apcore-toolkit 0.4.1 → 0.5.1

package/dist/output/registry-writer.js

@@ -1,38 +1,72 @@
 import { FunctionModule, jsonSchemaToTypeBox } from 'apcore-js';
 import { resolveTarget } from '../resolve-target.js';
 import { createWriteResult } from './types.js';
-import { RegistryVerifier, runVerifierChain } from './verifiers.js';
+import { RegistryVerifier } from './verifiers.js';
+import { WriteError } from './errors.js';
+import { applyVerification } from './base-writer.js';
+/**
+ * Write scanned modules to an apcore-js registry.
+ *
+ * Resolves each module's target function via `resolveTarget`, wraps it in a
+ * `FunctionModule`, and calls `registry.register()`. Supports dry-run and
+ * built-in / custom verification.
+ */
 export class RegistryWriter {
+    /**
+     * Register modules into the provided registry.
+     *
+     * @async This method is async in TypeScript due to dynamic module loading via
+     *        `resolveTarget`. In Python and Rust the equivalent is synchronous.
+     *        Always `await` this call: `await writer.write(modules, registry)`.
+     *
+     * @param modules - Scanned modules to register.
+     * @param registry - Target registry that implements `register()`.
+     * @param options - Optional write options: `dryRun`, `verify`, `verifiers`.
+     * @returns Array of WriteResult, one per module.
+     */
     async write(modules, registry, options) {
         const shouldVerify = options?.verify ?? false;
         const verifiers = options?.verifiers ?? [];
+        const allowedPrefixes = options?.allowedPrefixes;
+        const errorMode = options?.errorMode ?? 'throw';
         const results = [];
         for (const mod of modules) {
             if (options?.dryRun) {
                 results.push(createWriteResult(mod.moduleId, null));
                 continue;
             }
-            const fm = await this._toFunctionModule(mod);
-            registry.register(mod.moduleId, fm);
-            let result = createWriteResult(mod.moduleId, null);
-            if (shouldVerify) {
-                const builtinResult = new RegistryVerifier(registry).verify('', mod.moduleId);
-                if (!builtinResult.ok) {
-                    result = createWriteResult(mod.moduleId, null, false, builtinResult.error ?? null);
+            let fm;
+            try {
+                fm = await this._toFunctionModule(mod, allowedPrefixes);
+            }
+            catch (err) {
+                if (errorMode === 'collect') {
+                    results.push(createWriteResult(mod.moduleId, null, false, err instanceof Error ? err.message : String(err)));
+                    continue;
                 }
+                throw new WriteError(mod.moduleId, err);
+            }
+            try {
+                registry.register(mod.moduleId, fm);
             }
-            if (result.verified && verifiers.length > 0) {
-                const vResult = runVerifierChain(verifiers, '', mod.moduleId);
-                if (!vResult.ok) {
-                    result = createWriteResult(mod.moduleId, null, false, vResult.error ?? null);
+            catch (err) {
+                if (errorMode === 'collect') {
+                    results.push(createWriteResult(mod.moduleId, null, false, err instanceof Error ? err.message : String(err)));
+                    continue;
                 }
+                throw new WriteError(mod.moduleId, err);
             }
+            const result = applyVerification(createWriteResult(mod.moduleId, null), new RegistryVerifier(registry), verifiers, '', mod.moduleId, shouldVerify);
             results.push(result);
         }
         return results;
     }
-    async _toFunctionModule(mod) {
-        const targetFn = (await resolveTarget(mod.target));
+    async _toFunctionModule(mod, allowedPrefixes) {
+        const resolved = await resolveTarget(mod.target, allowedPrefixes);
+        if (typeof resolved !== 'function') {
+            throw new Error(`Target "${mod.target}" resolved to ${typeof resolved}, expected a function.`);
+        }
+        const targetFn = resolved;
         return new FunctionModule({
             execute: async (inputs, _context) => {
                 const result = await targetFn(inputs);
@@ -55,6 +89,10 @@ export class RegistryWriter {
             annotations: mod.annotations,
             metadata: Object.keys(mod.metadata).length > 0 ? { ...mod.metadata } : null,
             examples: mod.examples.length > 0 ? [...mod.examples] : null,
+            // NOTE: ScannedModule carries a `display` field (populated by DisplayResolver).
+            // FunctionModule in apcore-js does not currently expose a display slot, so
+            // the display metadata is intentionally omitted here. In Rust, ModuleDescriptor
+            // includes a display field — once apcore-js exposes one, wire it here.
         });
     }
 }

