@zaip-ai/cli 0.1.0 → 1.0.1

package/dist/services/runtime-template.test.js

@@ -0,0 +1,199 @@
+import { spawnSync } from "node:child_process";
+import { mkdir, mkdtemp, readdir, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { afterEach, describe, expect, it } from "vitest";
+import { doctorProject } from "./doctor.js";
+import { installAgentsTemplate } from "./install-agents-template.js";
+import { loadTemplate, validateTemplatePath } from "./template-manifest.js";
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
+const templateDirectory = resolve(packageRoot, "templates");
+const roots = [];
+let turnSequence = 0;
+afterEach(async () => {
+    await Promise.all(roots.splice(0).map((root) => rm(root, { recursive: true, force: true })));
+});
+describe("public lifecycle runtime template", { timeout: 90_000 }, () => {
+    it("rejects descendants of allowlisted runtime files", () => {
+        expect(() => validateTemplatePath(".zaip-aios/LICENSE/payload")).toThrow("outside");
+        expect(() => validateTemplatePath(".zaip-aios/bin/zaip.mjs")).not.toThrow();
+    });
+    it.each([
+        "after-stage",
+        "after-backup",
+        "after-runtime",
+        "after-manifest",
+    ])("restores runtime and manifest after an injected %s sync failure", async (failurePoint) => {
+        const root = await mkdtemp(join(tmpdir(), "zaip-runtime-sync-rollback-"));
+        roots.push(root);
+        const templates = resolve(root, "templates");
+        const runtime = resolve(templates, ".zaip-aios");
+        const manifestPath = resolve(templates, "template-manifest.json");
+        const originalManifest = `${JSON.stringify({ files: [], marker: "original" })}\n`;
+        await mkdir(runtime, { recursive: true });
+        await writeFile(resolve(runtime, "original.txt"), "preserve-me", "utf8");
+        await mkdir(resolve(runtime, "nested"), { recursive: true });
+        await writeFile(resolve(runtime, "nested/state.bin"), Buffer.from([0, 1, 2, 255]));
+        await writeFile(manifestPath, originalManifest, "utf8");
+        const before = await snapshotTree(templates);
+        const result = spawnSync(process.execPath, [resolve(packageRoot, "scripts/sync-runtime-template.mjs")], {
+            cwd: packageRoot,
+            encoding: "utf8",
+            windowsHide: true,
+            env: {
+                ...process.env,
+                ZAIP_PUBLIC_TEMPLATE_ROOT: templates,
+                ZAIP_RUNTIME_SYNC_FAIL_AT: failurePoint,
+            },
+        });
+        expect(result.status).not.toBe(0);
+        expect(await snapshotTree(templates)).toEqual(before);
+    });
+    it("installs the checksum-verified runtime used by generated guidance", async () => {
+        const template = await loadTemplate(templateDirectory, "1.0.1");
+        const runtime = template.files.find((file) => file.path === ".zaip-aios/bin/zaip.mjs");
+        expect(runtime?.binary).toBe(true);
+        expect(runtime?.content).toEqual(await readFile(resolve(templateDirectory, ".zaip-aios/bin/zaip.mjs")));
+        expect(template.manifest.runtimeFilesSha256).toMatch(/^[a-f0-9]{64}$/);
+    });
+    it("executes capture and activation commands in a clean installed workspace", async () => {
+        const root = await mkdtemp(join(tmpdir(), "zaip-public-runtime-"));
+        roots.push(root);
+        await installAgentsTemplate({ cwd: root, templateDirectory, cliVersion: "1.0.1" });
+        const runtime = resolve(root, ".zaip-aios/bin/zaip.mjs");
+        expect(run(runtime, root, ["status", "--json"]).enabled).toBe(true);
+        expect(run(runtime, root, ["disable", "--json"]).enabled).toBe(false);
+        expect(run(runtime, root, ["status", "--json"]).enabled).toBe(false);
+        expect(run(runtime, root, ["enable", "--json"]).enabled).toBe(true);
+        expect(run(runtime, root, ["conversation", "start", "--intent", "conversation", "--json"]).run).toMatchObject({ phase: "conversation", task_id: null });
+    });
+    it("reports a missing runtime and restores it transactionally", async () => {
+        const root = await mkdtemp(join(tmpdir(), "zaip-public-runtime-missing-"));
+        roots.push(root);
+        await installAgentsTemplate({ cwd: root, templateDirectory, cliVersion: "1.0.1" });
+        const runtime = resolve(root, ".zaip-aios/bin/zaip.mjs");
+        await rm(runtime);
+        await expect(doctorProject(root)).resolves.toMatchObject({
+            valid: false,
