open-multi-agent-kit 0.80.5 → 0.80.7

package/dist/core/package-composition.js

@@ -0,0 +1,304 @@
+const ALL_RESOURCES = {
+    extensions: true,
+    skills: true,
+    prompts: true,
+    themes: true,
+};
+const SIDE_EFFECT_CAPABILITIES = new Set([
+    "child-process",
+    "network",
+    "filesystem-write",
+    "browser-control",
+    "telemetry",
+]);
+const RESOURCE_PATTERNS = {
+    extensions: ["**/*"],
+    skills: ["**/*"],
+    prompts: ["**/*"],
+    themes: ["**/*"],
+};
+export function createDefaultCompositionPolicy() {
+    return {
+        omkOwnedDomains: ["ontology", "search", "memory", "cache", "compaction", "multi-agent", "session", "scheduler"],
+        surfaceOwnership: [
+            { surface: "theme", ownerPackageIdentity: "npm:pi-tokyo-night" },
+            { surface: "footer", ownerPackageIdentity: "npm:pi-zentui" },
+            { surface: "editor", ownerPackageIdentity: "npm:pi-zentui" },
+            { surface: "header", ownerPackageIdentity: "omk:core" },
+            { surface: "tool-row", ownerPackageIdentity: "npm:pi-claude-style-tools" },
+            { surface: "loadout", ownerPackageIdentity: "npm:pi-loadout" },
+            { surface: "permission", ownerPackageIdentity: "npm:@gotgenes/pi-permission-system" },
+            { surface: "structured-input", ownerPackageIdentity: "npm:@juicesharp/rpiv-ask-user-question" },
+            { surface: "report-preview", ownerPackageIdentity: "npm:pi-markdown-preview" },
+        ],
+        allowedResources: {
+            "npm:pi-tokyo-night": { extensions: false, skills: false, prompts: false, themes: true },
+            "npm:pi-zentui": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-claude-style-tools": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-loadout": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-lens": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:@gotgenes/pi-permission-system": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:@juicesharp/rpiv-ask-user-question": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-markdown-preview": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-langfuse": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-cache-optimizer": { extensions: true, skills: false, prompts: false, themes: false },
+            "npm:pi-sandbox": { extensions: true, skills: false, prompts: false, themes: false },
+        },
+        capabilityToSurfaces: {
+            setFooter: ["footer"],
+            setEditorComponent: ["editor"],
+            setHeader: ["header"],
+            setStatus: ["status"],
+            renderCall: ["tool-row"],
+            renderResult: ["tool-row"],
+            registerMessageRenderer: ["assistant-markdown"],
+            setActiveTools: ["loadout"],
+            permission: ["permission"],
+            askUserQuestion: ["structured-input"],
+            markdownPreview: ["report-preview"],
+        },
+        capabilityToOmkDomains: {
+            context: ["session"],
+            before_provider_request: ["cache", "session"],
+            session_before_compact: ["compaction"],
+            setModel: ["session"],
+            setThinkingLevel: ["session"],
+            memory: ["memory"],
+            cache: ["cache"],
+            ontology: ["ontology"],
+            multiAgent: ["multi-agent"],
+            scheduler: ["scheduler"],
+        },
+    };
+}
+export function checkSingleSurfaceOwner(identity, requestedSurfaces, existingOwners) {
+    const key = packageIdentityKey(identity);
+    const conflicts = [];
+    for (const surface of uniqueSorted(requestedSurfaces)) {
+        const owner = existingOwners.find((rule) => rule.surface === surface);
+        if (!owner)
+            continue;
+        if (owner.ownerPackageIdentity === key || owner.ownerPackageIdentity === identity)
+            continue;
+        conflicts.push({
+            kind: "duplicate-surface-owner",
+            surface,
+            owner: owner.ownerPackageIdentity,
+            reason: `${identity} cannot claim ${surface}; ${owner.ownerPackageIdentity} already owns it`,
+        });
+    }
+    return conflicts;
+}
+export function checkOmkDomainMutation(identity, capabilities, policy) {
+    const conflicts = [];
+    for (const capability of capabilities) {
+        const domains = policy.capabilityToOmkDomains[capability] ?? [];
+        for (const domain of domains) {
+            conflicts.push({
+                kind: "omk-domain-mutation",
+                domain,
+                capability,
+                reason: `${identity} requested ${capability}, which mutates OMK-owned ${domain}`,
+            });
+        }
+    }
+    return conflicts;
+}
+export function checkCapabilitySurfaceMatch(identity, requestedSurfaces, capabilities, policy) {
+    if (capabilities.length === 0)
+        return [];
+    const supported = new Set();
+    for (const capability of capabilities) {
+        for (const surface of policy.capabilityToSurfaces[capability] ?? []) {
+            supported.add(surface);
+        }
+    }
+    return uniqueSorted(requestedSurfaces)
+        .filter((surface) => !supported.has(surface))
+        .map((surface) => ({
+        kind: "capability-surface-mismatch",
+        surface,
+        reason: `${identity} requested ${surface}, but no detected capability supports that surface`,
+    }));
+}
+export function resolveResourceFilter(identity, policy) {
+    const override = policy.allowedResources[identity] ?? policy.allowedResources[packageIdentityKey(identity)] ?? {};
+    return { ...ALL_RESOURCES, ...override };
+}
+export function inferRequestedSurfaces(review, policy) {
+    const surfaces = new Set();
+    for (const resource of review.candidate.expectedResources) {
+        if (resource === "theme")
+            surfaces.add("theme");
+    }
+    for (const capability of review.capabilities) {
+        for (const surface of policy.capabilityToSurfaces[capability] ?? []) {
+            surfaces.add(surface);
+        }
+    }
+    return uniqueSorted([...surfaces]);
+}
+export function composePackage(input, policy) {
+    const requestedSurfaces = uniqueSorted(input.requestedSurfaces ?? inferRequestedSurfaces(input.review, policy));
+    const allowedResources = resolveResourceFilter(input.identity, policy);
+    const conflicts = [
+        ...checkSingleSurfaceOwner(input.identity, requestedSurfaces, policy.surfaceOwnership),
+        ...checkOmkDomainMutation(input.identity, input.review.capabilities, policy),
+        ...checkCapabilitySurfaceMatch(input.identity, requestedSurfaces, input.review.capabilities, policy),
+        ...checkResourceFilter(input.identity, requestedSurfaces, allowedResources),
+    ];
+    const rejectedReasons = [...input.review.rejectedReasons, ...conflicts.map((conflict) => conflict.reason)];
+    const blockingConflict = conflicts.find((conflict) => [
+        "duplicate-surface-owner",
+        "omk-domain-mutation",
+        "unapproved-surface",
+        "capability-surface-mismatch",
+        "resource-filter-blocked",
+    ].includes(conflict.kind));
+    if (!input.review.pinned) {
+        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, [
+            ...rejectedReasons,
+            "missing-exact-pin",
+        ]);
+    }
+    if (input.review.licenseVerdict === "reject" || input.review.lifecycleVerdict === "reject") {
+        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
+    }
+    if (input.review.pathCompatibility === "pi-hardcoded") {
+        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, [
+            ...rejectedReasons,
+            "pi-hardcoded-paths",
+        ]);
+    }
+    if (blockingConflict) {
+        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
+    }
+    if (input.review.adoption === "deferred") {
+        return compositionReview(input.identity, "defer", allowedResources, requestedSurfaces, conflicts, input.review.deferredReason, rejectedReasons);
+    }
+    if (input.review.adoption === "reject") {
+        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
+    }
+    const canaryReasons = canaryRequiredReasons(input.review.capabilities);
+    if (input.review.risk === "high" && canaryReasons.length === 0) {
+        canaryReasons.push("canary-required: high-risk");
+    }
