@xemahq/contracts 0.1.0

package/dist/skill/lib/skill-governance.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SKILL_EVAL_DEFAULT_PASS_RATE_THRESHOLD = exports.SkillAssertionGradingMethod = exports.SkillEvalRunStatus = exports.SkillEvalRunConfig = exports.SkillTriggerExpectation = exports.SkillLifecycleState = exports.SkillGovernanceAction = exports.SkillRiskIndicator = exports.SkillRiskTier = void 0;
+var SkillRiskTier;
+(function (SkillRiskTier) {
+    SkillRiskTier["Low"] = "low";
+    SkillRiskTier["Medium"] = "medium";
+    SkillRiskTier["High"] = "high";
+})(SkillRiskTier || (exports.SkillRiskTier = SkillRiskTier = {}));
+var SkillRiskIndicator;
+(function (SkillRiskIndicator) {
+    SkillRiskIndicator["ScriptResource"] = "script_resource";
+    SkillRiskIndicator["McpToolReference"] = "mcp_tool_reference";
+    SkillRiskIndicator["NetworkCall"] = "network_call";
+    SkillRiskIndicator["PathTraversal"] = "path_traversal";
+    SkillRiskIndicator["HardcodedCredential"] = "hardcoded_credential";
+    SkillRiskIndicator["ShellInvocation"] = "shell_invocation";
+})(SkillRiskIndicator || (exports.SkillRiskIndicator = SkillRiskIndicator = {}));
+var SkillGovernanceAction;
+(function (SkillGovernanceAction) {
+    SkillGovernanceAction["SubmitForReview"] = "submit_for_review";
+    SkillGovernanceAction["Approve"] = "approve";
+    SkillGovernanceAction["Reject"] = "reject";
+    SkillGovernanceAction["Deprecate"] = "deprecate";
+    SkillGovernanceAction["RestoreToDraft"] = "restore_to_draft";
+    SkillGovernanceAction["Rollback"] = "rollback";
+})(SkillGovernanceAction || (exports.SkillGovernanceAction = SkillGovernanceAction = {}));
+var SkillLifecycleState;
+(function (SkillLifecycleState) {
+    SkillLifecycleState["Draft"] = "draft";
+    SkillLifecycleState["InReview"] = "in_review";
+    SkillLifecycleState["Approved"] = "approved";
+    SkillLifecycleState["Deprecated"] = "deprecated";
+})(SkillLifecycleState || (exports.SkillLifecycleState = SkillLifecycleState = {}));
+var SkillTriggerExpectation;
+(function (SkillTriggerExpectation) {
+    SkillTriggerExpectation["ShouldTrigger"] = "should_trigger";
+    SkillTriggerExpectation["ShouldNotTrigger"] = "should_not_trigger";
+})(SkillTriggerExpectation || (exports.SkillTriggerExpectation = SkillTriggerExpectation = {}));
+var SkillEvalRunConfig;
+(function (SkillEvalRunConfig) {
+    SkillEvalRunConfig["WithSkill"] = "with_skill";
+    SkillEvalRunConfig["WithoutSkill"] = "without_skill";
+})(SkillEvalRunConfig || (exports.SkillEvalRunConfig = SkillEvalRunConfig = {}));
+var SkillEvalRunStatus;
+(function (SkillEvalRunStatus) {
+    SkillEvalRunStatus["Running"] = "running";
+    SkillEvalRunStatus["Completed"] = "completed";
+    SkillEvalRunStatus["Failed"] = "failed";
+})(SkillEvalRunStatus || (exports.SkillEvalRunStatus = SkillEvalRunStatus = {}));
+var SkillAssertionGradingMethod;
+(function (SkillAssertionGradingMethod) {
+    SkillAssertionGradingMethod["Mechanical"] = "mechanical";
+    SkillAssertionGradingMethod["LlmJudge"] = "llm_judge";
+})(SkillAssertionGradingMethod || (exports.SkillAssertionGradingMethod = SkillAssertionGradingMethod = {}));
+exports.SKILL_EVAL_DEFAULT_PASS_RATE_THRESHOLD = 0.8;
+//# sourceMappingURL=skill-governance.js.map

package/dist/skill/lib/skill-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-governance.js","sourceRoot":"","sources":["../../../src/skill/lib/skill-governance.ts"],"names":[],"mappings":";;;AAsBA,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,4BAAW,CAAA;IACX,kCAAiB,CAAA;IACjB,8BAAa,CAAA;AACf,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAaD,IAAY,kBAaX;AAbD,WAAY,kBAAkB;IAE5B,wDAAkC,CAAA;IAElC,6DAAuC,CAAA;IAEvC,kDAA4B,CAAA;IAE5B,sDAAgC,CAAA;IAEhC,kEAA4C,CAAA;IAE5C,0DAAoC,CAAA;AACtC,CAAC,EAbW,kBAAkB,kCAAlB,kBAAkB,QAa7B;AAyBD,IAAY,qBAOX;AAPD,WAAY,qBAAqB;IAC/B,8DAAqC,CAAA;IACrC,4CAAmB,CAAA;IACnB,0CAAiB,CAAA;IACjB,gDAAuB,CAAA;IACvB,4DAAmC,CAAA;IACnC,8CAAqB,CAAA;AACvB,CAAC,EAPW,qBAAqB,qCAArB,qBAAqB,QAOhC;AAOD,IAAY,mBAKX;AALD,WAAY,mBAAmB;IAC7B,sCAAe,CAAA;IACf,6CAAsB,CAAA;IACtB,4CAAqB,CAAA;IACrB,gDAAyB,CAAA;AAC3B,CAAC,EALW,mBAAmB,mCAAnB,mBAAmB,QAK9B;AAYD,IAAY,uBAKX;AALD,WAAY,uBAAuB;IAEjC,2DAAgC,CAAA;IAEhC,kEAAuC,CAAA;AACzC,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAuDD,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAE5B,8CAAwB,CAAA;IAExB,oDAA8B,CAAA;AAChC,CAAC,EALW,kBAAkB,kCAAlB,kBAAkB,QAK7B;AAMD,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAE5B,yCAAmB,CAAA;IAEnB,6CAAuB,CAAA;IAEvB,uCAAiB,CAAA;AACnB,CAAC,EAPW,kBAAkB,kCAAlB,kBAAkB,QAO7B;AASD,IAAY,2BAKX;AALD,WAAY,2BAA2B;IAErC,wDAAyB,CAAA;IAEzB,qDAAsB,CAAA;AACxB,CAAC,EALW,2BAA2B,2CAA3B,2BAA2B,QAKtC;AAgGY,QAAA,sCAAsC,GAAG,GAAG,CAAC"}

package/dist/skill/lib/skill-source.d.ts

@@ -0,0 +1,14 @@
+export interface SkillRepositorySpec {
+    readonly id: string;
+    readonly url: string;
+    readonly ref?: string;
+    readonly rootPath?: string;
+}
+export interface SkillRepositorySyncResult {
+    readonly repositoryId: string;
+    readonly resolvedRef: string;
+    readonly ingestedSkillSlugs: readonly string[];
+    readonly removedSkillSlugs: readonly string[];
+    readonly syncedAt: string;
+}
+//# sourceMappingURL=skill-source.d.ts.map

package/dist/skill/lib/skill-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-source.d.ts","sourceRoot":"","sources":["../../../src/skill/lib/skill-source.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAKtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAKD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/skill/lib/skill-source.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=skill-source.js.map

package/dist/skill/lib/skill-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-source.js","sourceRoot":"","sources":["../../../src/skill/lib/skill-source.ts"],"names":[],"mappings":""}

package/dist/skill/lib/skill.d.ts

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+import type { SpaceKind } from '../../space';
+import { type RevisionTarget } from '../../revision-target';
+import { SkillResourceType } from './skill-enums';
+import type { SkillSourceKind, SkillKind, SkillInjectionMode, SkillSurface } from './skill-enums';
+import type { SkillRiskTier, SkillLifecycleState } from './skill-governance';
+export interface SkillRef {
+    readonly slug: string;
+    readonly version?: string;
+}
+export interface SkillFrontmatter {
+    readonly name: string;
+    readonly description: string;
+    readonly license?: string | undefined;
+    readonly compatibility?: string | undefined;
+    readonly metadata?: Readonly<Record<string, string>> | undefined;
+    readonly allowedTools?: string | undefined;
+}
+export declare const AGENT_SKILL_NAME_PATTERN: RegExp;
+export declare const SkillFrontmatterSchema: z.ZodType<SkillFrontmatter>;
+export interface SkillResource {
+    readonly relPath: string;
+    readonly type: SkillResourceType;
+    readonly sizeBytes?: number;
+}
+export interface SkillManifest {
+    readonly slug: string;
+    readonly name: string;
+    readonly description: string;
+    readonly kind: SkillKind;
+    readonly scope: SpaceKind;
+    readonly sourceKind: SkillSourceKind;
+    readonly injectionMode: SkillInjectionMode;
+    readonly revisionNumber: number;
+    readonly parentSlug: string | null;
+    readonly lifecycleState: SkillLifecycleState;
+    readonly riskTier: SkillRiskTier;
+    readonly contentHash: string;
+    readonly resources: readonly SkillResource[];
+    readonly surfaces: readonly SkillSurface[] | null;
+}
+export interface SkillNode {
+    readonly manifest: SkillManifest;
+    readonly children: readonly SkillNode[];
+}
+export interface Skill {
+    readonly manifest: SkillManifest;
+    readonly skillMarkdown: string;
+}
+export interface SkillRevisionContent {
+    readonly schemaVersion: 2;
+    readonly skillMarkdown: string;
+    readonly resources: readonly {
+        readonly relPath: string;
+        readonly type: SkillResourceType;
+        readonly mode: SkillBundleFileMode;
+        readonly sizeBytes: number;
+        readonly content: string;
+    }[];
+    readonly dependencies: readonly RevisionTarget[];
+}
+export declare enum SkillBundleFileMode {
+    ReadOnly = "read-only",
+    Executable = "executable"
+}
+export declare const MAX_SKILL_MARKDOWN_BYTES = 1048576;
+export declare const MAX_SKILL_BUNDLE_FILE_BYTES = 4194304;
+export declare const MAX_SKILL_BUNDLE_BYTES = 16777216;
+export declare const MAX_SKILL_BUNDLE_FILES = 2048;
+export declare const MAX_SKILL_BUNDLE_PATH_BYTES = 512;
+export declare const SkillRevisionContentSchema: z.ZodType<SkillRevisionContent>;
+export declare function serializeSkillRevisionContent(input: unknown): string;
+export declare function computeSkillRevisionContentHash(input: unknown): Promise<string>;
+export declare function normalizeSkillRevisionContent(input: unknown): SkillRevisionContent;
+//# sourceMappingURL=skill.d.ts.map