+            findings: expect.arrayContaining([
+                expect.objectContaining({
+                    path: ".zaip-aios/bin/zaip.mjs",
+                    message: expect.stringContaining("runtime"),
+                }),
+            ]),
+        });
+        const repaired = await installAgentsTemplate({
+            cwd: root,
+            templateDirectory,
+            cliVersion: "1.0.1",
+        });
+        expect(repaired.applied).toBe(true);
+        expect(repaired.created).toContain(".zaip-aios/bin/zaip.mjs");
+        await expect(readFile(runtime)).resolves.toHaveLength((await readFile(resolve(templateDirectory, ".zaip-aios/bin/zaip.mjs"))).length);
+    });
+    it("converges attributed work when a public runtime Run finishes", async () => {
+        const root = await mkdtemp(join(tmpdir(), "zaip-public-runtime-closure-"));
+        roots.push(root);
+        await installAgentsTemplate({ cwd: root, templateDirectory, cliVersion: "1.0.1" });
+        const runtime = resolve(root, ".zaip-aios/bin/zaip.mjs");
+        const ids = {
+            task: "TASK-2026-07-17-21-03-PUBLIC-CLOSURE-A7K2",
+            change: "CHG-2026-07-17-21-03-PUBLIC-CLOSURE-A7K2",
+            execution: "EXEC-2026-07-17-21-03-PUBLIC-CLOSURE-A7K2",
+            run: "RUN-2026-07-17-21-03-PUBLIC-CLOSURE-A7K2",
+        };
+        expect(run(runtime, root, [
+            "task",
+            "create",
+            "--id",
+            ids.task,
+            "--change",
+            ids.change,
+            "--execution",
+            ids.execution,
+            "--title",
+            "Public closure",
+            "--short-name",
+            "public-closure",
+            "--objective",
+            "Prove public terminal convergence",
+            "--requirements",
+            "REQ-WORK-006",
+            "--acceptance",
+            "AC-WORK-006-01,AC-WORK-006-04",
+            "--write-scopes",
+            "packages/public",
+            "--json",
+        ]).task).toMatchObject({ status: "draft" });
+        expect(run(runtime, root, ["task", "prepare", ids.task, "--execution", ids.execution, "--json"])
+            .task).toMatchObject({ status: "planned" });
+        run(runtime, root, ["task", "execute", ids.task, "--json"]);
+        run(runtime, root, [
+            "run",
+            "start",
+            "--id",
+            ids.run,
+            "--short-name",
+            "public-closure",
+            "--phase",
+            "execution",
+            "--entrypoint",
+            "task",
+            "--work-type",
+            "new",
+            "--client",
+            "codex",
+            "--model",
+            "gpt-5.6-terra",
+            "--execution",
+            ids.execution,
+            "--task",
+            ids.task,
+            "--change",
+            ids.change,
+            "--json",
+        ]);
+        const finished = run(runtime, root, [
+            "run",
+            "finish",
+            ids.run,
+            "--summary",
+            "No completed assurance was supplied",
+            "--json",
+        ]);
+        expect(finished.reconciliation).toMatchObject({ outcome: "blocked" });
+        expect(run(runtime, root, ["task", "show", ids.task, "--json"]).task).toMatchObject({
+            status: "blocked",
+            status_reason: expect.stringContaining("Finalization barrier missing"),
+        });
+    });
+});
+function run(runtime, cwd, arguments_) {
+    const result = spawnSync(process.execPath, [runtime, ...arguments_], {
+        cwd,
+        encoding: "utf8",
+        windowsHide: true,
+        env: {
+            ...process.env,
+            CODEX_THREAD_ID: "runtime-template-test-thread",
+            CODEX_TURN_ID: `runtime-template-test-${++turnSequence}`,
+        },
+    });
+    if (result.status !== 0) {
+        throw new Error(`Runtime command failed (${result.status}): ${result.stderr || result.stdout}`);
+    }
+    return JSON.parse(result.stdout);
+}
+async function snapshotTree(root) {
+    const entries = await readdir(root, { recursive: true, withFileTypes: true });
+    const files = entries
+        .filter((entry) => entry.isFile())
+        .map((entry) => resolve(entry.parentPath, entry.name))
+        .sort();
+    return Object.fromEntries(await Promise.all(files.map(async (path) => [
+        relative(root, path).replaceAll("\\", "/"),
+        (await readFile(path)).toString("base64"),
+    ])));
+}
+//# sourceMappingURL=runtime-template.test.js.map

