);
+    if (result.outcome === "not_found" || result.outcome === "mapping_blocked") {
+        return null;
+    }
+    return (result.item.data ?? result.item);
+}
+export async function writeLedgerItem(catalox, item) {
+    const { id, ...rest } = item;
+    await catalox.upsertNativeCatalogItem(MEMORIX_PACKAGE_SEED_LEDGER_CATALOG, {
+        ...rest,
+        id,
+    });
+}
+export function buildLedgerItem(input) {
+    const now = new Date().toISOString();
+    return {
+        id: ledgerItemId(input.packageId, input.targetAgentId),
+        kind: "package-seed-ledger",
+        packageId: input.packageId,
+        primaryAgentId: input.primaryAgentId,
+        targetAgentId: input.targetAgentId,
+        packageVersion: input.packageVersion,
+        seedRevision: input.seedRevision,
+        payloadHash: input.payloadHash,
+        contentHash: input.contentHash,
+        status: input.status,
+        attempts: input.attempts,
+        updatedAt: now,
+        appliedAt: input.status === "applied" ? now : undefined,
+        appliedBy: input.appliedBy,
+        planes: input.planes,
+        lastError: input.lastError,
+    };
+}
+export async function deleteLedgerItem(catalox, packageId, targetAgentId) {
+    const id = ledgerItemId(packageId, targetAgentId);
+    try {
+        await catalox.deleteNativeCatalogItem(MEMORIX_PACKAGE_SEED_LEDGER_CATALOG, id);
+    }
+    catch {
+        /* ignore missing */
+    }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../src/ledger.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mCAAmC,GACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAqB,EACrB,SAAiB,EACjB,aAAqB;IAErB,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CACzC,mCAAmC,EACnC,EAAE,CACH,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAA0B,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAqB,EACrB,IAA2B;IAE3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,OAAO,CAAC,uBAAuB,CACnC,mCAAmC,EACnC;QACE,GAAG,IAAI;QACP,EAAE;KACwB,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAa/B;IACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC;QACtD,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,SAAiB,EACjB,aAAqB;IAErB,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,uBAAuB,CACnC,mCAAmC,EACnC,EAAE,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;AACH,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,9 @@
+import type { LoadedPackageSeed, PackageSeedIdentity } from "./types.js";
+export declare function loadPackageSeedJson(seedDir: string): PackageSeedIdentity | null;
+export declare function loadManifestFromDir(seedDir: string, options?: {
+    identity?: PackageSeedIdentity;
+    cliAgentId?: string;
+}): LoadedPackageSeed;
+export declare function loadIdentityFromPackageJson(packageJsonPath: string): Pick<PackageSeedIdentity, "packageId" | "packageVersion">;
+export declare function resolveSeedDirBeside(packageRoot: string): string;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EAGpB,MAAM,YAAY,CAAC;AAgDpB,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,GACd,mBAAmB,GAAG,IAAI,CAI5B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,GACL,iBAAiB,CAwNnB;AAED,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,MAAM,GACtB,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,gBAAgB,CAAC,CAY3D;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE"}

package/dist/manifest.js

@@ -0,0 +1,275 @@
+import { existsSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
+import { dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { BUILTIN_PLANE_KINDS, MAX_PACK_BYTES, MAX_PLANE_FILE_BYTES, MAX_PLANES, MAX_TOTAL_ITEMS, } from "./constants.js";
+import { MemorixPackageSeedError } from "./errors.js";
+import { hashCanonical } from "./hash.js";
+import { assertIdentitiesMatch, normalizeIdentity, } from "./identity.js";
+import { mergePlaneItems } from "./agent-merge.js";