package/dist/skill/lib/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../../../src/skill/lib/skill.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAM7C,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAO7E,MAAM,WAAW,QAAQ;IAEvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAQD,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAEjE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,eAAO,MAAM,wBAAwB,QAAgC,CAAC;AAGtE,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CASpD,CAAC;AAMZ,MAAM,WAAW,aAAa;IAE5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAEjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAMD,MAAM,WAAW,aAAa;IAE5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAMzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAE3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAM7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CAAC;CACnD;AAMD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;CACzC;AAMD,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAGD,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAE1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,SAAS,EAAE,SAAS;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACjC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;QACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;IAEJ,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;CAClD;AAED,oBAAY,mBAAmB;IAC7B,QAAQ,cAAc;IACtB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,wBAAwB,UAAY,CAAC;AAClD,eAAO,MAAM,2BAA2B,UAAY,CAAC;AACrD,eAAO,MAAM,sBAAsB,WAAa,CAAC;AACjD,eAAO,MAAM,sBAAsB,OAAQ,CAAC;AAC5C,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAW/C,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAgHnE,CAAC;AAUL,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpE;AAGD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,oBAAoB,CAGtB"}

package/dist/skill/lib/skill.js

@@ -0,0 +1,189 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillRevisionContentSchema = exports.MAX_SKILL_BUNDLE_PATH_BYTES = exports.MAX_SKILL_BUNDLE_FILES = exports.MAX_SKILL_BUNDLE_BYTES = exports.MAX_SKILL_BUNDLE_FILE_BYTES = exports.MAX_SKILL_MARKDOWN_BYTES = exports.SkillBundleFileMode = exports.SkillFrontmatterSchema = exports.AGENT_SKILL_NAME_PATTERN = void 0;
+exports.serializeSkillRevisionContent = serializeSkillRevisionContent;
+exports.computeSkillRevisionContentHash = computeSkillRevisionContentHash;
+exports.normalizeSkillRevisionContent = normalizeSkillRevisionContent;
+const zod_1 = require("zod");
+const content_address_1 = require("../../content-address");
+const revision_target_1 = require("../../revision-target");
+const skill_enums_1 = require("./skill-enums");
+exports.AGENT_SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+exports.SkillFrontmatterSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().min(1).max(64).regex(exports.AGENT_SKILL_NAME_PATTERN),
+    description: zod_1.z.string().min(1).max(1_024),
+    license: zod_1.z.string().min(1).optional(),
+    compatibility: zod_1.z.string().min(1).max(500).optional(),
+    metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional(),
+    allowedTools: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+var SkillBundleFileMode;
+(function (SkillBundleFileMode) {
+    SkillBundleFileMode["ReadOnly"] = "read-only";
+    SkillBundleFileMode["Executable"] = "executable";
+})(SkillBundleFileMode || (exports.SkillBundleFileMode = SkillBundleFileMode = {}));
+exports.MAX_SKILL_MARKDOWN_BYTES = 1_048_576;
+exports.MAX_SKILL_BUNDLE_FILE_BYTES = 4_194_304;
+exports.MAX_SKILL_BUNDLE_BYTES = 16_777_216;
+exports.MAX_SKILL_BUNDLE_FILES = 2_048;
+exports.MAX_SKILL_BUNDLE_PATH_BYTES = 512;
+const SKILL_REVISION_HASH_DOMAIN = 'xema-skill-revision-content-v2';
+const CANONICAL_BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
+const hasControlCharacter = (value) => [...value].some((character) => {
+    const codePoint = character.codePointAt(0);
+    return codePoint !== undefined && (codePoint <= 0x1f || codePoint === 0x7f);
+});
+exports.SkillRevisionContentSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(2),
+    skillMarkdown: zod_1.z.string(),
+    resources: zod_1.z
+        .array(zod_1.z
+        .object({
+        relPath: zod_1.z.string().min(1),
+        type: zod_1.z.nativeEnum(skill_enums_1.SkillResourceType),
+        mode: zod_1.z.nativeEnum(SkillBundleFileMode),
+        sizeBytes: zod_1.z
+            .number()
+            .int()
+            .nonnegative()
+            .max(exports.MAX_SKILL_BUNDLE_FILE_BYTES),
+        content: zod_1.z.string().regex(CANONICAL_BASE64),
+    })
+        .strict())
+        .max(exports.MAX_SKILL_BUNDLE_FILES)
+        .readonly(),
+    dependencies: zod_1.z.array(revision_target_1.RevisionTargetSchema).max(128).readonly(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const skillMarkdownBytes = new TextEncoder().encode(value.skillMarkdown).byteLength;
+    if (skillMarkdownBytes > exports.MAX_SKILL_MARKDOWN_BYTES) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.too_big,
+            maximum: exports.MAX_SKILL_MARKDOWN_BYTES,
+            origin: 'string',
+            inclusive: true,
+            path: ['skillMarkdown'],
+            message: `SKILL.md exceeds ${exports.MAX_SKILL_MARKDOWN_BYTES} UTF-8 bytes.`,
+        });
+    }
+    let totalBytes = skillMarkdownBytes;
+    const exactPaths = new Set(['SKILL.md']);
+    const foldedPaths = new Map([['skill.md', 'SKILL.md']]);
+    value.resources.forEach((resource, index) => {
+        addSkillPathIssues(resource.relPath, index, context);
+        const decodedSize = decodedBase64Size(resource.content);
+        if (decodedSize !== resource.sizeBytes) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['resources', index, 'sizeBytes'],
+                message: `sizeBytes must equal decoded content length ${decodedSize}.`,
+            });
+        }
+        totalBytes += decodedSize;
+        if (exactPaths.has(resource.relPath)) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['resources', index, 'relPath'],
+                message: 'Skill bundle paths must be unique and must not replace SKILL.md.',
+            });
+        }
+        exactPaths.add(resource.relPath);
+        const folded = resource.relPath
+            .normalize('NFC')
+            .toLocaleLowerCase('en-US');
+        const collision = foldedPaths.get(folded);
+        if (collision !== undefined && collision !== resource.relPath) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['resources', index, 'relPath'],
+                message: `Path collides with ${collision} after NFC/case normalization.`,
+            });
+        }
+        foldedPaths.set(folded, resource.relPath);
+        if (index > 0 &&
+            value.resources[index - 1].relPath >= resource.relPath) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['resources', index, 'relPath'],
+                message: 'Resources must be strictly sorted by relPath.',
+            });
+        }
+    });
+    if (totalBytes > exports.MAX_SKILL_BUNDLE_BYTES) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['resources'],
+            message: `Skill bundle exceeds ${exports.MAX_SKILL_BUNDLE_BYTES} decoded bytes.`,
+        });
+    }
+    value.dependencies.forEach((target, index) => {
+        if (target.resourceKind !== 'skill') {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['dependencies', index, 'resourceKind'],
+                message: 'Skill dependencies must target resourceKind "skill".',
+            });
+        }
+        if (index > 0 &&
+            (0, revision_target_1.revisionTargetKey)(value.dependencies[index - 1]) >=
+                (0, revision_target_1.revisionTargetKey)(target)) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['dependencies', index],
+                message: 'Dependencies must be unique and strictly sorted.',
+            });
+        }
+    });
+});
+function serializeSkillRevisionContent(input) {
+    return (0, content_address_1.canonicalJsonStringify)(normalizeSkillRevisionContent(input));
+}
+function computeSkillRevisionContentHash(input) {
+    return (0, content_address_1.canonicalContentHash)({
+        contract: SKILL_REVISION_HASH_DOMAIN,
+        content: normalizeSkillRevisionContent(input),
+    });
+}
+function normalizeSkillRevisionContent(input) {
+    const parsed = exports.SkillRevisionContentSchema.parse(input);
+    return (0, content_address_1.deepFreezeCanonicalJson)(parsed);
+}
+function decodedBase64Size(value) {
+    if (value.length === 0) {
+        return 0;
+    }
+    const padding = value.endsWith('==') ? 2 : value.endsWith('=') ? 1 : 0;
+    return (value.length / 4) * 3 - padding;
+}
+function addSkillPathIssues(relPath, index, context) {
+    const path = ['resources', index, 'relPath'];
+    const byteLength = new TextEncoder().encode(relPath).byteLength;
+    if (relPath.startsWith('/') ||
+        relPath.includes('\\') ||
+        hasControlCharacter(relPath) ||
+        relPath !== relPath.normalize('NFC') ||
+        byteLength > exports.MAX_SKILL_BUNDLE_PATH_BYTES) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: [...path],
+            message: 'Path must be relative NFC POSIX text within the path-size limit.',
+        });
+    }
+    const segments = relPath.split('/');
+    if (segments.some((segment) => segment.length === 0 ||
+        segment === '.' ||
+        segment === '..' ||
+        segment.endsWith(' ') ||
+        segment.endsWith('.'))) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: [...path],
+            message: 'Path contains an empty, dot, traversal, or noncanonical segment.',
+        });
+    }
+}
+//# sourceMappingURL=skill.js.map