package/dist/services/runtime-template.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-template.test.js","sourceRoot":"","sources":["../../src/services/runtime-template.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9E,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,aAAa;QACb,cAAc;QACd,eAAe;QACf,gBAAgB;KACjB,CAAC,CAAC,iEAAiE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;QAC3F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAClE,MAAM,gBAAgB,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC;QAClF,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,SAAS,CAAC,YAAY,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,CAAC,QAAQ,EAChB,CAAC,OAAO,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC,EAC3D;YACE,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,yBAAyB,EAAE,SAAS;gBACpC,yBAAyB,EAAE,YAAY;aACxC;SACF,CACF,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC;QAEvF,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,CAC9B,MAAM,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,CACtE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QAEzD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CACJ,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CACxF,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QAElB,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YACvD,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC;gBAC/B,MAAM,CAAC,gBAAgB,CAAC;oBACtB,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;iBAC5C,CAAC;aACH,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;YAC3C,GAAG,EAAE,IAAI;YACT,iBAAiB;YACjB,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CACnD,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,MAAM,CAC/E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,2CAA2C;YACjD,MAAM,EAAE,0CAA0C;YAClD,SAAS,EAAE,2CAA2C;YACtD,GAAG,EAAE,0CAA0C;SACvC,CAAC;QAEX,MAAM,CACJ,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;YACjB,MAAM;YACN,QAAQ;YACR,MAAM;YACN,GAAG,CAAC,IAAI;YACR,UAAU;YACV,GAAG,CAAC,MAAM;YACV,aAAa;YACb,GAAG,CAAC,SAAS;YACb,SAAS;YACT,gBAAgB;YAChB,cAAc;YACd,gBAAgB;YAChB,aAAa;YACb,mCAAmC;YACnC,gBAAgB;YAChB,cAAc;YACd,cAAc;YACd,+BAA+B;YAC/B,gBAAgB;YAChB,iBAAiB;YACjB,QAAQ;SACT,CAAC,CAAC,IAAI,CACR,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,CACJ,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;aACtF,IAAI,CACR,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;YACjB,KAAK;YACL,OAAO;YACP,MAAM;YACN,GAAG,CAAC,GAAG;YACP,cAAc;YACd,gBAAgB;YAChB,SAAS;YACT,WAAW;YACX,cAAc;YACd,MAAM;YACN,aAAa;YACb,KAAK;YACL,UAAU;YACV,OAAO;YACP,SAAS;YACT,eAAe;YACf,aAAa;YACb,GAAG,CAAC,SAAS;YACb,QAAQ;YACR,GAAG,CAAC,IAAI;YACR,UAAU;YACV,GAAG,CAAC,MAAM;YACV,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;YAClC,KAAK;YACL,QAAQ;YACR,GAAG,CAAC,GAAG;YACP,WAAW;YACX,qCAAqC;YACrC,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;YAClF,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,8BAA8B,CAAC;SACvE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW,EAAE,UAA6B;IACtE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,EAAE;QACnE,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;QACjB,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,eAAe,EAAE,8BAA8B;YAC/C,aAAa,EAAE,yBAAyB,EAAE,YAAY,EAAE;SACzD;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA4B,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SACrD,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;QAC1C,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1C,CAAC,CACH,CACF,CAAC;AACJ,CAAC"}