package/dist/output/registry-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry-writer.js","sourceRoot":"","sources":["../../src/output/registry-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,KAAK,CACT,OAAwB,EACxB,QAAgG,EAChG,OAAwE;QAExE,MAAM,YAAY,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC7C,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAEpC,IAAI,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,aAAa,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9E,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAkB;QAChD,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAErC,CAAC;QAEb,OAAO,IAAI,cAAc,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,QAAiB,EAAE,EAAE;gBACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,MAAM,IAAI,IAAI;oBAAE,OAAO,EAAE,CAAC;gBAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC3E,OAAO,MAAiC,CAAC;YAC3C,CAAC;YACD,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;YACjD,YAAY,EAAE,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC;YACnD,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAChD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,yEAAyE;YACzE,oEAAoE;YACpE,sEAAsE;YACtE,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;YAC3E,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAqB,CAAC,CAAC,CAAC,IAAI;SAClF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"registry-writer.js","sourceRoot":"","sources":["../../src/output/registry-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACzB;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CACT,OAAwB,EACxB,QAAgG,EAChG,OAA2D;QAE3D,MAAM,YAAY,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC;QAChD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,IAAI,EAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7G,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7G,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAC9B,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,EACrC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAC9B,SAAS,EACT,EAAE,EACF,GAAG,CAAC,QAAQ,EACZ,YAAY,CACb,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAkB,EAAE,eAA0B;QAC5E,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAClE,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,WAAW,GAAG,CAAC,MAAM,iBAAiB,OAAO,QAAQ,wBAAwB,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,QAAwD,CAAC;QAE1E,OAAO,IAAI,cAAc,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,QAAiB,EAAE,EAAE;gBACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,MAAM,IAAI,IAAI;oBAAE,OAAO,EAAE,CAAC;gBAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC3E,OAAO,MAAiC,CAAC;YAC3C,CAAC;YACD,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;YACjD,YAAY,EAAE,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC;YACnD,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAChD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,yEAAyE;YACzE,oEAAoE;YACpE,sEAAsE;YACtE,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;YAC3E,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAqB,CAAC,CAAC,CAAC,IAAI;YACjF,gFAAgF;YAChF,2EAA2E;YAC3E,gFAAgF;YAChF,uEAAuE;SACxE,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/output/types.d.ts

@@ -7,6 +7,7 @@ export interface WriteResult {
 export interface VerifyResult {
     readonly ok: boolean;
     readonly error?: string;
+    readonly cause?: unknown;
 }
 export interface Verifier {
     verify(path: string, moduleId: string): VerifyResult;

package/dist/output/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/output/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAAC;CACtD;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAAM,GAAG,IAAW,EAC1B,QAAQ,UAAO,EACf,iBAAiB,GAAE,MAAM,GAAG,IAAW,GACtC,WAAW,CAEb"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/output/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAAC;CACtD;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAAM,GAAG,IAAW,EAC1B,QAAQ,UAAO,EACf,iBAAiB,GAAE,MAAM,GAAG,IAAW,GACtC,WAAW,CAEb"}

package/dist/output/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/output/types.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,OAAsB,IAAI,EAC1B,QAAQ,GAAG,IAAI,EACf,oBAAmC,IAAI;IAEvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACzD,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/output/types.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,OAAsB,IAAI,EAC1B,QAAQ,GAAG,IAAI,EACf,oBAAmC,IAAI;IAEvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACzD,CAAC"}