package/dist/skill/lib/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../../../src/skill/lib/skill.ts"],"names":[],"mappings":";;;AA+SA,sEAEC;AAGD,0EAOC;AAED,sEAKC;AAxTD,6BAAwB;AAGxB,2DAI+B;AAC/B,2DAI+B;AAC/B,+CAAkD;AAuCrC,QAAA,wBAAwB,GAAG,6BAA6B,CAAC;AAGzD,QAAA,sBAAsB,GAAgC,OAAC;KACjE,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAwB,CAAC;IAC/D,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACzC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAuFZ,IAAY,mBAGX;AAHD,WAAY,mBAAmB;IAC7B,6CAAsB,CAAA;IACtB,gDAAyB,CAAA;AAC3B,CAAC,EAHW,mBAAmB,mCAAnB,mBAAmB,QAG9B;AAEY,QAAA,wBAAwB,GAAG,SAAS,CAAC;AACrC,QAAA,2BAA2B,GAAG,SAAS,CAAC;AACxC,QAAA,sBAAsB,GAAG,UAAU,CAAC;AACpC,QAAA,sBAAsB,GAAG,KAAK,CAAC;AAC/B,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAE/C,MAAM,0BAA0B,GAAG,gCAAyC,CAAC;AAC7E,MAAM,gBAAgB,GACpB,mEAAmE,CAAC;AACtE,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAW,EAAE,CACrD,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;IAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEQ,QAAA,0BAA0B,GAAoC,OAAC;KACzE,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,OAAC;SACT,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,+BAAiB,CAAC;QACrC,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;QACvC,SAAS,EAAE,OAAC;aACT,MAAM,EAAE;aACR,GAAG,EAAE;aACL,WAAW,EAAE;aACb,GAAG,CAAC,mCAA2B,CAAC;QACnC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;KAC5C,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,8BAAsB,CAAC;SAC3B,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,sCAAoB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAChE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,kBAAkB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACjD,KAAK,CAAC,aAAa,CACpB,CAAC,UAAU,CAAC;IACb,IAAI,kBAAkB,GAAG,gCAAwB,EAAE,CAAC;QAClD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,OAAO;YAC5B,OAAO,EAAE,gCAAwB;YACjC,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EAAE,oBAAoB,gCAAwB,eAAe;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,GAAG,kBAAkB,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC1C,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,WAAW,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC;gBACvC,OAAO,EAAE,+CAA+C,WAAW,GAAG;aACvE,CAAC,CAAC;QACL,CAAC;QACD,UAAU,IAAI,WAAW,CAAC;QAC1B,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC;gBACrC,OAAO,EACL,kEAAkE;aACrE,CAAC,CAAC;QACL,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO;aAC5B,SAAS,CAAC,KAAK,CAAC;aAChB,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC9D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC;gBACrC,OAAO,EAAE,sBAAsB,SAAS,gCAAgC;aACzE,CAAC,CAAC;QACL,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IACE,KAAK,GAAG,CAAC;YACT,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EACvD,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC;gBACrC,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,GAAG,8BAAsB,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,wBAAwB,8BAAsB,iBAAiB;SACzE,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACpC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC;gBAC7C,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;QACL,CAAC;QACD,IACE,KAAK,GAAG,CAAC;YACT,IAAA,mCAAiB,EAAC,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;gBAC/C,IAAA,mCAAiB,EAAC,MAAM,CAAC,EAC3B,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;gBAC7B,OAAO,EAAE,kDAAkD;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAUL,SAAgB,6BAA6B,CAAC,KAAc;IAC1D,OAAO,IAAA,wCAAsB,EAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAGD,SAAgB,+BAA+B,CAC7C,KAAc;IAEd,OAAO,IAAA,sCAAoB,EAAC;QAC1B,QAAQ,EAAE,0BAA0B;QACpC,OAAO,EAAE,6BAA6B,CAAC,KAAK,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAAc;IAEd,MAAM,MAAM,GAAG,kCAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,IAAA,yCAAuB,EAAC,MAAM,CAAyB,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAe,EACf,KAAa,EACb,OAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;IAChE,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,mBAAmB,CAAC,OAAO,CAAC;QAC5B,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QACpC,UAAU,GAAG,mCAA2B,EACxC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,OAAO,EACL,kEAAkE;SACrE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,IAAI;QAChB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,EACD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,OAAO,EACL,kEAAkE;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/skill/lib/system-skill-baseline.d.ts