package/dist/services/template-manifest.d.ts

@@ -1,23 +1,27 @@
 export interface TemplateManifestFile {
     path: string;
     sha256: string;
+    binary?: boolean;
 }
 export interface TemplateManifest {
     schemaVersion: 1;
     templateVersion: string;
     minimumCliVersion: string;
     source: string;
+    sourceFilesSha256: string;
+    runtimeFilesSha256: string;
     files: readonly TemplateManifestFile[];
 }
 export interface LoadedTemplateFile extends TemplateManifestFile {
-    content: string;
+    content: string | Buffer;
 }
 export interface LoadedTemplate {
     manifest: TemplateManifest;
     files: readonly LoadedTemplateFile[];
 }
 export declare function defaultTemplateDirectory(): string;
-export declare function loadTemplate(directory?: string): Promise<LoadedTemplate>;
+export declare function loadTemplate(directory?: string, currentCliVersion?: string): Promise<LoadedTemplate>;
 export declare function validateTemplatePath(path: string): void;
 export declare function sha256(content: string | Buffer): string;
+export declare function digestRuntimeFiles(files: readonly Pick<LoadedTemplateFile, "path" | "content">[]): string;
 //# sourceMappingURL=template-manifest.d.ts.map

package/dist/services/template-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template-manifest.d.ts","sourceRoot":"","sources":["../../src/services/template-manifest.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,CAAC,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtC;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAsB,YAAY,CAChC,SAAS,SAA6B,GACrC,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAmBvD;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEvD"}
+{"version":3,"file":"template-manifest.d.ts","sourceRoot":"","sources":["../../src/services/template-manifest.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,CAAC,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtC;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAsB,YAAY,CAChC,SAAS,SAA6B,EACtC,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,cAAc,CAAC,CAmCzB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAyDvD;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,GAC7D,MAAM,CAQR"}