+    if (canaryReasons.length > 0) {
+        return compositionReview(input.identity, "canary", allowedResources, requestedSurfaces, conflicts, undefined, [
+            ...rejectedReasons,
+            ...canaryReasons,
+        ]);
+    }
+    return compositionReview(input.identity, "admit", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
+}
+export function composeCandidateBatch(inputs, basePolicy) {
+    const owners = [...basePolicy.surfaceOwnership];
+    const results = [];
+    for (const input of inputs) {
+        const policy = { ...basePolicy, surfaceOwnership: owners };
+        const result = composePackage(input, policy);
+        results.push(result);
+        if (result.verdict === "admit" || result.verdict === "canary") {
+            const ownerKey = packageIdentityKey(result.identity);
+            for (const surface of result.admittedSurfaces) {
+                if (!owners.some((owner) => owner.surface === surface)) {
+                    owners.push({ surface, ownerPackageIdentity: ownerKey });
+                }
+            }
+        }
+    }
+    return results;
+}
+export function toPackageSource(review) {
+    assertPromotable(review);
+    if (isAllResourcesEnabled(review.allowedResources)) {
+        return review.identity;
+    }
+    return {
+        source: review.identity,
+        extensions: review.allowedResources.extensions ? RESOURCE_PATTERNS.extensions : [],
+        skills: review.allowedResources.skills ? RESOURCE_PATTERNS.skills : [],
+        prompts: review.allowedResources.prompts ? RESOURCE_PATTERNS.prompts : [],
+        themes: review.allowedResources.themes ? RESOURCE_PATTERNS.themes : [],
+    };
+}
+export function createPromotionRecord(review, source, options = {}) {
+    assertPromotable(review);
+    return {
+        schemaVersion: "omk.package-composition.promotion.v1",
+        identity: review.identity,
+        source: redactSource(source),
+        scope: "project",
+        allowedResources: review.allowedResources,
+        admittedSurfaces: review.admittedSurfaces,
+        reviewedAt: (options.now ?? new Date()).toISOString(),
+        reviewedBy: options.reviewedBy ?? "root-orchestrator",
+    };
+}
+function checkResourceFilter(identity, requestedSurfaces, filter) {
+    const conflicts = [];
+    for (const surface of requestedSurfaces) {
+        const resource = resourceForSurface(surface);
+        if (filter[resource])
+            continue;
+        conflicts.push({
+            kind: "resource-filter-blocked",
+            surface,
+            reason: `${identity} requested ${surface}, but ${resource} resources are disabled`,
+        });
+    }
+    return conflicts;
+}
+function resourceForSurface(surface) {
+    return surface === "theme" ? "themes" : "extensions";
+}
+function canaryRequiredReasons(capabilities) {
+    const reasons = [];
+    for (const capability of capabilities) {
+        if (SIDE_EFFECT_CAPABILITIES.has(capability)) {
+            reasons.push(`canary-required: ${capability}`);
+        }
+    }
+    return uniqueSorted(reasons);
+}
+function compositionReview(identity, verdict, allowedResources, admittedSurfaces, conflicts, deferredReason, rejectedReasons) {
+    return {
+        identity,
+        verdict,
+        allowedResources,
+        admittedSurfaces: uniqueSorted(admittedSurfaces),
+        conflicts: [...conflicts],
+        ...(deferredReason === undefined ? {} : { deferredReason }),
+        rejectedReasons: uniqueSorted(rejectedReasons),
+    };
+}
+function assertPromotable(review) {
+    if (review.verdict !== "admit") {
+        throw new Error(`Package composition verdict ${review.verdict} cannot be promoted`);
+    }
+}
+function isAllResourcesEnabled(filter) {
+    return filter.extensions && filter.skills && filter.prompts && filter.themes;
+}
+function packageIdentityKey(identity) {
+    if (!identity.startsWith("npm:"))
+        return identity;
+    const spec = identity.slice("npm:".length);
+    const at = spec.lastIndexOf("@");
+    if (at <= 0)
+        return identity;
+    if (spec.startsWith("@")) {
+        const scopedVersionAt = spec.indexOf("@", spec.indexOf("/") + 1);
+        return scopedVersionAt > 0 ? `npm:${spec.slice(0, scopedVersionAt)}` : identity;
+    }
+    return `npm:${spec.slice(0, at)}`;
+}
+function uniqueSorted(values) {
+    return [...new Set(values)].sort();
+}
+function redactSource(source) {
+    return source
+        .replace(/(https?:\/\/)([^\s/@]+@)/gi, "$1<redacted>@")
+        .replace(/([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi, "$1<redacted>");
+}
+//# sourceMappingURL=package-composition.js.map

package/dist/core/package-composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-composition.js","sourceRoot":"","sources":["../../src/core/package-composition.ts"],"names":[],"mappings":"AAyFA,MAAM,aAAa,GAA8B;IAChD,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACxC,eAAe;IACf,SAAS;IACT,kBAAkB;IAClB,iBAAiB;IACjB,WAAW;CACX,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAsD;IAC5E,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,MAAM,EAAE,CAAC,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,UAAU,8BAA8B,GAA6B;IAC1E,OAAO;QACN,eAAe,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC;QAC/G,gBAAgB,EAAE;YACjB,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE;YAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,eAAe,EAAE;YAC5D,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,eAAe,EAAE;YAC5D,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,UAAU,EAAE;YACvD,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,2BAA2B,EAAE;YAC1E,EAAE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE;YAC9D,EAAE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oCAAoC,EAAE;YACrF,EAAE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,wCAAwC,EAAE;YAC/F,EAAE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE;SAC9E;QACD,gBAAgB,EAAE;YACjB,oBAAoB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;YACxF,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACnF,2BAA2B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC/F,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACpF,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACjF,oCAAoC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACxG,wCAAwC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC5G,yBAAyB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC7F,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACrF,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC5F,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;SACpF;QACD,oBAAoB,EAAE;YACrB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,kBAAkB,EAAE,CAAC,QAAQ,CAAC;YAC9B,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,UAAU,EAAE,CAAC,UAAU,CAAC;YACxB,YAAY,EAAE,CAAC,UAAU,CAAC;YAC1B,uBAAuB,EAAE,CAAC,oBAAoB,CAAC;YAC/C,cAAc,EAAE,CAAC,SAAS,CAAC;YAC3B,UAAU,EAAE,CAAC,YAAY,CAAC;YAC1B,eAAe,EAAE,CAAC,kBAAkB,CAAC;YACrC,eAAe,EAAE,CAAC,gBAAgB,CAAC;SACnC;QACD,sBAAsB,EAAE;YACvB,OAAO,EAAE,CAAC,SAAS,CAAC;YACpB,uBAAuB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;YAC7C,sBAAsB,EAAE,CAAC,YAAY,CAAC;YACtC,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,gBAAgB,EAAE,CAAC,SAAS,CAAC;YAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClB,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,UAAU,EAAE,CAAC,aAAa,CAAC;YAC3B,SAAS,EAAE,CAAC,WAAW,CAAC;SACxB;KACD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,uBAAuB,CACtC,QAAgB,EAChB,iBAAgD,EAChD,cAA2C,EACnB;IACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,oBAAoB,KAAK,GAAG,IAAI,KAAK,CAAC,oBAAoB,KAAK,QAAQ;YAAE,SAAS;QAC5F,SAAS,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,oBAAoB;YACjC,MAAM,EAAE,GAAG,QAAQ,iBAAiB,OAAO,KAAK,KAAK,CAAC,oBAAoB,kBAAkB;SAC5F,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,sBAAsB,CACrC,QAAgB,EAChB,YAA+B,EAC/B,MAAgC,EACR;IACxB,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAChE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,qBAAqB;gBAC3B,MAAM;gBACN,UAAU;gBACV,MAAM,EAAE,GAAG,QAAQ,cAAc,UAAU,6BAA6B,MAAM,EAAE;aAChF,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,2BAA2B,CAC1C,QAAgB,EAChB,iBAAgD,EAChD,YAA+B,EAC/B,MAAgC,EACR;IACxB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC,iBAAiB,CAAC;SACpC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClB,IAAI,EAAE,6BAAsC;QAC5C,OAAO;QACP,MAAM,EAAE,GAAG,QAAQ,cAAc,OAAO,oDAAoD;KAC5F,CAAC,CAAC,CAAC;AAAA,CACL;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,MAAgC,EAA6B;IACpH,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAClH,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;AAAA,CACzC;AAED,MAAM,UAAU,sBAAsB,CACrC,MAAyB,EACzB,MAAgC,EACT;IACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC3D,IAAI,QAAQ,KAAK,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;AAAA,CACnC;AAED,MAAM,UAAU,cAAc,CAAC,KAAuB,EAAE,MAAgC,EAAqB;IAC5G,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,CAAC,iBAAiB,IAAI,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChH,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG;QACjB,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACtF,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAC5E,GAAG,2BAA2B,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QACpG,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;KAC3E,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3G,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpD;QACC,yBAAyB;QACzB,qBAAqB;QACrB,oBAAoB;QACpB,6BAA6B;QAC7B,yBAAyB;KACzB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzB,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE;YAC7G,GAAG,eAAe;YAClB,mBAAmB;SACnB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC5F,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB,KAAK,cAAc,EAAE,CAAC;QACvD,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE;YAC7G,GAAG,eAAe;YAClB,oBAAoB;SACpB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACtB,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,KAAK,CAAC,MAAM,CAAC,cAAc,EAC3B,eAAe,CACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,aAAa,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE;YAC7G,GAAG,eAAe;YAClB,GAAG,aAAa;SAChB,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAmC,EACnC,UAAoC,EACd;IACtB,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,EAAiB;IACzE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,qBAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACxB,CAAC;IACD,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,QAAQ;QACvB,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;QAClF,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACtE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACzE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACtE,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAyB,EACzB,MAAc,EACd,OAAO,GAAgE,EAAE,EAC5C;IAC7B,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO;QACN,aAAa,EAAE,sCAAsC;QACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACrD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB;KACrD,CAAC;AAAA,CACF;AAED,SAAS,mBAAmB,CAC3B,QAAgB,EAChB,iBAAgD,EAChD,MAAiC,EACT;IACxB,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC/B,SAAS,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,OAAO;YACP,MAAM,EAAE,GAAG,QAAQ,cAAc,OAAO,SAAS,QAAQ,yBAAyB;SAClF,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,kBAAkB,CAAC,OAA2B,EAAmC;IACzF,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAAA,CACrD;AAED,SAAS,qBAAqB,CAAC,YAA+B,EAAY;IACzE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAAA,CAC7B;AAED,SAAS,iBAAiB,CACzB,QAAgB,EAChB,OAA2B,EAC3B,gBAA2C,EAC3C,gBAA+C,EAC/C,SAAyC,EACzC,cAAkC,EAClC,eAAkC,EACd;IACpB,OAAO;QACN,QAAQ;QACR,OAAO;QACP,gBAAgB;QAChB,gBAAgB,EAAE,YAAY,CAAC,gBAAgB,CAAC;QAChD,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;QACzB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,eAAe,EAAE,YAAY,CAAC,eAAe,CAAC;KAC9C,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,MAAyB,EAAQ;IAC1D,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;IACrF,CAAC;AAAA,CACD;AAED,SAAS,qBAAqB,CAAC,MAAiC,EAAW;IAC1E,OAAO,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;AAAA,CAC7E;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAU;IACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,OAAO,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CAClC;AAED,SAAS,YAAY,CAAmB,MAAoB,EAAO;IAClE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CACnC;AAED,SAAS,YAAY,CAAC,MAAc,EAAU;IAC7C,OAAO,MAAM;SACX,OAAO,CAAC,4BAA4B,EAAE,eAAe,CAAC;SACtD,OAAO,CAAC,yDAAyD,EAAE,cAAc,CAAC,CAAC;AAAA,CACrF","sourcesContent":["import type { ProcurementReview } from \"./package-procurement.ts\";\nimport type { PackageSource } from \"./settings-manager.ts\";\n\nexport type CompositionSurface =\n\t| \"theme\"\n\t| \"footer\"\n\t| \"header\"\n\t| \"editor\"\n\t| \"tool-row\"\n\t| \"assistant-markdown\"\n\t| \"status\"\n\t| \"permission\"\n\t| \"structured-input\"\n\t| \"report-preview\"\n\t| \"loadout\";\n\nexport type OmkOwnedDomain =\n\t| \"ontology\"\n\t| \"search\"\n\t| \"memory\"\n\t| \"cache\"\n\t| \"compaction\"\n\t| \"multi-agent\"\n\t| \"session\"\n\t| \"scheduler\";\n\nexport type CompositionVerdict = \"admit\" | \"reject\" | \"defer\" | \"canary\";\n\nexport interface CompositionResourceFilter {\n\textensions: boolean;\n\tskills: boolean;\n\tprompts: boolean;\n\tthemes: boolean;\n}\n\nexport interface SurfaceOwnerRule {\n\tsurface: CompositionSurface;\n\townerPackageIdentity: string;\n}\n\nexport interface PackageCompositionPolicy {\n\treadonly omkOwnedDomains: readonly OmkOwnedDomain[];\n\treadonly surfaceOwnership: readonly SurfaceOwnerRule[];\n\treadonly allowedResources: Readonly<Record<string, Partial<CompositionResourceFilter>>>;\n\treadonly capabilityToSurfaces: Readonly<Record<string, readonly CompositionSurface[]>>;\n\treadonly capabilityToOmkDomains: Readonly<Record<string, readonly OmkOwnedDomain[]>>;\n}\n\nexport interface CompositionInput {\n\tidentity: string;\n\treview: ProcurementReview;\n\trequestedSurfaces?: readonly CompositionSurface[];\n}\n\nexport interface CompositionConflict {\n\tkind:\n\t\t| \"duplicate-surface-owner\"\n\t\t| \"omk-domain-mutation\"\n\t\t| \"unapproved-surface\"\n\t\t| \"capability-surface-mismatch\"\n\t\t| \"resource-filter-blocked\";\n\tsurface?: CompositionSurface;\n\tdomain?: OmkOwnedDomain;\n\towner?: string;\n\tcapability?: string;\n\treason: string;\n}\n\nexport interface CompositionReview {\n\tidentity: string;\n\tverdict: CompositionVerdict;\n\tallowedResources: CompositionResourceFilter;\n\tadmittedSurfaces: CompositionSurface[];\n\tconflicts: CompositionConflict[];\n\tdeferredReason?: string;\n\trejectedReasons: string[];\n}\n\nexport interface CompositionPromotionRecord {\n\tschemaVersion: \"omk.package-composition.promotion.v1\";\n\tidentity: string;\n\tsource: string;\n\tscope: \"project\";\n\tallowedResources: CompositionResourceFilter;\n\tadmittedSurfaces: CompositionSurface[];\n\treviewedAt: string;\n\treviewedBy: \"manual\" | \"root-orchestrator\";\n}\n\nconst ALL_RESOURCES: CompositionResourceFilter = {\n\textensions: true,\n\tskills: true,\n\tprompts: true,\n\tthemes: true,\n};\n\nconst SIDE_EFFECT_CAPABILITIES = new Set([\n\t\"child-process\",\n\t\"network\",\n\t\"filesystem-write\",\n\t\"browser-control\",\n\t\"telemetry\",\n]);\n\nconst RESOURCE_PATTERNS: Record<keyof CompositionResourceFilter, string[]> = {\n\textensions: [\"**/*\"],\n\tskills: [\"**/*\"],\n\tprompts: [\"**/*\"],\n\tthemes: [\"**/*\"],\n};\n\nexport function createDefaultCompositionPolicy(): PackageCompositionPolicy {\n\treturn {\n\t\tomkOwnedDomains: [\"ontology\", \"search\", \"memory\", \"cache\", \"compaction\", \"multi-agent\", \"session\", \"scheduler\"],\n\t\tsurfaceOwnership: [\n\t\t\t{ surface: \"theme\", ownerPackageIdentity: \"npm:pi-tokyo-night\" },\n\t\t\t{ surface: \"footer\", ownerPackageIdentity: \"npm:pi-zentui\" },\n\t\t\t{ surface: \"editor\", ownerPackageIdentity: \"npm:pi-zentui\" },\n\t\t\t{ surface: \"header\", ownerPackageIdentity: \"omk:core\" },\n\t\t\t{ surface: \"tool-row\", ownerPackageIdentity: \"npm:pi-claude-style-tools\" },\n\t\t\t{ surface: \"loadout\", ownerPackageIdentity: \"npm:pi-loadout\" },\n\t\t\t{ surface: \"permission\", ownerPackageIdentity: \"npm:@gotgenes/pi-permission-system\" },\n\t\t\t{ surface: \"structured-input\", ownerPackageIdentity: \"npm:@juicesharp/rpiv-ask-user-question\" },\n\t\t\t{ surface: \"report-preview\", ownerPackageIdentity: \"npm:pi-markdown-preview\" },\n\t\t],\n\t\tallowedResources: {\n\t\t\t\"npm:pi-tokyo-night\": { extensions: false, skills: false, prompts: false, themes: true },\n\t\t\t\"npm:pi-zentui\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-claude-style-tools\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-loadout\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-lens\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:@gotgenes/pi-permission-system\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:@juicesharp/rpiv-ask-user-question\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-markdown-preview\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-langfuse\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-cache-optimizer\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-sandbox\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t},\n\t\tcapabilityToSurfaces: {\n\t\t\tsetFooter: [\"footer\"],\n\t\t\tsetEditorComponent: [\"editor\"],\n\t\t\tsetHeader: [\"header\"],\n\t\t\tsetStatus: [\"status\"],\n\t\t\trenderCall: [\"tool-row\"],\n\t\t\trenderResult: [\"tool-row\"],\n\t\t\tregisterMessageRenderer: [\"assistant-markdown\"],\n\t\t\tsetActiveTools: [\"loadout\"],\n\t\t\tpermission: [\"permission\"],\n\t\t\taskUserQuestion: [\"structured-input\"],\n\t\t\tmarkdownPreview: [\"report-preview\"],\n\t\t},\n\t\tcapabilityToOmkDomains: {\n\t\t\tcontext: [\"session\"],\n\t\t\tbefore_provider_request: [\"cache\", \"session\"],\n\t\t\tsession_before_compact: [\"compaction\"],\n\t\t\tsetModel: [\"session\"],\n\t\t\tsetThinkingLevel: [\"session\"],\n\t\t\tmemory: [\"memory\"],\n\t\t\tcache: [\"cache\"],\n\t\t\tontology: [\"ontology\"],\n\t\t\tmultiAgent: [\"multi-agent\"],\n\t\t\tscheduler: [\"scheduler\"],\n\t\t},\n\t};\n}\n\nexport function checkSingleSurfaceOwner(\n\tidentity: string,\n\trequestedSurfaces: readonly CompositionSurface[],\n\texistingOwners: readonly SurfaceOwnerRule[],\n): CompositionConflict[] {\n\tconst key = packageIdentityKey(identity);\n\tconst conflicts: CompositionConflict[] = [];\n\tfor (const surface of uniqueSorted(requestedSurfaces)) {\n\t\tconst owner = existingOwners.find((rule) => rule.surface === surface);\n\t\tif (!owner) continue;\n\t\tif (owner.ownerPackageIdentity === key || owner.ownerPackageIdentity === identity) continue;\n\t\tconflicts.push({\n\t\t\tkind: \"duplicate-surface-owner\",\n\t\t\tsurface,\n\t\t\towner: owner.ownerPackageIdentity,\n\t\t\treason: `${identity} cannot claim ${surface}; ${owner.ownerPackageIdentity} already owns it`,\n\t\t});\n\t}\n\treturn conflicts;\n}\n\nexport function checkOmkDomainMutation(\n\tidentity: string,\n\tcapabilities: readonly string[],\n\tpolicy: PackageCompositionPolicy,\n): CompositionConflict[] {\n\tconst conflicts: CompositionConflict[] = [];\n\tfor (const capability of capabilities) {\n\t\tconst domains = policy.capabilityToOmkDomains[capability] ?? [];\n\t\tfor (const domain of domains) {\n\t\t\tconflicts.push({\n\t\t\t\tkind: \"omk-domain-mutation\",\n\t\t\t\tdomain,\n\t\t\t\tcapability,\n\t\t\t\treason: `${identity} requested ${capability}, which mutates OMK-owned ${domain}`,\n\t\t\t});\n\t\t}\n\t}\n\treturn conflicts;\n}\n\nexport function checkCapabilitySurfaceMatch(\n\tidentity: string,\n\trequestedSurfaces: readonly CompositionSurface[],\n\tcapabilities: readonly string[],\n\tpolicy: PackageCompositionPolicy,\n): CompositionConflict[] {\n\tif (capabilities.length === 0) return [];\n\tconst supported = new Set<CompositionSurface>();\n\tfor (const capability of capabilities) {\n\t\tfor (const surface of policy.capabilityToSurfaces[capability] ?? []) {\n\t\t\tsupported.add(surface);\n\t\t}\n\t}\n\n\treturn uniqueSorted(requestedSurfaces)\n\t\t.filter((surface) => !supported.has(surface))\n\t\t.map((surface) => ({\n\t\t\tkind: \"capability-surface-mismatch\" as const,\n\t\t\tsurface,\n\t\t\treason: `${identity} requested ${surface}, but no detected capability supports that surface`,\n\t\t}));\n}\n\nexport function resolveResourceFilter(identity: string, policy: PackageCompositionPolicy): CompositionResourceFilter {\n\tconst override = policy.allowedResources[identity] ?? policy.allowedResources[packageIdentityKey(identity)] ?? {};\n\treturn { ...ALL_RESOURCES, ...override };\n}\n\nexport function inferRequestedSurfaces(\n\treview: ProcurementReview,\n\tpolicy: PackageCompositionPolicy,\n): CompositionSurface[] {\n\tconst surfaces = new Set<CompositionSurface>();\n\tfor (const resource of review.candidate.expectedResources) {\n\t\tif (resource === \"theme\") surfaces.add(\"theme\");\n\t}\n\tfor (const capability of review.capabilities) {\n\t\tfor (const surface of policy.capabilityToSurfaces[capability] ?? []) {\n\t\t\tsurfaces.add(surface);\n\t\t}\n\t}\n\treturn uniqueSorted([...surfaces]);\n}\n\nexport function composePackage(input: CompositionInput, policy: PackageCompositionPolicy): CompositionReview {\n\tconst requestedSurfaces = uniqueSorted(input.requestedSurfaces ?? inferRequestedSurfaces(input.review, policy));\n\tconst allowedResources = resolveResourceFilter(input.identity, policy);\n\tconst conflicts = [\n\t\t...checkSingleSurfaceOwner(input.identity, requestedSurfaces, policy.surfaceOwnership),\n\t\t...checkOmkDomainMutation(input.identity, input.review.capabilities, policy),\n\t\t...checkCapabilitySurfaceMatch(input.identity, requestedSurfaces, input.review.capabilities, policy),\n\t\t...checkResourceFilter(input.identity, requestedSurfaces, allowedResources),\n\t];\n\n\tconst rejectedReasons = [...input.review.rejectedReasons, ...conflicts.map((conflict) => conflict.reason)];\n\tconst blockingConflict = conflicts.find((conflict) =>\n\t\t[\n\t\t\t\"duplicate-surface-owner\",\n\t\t\t\"omk-domain-mutation\",\n\t\t\t\"unapproved-surface\",\n\t\t\t\"capability-surface-mismatch\",\n\t\t\t\"resource-filter-blocked\",\n\t\t].includes(conflict.kind),\n\t);\n\n\tif (!input.review.pinned) {\n\t\treturn compositionReview(input.identity, \"reject\", allowedResources, requestedSurfaces, conflicts, undefined, [\n\t\t\t...rejectedReasons,\n\t\t\t\"missing-exact-pin\",\n\t\t]);\n\t}\n\tif (input.review.licenseVerdict === \"reject\" || input.review.lifecycleVerdict === \"reject\") {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"reject\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tundefined,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\tif (input.review.pathCompatibility === \"pi-hardcoded\") {\n\t\treturn compositionReview(input.identity, \"reject\", allowedResources, requestedSurfaces, conflicts, undefined, [\n\t\t\t...rejectedReasons,\n\t\t\t\"pi-hardcoded-paths\",\n\t\t]);\n\t}\n\tif (blockingConflict) {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"reject\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tundefined,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\tif (input.review.adoption === \"deferred\") {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"defer\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tinput.review.deferredReason,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\tif (input.review.adoption === \"reject\") {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"reject\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tundefined,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\n\tconst canaryReasons = canaryRequiredReasons(input.review.capabilities);\n\tif (input.review.risk === \"high\" && canaryReasons.length === 0) {\n\t\tcanaryReasons.push(\"canary-required: high-risk\");\n\t}\n\tif (canaryReasons.length > 0) {\n\t\treturn compositionReview(input.identity, \"canary\", allowedResources, requestedSurfaces, conflicts, undefined, [\n\t\t\t...rejectedReasons,\n\t\t\t...canaryReasons,\n\t\t]);\n\t}\n\n\treturn compositionReview(\n\t\tinput.identity,\n\t\t\"admit\",\n\t\tallowedResources,\n\t\trequestedSurfaces,\n\t\tconflicts,\n\t\tundefined,\n\t\trejectedReasons,\n\t);\n}\n\nexport function composeCandidateBatch(\n\tinputs: readonly CompositionInput[],\n\tbasePolicy: PackageCompositionPolicy,\n): CompositionReview[] {\n\tconst owners = [...basePolicy.surfaceOwnership];\n\tconst results: CompositionReview[] = [];\n\tfor (const input of inputs) {\n\t\tconst policy = { ...basePolicy, surfaceOwnership: owners };\n\t\tconst result = composePackage(input, policy);\n\t\tresults.push(result);\n\t\tif (result.verdict === \"admit\" || result.verdict === \"canary\") {\n\t\t\tconst ownerKey = packageIdentityKey(result.identity);\n\t\t\tfor (const surface of result.admittedSurfaces) {\n\t\t\t\tif (!owners.some((owner) => owner.surface === surface)) {\n\t\t\t\t\towners.push({ surface, ownerPackageIdentity: ownerKey });\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn results;\n}\n\nexport function toPackageSource(review: CompositionReview): PackageSource {\n\tassertPromotable(review);\n\tif (isAllResourcesEnabled(review.allowedResources)) {\n\t\treturn review.identity;\n\t}\n\treturn {\n\t\tsource: review.identity,\n\t\textensions: review.allowedResources.extensions ? RESOURCE_PATTERNS.extensions : [],\n\t\tskills: review.allowedResources.skills ? RESOURCE_PATTERNS.skills : [],\n\t\tprompts: review.allowedResources.prompts ? RESOURCE_PATTERNS.prompts : [],\n\t\tthemes: review.allowedResources.themes ? RESOURCE_PATTERNS.themes : [],\n\t};\n}\n\nexport function createPromotionRecord(\n\treview: CompositionReview,\n\tsource: string,\n\toptions: { reviewedBy?: \"manual\" | \"root-orchestrator\"; now?: Date } = {},\n): CompositionPromotionRecord {\n\tassertPromotable(review);\n\treturn {\n\t\tschemaVersion: \"omk.package-composition.promotion.v1\",\n\t\tidentity: review.identity,\n\t\tsource: redactSource(source),\n\t\tscope: \"project\",\n\t\tallowedResources: review.allowedResources,\n\t\tadmittedSurfaces: review.admittedSurfaces,\n\t\treviewedAt: (options.now ?? new Date()).toISOString(),\n\t\treviewedBy: options.reviewedBy ?? \"root-orchestrator\",\n\t};\n}\n\nfunction checkResourceFilter(\n\tidentity: string,\n\trequestedSurfaces: readonly CompositionSurface[],\n\tfilter: CompositionResourceFilter,\n): CompositionConflict[] {\n\tconst conflicts: CompositionConflict[] = [];\n\tfor (const surface of requestedSurfaces) {\n\t\tconst resource = resourceForSurface(surface);\n\t\tif (filter[resource]) continue;\n\t\tconflicts.push({\n\t\t\tkind: \"resource-filter-blocked\",\n\t\t\tsurface,\n\t\t\treason: `${identity} requested ${surface}, but ${resource} resources are disabled`,\n\t\t});\n\t}\n\treturn conflicts;\n}\n\nfunction resourceForSurface(surface: CompositionSurface): keyof CompositionResourceFilter {\n\treturn surface === \"theme\" ? \"themes\" : \"extensions\";\n}\n\nfunction canaryRequiredReasons(capabilities: readonly string[]): string[] {\n\tconst reasons: string[] = [];\n\tfor (const capability of capabilities) {\n\t\tif (SIDE_EFFECT_CAPABILITIES.has(capability)) {\n\t\t\treasons.push(`canary-required: ${capability}`);\n\t\t}\n\t}\n\treturn uniqueSorted(reasons);\n}\n\nfunction compositionReview(\n\tidentity: string,\n\tverdict: CompositionVerdict,\n\tallowedResources: CompositionResourceFilter,\n\tadmittedSurfaces: readonly CompositionSurface[],\n\tconflicts: readonly CompositionConflict[],\n\tdeferredReason: string | undefined,\n\trejectedReasons: readonly string[],\n): CompositionReview {\n\treturn {\n\t\tidentity,\n\t\tverdict,\n\t\tallowedResources,\n\t\tadmittedSurfaces: uniqueSorted(admittedSurfaces),\n\t\tconflicts: [...conflicts],\n\t\t...(deferredReason === undefined ? {} : { deferredReason }),\n\t\trejectedReasons: uniqueSorted(rejectedReasons),\n\t};\n}\n\nfunction assertPromotable(review: CompositionReview): void {\n\tif (review.verdict !== \"admit\") {\n\t\tthrow new Error(`Package composition verdict ${review.verdict} cannot be promoted`);\n\t}\n}\n\nfunction isAllResourcesEnabled(filter: CompositionResourceFilter): boolean {\n\treturn filter.extensions && filter.skills && filter.prompts && filter.themes;\n}\n\nfunction packageIdentityKey(identity: string): string {\n\tif (!identity.startsWith(\"npm:\")) return identity;\n\tconst spec = identity.slice(\"npm:\".length);\n\tconst at = spec.lastIndexOf(\"@\");\n\tif (at <= 0) return identity;\n\tif (spec.startsWith(\"@\")) {\n\t\tconst scopedVersionAt = spec.indexOf(\"@\", spec.indexOf(\"/\") + 1);\n\t\treturn scopedVersionAt > 0 ? `npm:${spec.slice(0, scopedVersionAt)}` : identity;\n\t}\n\treturn `npm:${spec.slice(0, at)}`;\n}\n\nfunction uniqueSorted<T extends string>(values: readonly T[]): T[] {\n\treturn [...new Set(values)].sort();\n}\n\nfunction redactSource(source: string): string {\n\treturn source\n\t\t.replace(/(https?:\\/\\/)([^\\s/@]+@)/gi, \"$1<redacted>@\")\n\t\t.replace(/([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi, \"$1<redacted>\");\n}\n"]}

package/dist/core/package-gallery.d.ts

@@ -0,0 +1,124 @@
+import { type Adoption, type GateVerdict, type PathCompatibility } from "./package-procurement.ts";
+export type GalleryResourceType = "extension" | "skill" | "prompt" | "theme";
+export type GalleryManifestKey = "omk" | "pi";
+export type GalleryInstallSourceKind = "npm" | "git" | "local";
+export type GalleryInstallTrust = "code-execution" | "declarative";
+export type GalleryPreviewKind = "video" | "image" | "generated-theme";
+export type ExtensionCapabilityBadge = "tools" | "commands" | "hooks" | "provider" | "ui" | "compaction";
+export interface NormalizedGalleryManifest {
+    manifestKey: GalleryManifestKey;
+    extensions: string[];
+    skills: string[];
+    prompts: string[];
+    themes: string[];
+    video: string | undefined;
+    image: string | undefined;
+    description: string | undefined;
+}
+export interface GalleryTypedEntry {
+    resourceTypes: readonly GalleryResourceType[];
+}
+export interface GalleryPreviewInput {
+    video?: string;
+    image?: string;
+    resourceTypes: readonly GalleryResourceType[];
+    themeName?: string;
+}
+export interface GalleryPreviewSelection {
+    kind: GalleryPreviewKind;
+    url?: string;
+    marker?: string;
+}
+export type GalleryInstallSource = {
+    kind: "npm";
+    name: string;
+    version?: string;
+} | {
+    kind: "git";
+    repo: string;
+    ref?: string;
+} | {
+    kind: "local";
+    path: string;
+};
+export interface GalleryInstallOptions {
+    local?: boolean;
+}
+export interface GalleryInstallSpec {
+    kind: GalleryInstallSourceKind;
+    source: string;
+    installCommand: string;
+    tryEphemeralCommand: string;
+    trust: GalleryInstallTrust;
+}
+export type GalleryEntryIdentity = {
+    kind: "npm";
+    name: string;
+} | {
+    kind: "git";
+    repo: string;
+    ref?: string;
+} | {
+    kind: "local";
+    path: string;
+};
+export interface GalleryEntryWithIdentity {
+    identity: GalleryEntryIdentity;
+}
+export declare function normalizeGalleryManifest(pkgJson: unknown): NormalizedGalleryManifest | null;
+export declare function hasGalleryKeyword(pkgJson: unknown): boolean;
+export declare function resolveGalleryTypeFacet(facet: string | undefined): GalleryResourceType | undefined;
+export declare function classifyGalleryResourceTypes(manifest: NormalizedGalleryManifest | null, conventionDirs?: readonly string[]): GalleryResourceType[];
+export declare function filterGalleryEntriesByType<T extends GalleryTypedEntry>(entries: readonly T[], facet: string | undefined): T[];
+export declare function isValidGalleryVideoUrl(url: string | undefined): boolean;
+export declare function isValidGalleryImageUrl(url: string | undefined): boolean;
+export declare function selectGalleryPreview(input: GalleryPreviewInput): GalleryPreviewSelection | null;
+export declare function isPathInsideRootByRealpath(packageRoot: string, candidatePath: string): boolean;
+export declare function resolveManifestEntryInsideRoot(packageRoot: string, entry: string, baseDir?: string): string | undefined;
+export declare function filterManifestEntriesInsideRoot(packageRoot: string, entries: readonly string[]): string[];
+export declare function buildGalleryInstallSpec(input: GalleryInstallSource, hasExtension: boolean, options?: GalleryInstallOptions): GalleryInstallSpec;
+export declare function inferExtensionCapabilityBadges(sourceText: string): ExtensionCapabilityBadge[];
+export declare function dedupeGalleryEntries<T extends GalleryEntryWithIdentity>(entries: readonly T[]): T[];
+/**
+ * Procurement-derived safe-gate outcome for an unpromoted (ephemeral trial) gallery install.
+ *
+ * Closes G9: gallery trust is derived from capability scan and procurement verdicts, not
+ * from manifest claims. A trial is "admitted" only when the source is exact-pinned, carries
+ * no hard-block capability (credential reads, host sockets), and passed explicit license,
+ * lifecycle, and path-compatibility gates. Procurement rejection reasons are surfaced
+ * verbatim so callers can show why an unpromoted trial would be blocked.