@@ -0,0 +1,4 @@
+export declare const MANDATORY_SYSTEM_SKILL_SLUGS: readonly string[];
+export declare function isMandatorySystemSkill(slug: string): boolean;
+export declare function resolveSystemSkillSlugs(enabledSlugs: readonly string[]): readonly string[];
+//# sourceMappingURL=system-skill-baseline.d.ts.map

package/dist/skill/lib/system-skill-baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-skill-baseline.d.ts","sourceRoot":"","sources":["../../../src/skill/lib/system-skill-baseline.ts"],"names":[],"mappings":"AAuDA,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAIxD,CAAC;AASH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAeD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,SAAS,MAAM,EAAE,CAWnB"}

package/dist/skill/lib/system-skill-baseline.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANDATORY_SYSTEM_SKILL_SLUGS = void 0;
+exports.isMandatorySystemSkill = isMandatorySystemSkill;
+exports.resolveSystemSkillSlugs = resolveSystemSkillSlugs;
+exports.MANDATORY_SYSTEM_SKILL_SLUGS = Object.freeze([
+    'memory',
+    'scratch-workspace',
+    'deliverable-contract',
+]);
+function isMandatorySystemSkill(slug) {
+    return exports.MANDATORY_SYSTEM_SKILL_SLUGS.includes(slug);
+}
+function resolveSystemSkillSlugs(enabledSlugs) {
+    const seen = new Set(exports.MANDATORY_SYSTEM_SKILL_SLUGS);
+    const resolved = [...exports.MANDATORY_SYSTEM_SKILL_SLUGS];
+    for (const slug of enabledSlugs) {
+        if (seen.has(slug)) {
+            continue;
+        }
+        seen.add(slug);
+        resolved.push(slug);
+    }
+    return resolved;
+}
+//# sourceMappingURL=system-skill-baseline.js.map

package/dist/skill/lib/system-skill-baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-skill-baseline.js","sourceRoot":"","sources":["../../../src/skill/lib/system-skill-baseline.ts"],"names":[],"mappings":";;;AAoEA,wDAEC;AAeD,0DAaC;AA3CY,QAAA,4BAA4B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC3E,QAAQ;IACR,mBAAmB;IACnB,sBAAsB;CACvB,CAAC,CAAC;AASH,SAAgB,sBAAsB,CAAC,IAAY;IACjD,OAAO,oCAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAeD,SAAgB,uBAAuB,CACrC,YAA+B;IAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,oCAA4B,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,CAAC,GAAG,oCAA4B,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/space/index.d.ts