package/dist/services/template-manifest.js

@@ -5,40 +5,96 @@ import { fileURLToPath } from "node:url";
 export function defaultTemplateDirectory() {
     return resolve(dirname(fileURLToPath(import.meta.url)), "../../templates");
 }
-export async function loadTemplate(directory = defaultTemplateDirectory()) {
+export async function loadTemplate(directory = defaultTemplateDirectory(), currentCliVersion) {
     const manifestPath = resolve(directory, "template-manifest.json");
     const parsed = JSON.parse(await readFile(manifestPath, "utf8"));
     const manifest = validateManifest(parsed);
+    if (currentCliVersion !== undefined &&
+        compareVersions(currentCliVersion, manifest.minimumCliVersion) < 0) {
+        throw new Error(`Template ${manifest.templateVersion} requires CLI ${manifest.minimumCliVersion} or newer; current CLI is ${currentCliVersion}`);
+    }
     const files = [];
     for (const record of manifest.files) {
         const absolute = resolve(directory, record.path);
-        const content = await readFile(absolute, "utf8");
+        const bytes = await readFile(absolute);
+        const content = record.binary ? bytes : bytes.toString("utf8");
         const actual = sha256(content);
         if (actual !== record.sha256) {
             throw new Error(`Template integrity check failed for ${record.path}: expected ${record.sha256}, got ${actual}`);
         }
         files.push({ ...record, content });
     }
+    const runtimeFilesSha256 = digestRuntimeFiles(files);
+    if (runtimeFilesSha256 !== manifest.runtimeFilesSha256) {
+        throw new Error(`Runtime template digest drifted: expected ${manifest.runtimeFilesSha256}, got ${runtimeFilesSha256}`);
+    }
     return { manifest, files };
 }
 export function validateTemplatePath(path) {
-    if (!path.startsWith(".agents/") ||
-        path.includes("\\") ||
+    if (path.includes("\\") ||
         path.includes("\0") ||
         path.startsWith("/") ||
         /^[A-Za-z]:/.test(path) ||
         path.split("/").some((part) => part.length === 0 || part === "." || part === "..")) {
         throw new Error(`Unsafe template path: ${path}`);
     }
-    const root = path.split("/")[1];
-    if (root === undefined ||
-        !new Set(["config", "rules", "requirements", "skills", "data"]).has(root)) {
-        throw new Error(`Template path is outside the public V2 roots: ${path}`);
+    const parts = path.split("/");
+    const [namespace, root] = parts;
+    if (namespace === ".agents") {
+        if (root === undefined ||
+            !new Set([
+                "config",
+                "rules",
+                "requirements",
+                "skills",
+                "zaip-aios",
+                "tools",
+                "data",
+                "dashboard",
+                "design",
+            ]).has(root)) {
+            throw new Error(`Template path is outside the public V2 roots: ${path}`);
+        }
+        return;
     }
+    if (namespace === ".zaip-aios") {
+        const releaseRoots = new Set([
+            "bin",
+            "dashboard",
+            "design",
+            "migrations",
+            "pricing",
+            "profiles",
+            "schemas",
+            "templates",
+        ]);
+        const releaseFiles = new Set([
+            "LICENSE",
+            "THIRD_PARTY_NOTICES.md",
+            "VERSION",
+            "checksums.sha256",
+            "manifest.json",
+            "sbom.cdx.json",
+        ]);
+        if (root !== undefined && releaseRoots.has(root) && parts.length >= 3)
+            return;
+        if (root !== undefined && releaseFiles.has(root) && parts.length === 2)
+            return;
+    }
+    throw new Error(`Template path is outside the public ZAIP roots: ${path}`);
 }
 export function sha256(content) {
     return createHash("sha256").update(content).digest("hex");
 }
+export function digestRuntimeFiles(files) {
+    const digest = createHash("sha256");
+    for (const file of files
+        .filter((candidate) => candidate.path.startsWith(".zaip-aios/"))
+        .toSorted((left, right) => left.path.localeCompare(right.path))) {
+        digest.update(file.path).update("\0").update(file.content).update("\0");
+    }
+    return digest.digest("hex");
+}
 function validateManifest(value) {
     if (typeof value !== "object" || value === null)
         throw new Error("Invalid template manifest");
@@ -47,6 +103,10 @@ function validateManifest(value) {
         typeof candidate.templateVersion !== "string" ||
         typeof candidate.minimumCliVersion !== "string" ||
         typeof candidate.source !== "string" ||
+        typeof candidate.sourceFilesSha256 !== "string" ||
+        !/^[a-f0-9]{64}$/.test(candidate.sourceFilesSha256) ||
+        typeof candidate.runtimeFilesSha256 !== "string" ||
+        !/^[a-f0-9]{64}$/.test(candidate.runtimeFilesSha256) ||
         !Array.isArray(candidate.files)) {
         throw new Error("Invalid template manifest fields");
     }
@@ -57,21 +117,44 @@ function validateManifest(value) {
         const file = entry;
         if (typeof file.path !== "string" ||
             typeof file.sha256 !== "string" ||
-            !/^[a-f0-9]{64}$/.test(file.sha256)) {
+            !/^[a-f0-9]{64}$/.test(file.sha256) ||
+            (file.binary !== undefined && typeof file.binary !== "boolean")) {
             throw new Error("Invalid manifest file fields");
         }
         validateTemplatePath(file.path);
         if (seen.has(file.path))
             throw new Error(`Duplicate template path: ${file.path}`);
         seen.add(file.path);
-        return { path: file.path, sha256: file.sha256 };
+        return {
+            path: file.path,
+            sha256: file.sha256,
+            ...(file.binary === true ? { binary: true } : {}),
+        };
     });
     return {
         schemaVersion: 1,
         templateVersion: candidate.templateVersion,
         minimumCliVersion: candidate.minimumCliVersion,
         source: candidate.source,
+        sourceFilesSha256: candidate.sourceFilesSha256,
+        runtimeFilesSha256: candidate.runtimeFilesSha256,
         files,
     };
 }
+function compareVersions(left, right) {
+    const parse = (value) => {
+        const match = /^(\d+)\.(\d+)\.(\d+)(?:[-+].*)?$/.exec(value);
+        if (match === null)
+            throw new Error(`Invalid semantic version: ${value}`);
+        return match.slice(1, 4).map(Number);
+    };
+    const leftParts = parse(left);
+    const rightParts = parse(right);
+    for (let index = 0; index < 3; index += 1) {
+        const difference = (leftParts[index] ?? 0) - (rightParts[index] ?? 0);
+        if (difference !== 0)
+            return Math.sign(difference);
+    }
+    return 0;
+}
 //# sourceMappingURL=template-manifest.js.map