+ */
+export type GalleryTrialGateOutcome = "admitted" | "blocked";
+export interface GalleryTrialGateStatus {
+    readonly outcome: GalleryTrialGateOutcome;
+    readonly identity: string;
+    readonly adoption: Adoption;
+    readonly pinned: boolean;
+    readonly reasons: readonly string[];
+}
+/**
+ * Structural subset of a procurement review consumed by the trial gate. The full procurement
+ * review (`ProcurementReview`) satisfies this shape, so callers may pass `procureCandidate(...)`
+ * output directly; tests can construct focused reviews without the full procurement input.
+ */
+export interface GalleryTrialGateReview {
+    readonly pinned: boolean;
+    readonly capabilities: readonly string[];
+    readonly adoption: Adoption;
+    readonly rejectedReasons: readonly string[];
+    readonly licenseVerdict?: GateVerdict;
+    readonly lifecycleVerdict?: GateVerdict;
+    readonly pathCompatibility?: PathCompatibility;
+    readonly candidate?: {
+        readonly expectedResources?: readonly string[];
+    };
+}
+/**
+ * Classify whether a candidate package may be safely admitted to an unpromoted (ephemeral,
+ * sandboxed, `--ignore-scripts`) trial. Pure and deterministic: identical inputs always
+ * produce identical output, and no I/O is performed.
+ */
+export declare function assessGalleryTrialGate(identity: GalleryEntryIdentity, review: GalleryTrialGateReview): GalleryTrialGateStatus;
+export declare function deriveGalleryInstallTrustFromReview(review: GalleryTrialGateReview): GalleryInstallTrust;
+export declare function buildGalleryInstallSpecFromReview(input: GalleryInstallSource, review: GalleryTrialGateReview, options?: GalleryInstallOptions): GalleryInstallSpec;
+//# sourceMappingURL=package-gallery.d.ts.map

package/dist/core/package-gallery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-gallery.d.ts","sourceRoot":"","sources":["../../src/core/package-gallery.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAGtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,IAAI,CAAC;AAC9C,MAAM,MAAM,wBAAwB,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;AAC/D,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,GAAG,iBAAiB,CAAC;AACvE,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,IAAI,GAAG,YAAY,CAAC;AAEzG,MAAM,WAAW,yBAAyB;IACzC,WAAW,EAAE,kBAAkB,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,qBAAqB;IACrC,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,mBAAmB,CAAC;CAC3B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,wBAAwB;IACxC,QAAQ,EAAE,oBAAoB,CAAC;CAC/B;AAiDD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAc3F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAG3D;AAUD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAGlG;AAED,wBAAgB,4BAA4B,CAC3C,QAAQ,EAAE,yBAAyB,GAAG,IAAI,EAC1C,cAAc,GAAE,SAAS,MAAM,EAAO,GACpC,mBAAmB,EAAE,CAWvB;AAED,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,iBAAiB,EACrE,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,KAAK,EAAE,MAAM,GAAG,SAAS,GACvB,CAAC,EAAE,CAKL;AAgBD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGvE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGvE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,IAAI,CAQ/F;AAeD,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAM9F;AAED,wBAAgB,8BAA8B,CAC7C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,SAAc,GACnB,MAAM,GAAG,SAAS,CASpB;AAED,wBAAgB,+BAA+B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CASzG;AA8BD,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,oBAAoB,EAC3B,YAAY,EAAE,OAAO,EACrB,OAAO,GAAE,qBAA0B,GACjC,kBAAkB,CAUpB;AAiDD,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,EAAE,CAoB7F;AAeD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,wBAAwB,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAUnG;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,WAAW,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CACxE;AAiBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,sBAAsB,GAC5B,sBAAsB,CA2BxB;AAED,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,sBAAsB,GAAG,mBAAmB,CAKvG;AAED,wBAAgB,iCAAiC,CAChD,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,GAAE,qBAA0B,GACjC,kBAAkB,CAOpB","sourcesContent":["import { existsSync, realpathSync } from \"node:fs\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\nimport {\n\ttype Adoption,\n\ttype GateVerdict,\n\ttype PathCompatibility,\n\tvalidateExactNpmVersion,\n\tvalidateGitRef,\n} from \"./package-procurement.ts\";\n\nexport type GalleryResourceType = \"extension\" | \"skill\" | \"prompt\" | \"theme\";\nexport type GalleryManifestKey = \"omk\" | \"pi\";\nexport type GalleryInstallSourceKind = \"npm\" | \"git\" | \"local\";\nexport type GalleryInstallTrust = \"code-execution\" | \"declarative\";\nexport type GalleryPreviewKind = \"video\" | \"image\" | \"generated-theme\";\nexport type ExtensionCapabilityBadge = \"tools\" | \"commands\" | \"hooks\" | \"provider\" | \"ui\" | \"compaction\";\n\nexport interface NormalizedGalleryManifest {\n\tmanifestKey: GalleryManifestKey;\n\textensions: string[];\n\tskills: string[];\n\tprompts: string[];\n\tthemes: string[];\n\tvideo: string | undefined;\n\timage: string | undefined;\n\tdescription: string | undefined;\n}\n\nexport interface GalleryTypedEntry {\n\tresourceTypes: readonly GalleryResourceType[];\n}\n\nexport interface GalleryPreviewInput {\n\tvideo?: string;\n\timage?: string;\n\tresourceTypes: readonly GalleryResourceType[];\n\tthemeName?: string;\n}\n\nexport interface GalleryPreviewSelection {\n\tkind: GalleryPreviewKind;\n\turl?: string;\n\tmarker?: string;\n}\n\nexport type GalleryInstallSource =\n\t| { kind: \"npm\"; name: string; version?: string }\n\t| { kind: \"git\"; repo: string; ref?: string }\n\t| { kind: \"local\"; path: string };\n\nexport interface GalleryInstallOptions {\n\tlocal?: boolean;\n}\n\nexport interface GalleryInstallSpec {\n\tkind: GalleryInstallSourceKind;\n\tsource: string;\n\tinstallCommand: string;\n\ttryEphemeralCommand: string;\n\ttrust: GalleryInstallTrust;\n}\n\nexport type GalleryEntryIdentity =\n\t| { kind: \"npm\"; name: string }\n\t| { kind: \"git\"; repo: string; ref?: string }\n\t| { kind: \"local\"; path: string };\n\nexport interface GalleryEntryWithIdentity {\n\tidentity: GalleryEntryIdentity;\n}\n\nconst RESOURCE_ORDER: readonly GalleryResourceType[] = [\"extension\", \"skill\", \"prompt\", \"theme\"];\nconst CAPABILITY_ORDER: readonly ExtensionCapabilityBadge[] = [\n\t\"tools\",\n\t\"commands\",\n\t\"hooks\",\n\t\"provider\",\n\t\"ui\",\n\t\"compaction\",\n];\nconst IMAGE_EXTENSIONS = [\".png\", \".jpg\", \".jpeg\", \".gif\", \".webp\"] as const;\n\nconst FACET_ALIASES: Readonly<Record<string, GalleryResourceType>> = {\n\textension: \"extension\",\n\textensions: \"extension\",\n\tskill: \"skill\",\n\tskills: \"skill\",\n\tprompt: \"prompt\",\n\tprompts: \"prompt\",\n\ttheme: \"theme\",\n\tthemes: \"theme\",\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction toStringArray(value: unknown): string[] {\n\tif (!Array.isArray(value)) return [];\n\treturn value\n\t\t.filter((item): item is string => typeof item === \"string\")\n\t\t.map((item) => item.trim())\n\t\t.filter(Boolean);\n}\n\nfunction toOptionalString(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = value.trim();\n\treturn trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction readManifestRecord(pkgJson: unknown): { key: GalleryManifestKey; manifest: Record<string, unknown> } | null {\n\tif (!isRecord(pkgJson)) return null;\n\tif (isRecord(pkgJson.omk)) return { key: \"omk\", manifest: pkgJson.omk };\n\tif (isRecord(pkgJson.pi)) return { key: \"pi\", manifest: pkgJson.pi };\n\treturn null;\n}\n\nexport function