@@ -0,0 +1,10 @@
+export * from './lib/space';
+export * from './lib/space-classification';
+export * from './lib/space-kind-rank';
+export * from './lib/space-promotion';
+export * from './lib/space-ref-parser';
+export * from './lib/space-traversal';
+export * from './lib/owner-space-ref';
+export * from './lib/owner-space-projection';
+export * from './lib/exact-resolution-owner';
+//# sourceMappingURL=index.d.ts.map

package/dist/space/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC"}

package/dist/space/index.js

@@ -0,0 +1,26 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/space"), exports);
+__exportStar(require("./lib/space-classification"), exports);
+__exportStar(require("./lib/space-kind-rank"), exports);
+__exportStar(require("./lib/space-promotion"), exports);
+__exportStar(require("./lib/space-ref-parser"), exports);
+__exportStar(require("./lib/space-traversal"), exports);
+__exportStar(require("./lib/owner-space-ref"), exports);
+__exportStar(require("./lib/owner-space-projection"), exports);
+__exportStar(require("./lib/exact-resolution-owner"), exports);
+//# sourceMappingURL=index.js.map

package/dist/space/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,6DAA2C;AAC3C,wDAAsC;AACtC,wDAAsC;AACtC,yDAAuC;AACvC,wDAAsC;AACtC,wDAAsC;AACtC,+DAA6C;AAC7C,+DAA6C"}

package/dist/space/lib/exact-resolution-owner.d.ts

@@ -0,0 +1,20 @@
+import { type OwnerSpaceRef } from './owner-space-ref';
+export declare enum ExactResolutionOwnerVerdict {
+    SameOwner = "same-owner",
+    PlatformCanonical = "platform-canonical",
+    RequestedOwnerForeignTenant = "requested-owner-foreign-tenant",
+    ResolvedOwnerForeignTenant = "resolved-owner-foreign-tenant",
+    BiomeTierNotEntitled = "biome-tier-not-entitled",
+    OwnerMismatch = "owner-mismatch",
+    RequestedOwnerMalformed = "requested-owner-malformed",
+    ResolvedOwnerMalformed = "resolved-owner-malformed"
+}
+export declare function isOwnerSpaceRefWithinTenant(owner: OwnerSpaceRef, callerOrgId: string): boolean;
+export declare function judgeExactResolutionOwner(input: {
+    readonly requestedOwner: OwnerSpaceRef;
+    readonly resolvedOwner: OwnerSpaceRef;
+    readonly callerOrgId: string;
+}): ExactResolutionOwnerVerdict;
+export declare function isExactResolutionOwnerAdmitted(verdict: ExactResolutionOwnerVerdict): boolean;
+export declare const EXACT_RESOLUTION_OWNER_VERDICT_REASON: Readonly<Record<ExactResolutionOwnerVerdict, string>>;
+//# sourceMappingURL=exact-resolution-owner.d.ts.map

package/dist/space/lib/exact-resolution-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact-resolution-owner.d.ts","sourceRoot":"","sources":["../../../src/space/lib/exact-resolution-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAoD3B,oBAAY,2BAA2B;IAErC,SAAS,eAAe;IASxB,iBAAiB,uBAAuB;IAExC,2BAA2B,mCAAmC;IAE9D,0BAA0B,kCAAkC;IAW5D,oBAAoB,4BAA4B;IAEhD,aAAa,mBAAmB;IAEhC,uBAAuB,8BAA8B;IAErD,sBAAsB,6BAA6B;CACpD;AAYD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,aAAa,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAET;AASD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAE/C,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;IAEvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GAAG,2BAA2B,CAyC9B;AAaD,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAET;AAOD,eAAO,MAAM,qCAAqC,EAAE,QAAQ,CAC1D,MAAM,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAkB3C,CAAC"}