package/dist/services/template-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"template-manifest.js","sourceRoot":"","sources":["../../src/services/template-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAwBzC,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAS,GAAG,wBAAwB,EAAE;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,uCAAuC,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,MAAM,SAAS,MAAM,EAAE,CAC/F,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAClF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IACE,IAAI,KAAK,SAAS;QAClB,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAwB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IACE,SAAS,CAAC,aAAa,KAAK,CAAC;QAC7B,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;QAC7C,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ;QAC/C,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QACpC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,IACE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EACnC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK;KACN,CAAC;AACJ,CAAC"}
+{"version":3,"file":"template-manifest.js","sourceRoot":"","sources":["../../src/services/template-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA2BzC,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAS,GAAG,wBAAwB,EAAE,EACtC,iBAA0B;IAE1B,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC1C,IACE,iBAAiB,KAAK,SAAS;QAC/B,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,CAAC,eAAe,iBAAiB,QAAQ,CAAC,iBAAiB,6BAA6B,iBAAiB,EAAE,CAChI,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,uCAAuC,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,MAAM,SAAS,MAAM,EAAE,CAC/F,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,6CAA6C,QAAQ,CAAC,kBAAkB,SAAS,kBAAkB,EAAE,CACtG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IACE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAClF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAChC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IACE,IAAI,KAAK,SAAS;YAClB,CAAC,IAAI,GAAG,CAAC;gBACP,QAAQ;gBACR,OAAO;gBACP,cAAc;gBACd,QAAQ;gBACR,WAAW;gBACX,OAAO;gBACP,MAAM;gBACN,WAAW;gBACX,QAAQ;aACT,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EACZ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;YAC3B,KAAK;YACL,WAAW;YACX,QAAQ;YACR,YAAY;YACZ,SAAS;YACT,UAAU;YACV,SAAS;YACT,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;YAC3B,SAAS;YACT,wBAAwB;YACxB,SAAS;YACT,kBAAkB;YAClB,eAAe;YACf,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO;QAC9E,IAAI,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACjF,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAwB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA8D;IAE9D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK;SACrB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;SAC/D,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IACE,SAAS,CAAC,aAAa,KAAK,CAAC;QAC7B,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;QAC7C,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ;QAC/C,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QACpC,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ;QAC/C,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC;QACnD,OAAO,SAAS,CAAC,kBAAkB,KAAK,QAAQ;QAChD,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,IACE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACnC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAC/D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/services/transactional-files.d.ts