normalizeGalleryManifest(pkgJson: unknown): NormalizedGalleryManifest | null {\n\tconst source = readManifestRecord(pkgJson);\n\tif (!source) return null;\n\n\treturn {\n\t\tmanifestKey: source.key,\n\t\textensions: toStringArray(source.manifest.extensions),\n\t\tskills: toStringArray(source.manifest.skills),\n\t\tprompts: toStringArray(source.manifest.prompts),\n\t\tthemes: toStringArray(source.manifest.themes),\n\t\tvideo: toOptionalString(source.manifest.video),\n\t\timage: toOptionalString(source.manifest.image),\n\t\tdescription: toOptionalString(source.manifest.description),\n\t};\n}\n\nexport function hasGalleryKeyword(pkgJson: unknown): boolean {\n\tif (!isRecord(pkgJson) || !Array.isArray(pkgJson.keywords)) return false;\n\treturn pkgJson.keywords.some((keyword) => keyword === \"omk-package\" || keyword === \"pi-package\");\n}\n\nfunction hasManifestResources(manifest: NormalizedGalleryManifest | null, type: GalleryResourceType): boolean {\n\tif (!manifest) return false;\n\tif (type === \"extension\") return manifest.extensions.length > 0;\n\tif (type === \"skill\") return manifest.skills.length > 0;\n\tif (type === \"prompt\") return manifest.prompts.length > 0;\n\treturn manifest.themes.length > 0;\n}\n\nexport function resolveGalleryTypeFacet(facet: string | undefined): GalleryResourceType | undefined {\n\tif (!facet) return undefined;\n\treturn FACET_ALIASES[facet.trim().toLowerCase()];\n}\n\nexport function classifyGalleryResourceTypes(\n\tmanifest: NormalizedGalleryManifest | null,\n\tconventionDirs: readonly string[] = [],\n): GalleryResourceType[] {\n\tconst types = new Set<GalleryResourceType>();\n\tfor (const type of RESOURCE_ORDER) {\n\t\tif (hasManifestResources(manifest, type)) types.add(type);\n\t}\n\tfor (const dir of conventionDirs) {\n\t\tconst firstSegment = dir.trim().replace(/\\\\/g, \"/\").split(\"/\").filter(Boolean)[0];\n\t\tconst type = resolveGalleryTypeFacet(firstSegment);\n\t\tif (type) types.add(type);\n\t}\n\treturn RESOURCE_ORDER.filter((type) => types.has(type));\n}\n\nexport function filterGalleryEntriesByType<T extends GalleryTypedEntry>(\n\tentries: readonly T[],\n\tfacet: string | undefined,\n): T[] {\n\tif (facet === undefined) return [...entries];\n\tconst type = resolveGalleryTypeFacet(facet);\n\tif (!type) return [];\n\treturn entries.filter((entry) => entry.resourceTypes.includes(type));\n}\n\nfunction parseAllowedGalleryUrl(url: string | undefined): URL | null {\n\tif (!url) return null;\n\tif (/[\\s\\u0000-\\u001f\\u007f]/.test(url)) return null;\n\ttry {\n\t\tconst parsed = new URL(url);\n\t\tif (parsed.protocol !== \"https:\") return null;\n\t\tif (parsed.username || parsed.password) return null;\n\t\tif (parsed.port) return null;\n\t\treturn parsed;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function isValidGalleryVideoUrl(url: string | undefined): boolean {\n\tconst parsed = parseAllowedGalleryUrl(url);\n\treturn parsed ? parsed.pathname.toLowerCase().endsWith(\".mp4\") : false;\n}\n\nexport function isValidGalleryImageUrl(url: string | undefined): boolean {\n\tconst parsed = parseAllowedGalleryUrl(url);\n\treturn parsed ? IMAGE_EXTENSIONS.some((extension) => parsed.pathname.toLowerCase().endsWith(extension)) : false;\n}\n\nexport function selectGalleryPreview(input: GalleryPreviewInput): GalleryPreviewSelection | null {\n\tif (isValidGalleryVideoUrl(input.video)) return { kind: \"video\", url: input.video };\n\tif (isValidGalleryImageUrl(input.image)) return { kind: \"image\", url: input.image };\n\tif (input.resourceTypes.includes(\"theme\")) {\n\t\tconst marker = input.themeName?.trim() || \"theme\";\n\t\treturn { kind: \"generated-theme\", marker };\n\t}\n\treturn null;\n}\n\nfunction isPathInsideRoot(root: string, candidate: string): boolean {\n\tconst rel = relative(root, candidate);\n\treturn rel === \"\" || (rel !== \"..\" && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));\n}\n\nfunction realpathIfPossible(path: string): string {\n\ttry {\n\t\treturn realpathSync(path);\n\t} catch {\n\t\treturn resolve(path);\n\t}\n}\n\nexport function isPathInsideRootByRealpath(packageRoot: string, candidatePath: string): boolean {\n\tconst root = resolve(packageRoot);\n\tconst candidate = resolve(candidatePath);\n\tif (!isPathInsideRoot(root, candidate)) return false;\n\tif (!existsSync(candidate)) return true;\n\treturn isPathInsideRoot(realpathIfPossible(root), realpathIfPossible(candidate));\n}\n\nexport function resolveManifestEntryInsideRoot(\n\tpackageRoot: string,\n\tentry: string,\n\tbaseDir = packageRoot,\n): string | undefined {\n\tconst trimmed = entry.trim();\n\tif (!trimmed || isAbsolute(trimmed)) return undefined;\n\tconst root = resolve(packageRoot);\n\tconst base = resolve(baseDir);\n\tif (!isPathInsideRootByRealpath(root, base)) return undefined;\n\tconst candidate = resolve(base, trimmed);\n\tif (!isPathInsideRootByRealpath(root, candidate)) return undefined;\n\treturn (relative(root, candidate) || \".\").replace(/\\\\/g, \"/\");\n}\n\nexport function filterManifestEntriesInsideRoot(packageRoot: string, entries: readonly string[]): string[] {\n\tconst safeEntries: string[] = [];\n\tfor (const entry of entries) {\n\t\tconst safeEntry = resolveManifestEntryInsideRoot(packageRoot, entry);\n\t\tif (safeEntry && safeEntry !== \".\") {\n\t\t\tsafeEntries.push(safeEntry);\n\t\t}\n\t}\n\treturn safeEntries;\n}\n\nfunction requireNonEmpty(value: string, label: string): string {\n\tconst trimmed = value.trim();\n\tif (!trimmed) throw new Error(`${label} must not be empty`);\n\treturn trimmed;\n}\n\nfunction buildGallerySource(source: GalleryInstallSource): { kind: GalleryInstallSourceKind; source: string } {\n\tif (source.kind === \"npm\") {\n\t\tconst name = requireNonEmpty(source.name, \"npm package name\");\n\t\tconst versionVerdict = validateExactNpmVersion(source.version);\n\t\tif (!versionVerdict.ok) {\n\t\t\tthrow new Error(\n\t\t\t\t`Gallery npm installs require an exact pinned version for ${name}. ${versionVerdict.message}.`,\n\t\t\t);\n\t\t}\n\t\treturn { kind: \"npm\", source: `npm:${name}@${versionVerdict.version}` };\n\t}\n\tif (source.kind === \"git\") {\n\t\tconst repo = requireNonEmpty(source.repo, \"git repository\").replace(/^git:/, \"\");\n\t\tconst refVerdict = validateGitRef(source.ref);\n\t\tif (!refVerdict.ok) {\n\t\t\tthrow new Error(`Gallery git installs require a full commit SHA for ${repo}. ${refVerdict.message}.`);\n\t\t}\n\t\treturn { kind: \"git\", source: `git:${repo}@${refVerdict.commit}` };\n\t}\n\treturn { kind: \"local\", source: requireNonEmpty(source.path, \"local path\") };\n}\n\nexport function buildGalleryInstallSpec(\n\tinput: GalleryInstallSource,\n\thasExtension: boolean,\n\toptions: GalleryInstallOptions = {},\n): GalleryInstallSpec {\n\tconst source = buildGallerySource(input);\n\tconst localFlag = options.local ? \" -l\" : \"\";\n\treturn {\n\t\tkind: source.kind,\n\t\tsource: source.source,\n\t\tinstallCommand: `omk install ${source.source}${localFlag}`,\n\t\ttryEphemeralCommand: `omk -e ${source.source}`,\n\t\ttrust: hasExtension ? \"code-execution\" : \"declarative\",\n\t};\n}\n\nfunction stripComments(sourceText: string, stripStrings: boolean): string {\n\tlet output = \"\";\n\tlet index = 0;\n\twhile (index < sourceText.length) {\n\t\tconst current = sourceText[index];\n\t\tconst next = sourceText[index + 1];\n\t\tif (current === \"/\" && next === \"/\") {\n\t\t\tindex += 2;\n\t\t\twhile (index < sourceText.length && sourceText[index] !== \"\\n\") index += 1;\n\t\t\toutput += \"\\n\";\n\t\t\tindex += 1;\n\t\t\tcontinue;\n\t\t}\n\t\tif (current === \"/\" && next === \"*\") {\n\t\t\tindex += 2;\n\t\t\twhile (index < sourceText.length && !