+import { assertNoSecrets } from "./secrets.js";
+function readJsonFile(path) {
+    const size = statSync(path).size;
+    if (size > MAX_PLANE_FILE_BYTES) {
+        throw new MemorixPackageSeedError({
+            code: "PAYLOAD_TOO_LARGE",
+            message: `File exceeds ${MAX_PLANE_FILE_BYTES} bytes: ${path}`,
+            field: path,
+        });
+    }
+    return JSON.parse(readFileSync(path, "utf8"));
+}
+function assertSafeRelativePath(seedDir, relativePath) {
+    if (!relativePath || isAbsolute(relativePath) || relativePath.includes("\0")) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_PATH",
+            message: `Unsafe plane path: ${relativePath}`,
+            field: "file",
+            value: relativePath,
+        });
+    }
+    const seedRoot = realpathSync(seedDir);
+    const resolved = resolve(seedRoot, relativePath);
+    const real = existsSync(resolved) ? realpathSync(resolved) : resolved;
+    if (real !== seedRoot && !real.startsWith(seedRoot + sep)) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_PATH",
+            message: `Plane path escapes seed root: ${relativePath}`,
+            field: "file",
+            value: relativePath,
+        });
+    }
+    return real;
+}
+function asArray(value, label) {
+    if (!Array.isArray(value)) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_PLANE",
+            message: `${label} must be a JSON array`,
+            field: label,
+        });
+    }
+    return value;
+}
+export function loadPackageSeedJson(seedDir) {
+    const path = join(seedDir, "package-seed.json");
+    if (!existsSync(path))
+        return null;
+    return readJsonFile(path);
+}
+export function loadManifestFromDir(seedDir, options = {}) {
+    const absoluteSeedDir = resolve(seedDir);
+    if (!existsSync(absoluteSeedDir) || !statSync(absoluteSeedDir).isDirectory()) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_PATH",
+            message: `Seed directory not found: ${absoluteSeedDir}`,
+            field: "seedsDir",
+        });
+    }
+    const packageSeed = loadPackageSeedJson(absoluteSeedDir);
+    const manifestPath = join(absoluteSeedDir, "package-seed.manifest.json");
+    if (!existsSync(manifestPath)) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_MANIFEST",
+            message: `Missing package-seed.manifest.json in ${absoluteSeedDir}`,
+        });
+    }
+    const manifest = readJsonFile(manifestPath);
+    if (manifest.schemaVersion !== 1) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_MANIFEST",
+            message: `Unsupported schemaVersion: ${String(manifest.schemaVersion)}`,
+            field: "schemaVersion",
+        });
+    }
+    if (!manifest.seedRevision?.trim()) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_MANIFEST",
+            message: "manifest.seedRevision is required",
+            field: "seedRevision",
+        });
+    }
+    if (!Array.isArray(manifest.planes) || manifest.planes.length === 0) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_MANIFEST",
+            message: "manifest.planes must be a non-empty array",
+            field: "planes",
+        });
+    }
+    if (manifest.planes.length > MAX_PLANES) {
+        throw new MemorixPackageSeedError({
+            code: "PAYLOAD_TOO_LARGE",
+            message: `Too many planes (max ${MAX_PLANES})`,
+        });
+    }
+    const identity = normalizeIdentity({
+        packageId: options.identity?.packageId ?? packageSeed?.packageId ?? manifest.packageId,
+        packageVersion: options.identity?.packageVersion ??
+            packageSeed?.packageVersion ??
+            "0.0.0",
+        agentId: options.cliAgentId ??
+            options.identity?.agentId ??
+            packageSeed?.agentId ??
+            manifest.agentId,
+        targetAgentIds: options.identity?.targetAgentIds ??
+            packageSeed?.targetAgentIds ??