@@ -0,0 +1,11 @@
+export interface TransactionalWrite {
+    path: string;
+    content: string | Buffer;
+}
+export interface TransactionalDelete {
+    path: string;
+}
+export declare function applyTransactionalWrites(root: string, writes: readonly TransactionalWrite[], failAfterWrites?: number): Promise<void>;
+export declare function applyTransactionalChanges(root: string, writes: readonly TransactionalWrite[], deletes: readonly TransactionalDelete[], failAfterChanges?: number): Promise<void>;
+export declare function assertSafeDestination(root: string, portablePath: string): Promise<void>;
+//# sourceMappingURL=transactional-files.d.ts.map

package/dist/services/transactional-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactional-files.d.ts","sourceRoot":"","sources":["../../src/services/transactional-files.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAQD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,kBAAkB,EAAE,EACrC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,kBAAkB,EAAE,EACrC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC,CAiDf;AA2BD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8B7F"}

package/dist/services/transactional-files.js

@@ -0,0 +1,114 @@
+import { lstat, mkdir, readFile, rename, rm, rmdir, writeFile } from "node:fs/promises";
+import { dirname, relative, resolve, sep } from "node:path";
+export async function applyTransactionalWrites(root, writes, failAfterWrites) {
+    await applyTransactionalChanges(root, writes, [], failAfterWrites);
+}
+export async function applyTransactionalChanges(root, writes, deletes, failAfterChanges) {
+    const normalizedRoot = resolve(root);
+    const snapshots = [];
+    const operations = [
+        ...writes.map((write) => ({ type: "write", ...write })),
+        ...deletes.map((deletion) => ({ type: "delete", ...deletion })),
+    ];
+    for (const operation of operations) {
+        await assertSafeDestination(normalizedRoot, operation.path);
+        const absolute = resolve(normalizedRoot, operation.path);
+        const current = await readFile(absolute).catch((error) => {
+            if (isNotFound(error))
+                return null;
+            throw error;
+        });
+        snapshots.push({
+            path: operation.path,
+            content: current ?? Buffer.alloc(0),
+            existed: current !== null,
+        });
+    }
+    let completed = 0;
+    let touched = 0;
+    let temporary = null;
+    try {
+        for (const operation of operations) {
+            if (failAfterChanges !== undefined && completed >= failAfterChanges) {
+                throw new Error("Injected transactional write failure");
+            }
+            touched = completed + 1;
+            const absolute = resolve(normalizedRoot, operation.path);
+            if (operation.type === "write") {
+                await mkdir(dirname(absolute), { recursive: true });
+                temporary = `${absolute}.zaip-tmp-${process.pid}-${completed}`;
+                await writeFile(temporary, operation.content, { flag: "wx" });
+                await rm(absolute, { force: true });
+                await rename(temporary, absolute);
+                temporary = null;
+            }
+            else {
+                await rm(absolute, { force: true });
+            }
+            completed += 1;
+            touched = completed;
+        }
+    }
+    catch (error) {
+        if (temporary !== null)
+            await rm(temporary, { force: true });
+        await rollback(normalizedRoot, snapshots.slice(0, touched));
+        throw error;
+    }
+}
+async function rollback(root, snapshots) {
+    for (const snapshot of [...snapshots].reverse()) {
+        const absolute = resolve(root, snapshot.path);
+        if (snapshot.existed) {
+            await mkdir(dirname(absolute), { recursive: true });
+            await writeFile(absolute, snapshot.content);
+        }
+        else {
+            await rm(absolute, { force: true });
+            await removeEmptyParents(root, dirname(absolute));
+        }
+    }
+}
+async function removeEmptyParents(root, start) {
+    let current = start;
+    while (current !== root && current.startsWith(`${root}${sep}`)) {
+        const removed = await rmdir(current).then(() => true, () => false);
+        if (!removed)
+            return;
+        current = dirname(current);
+    }
+}
+export async function assertSafeDestination(root, portablePath) {
+    if (portablePath.includes("\\") ||
+        portablePath.includes("\0") ||
+        portablePath.startsWith("/") ||
+        /^[A-Za-z]:/.test(portablePath) ||
+        portablePath.split("/").some((part) => part.length === 0 || part === "." || part === "..")) {
+        throw new Error(`Unsafe destination path: ${portablePath}`);
+    }
+    const normalizedRoot = resolve(root);
+    const destination = resolve(normalizedRoot, portablePath);
+    if (!destination.startsWith(`${normalizedRoot}${sep}`)) {
+        throw new Error(`Destination escapes project root: ${portablePath}`);
+    }
+    const parts = portablePath.split("/");
+    let current = normalizedRoot;
+    for (const part of parts) {
+        current = resolve(current, part);
+        const info = await lstat(current).catch((error) => {
+            if (isNotFound(error))
+                return null;
+            throw error;
+        });
+        if (info?.isSymbolicLink()) {
+            throw new Error(`Refusing to write through symlink: ${relative(root, current)}`);
+        }
+        if (current === destination && info !== null && !info.isFile()) {
+            throw new Error(`Destination is not a file: ${portablePath}`);
+        }
+    }
+}
+function isNotFound(error) {
+    return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+//# sourceMappingURL=transactional-files.js.map