package/dist/space/lib/exact-resolution-owner.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXACT_RESOLUTION_OWNER_VERDICT_REASON = exports.ExactResolutionOwnerVerdict = void 0;
+exports.isOwnerSpaceRefWithinTenant = isOwnerSpaceRefWithinTenant;
+exports.judgeExactResolutionOwner = judgeExactResolutionOwner;
+exports.isExactResolutionOwnerAdmitted = isExactResolutionOwnerAdmitted;
+const owner_space_ref_1 = require("./owner-space-ref");
+const space_1 = require("./space");
+var ExactResolutionOwnerVerdict;
+(function (ExactResolutionOwnerVerdict) {
+    ExactResolutionOwnerVerdict["SameOwner"] = "same-owner";
+    ExactResolutionOwnerVerdict["PlatformCanonical"] = "platform-canonical";
+    ExactResolutionOwnerVerdict["RequestedOwnerForeignTenant"] = "requested-owner-foreign-tenant";
+    ExactResolutionOwnerVerdict["ResolvedOwnerForeignTenant"] = "resolved-owner-foreign-tenant";
+    ExactResolutionOwnerVerdict["BiomeTierNotEntitled"] = "biome-tier-not-entitled";
+    ExactResolutionOwnerVerdict["OwnerMismatch"] = "owner-mismatch";
+    ExactResolutionOwnerVerdict["RequestedOwnerMalformed"] = "requested-owner-malformed";
+    ExactResolutionOwnerVerdict["ResolvedOwnerMalformed"] = "resolved-owner-malformed";
+})(ExactResolutionOwnerVerdict || (exports.ExactResolutionOwnerVerdict = ExactResolutionOwnerVerdict = {}));
+function isOwnerSpaceRefWithinTenant(owner, callerOrgId) {
+    return owner.fence === owner_space_ref_1.OwnerSpaceFence.Tenant && owner.orgId === callerOrgId;
+}
+function judgeExactResolutionOwner(input) {
+    const requestedOwner = reparseOwner(input.requestedOwner);
+    if (requestedOwner === undefined) {
+        return ExactResolutionOwnerVerdict.RequestedOwnerMalformed;
+    }
+    const resolvedOwner = reparseOwner(input.resolvedOwner);
+    if (resolvedOwner === undefined) {
+        return ExactResolutionOwnerVerdict.ResolvedOwnerMalformed;
+    }
+    if (resolvedOwner.fence === owner_space_ref_1.OwnerSpaceFence.Tenant &&
+        !isOwnerSpaceRefWithinTenant(resolvedOwner, input.callerOrgId)) {
+        return ExactResolutionOwnerVerdict.ResolvedOwnerForeignTenant;
+    }
+    if (requestedOwner.fence === owner_space_ref_1.OwnerSpaceFence.Tenant &&
+        !isOwnerSpaceRefWithinTenant(requestedOwner, input.callerOrgId)) {
+        return ExactResolutionOwnerVerdict.RequestedOwnerForeignTenant;
+    }
+    if ((0, owner_space_ref_1.formatOwnerSpaceKey)(resolvedOwner) === (0, owner_space_ref_1.formatOwnerSpaceKey)(requestedOwner)) {
+        return ExactResolutionOwnerVerdict.SameOwner;
+    }
+    if (resolvedOwner.space.tier === space_1.SpaceKind.System) {
+        return ExactResolutionOwnerVerdict.PlatformCanonical;
+    }
+    if (resolvedOwner.space.tier === space_1.SpaceKind.Biome) {
+        return ExactResolutionOwnerVerdict.BiomeTierNotEntitled;
+    }
+    return ExactResolutionOwnerVerdict.OwnerMismatch;
+}
+function reparseOwner(value) {
+    const parsed = owner_space_ref_1.OwnerSpaceRefSchema.safeParse(value);
+    return parsed.success ? parsed.data : undefined;
+}
+const ADMITTED_VERDICTS = new Set([
+    ExactResolutionOwnerVerdict.SameOwner,
+    ExactResolutionOwnerVerdict.PlatformCanonical,
+]);
+function isExactResolutionOwnerAdmitted(verdict) {
+    return ADMITTED_VERDICTS.has(verdict);
+}
+exports.EXACT_RESOLUTION_OWNER_VERDICT_REASON = Object.freeze({
+    [ExactResolutionOwnerVerdict.SameOwner]: 'The authority returned the owner that was named.',
+    [ExactResolutionOwnerVerdict.PlatformCanonical]: 'The authority returned platform-shipped System-owned content, which every tenant may resolve.',
+    [ExactResolutionOwnerVerdict.RequestedOwnerForeignTenant]: 'The reference names an owner belonging to another tenant.',
+    [ExactResolutionOwnerVerdict.ResolvedOwnerForeignTenant]: 'The authority returned a resource owned by another tenant.',
+    [ExactResolutionOwnerVerdict.BiomeTierNotEntitled]: 'Biome-owned content requires a proven installation entitlement, which this deployment cannot yet establish.',
+    [ExactResolutionOwnerVerdict.OwnerMismatch]: 'The authority returned a resource owned by neither the named owner nor the platform.',
+    [ExactResolutionOwnerVerdict.RequestedOwnerMalformed]: 'The reference named an owner that is not a well-formed canonical owner.',
+    [ExactResolutionOwnerVerdict.ResolvedOwnerMalformed]: 'The authority returned an owner that is not a well-formed canonical owner.',
+});
+//# sourceMappingURL=exact-resolution-owner.js.map

package/dist/space/lib/exact-resolution-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact-resolution-owner.js","sourceRoot":"","sources":["../../../src/space/lib/exact-resolution-owner.ts"],"names":[],"mappings":";;;AAsGA,kEAKC;AASD,8DAgDC;AAaD,wEAIC;AArLD,uDAK2B;AAC3B,mCAAoC;AAmDpC,IAAY,2BAiCX;AAjCD,WAAY,2BAA2B;IAErC,uDAAwB,CAAA;IASxB,uEAAwC,CAAA;IAExC,6FAA8D,CAAA;IAE9D,2FAA4D,CAAA;IAW5D,+EAAgD,CAAA;IAEhD,+DAAgC,CAAA;IAEhC,oFAAqD,CAAA;IAErD,kFAAmD,CAAA;AACrD,CAAC,EAjCW,2BAA2B,2CAA3B,2BAA2B,QAiCtC;AAYD,SAAgB,2BAA2B,CACzC,KAAoB,EACpB,WAAmB;IAEnB,OAAO,KAAK,CAAC,KAAK,KAAK,iCAAe,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC;AAC/E,CAAC;AASD,SAAgB,yBAAyB,CAAC,KAOzC;IACC,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,2BAA2B,CAAC,uBAAuB,CAAC;IAC7D,CAAC;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,2BAA2B,CAAC,sBAAsB,CAAC;IAC5D,CAAC;IAID,IACE,aAAa,CAAC,KAAK,KAAK,iCAAe,CAAC,MAAM;QAC9C,CAAC,2BAA2B,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAC9D,CAAC;QACD,OAAO,2BAA2B,CAAC,0BAA0B,CAAC;IAChE,CAAC;IACD,IACE,cAAc,CAAC,KAAK,KAAK,iCAAe,CAAC,MAAM;QAC/C,CAAC,2BAA2B,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,EAC/D,CAAC;QACD,OAAO,2BAA2B,CAAC,2BAA2B,CAAC;IACjE,CAAC;IAED,IACE,IAAA,qCAAmB,EAAC,aAAa,CAAC,KAAK,IAAA,qCAAmB,EAAC,cAAc,CAAC,EAC1E,CAAC;QACD,OAAO,2BAA2B,CAAC,SAAS,CAAC;IAC/C,CAAC;IAID,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,MAAM,EAAE,CAAC;QAClD,OAAO,2BAA2B,CAAC,iBAAiB,CAAC;IACvD,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,KAAK,EAAE,CAAC;QACjD,OAAO,2BAA2B,CAAC,oBAAoB,CAAC;IAC1D,CAAC;IAED,OAAO,2BAA2B,CAAC,aAAa,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,MAAM,GAAG,qCAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAGD,MAAM,iBAAiB,GAA6C,IAAI,GAAG,CAAC;IAC1E,2BAA2B,CAAC,SAAS;IACrC,2BAA2B,CAAC,iBAAiB;CAC9C,CAAC,CAAC;AAEH,SAAgB,8BAA8B,CAC5C,OAAoC;IAEpC,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAOY,QAAA,qCAAqC,GAE9C,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,2BAA2B,CAAC,SAAS,CAAC,EACrC,kDAAkD;IACpD,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,EAC7C,+FAA+F;IACjG,CAAC,2BAA2B,CAAC,2BAA2B,CAAC,EACvD,2DAA2D;IAC7D,CAAC,2BAA2B,CAAC,0BAA0B,CAAC,EACtD,4DAA4D;IAC9D,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,EAChD,6GAA6G;IAC/G,CAAC,2BAA2B,CAAC,aAAa,CAAC,EACzC,sFAAsF;IACxF,CAAC,2BAA2B,CAAC,uBAAuB,CAAC,EACnD,yEAAyE;IAC3E,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,EAClD,4EAA4E;CAC/E,CAAC,CAAC"}