+            manifest.targetAgentIds,
+    });
+    if (packageSeed) {
+        assertIdentitiesMatch(identity, {
+            ...packageSeed,
+            targetAgentIds: packageSeed.targetAgentIds ?? identity.targetAgentIds,
+        }, "package-seed.json");
+    }
+    assertIdentitiesMatch(identity, {
+        packageId: manifest.packageId,
+        packageVersion: identity.packageVersion,
+        agentId: manifest.agentId,
+        targetAgentIds: manifest.targetAgentIds ?? identity.targetAgentIds,
+    }, "package-seed.manifest.json");
+    if (options.cliAgentId && options.cliAgentId !== identity.agentId) {
+        throw new MemorixPackageSeedError({
+            code: "IDENTITY_MISMATCH",
+            message: `--agent ${options.cliAgentId} does not match identity.agentId ${identity.agentId}`,
+            field: "agent",
+        });
+    }
+    const allowAdditionalAgents = Boolean(manifest.options?.allowAdditionalAgents);
+    const planes = [];
+    let totalItems = 0;
+    let totalBytes = 0;
+    const seenKinds = new Set();
+    for (const plane of manifest.planes) {
+        if (!plane?.kind || !plane.catalogId) {
+            throw new MemorixPackageSeedError({
+                code: "INVALID_PLANE",
+                message: "Each plane requires kind and catalogId",
+            });
+        }
+        if (!BUILTIN_PLANE_KINDS.includes(plane.kind)) {
+            throw new MemorixPackageSeedError({
+                code: "UNKNOWN_PLANE_KIND",
+                message: `Unknown plane kind: ${plane.kind}`,
+                field: "kind",
+                value: plane.kind,
+            });
+        }
+        if (plane.file && plane.inline) {
+            throw new MemorixPackageSeedError({
+                code: "INVALID_PLANE",
+                message: `Plane ${plane.kind} cannot set both file and inline`,
+            });
+        }
+        let rawItems;
+        let source;
+        if (plane.inline) {
+            rawItems = asArray(plane.inline, `${plane.kind}.inline`);
+            source = "inline";
+        }
+        else if (plane.file) {
+            const filePath = assertSafeRelativePath(absoluteSeedDir, plane.file);
+            if (!existsSync(filePath)) {
+                throw new MemorixPackageSeedError({
+                    code: "INVALID_PATH",
+                    message: `Plane file not found: ${plane.file}`,
+                    field: "file",
+                });
+            }
+            totalBytes += statSync(filePath).size;
+            rawItems = asArray(readJsonFile(filePath), plane.file);
+            source = plane.file;
+        }
+        else {
+            throw new MemorixPackageSeedError({
+                code: "INVALID_PLANE",
+                message: `Plane ${plane.kind} requires file or inline`,
+            });
+        }
+        assertNoSecrets(rawItems, plane.kind);
+        const items = mergePlaneItems(rawItems, identity.agentId, {
+            targetAgentIds: identity.targetAgentIds,
+            allowAdditionalAgents,
+            injectAgents: plane.kind !== "inventory-agents",
+        });
+        totalItems += items.length;
+        if (totalItems > MAX_TOTAL_ITEMS) {
+            throw new MemorixPackageSeedError({
+                code: "PAYLOAD_TOO_LARGE",
+                message: `Too many items (max ${MAX_TOTAL_ITEMS})`,
+            });
+        }
+        const key = `${plane.kind}:${plane.catalogId}:${source ?? "inline"}`;
+        if (seenKinds.has(key)) {
+            throw new MemorixPackageSeedError({
+                code: "INVALID_PLANE",
+                message: `Duplicate plane source: ${key}`,
+            });
+        }
+        seenKinds.add(key);
+        planes.push({
+            kind: plane.kind,
+            catalogId: plane.catalogId,
+            items,
+            options: plane.options,
+            source,
+        });
+    }
+    if (totalBytes > MAX_PACK_BYTES) {
+        throw new MemorixPackageSeedError({
+            code: "PAYLOAD_TOO_LARGE",
+            message: `Pack exceeds ${MAX_PACK_BYTES} bytes`,
+        });
+    }
+    const artifactPaths = [];
+    const artifactsDir = join(absoluteSeedDir, "artifacts");
+    if (existsSync(artifactsDir) && statSync(artifactsDir).isDirectory()) {
+        const walk = (dir, rel = "artifacts") => {
+            for (const entry of readdirSync(dir, { withFileTypes: true })) {
+                const abs = join(dir, entry.name);
+                const nextRel = `${rel}/${entry.name}`;
+                if (entry.isDirectory())
+                    walk(abs, nextRel);
+                else
+                    artifactPaths.push(nextRel);
+            }
+        };
+        walk(artifactsDir);
+    }
+    const payloadHash = hashCanonical({
+        packageId: identity.packageId,
+        agentId: identity.agentId,
+        targetAgentIds: identity.targetAgentIds,
+        planes: planes.map((p) => ({
+            kind: p.kind,
+            catalogId: p.catalogId,
+            options: p.options ?? {},
+            items: p.items,
+        })),
+        artifacts: artifactPaths.sort(),
+    });
+    const contentHash = hashCanonical({
+        payloadHash,
+        seedRevision: manifest.seedRevision,
+    });
+    return {
+        identity,
+        manifest,
+        planes,