package/dist/services/transactional-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactional-files.js","sourceRoot":"","sources":["../../src/services/transactional-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAiB5D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,MAAqC,EACrC,eAAwB;IAExB,MAAM,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAY,EACZ,MAAqC,EACrC,OAAuC,EACvC,gBAAyB;IAEzB,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAChE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;KACzE,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,qBAAqB,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAChE,IAAI,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,OAAO,EAAE,OAAO,KAAK,IAAI;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,gBAAgB,KAAK,SAAS,IAAI,SAAS,IAAI,gBAAgB,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,GAAG,SAAS,GAAG,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,SAAS,GAAG,GAAG,QAAQ,aAAa,OAAO,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC/D,MAAM,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpC,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAClC,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,CAAC;YACD,SAAS,IAAI,CAAC,CAAC;YACf,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,SAA8B;IAClE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CACvC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,YAAoB;IAC5E,IACE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3B,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3B,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAC5B,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;QAC/B,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAC1F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,cAAc,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzD,IAAI,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC"}

package/dist/types.d.ts

@@ -9,6 +9,13 @@ export interface InitOptions {
     templateDirectory?: string;
     now?: Date;
     confirmForce?: (message: string) => Promise<boolean>;
+    cliVersion?: string;
+    /** Test-only override for the Codex user configuration directory. */
+    codexHome?: string;
+    /** Enables the user-level Codex configuration write; test callers opt in explicitly. */
+    installGlobalCodexConfig?: boolean;
+    /** Deterministic fault injection used by transactional rollback tests. */
+    failAfterWrites?: number;
 }
 export interface InitResult {
     root: string;
@@ -20,6 +27,12 @@ export interface InitResult {
     backupPath: string | null;
     dryRun: boolean;
     applied: boolean;
+    globalCodexConfig?: {
+        path: string;
+        sourcePath: string;
+        installed: boolean;
+        error: string | null;
+    };
 }
 export interface CliRuntime {
     cwd?: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const CLI_VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,WAAW,QAAsB,CAAC"}

package/dist/version.js

@@ -0,0 +1,6 @@
+import { createRequire } from "node:module";
+const packageJson = createRequire(import.meta.url)("../package.json");
+if (typeof packageJson.version !== "string")
+    throw new Error("CLI package version is missing");
+export const CLI_VERSION = packageJson.version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAA0B,CAAC;AAC/F,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ;IAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC"}