(sourceText[index] === \"*\" && sourceText[index + 1] === \"/\")) index += 1;\n\t\t\tindex += 2;\n\t\t\toutput += \" \";\n\t\t\tcontinue;\n\t\t}\n\t\tif (stripStrings && (current === '\"' || current === \"'\" || current === \"`\")) {\n\t\t\tconst quote = current;\n\t\t\tindex += 1;\n\t\t\twhile (index < sourceText.length) {\n\t\t\t\tif (sourceText[index] === \"\\\\\") {\n\t\t\t\t\tindex += 2;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tif (sourceText[index] === quote) {\n\t\t\t\t\tindex += 1;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tindex += 1;\n\t\t\t}\n\t\t\toutput += \" \";\n\t\t\tcontinue;\n\t\t}\n\t\toutput += current;\n\t\tindex += 1;\n\t}\n\treturn output;\n}\n\nfunction capabilityOrder(badge: ExtensionCapabilityBadge): number {\n\treturn CAPABILITY_ORDER.indexOf(badge);\n}\n\nexport function inferExtensionCapabilityBadges(sourceText: string): ExtensionCapabilityBadge[] {\n\tconst withoutComments = stripComments(sourceText, false);\n\tconst code = stripComments(sourceText, true);\n\tconst badges = new Set<ExtensionCapabilityBadge>();\n\n\tif (/\\bomk\\s*\\.\\s*registerTool\\s*\\(/.test(code)) badges.add(\"tools\");\n\tif (/\\bomk\\s*\\.\\s*registerCommand\\s*\\(/.test(code)) badges.add(\"commands\");\n\tif (/\\bomk\\s*\\.\\s*on\\s*\\(/.test(code) || /\\bregisterHook\\s*\\(/.test(code)) badges.add(\"hooks\");\n\tif (/\\bomk\\s*\\.\\s*registerProvider\\s*\\(/.test(code)) badges.add(\"provider\");\n\tif (\n\t\t/\\bomk\\s*\\.\\s*(registerShortcut|registerFlag|registerMessageRenderer|registerComponent|setFooter)\\s*\\(/.test(code)\n\t) {\n\t\tbadges.add(\"ui\");\n\t}\n\tif (/\\bomk\\s*\\.\\s*on\\s*\\(\\s*([\"'`])(?:session_before_compact|session_compact|context)\\1/.test(withoutComments)) {\n\t\tbadges.add(\"hooks\");\n\t\tbadges.add(\"compaction\");\n\t}\n\n\treturn [...badges].sort((left, right) => capabilityOrder(left) - capabilityOrder(right));\n}\n\nfunction identityKey(identity: GalleryEntryIdentity): string {\n\tif (identity.kind === \"npm\") return `npm:${identity.name.trim().toLowerCase()}`;\n\tif (identity.kind === \"git\") {\n\t\tconst repo = identity.repo\n\t\t\t.trim()\n\t\t\t.replace(/^git:/, \"\")\n\t\t\t.replace(/\\.git$/i, \"\")\n\t\t\t.toLowerCase();\n\t\treturn `git:${repo}`;\n\t}\n\treturn `local:${resolve(identity.path)}`;\n}\n\nexport function dedupeGalleryEntries<T extends GalleryEntryWithIdentity>(entries: readonly T[]): T[] {\n\tconst seen = new Set<string>();\n\tconst result: T[] = [];\n\tfor (const entry of entries) {\n\t\tconst key = identityKey(entry.identity);\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(entry);\n\t}\n\treturn result;\n}\n\n/**\n * Procurement-derived safe-gate outcome for an unpromoted (ephemeral trial) gallery install.\n *\n * Closes G9: gallery trust is derived from capability scan and procurement verdicts, not\n * from manifest claims. A trial is \"admitted\" only when the source is exact-pinned, carries\n * no hard-block capability (credential reads, host sockets), and passed explicit license,\n * lifecycle, and path-compatibility gates. Procurement rejection reasons are surfaced\n * verbatim so callers can show why an unpromoted trial would be blocked.\n */\nexport type GalleryTrialGateOutcome = \"admitted\" | \"blocked\";\n\nexport interface GalleryTrialGateStatus {\n\treadonly outcome: GalleryTrialGateOutcome;\n\treadonly identity: string;\n\treadonly adoption: Adoption;\n\treadonly pinned: boolean;\n\treadonly reasons: readonly string[];\n}\n\n/**\n * Structural subset of a procurement review consumed by the trial gate. The full procurement\n * review (`ProcurementReview`) satisfies this shape, so callers may pass `procureCandidate(...)`\n * output directly; tests can construct focused reviews without the full procurement input.\n */\nexport interface GalleryTrialGateReview {\n\treadonly pinned: boolean;\n\treadonly capabilities: readonly string[];\n\treadonly adoption: Adoption;\n\treadonly rejectedReasons: readonly string[];\n\treadonly licenseVerdict?: GateVerdict;\n\treadonly lifecycleVerdict?: GateVerdict;\n\treadonly pathCompatibility?: PathCompatibility;\n\treadonly candidate?: { readonly expectedResources?: readonly string[] };\n}\n\nconst TRIAL_HARD_BLOCK_CAPABILITIES: ReadonlySet<string> = new Set([\"credential-read\", \"host-socket\"]);\nconst CODE_EXECUTION_RESOURCES: ReadonlySet<string> = new Set([\"extension\", \"tool\"]);\nconst CODE_EXECUTION_CAPABILITIES: ReadonlySet<string> = new Set([\n\t\"browser-control\",\n\t\"child-process\",\n\t\"credential-read\",\n\t\"filesystem-write\",\n\t\"host-socket\",\n\t\"network\",\n]);\n\nfunction pushUniqueReason(reasons: string[], reason: string): void {\n\tif (!reasons.includes(reason)) reasons.push(reason);\n}\n\n/**\n * Classify whether a candidate package may be safely admitted to an unpromoted (ephemeral,\n * sandboxed, `--ignore-scripts`) trial. Pure and deterministic: identical inputs always\n * produce identical output, and no I/O is performed.\n */\nexport function assessGalleryTrialGate(\n\tidentity: GalleryEntryIdentity,\n\treview: GalleryTrialGateReview,\n): GalleryTrialGateStatus {\n\tconst hardBlocks = review.capabilities.filter((capability) => TRIAL_HARD_BLOCK_CAPABILITIES.has(capability));\n\tconst reasons: string[] = [];\n\tif (!review.pinned) pushUniqueReason(reasons, \"exact-pin-required\");\n\tif (hardBlocks.length > 0) pushUniqueReason(reasons, `capability-hard-block: ${hardBlocks.join(\",\")}`);\n\tif (review.licenseVerdict === \"reject\") pushUniqueReason(reasons, \"license-blocked\");\n\tif (review.lifecycleVerdict === \"reject\") pushUniqueReason(reasons, \"lifecycle-scripts-blocked\");\n\tif (review.pathCompatibility === \"pi-hardcoded\") pushUniqueReason(reasons, \"pi-hardcoded-paths\");\n\tif (review.adoption === \"reject\") {\n\t\tfor (const reason of review.rejectedReasons) pushUniqueReason(reasons, reason);\n\t}\n\n\tconst blocked =\n\t\t!review.pinned ||\n\t\thardBlocks.length > 0 ||\n\t\treview.licenseVerdict === \"reject\" ||\n\t\treview.lifecycleVerdict === \"reject\" ||\n\t\treview.pathCompatibility === \"pi-hardcoded\" ||\n\t\treview.adoption === \"reject\";\n\n\treturn {\n\t\toutcome: blocked ? \"blocked\" : \"admitted\",\n\t\tidentity: identityKey(identity),\n\t\tadoption: review.adoption,\n\t\tpinned: review.pinned,\n\t\treasons,\n\t};\n}\n\nexport function deriveGalleryInstallTrustFromReview(review: GalleryTrialGateReview): GalleryInstallTrust {\n\tconst expectedResources = review.candidate?.expectedResources ?? [];\n\tif (expectedResources.some((resource) => CODE_EXECUTION_RESOURCES.has(resource))) return \"code-execution\";\n\tif (review.capabilities.some((capability) => CODE_EXECUTION_CAPABILITIES.has(capability))) return \"code-execution\";\n\treturn \"declarative\";\n}\n\nexport function buildGalleryInstallSpecFromReview(\n\tinput: GalleryInstallSource,\n\treview: GalleryTrialGateReview,\n\toptions: GalleryInstallOptions = {},\n): GalleryInstallSpec {\n\tconst spec = buildGalleryInstallSpec(input, false, options);\n\tconst gate = assessGalleryTrialGate(galleryIdentityFromInstallSource(input), review);\n\tif (gate.outcome === \"blocked\") {\n\t\tthrow new Error(`Gallery trial blocked for ${gate.identity}: ${gate.reasons.join(\", \")}`);\n\t}\n\treturn { ...spec, trust: deriveGalleryInstallTrustFromReview(review) };\n}\n\nfunction galleryIdentityFromInstallSource(input: GalleryInstallSource): GalleryEntryIdentity {\n\tif (input.kind === \"npm\") return { kind: \"npm\", name: input.name };\n\tif (input.kind === \"git\") return { kind: \"git\", repo: input.repo, ref: input.ref };\n\treturn { kind: \"local\", path: input.path };\n}\n"]}