package/dist/space/lib/owner-space-projection.d.ts

@@ -0,0 +1,4 @@
+import { type OwnerSpaceRef } from './owner-space-ref';
+import { type SpaceRef } from './space';
+export declare function ownerSpaceRefForSpace(space: SpaceRef, orgId: string | null): OwnerSpaceRef;
+//# sourceMappingURL=owner-space-projection.d.ts.map

package/dist/space/lib/owner-space-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-space-projection.d.ts","sourceRoot":"","sources":["../../../src/space/lib/owner-space-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AAgEnD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,QAAQ,EACf,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,aAAa,CAmBf"}

package/dist/space/lib/owner-space-projection.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ownerSpaceRefForSpace = ownerSpaceRefForSpace;
+const owner_space_ref_1 = require("./owner-space-ref");
+const space_1 = require("./space");
+function ownerSpaceRefForSpace(space, orgId) {
+    if (space.tier === space_1.SpaceKind.System || space.tier === space_1.SpaceKind.Biome) {
+        return (0, owner_space_ref_1.parseOwnerSpaceRef)({
+            fence: owner_space_ref_1.OwnerSpaceFence.Global,
+            orgId: null,
+            space,
+        });
+    }
+    if (orgId === null) {
+        throw new Error(`A ${space.tier} space has no owner without an organization: ` +
+            'only System and Biome spaces are org-less.');
+    }
+    return (0, owner_space_ref_1.parseOwnerSpaceRef)({
+        fence: owner_space_ref_1.OwnerSpaceFence.Tenant,
+        orgId,
+        space,
+    });
+}
+//# sourceMappingURL=owner-space-projection.js.map

package/dist/space/lib/owner-space-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-space-projection.js","sourceRoot":"","sources":["../../../src/space/lib/owner-space-projection.ts"],"names":[],"mappings":";;AAqEA,sDAsBC;AA3FD,uDAI2B;AAC3B,mCAAmD;AAgEnD,SAAgB,qBAAqB,CACnC,KAAe,EACf,KAAoB;IAEpB,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,IAAA,oCAAkB,EAAC;YACxB,KAAK,EAAE,iCAAe,CAAC,MAAM;YAC7B,KAAK,EAAE,IAAI;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,KAAK,KAAK,CAAC,IAAI,+CAA+C;YAC5D,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,oCAAkB,EAAC;QACxB,KAAK,EAAE,iCAAe,CAAC,MAAM;QAC7B,KAAK;QACL,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist/space/lib/owner-space-ref.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+import { type SpaceRef } from './space';
+export declare enum OwnerSpaceFence {
+    Global = "global",
+    Tenant = "tenant"
+}
+export declare const OwnerSpaceFenceSchema: z.ZodEnum<typeof OwnerSpaceFence>;
+export interface GlobalOwnerSpaceRef {
+    readonly fence: OwnerSpaceFence.Global;
+    readonly orgId: null;
+    readonly space: SpaceRef;
+}
+export interface TenantOwnerSpaceRef {
+    readonly fence: OwnerSpaceFence.Tenant;
+    readonly orgId: string;
+    readonly space: SpaceRef;
+}
+export type OwnerSpaceRef = GlobalOwnerSpaceRef | TenantOwnerSpaceRef;
+export declare const OwnerSpaceRefSchema: z.ZodType<OwnerSpaceRef>;
+export declare function parseOwnerSpaceRef(value: unknown): OwnerSpaceRef;
+export declare function formatOwnerSpaceKey(value: OwnerSpaceRef): string;
+export declare function parseOwnerSpaceKey(value: string): OwnerSpaceRef;
+//# sourceMappingURL=owner-space-ref.d.ts.map