+        seedDir: absoluteSeedDir,
+        artifactPaths,
+        payloadHash,
+        contentHash,
+    };
+}
+export function loadIdentityFromPackageJson(packageJsonPath) {
+    const pkg = readJsonFile(packageJsonPath);
+    if (!pkg.name || !pkg.version) {
+        throw new MemorixPackageSeedError({
+            code: "INVALID_IDENTITY",
+            message: "package.json must include name and version",
+        });
+    }
+    return { packageId: pkg.name, packageVersion: pkg.version };
+}
+export function resolveSeedDirBeside(packageRoot) {
+    return dirname(join(packageRoot, "package-seed.manifest.json"));
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAQ/C,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IACjC,IAAI,IAAI,GAAG,oBAAoB,EAAE,CAAC;QAChC,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,gBAAgB,oBAAoB,WAAW,IAAI,EAAE;YAC9D,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,YAAoB;IACnE,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,sBAAsB,YAAY,EAAE;YAC7C,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtE,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iCAAiC,YAAY,EAAE;YACxD,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,GAAG,KAAK,uBAAuB;YACxC,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,YAAY,CAAC,IAAI,CAAwB,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,UAGI,EAAE;IAEN,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,6BAA6B,eAAe,EAAE;YACvD,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,yCAAyC,eAAe,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAwB,CAAC;IACnE,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,8BAA8B,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YACvE,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,mCAAmC;YAC5C,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,2CAA2C;YACpD,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,wBAAwB,UAAU,GAAG;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,WAAW,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;QACtF,cAAc,EACZ,OAAO,CAAC,QAAQ,EAAE,cAAc;YAChC,WAAW,EAAE,cAAc;YAC3B,OAAO;QACT,OAAO,EACL,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,QAAQ,EAAE,OAAO;YACzB,WAAW,EAAE,OAAO;YACpB,QAAQ,CAAC,OAAO;QAClB,cAAc,EACZ,OAAO,CAAC,QAAQ,EAAE,cAAc;YAChC,WAAW,EAAE,cAAc;YAC3B,QAAQ,CAAC,cAAc;KAC1B,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QAChB,qBAAqB,CAAC,QAAQ,EAAE;YAC9B,GAAG,WAAW;YACd,cAAc,EAAE,WAAW,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;SACtE,EAAE,mBAAmB,CAAC,CAAC;IAC1B,CAAC;IACD,qBAAqB,CACnB,QAAQ,EACR;QACE,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;KACnE,EACD,4BAA4B,CAC7B,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,WAAW,OAAO,CAAC,UAAU,oCAAoC,QAAQ,CAAC,OAAO,EAAE;YAC5F,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC/E,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAE,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,uBAAuB,KAAK,CAAC,IAAI,EAAE;gBAC5C,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,KAAK,CAAC,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,SAAS,KAAK,CAAC,IAAI,kCAAkC;aAC/D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAmB,CAAC;QACxB,IAAI,MAA0B,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC;YACzD,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,uBAAuB,CAAC;oBAChC,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,yBAAyB,KAAK,CAAC,IAAI,EAAE;oBAC9C,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YACD,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;YACtC,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,SAAS,KAAK,CAAC,IAAI,0BAA0B;aACvD,CAAC,CAAC;QACL,CAAC;QAED,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE;YACxD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,qBAAqB;YACrB,YAAY,EAAE,KAAK,CAAC,IAAI,KAAK,kBAAkB;SAChD,CAAC,CAAC;QACH,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,uBAAuB,eAAe,GAAG;aACnD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QACrE,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,uBAAuB,CAAC;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,2BAA2B,GAAG,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,gBAAgB,cAAc,QAAQ;SAChD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAG,GAAG,WAAW,EAAE,EAAE;YAC9C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;;oBACvC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,CAAC;QAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YACxB,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC;QACH,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE;KAChC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,aAAa,CAAC;QAChC,WAAW;QACX,YAAY,EAAE,QAAQ,CAAC,YAAY;KACpC,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,eAAe;QACxB,aAAa;QACb,WAAW;QACX,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,eAAuB;IAEvB,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAGvC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/platform-core.d.ts

@@ -0,0 +1,19 @@
+import { type EnsureSeededOptions } from "./ensure-seeded.js";
+import type { EnsureSeededResult } from "./types.js";
+export declare function setPlatformCoreSeedsDir(dir: string | null): void;
+export declare function resolveDefaultPlatformCoreSeedsDir(processEnv?: NodeJS.ProcessEnv): string | null;
+/**
+ * Applies/skips the reusable platform-core pack into the destination agent DB.