package/dist/output/typescript-writer.d.ts

@@ -1,11 +1,19 @@
 import type { ScannedModule } from '../types.js';
-import type { WriteResult, Verifier } from './types.js';
+import type { WriteResult } from './types.js';
+import type { FileWriteOptions } from './base-writer.js';
+/**
+ * Write scanned modules as TypeScript source files.
+ *
+ * Each module is emitted as a `<module_id>.ts` file that re-exports the
+ * target function with the apcore binding decorator applied.
+ *
+ * Language-parity note: this writer is TypeScript-only. Python uses
+ * `PythonWriter`; Rust does not have an equivalent code-generation writer.
+ * Output from this writer should not be compared to `YAMLWriter` output —
+ * they serve different purposes (runtime type-safety vs cross-SDK interchange).
+ */
 export declare class TypeScriptWriter {
-    write(modules: ScannedModule[], outputDir: string, options?: {
-        dryRun?: boolean;
-        verify?: boolean;
-        verifiers?: Verifier[];
-    }): WriteResult[];
+    write(modules: ScannedModule[], outputDir: string, options?: FileWriteOptions): WriteResult[];
     private _generateCode;
     private _parseTarget;
     private _sanitizeIdentifier;

package/dist/output/typescript-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typescript-writer.d.ts","sourceRoot":"","sources":["../../src/output/typescript-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAKxD,qBAAa,gBAAgB;IAC3B,KAAK,CACH,OAAO,EAAE,aAAa,EAAE,EACxB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;KAAE,GACvE,WAAW,EAAE;IAyDhB,OAAO,CAAC,aAAa;IAgCrB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,mBAAmB;CAO5B"}
+{"version":3,"file":"typescript-writer.d.ts","sourceRoot":"","sources":["../../src/output/typescript-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAC3B,KAAK,CACH,OAAO,EAAE,aAAa,EAAE,EACxB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,gBAAgB,GACzB,WAAW,EAAE;IA8GhB,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,mBAAmB;CAU5B"}

package/dist/output/typescript-writer.js

@@ -1,53 +1,112 @@
-import { writeFileSync, mkdirSync } from 'node:fs';
-import { resolve, join } from 'node:path';
+import { writeFileSync, mkdirSync, realpathSync, lstatSync, renameSync, unlinkSync } from 'node:fs';
+import { resolve, join, sep, isAbsolute } from 'node:path';
 import { createWriteResult } from './types.js';
 import { WriteError } from './errors.js';
-import { SyntaxVerifier, runVerifierChain } from './verifiers.js';
+import { SyntaxVerifier } from './verifiers.js';
+import { applyVerification } from './base-writer.js';
+/**
+ * Write scanned modules as TypeScript source files.
+ *
+ * Each module is emitted as a `<module_id>.ts` file that re-exports the
+ * target function with the apcore binding decorator applied.
+ *
+ * Language-parity note: this writer is TypeScript-only. Python uses
+ * `PythonWriter`; Rust does not have an equivalent code-generation writer.
+ * Output from this writer should not be compared to `YAMLWriter` output —
+ * they serve different purposes (runtime type-safety vs cross-SDK interchange).
+ */
 export class TypeScriptWriter {
     write(modules, outputDir, options) {
         const dryRun = options?.dryRun ?? false;
         const shouldVerify = options?.verify ?? false;
         const verifiers = options?.verifiers ?? [];
+        const errorMode = options?.errorMode ?? 'throw';
         const results = [];
         const timestamp = new Date().toISOString();
+        const writtenIds = new Map(); // filename → moduleId that claimed it
         const resolvedOut = dryRun ? '' : resolve(outputDir);
         if (!dryRun) {
-            mkdirSync(resolvedOut, { recursive: true });
+            try {
+                mkdirSync(resolvedOut, { recursive: true });
+            }
+            catch (err) {
+                throw new WriteError(resolvedOut, err);
+            }
+        }
+        let realResolvedOut = resolvedOut;
+        if (!dryRun) {
+            try {
+                realResolvedOut = realpathSync(resolvedOut);
+            }
+            catch (err) {
+                throw new WriteError(resolvedOut, err);
+            }
         }
         for (const mod of modules) {
-            const code = this._generateCode(mod, timestamp);
+            let code;
+            try {
+                code = this._generateCode(mod, timestamp);
+            }
+            catch (err) {
+                if (errorMode === 'collect') {
+                    results.push(createWriteResult(mod.moduleId, null, false, err instanceof Error ? err.message : String(err)));
+                    continue;
+                }
+                throw new WriteError(mod.moduleId, err);
+            }
             if (dryRun) {
                 results.push(createWriteResult(mod.moduleId, null));
                 continue;
             }
-            // Path traversal protection: check raw moduleId before sanitization
-            const rawResolved = resolve(join(resolvedOut, mod.moduleId));
-            if (!rawResolved.startsWith(resolvedOut + '/') && rawResolved !== resolvedOut) {
-                console.warn('Skipping module with path traversal in id: %s', mod.moduleId);
-                continue;
-            }
             const sanitized = this._sanitizeIdentifier(mod.moduleId);
-            const filename = `${sanitized}.ts`;
-            const filePath = resolve(join(resolvedOut, filename));
-            try {
-                writeFileSync(filePath, code, 'utf-8');
+            const baseFilename = `${sanitized}.ts`;
+            let filename = baseFilename;
+            let collisionCounter = 0;
+            while (writtenIds.has(filename)) {
+                collisionCounter++;
+                filename = `${sanitized}_${collisionCounter}.ts`;
             }
-            catch (err) {
-                throw new WriteError(filePath, err);
+            if (collisionCounter > 0) {
+                console.warn('TypeScriptWriter: safeId collision — "%s" and "%s" both map to %s; using %s', writtenIds.get(baseFilename), mod.moduleId, baseFilename, filename);
             }
-            let result = createWriteResult(mod.moduleId, filePath);
-            if (shouldVerify) {
-                const builtinResult = new SyntaxVerifier().verify(filePath, mod.moduleId);
-                if (!builtinResult.ok) {
-                    result = createWriteResult(mod.moduleId, filePath, false, builtinResult.error ?? null);
+            writtenIds.set(filename, mod.moduleId);
+            const filePath = resolve(join(realResolvedOut, filename));
+            // Block symlinks pre-created at the target path (TOCTOU mitigation).
+            // lstatSync does not follow symlinks, so it detects symlinks directly.
+            try {
+                if (lstatSync(filePath).isSymbolicLink()) {
+                    console.warn('Skipping symlink escape at: %s', filePath);
+                    results.push(createWriteResult(mod.moduleId, filePath, false, 'Security skip: symlink at target path'));
+                    continue;
                 }
             }
-            if (result.verified && verifiers.length > 0) {
-                const vResult = runVerifierChain(verifiers, filePath, mod.moduleId);
-                if (!vResult.ok) {
-                    result = createWriteResult(mod.moduleId, filePath, false, vResult.error ?? null);
+            catch { /* file does not exist — safe to write */ }
+            // Atomic write: write to a tmp file then rename so readers never see a
+            // partially-written file and so the final rename is atomic on POSIX.
+            const tmpPath = `${filePath}.${process.pid}.tmp`;
+            try {
+                writeFileSync(tmpPath, code, 'utf-8');
+                renameSync(tmpPath, filePath);
+                // Post-rename sanity check: verify the result is not a symlink (defence-in-depth).
+                try {
+                    if (lstatSync(filePath).isSymbolicLink()) {
+                        console.warn('TypeScriptWriter: post-rename symlink detected at %s — possible race', filePath);
+                    }
                 }
+                catch { /* lstat failing here is non-critical */ }
             }
+            catch (err) {
+                try {
+                    unlinkSync(tmpPath);
+                }
+                catch { /* best-effort cleanup */ }
+                if (errorMode === 'collect') {
+                    results.push(createWriteResult(mod.moduleId, filePath, false, err instanceof Error ? err.message : String(err)));
+                    continue;
+                }
+                throw new WriteError(filePath, err);
+            }
+            const result = applyVerification(createWriteResult(mod.moduleId, filePath), new SyntaxVerifier(), verifiers, filePath, mod.moduleId, shouldVerify);
             results.push(result);
         }
         return results;
@@ -60,12 +119,13 @@ export class TypeScriptWriter {
         lines.push('// Do not edit manually unless you intend to customize behavior.');
         lines.push('');
         lines.push("import { module } from 'apcore-js';");
+        lines.push("import { Type } from '@sinclair/typebox';");
         lines.push('');
         lines.push('export default module({');
         lines.push(`  id: ${JSON.stringify(mod.moduleId)},`);
         lines.push(`  description: ${JSON.stringify(mod.description)},`);
-        lines.push(`  inputSchema: ${JSON.stringify(mod.inputSchema)},`);
-        lines.push(`  outputSchema: ${JSON.stringify(mod.outputSchema)},`);
+        lines.push(`  inputSchema: Type.Unsafe(${JSON.stringify(mod.inputSchema)}),`);
+        lines.push(`  outputSchema: Type.Unsafe(${JSON.stringify(mod.outputSchema)}),`);
         lines.push(`  tags: ${JSON.stringify([...mod.tags])},`);
         lines.push(`  version: ${JSON.stringify(mod.version)},`);
         if (mod.annotations !== null) {
@@ -88,16 +148,24 @@ export class TypeScriptWriter {
         if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(exportName)) {
             throw new Error(`Invalid export name: ${exportName}`);
         }
-        return {
-            modulePath: target.slice(0, lastColon),
-            exportName,
-        };
+        const modulePath = target.slice(0, lastColon);
+        if (isAbsolute(modulePath)) {
+            throw new Error(`TypeScriptWriter: absolute module path not allowed in target: ${modulePath}`);
+        }
+        const segments = modulePath.split('/');
+        if (segments.some((seg) => seg === '..')) {
+            throw new Error(`TypeScriptWriter: parent traversal in module path not allowed: ${modulePath}`);
+        }
+        return { modulePath, exportName };
     }
     _sanitizeIdentifier(name) {
         let sanitized = name.replace(/[^a-zA-Z0-9_]/g, '_');
         if (/^[0-9]/.test(sanitized)) {
             sanitized = `_${sanitized}`;
         }
+        if (sanitized.length === 0) {
+            sanitized = '_module';
+        }
         return sanitized;
     }
 }