+ * Does not recursively invoke itself. Uses upgrade when core seedRevision increases.
+ * Pack identity stays as authored; only the destination Catalox DB changes.
+ */
+export declare function ensurePlatformCoreSeeded(targetAgentId: string, options?: {
+    processEnv?: NodeJS.ProcessEnv;
+    mongoUri?: string;
+    appId?: string;
+    seedsDir?: string;
+    actor?: string;
+}): Promise<EnsureSeededResult | null>;
+export declare function attachPlatformCoreBootstrap(options: EnsureSeededOptions): EnsureSeededOptions;
+export declare function assertPlatformCoreAvailable(processEnv?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=platform-core.d.ts.map

package/dist/platform-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-core.d.ts","sourceRoot":"","sources":["../src/platform-core.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIrD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEhE;AAED,wBAAgB,kCAAkC,CAChD,UAAU,GAAE,MAAM,CAAC,UAAwB,GAC1C,MAAM,GAAG,IAAI,CAef;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CACX,GACL,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAgBpC;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,mBAAmB,CAWrB;AAED,wBAAgB,2BAA2B,CACzC,UAAU,GAAE,MAAM,CAAC,UAAwB,GAC1C,MAAM,CAUR"}

package/dist/platform-core.js

@@ -0,0 +1,68 @@
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { MemorixPackageSeedError } from "./errors.js";
+import { ensureSeeded } from "./ensure-seeded.js";
+let platformCoreSeedsDir = null;
+export function setPlatformCoreSeedsDir(dir) {
+    platformCoreSeedsDir = dir ? resolve(dir) : null;
+}
+export function resolveDefaultPlatformCoreSeedsDir(processEnv = process.env) {
+    if (platformCoreSeedsDir)
+        return platformCoreSeedsDir;
+    const fromEnv = processEnv.PACKAGE_SEED_PLATFORM_CORE_DIR?.trim();
+    if (fromEnv)
+        return resolve(fromEnv);
+    const candidates = [
+        resolve(process.cwd(), ".operational/package-seed-packs/_platform-core"),
+        resolve(process.cwd(), "../.operational/package-seed-packs/_platform-core"),
+    ];
+    for (const candidate of candidates) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+/**
+ * Applies/skips the reusable platform-core pack into the destination agent DB.
+ * Does not recursively invoke itself. Uses upgrade when core seedRevision increases.
+ * Pack identity stays as authored; only the destination Catalox DB changes.
+ */
+export async function ensurePlatformCoreSeeded(targetAgentId, options = {}) {
+    const processEnv = options.processEnv ?? process.env;
+    const seedsDir = options.seedsDir ?? resolveDefaultPlatformCoreSeedsDir(processEnv);
+    if (!seedsDir)
+        return null;
+    return ensureSeeded({
+        seedsDir,
+        mode: "upgrade",
+        processEnv,
+        mongoUri: options.mongoUri,
+        appId: options.appId,
+        actor: options.actor ?? "platform-core",
+        skipPlatformCore: true,
+        applyTargetAgentIds: [targetAgentId],
+    });
+}
+export function attachPlatformCoreBootstrap(options) {
+    if (options.skipPlatformCore || options.ensurePlatformCore)
+        return options;
+    return {
+        ...options,
+        ensurePlatformCore: (targetAgentId) => ensurePlatformCoreSeeded(targetAgentId, {
+            processEnv: options.processEnv,
+            mongoUri: options.mongoUri,
+            appId: options.appId,
+        }),
+    };
+}
+export function assertPlatformCoreAvailable(processEnv = process.env) {
+    const dir = resolveDefaultPlatformCoreSeedsDir(processEnv);
+    if (!dir) {
+        throw new MemorixPackageSeedError({
+            code: "CORE_BOOTSTRAP_FAILED",
+            message: "Platform core pack not found; set PACKAGE_SEED_PLATFORM_CORE_DIR or generate .operational/package-seed-packs/_platform-core",
+        });
+    }
+    return dir;
+}
+//# sourceMappingURL=platform-core.js.map

package/dist/platform-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-core.js","sourceRoot":"","sources":["../src/platform-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAA4B,MAAM,oBAAoB,CAAC;AAG5E,IAAI,oBAAoB,GAAkB,IAAI,CAAC;AAE/C,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACxD,oBAAoB,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,aAAgC,OAAO,CAAC,GAAG;IAE3C,IAAI,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gDAAgD,CAAC;QACxE,OAAO,CACL,OAAO,CAAC,GAAG,EAAE,EACb,mDAAmD,CACpD;KACF,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,UAMI,EAAE;IAEN,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IACrD,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,kCAAkC,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO,YAAY,CAAC;QAClB,QAAQ;QACR,IAAI,EAAE,SAAS;QACf,UAAU;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,eAAe;QACvC,gBAAgB,EAAE,IAAI;QACtB,mBAAmB,EAAE,CAAC,aAAa,CAAC;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA4B;IAE5B,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,kBAAkB;QAAE,OAAO,OAAO,CAAC;IAC3E,OAAO;QACL,GAAG,OAAO;QACV,kBAAkB,EAAE,CAAC,aAAa,EAAE,EAAE,CACpC,wBAAwB,CAAC,aAAa,EAAE;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,aAAgC,OAAO,CAAC,GAAG;IAE3C,MAAM,GAAG,GAAG,kCAAkC,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,uBAAuB,CAAC;YAChC,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EACL,6HAA6H;SAChI,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/secrets.d.ts

@@ -0,0 +1,2 @@
+export declare function assertNoSecrets(value: unknown, path?: string): void;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AASA,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,IAAI,SAAM,GACT,IAAI,CA4BN"}

package/dist/secrets.js

@@ -0,0 +1,34 @@
+import { MemorixPackageSeedError } from "./errors.js";
+const SECRET_KEY = /(?:^|[_.-])(password|secret|api[_-]?key|private[_-]?key|access[_-]?token)(?:$|[_.-])/i;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function assertNoSecrets(value, path = "$") {
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertNoSecrets(item, `${path}[${index}]`));
+        return;
+    }
+    if (!isRecord(value))
+        return;
+    for (const [key, child] of Object.entries(value)) {
+        const childPath = `${path}.${key}`;
+        if (key.endsWith("Ref")) {
+            assertNoSecrets(child, childPath);
+            continue;
+        }
+        if (SECRET_KEY.test(key)) {
+            if ((typeof child === "string" && child.trim().length > 0) ||
+                (typeof child === "number" && Number.isFinite(child)) ||
+                typeof child === "boolean") {
+                throw new MemorixPackageSeedError({
+                    code: "SECRET_DETECTED",
+                    message: `Secret-like literal value detected at ${childPath}`,
+                    field: childPath,
+                    value: "[redacted]",
+                });
+            }
+        }
+        assertNoSecrets(child, childPath);
+    }
+}
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,GACd,uFAAuF,CAAC;AAE1F,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,IAAI,GAAG,GAAG;IAEV,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IACE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;gBACtD,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrD,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;gBACD,MAAM,IAAI,uBAAuB,CAAC;oBAChC,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,yCAAyC,SAAS,EAAE;oBAC7D,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}