package/dist/output/typescript-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"typescript-writer.js","sourceRoot":"","sources":["../../src/output/typescript-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CACH,OAAwB,EACxB,SAAiB,EACjB,OAAwE;QAExE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAEhD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YAED,oEAAoE;YACpE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,CAAC;YACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;YAEtD,IAAI,CAAC;gBACH,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAY,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,aAAa,GAAG,IAAI,cAAc,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC1E,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,GAAkB,EAAE,SAAiB;QACzD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEzD,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,gCAAgC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpG,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;YACtC,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}
+{"version":3,"file":"typescript-writer.js","sourceRoot":"","sources":["../../src/output/typescript-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CACH,OAAwB,EACxB,SAAiB,EACjB,OAA0B;QAE1B,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QAC9C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC;QAChD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,sCAAsC;QAEpF,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,IAAI,eAAe,GAAG,WAAW,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,eAAe,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7G,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,GAAG,SAAS,KAAK,CAAC;YACvC,IAAI,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChC,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,GAAG,GAAG,SAAS,IAAI,gBAAgB,KAAK,CAAC;YACnD,CAAC;YACD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CACV,6EAA6E,EAC7E,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAC5B,GAAG,CAAC,QAAQ,EACZ,YAAY,EACZ,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;YAE1D,qEAAqE;YACrE,uEAAuE;YACvE,IAAI,CAAC;gBACH,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;oBACzC,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;oBACzD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAC,CAAC;oBACxG,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;YAErD,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YACjD,IAAI,CAAC;gBACH,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC9B,mFAAmF;gBACnF,IAAI,CAAC;oBACH,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;wBACzC,OAAO,CAAC,IAAI,CAAC,sEAAsE,EAAE,QAAQ,CAAC,CAAC;oBACjG,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC;oBAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;gBAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjH,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAC9B,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACzC,IAAI,cAAc,EAAE,EACpB,SAAS,EACT,QAAQ,EACR,GAAG,CAAC,QAAQ,EACZ,YAAY,CACb,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,GAAkB,EAAE,SAAiB;QACzD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEzD,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,gCAAgC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpG,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,iEAAiE,UAAU,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,kEAAkE,UAAU,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACpC,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/output/verifiers.d.ts

@@ -1,26 +1,18 @@
 import type { Verifier, VerifyResult } from './types.js';
+export { RegistryVerifier, runVerifierChain } from './verify-core.js';
 export declare class YAMLVerifier implements Verifier {
     verify(path: string, _moduleId: string): VerifyResult;
 }
 export declare class SyntaxVerifier implements Verifier {
     verify(path: string, _moduleId: string): VerifyResult;
 }
-export declare class RegistryVerifier implements Verifier {
-    private readonly registry;
-    constructor(registry: {
-        getModule?(id: string): unknown;
-    });
-    verify(_path: string, moduleId: string): VerifyResult;
-}
 export declare class MagicBytesVerifier implements Verifier {
     private readonly expected;
     constructor(expected: Buffer);
     verify(path: string, _moduleId: string): VerifyResult;
 }
 export declare class JSONVerifier implements Verifier {
-    private readonly schema;
     constructor(schema?: Record<string, unknown>);
     verify(path: string, _moduleId: string): VerifyResult;
 }
-export declare function runVerifierChain(verifiers: Verifier[], path: string, moduleId: string): VerifyResult;
 //# sourceMappingURL=verifiers.d.ts.map

package/dist/output/verifiers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifiers.d.ts","sourceRoot":"","sources":["../../src/output/verifiers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEzD,qBAAa,YAAa,YAAW,QAAQ;IAC3C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CAetD;AAED,qBAAa,cAAe,YAAW,QAAQ;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CAYtD;AAED,qBAAa,gBAAiB,YAAW,QAAQ;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;gBAEnD,QAAQ,EAAE;QAAE,SAAS,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE;IAIzD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY;CActD;AAED,qBAAa,kBAAmB,YAAW,QAAQ;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,QAAQ,EAAE,MAAM;IAI5B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CAYtD;AAED,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAE5C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI5C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CAWtD;AAED,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,QAAQ,EAAE,EACrB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,YAAY,CAQd"}
+{"version":3,"file":"verifiers.d.ts","sourceRoot":"","sources":["../../src/output/verifiers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAMzD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAYtE,qBAAa,YAAa,YAAW,QAAQ;IAC3C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CA2BtD;AAkBD,qBAAa,cAAe,YAAW,QAAQ;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CA+BtD;AAED,qBAAa,kBAAmB,YAAW,QAAQ;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,QAAQ,EAAE,MAAM;IAI5B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CAgBtD;AAED,qBAAa,YAAa,YAAW,QAAQ;gBAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAU5C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY;CActD"}

package/dist/output/verifiers.js

@@ -1,5 +1,20 @@
-import { readFileSync } from 'node:fs';
+import { readFileSync, openSync, readSync, closeSync } from 'node:fs';
+import { createRequire } from 'node:module';
 import yaml from 'js-yaml';
+// Re-export runtime-neutral verifier primitives so downstream imports from
+// this file (internal and the default package entry) continue to work while
+// the browser subpath imports them directly from `verify-core.js` without
+// dragging in the Node-only code below.
+export { RegistryVerifier, runVerifierChain } from './verify-core.js';
+const _require = createRequire(import.meta.url);
+function loadTypeScript() {
+    try {
+        return _require('typescript');
+    }
+    catch {
+        return null;
+    }
+}
 export class YAMLVerifier {
     verify(path, _moduleId) {
         try {
@@ -11,46 +26,73 @@ export class YAMLVerifier {
             if (!('bindings' in doc)) {
                 return { ok: false, error: 'Missing required "bindings" key' };
             }
+            const bindings = doc.bindings;
+            if (!Array.isArray(bindings) || bindings.length === 0) {
+                return { ok: false, error: 'bindings array is empty' };
+            }
+            for (let i = 0; i < bindings.length; i++) {
+                const entry = bindings[i];
+                for (const field of ['module_id', 'target']) {
+                    if (typeof entry[field] !== 'string' || entry[field] === '') {
+                        return { ok: false, error: `Missing or empty required field '${field}' in binding[${i}]` };
+                    }
+                }
+            }
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: `YAML parse error: ${err.message}` };
+            return { ok: false, error: `YAML parse error: ${err.message}`, cause: err };
         }
     }
 }
+function _flattenDiagnosticMessage(msg, depth = 0) {
+    if (depth > 32)
+        return '[...]';
+    if (typeof msg === 'string')
+        return msg;
+    if (typeof msg === 'object' && msg !== null && 'messageText' in msg) {
+        const chain = msg;
+        const parts = [_flattenDiagnosticMessage(chain.messageText, depth + 1)];
+        if (Array.isArray(chain.next)) {
+            for (const sub of chain.next) {
+                parts.push(_flattenDiagnosticMessage(sub, depth + 1));
+            }
+        }
+        return parts.join(': ');
+    }
+    return String(msg);
+}
 export class SyntaxVerifier {
     verify(path, _moduleId) {
         try {
             const content = readFileSync(path, 'utf-8');
-            // Basic syntax check: ensure file is non-empty and parseable
             if (content.trim().length === 0) {
                 return { ok: false, error: 'File is empty' };
             }
-            return { ok: true };
-        }
-        catch (err) {
-            return { ok: false, error: `Read error: ${err.message}` };
-        }
-    }
-}
-export class RegistryVerifier {
-    registry;
-    constructor(registry) {
-        this.registry = registry;
-    }
-    verify(_path, moduleId) {
-        try {
-            if (typeof this.registry.getModule !== 'function') {
-                return { ok: false, error: 'Registry does not have a getModule method' };
+            // Use the TypeScript compiler to parse and check for syntax errors.
+            const ts = loadTypeScript();
+            if (ts === null) {
+                return { ok: false, error: 'typescript package required for syntax verification' };
             }
-            const mod = this.registry.getModule(moduleId);
-            if (mod == null) {
-                return { ok: false, error: `Module "${moduleId}" not found in registry` };
+            const program = ts.createProgram([path], {
+                noLib: true,
+                noResolve: true,
+                skipLibCheck: true,
+                strict: false,
+            });
+            const sourceFile = program.getSourceFile(path);
+            if (!sourceFile) {
+                return { ok: false, error: 'TypeScript compiler could not load file' };
+            }
+            const diagnostics = program.getSyntacticDiagnostics(sourceFile);
+            if (diagnostics.length > 0) {
+                const text = _flattenDiagnosticMessage(diagnostics[0].messageText);
+                return { ok: false, error: `Syntax error: ${text}` };
             }
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: `Registry lookup error: ${err.message}` };
+            return { ok: false, error: `Read error: ${err.message}`, cause: err };
         }
     }
 }
@@ -60,44 +102,52 @@ export class MagicBytesVerifier {
         this.expected = expected;
     }
     verify(path, _moduleId) {
+        let fd;
         try {
-            const content = readFileSync(path);
-            const header = content.subarray(0, this.expected.length);
-            if (!header.equals(this.expected)) {
+            fd = openSync(path, 'r');
+            const buf = Buffer.alloc(this.expected.length);
+            const bytesRead = readSync(fd, buf, 0, this.expected.length, 0);
+            if (bytesRead < this.expected.length || !buf.equals(this.expected)) {
                 return { ok: false, error: 'File header does not match expected magic bytes' };
             }
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: `Read error: ${err.message}` };
+            return { ok: false, error: `Read error: ${err.message}`, cause: err };
+        }
+        finally {
+            if (fd !== undefined) {
+                try {
+                    closeSync(fd);
+                }
+                catch { /* ignore */ }
+            }
         }
     }
 }
 export class JSONVerifier {
-    schema;
     constructor(schema) {
-        this.schema = schema ?? null;
+        if (schema != null) {
+            throw new Error('JSONVerifier: schema validation is not yet implemented. ' +
+                'Install ajv and update JSONVerifier.verify() to enable schema validation, ' +
+                'or construct JSONVerifier without a schema argument for syntax-only checking.');
+        }
     }
     verify(path, _moduleId) {
+        let content;
+        try {
+            content = readFileSync(path, 'utf-8');
+        }
+        catch (err) {
+            return { ok: false, error: `Read error: ${err.message}`, cause: err };
+        }
         try {
-            const content = readFileSync(path, 'utf-8');
             JSON.parse(content);
-            // Schema validation is accepted for API parity with Python but requires
-            // a JSON Schema validator (e.g., ajv) for actual validation.
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: `JSON parse error: ${err.message}` };
-        }
-    }
-}
-export function runVerifierChain(verifiers, path, moduleId) {
-    for (const verifier of verifiers) {
-        const result = verifier.verify(path, moduleId);
-        if (!result.ok) {
-            return result;
+            return { ok: false, error: `JSON parse error: ${err.message}`, cause: err };
         }
     }
-    return { ok: true };
 }
 //# sourceMappingURL=verifiers.js.map