open-multi-agent-kit 0.80.7 → 0.80.8

package/dist/core/package-gallery-trial.js

@@ -0,0 +1,55 @@
+import { trialIdentity } from "./package-gallery-identity.js";
+export function inferExtensionCapabilityBadges(source) {
+    const stripped = stripCommentsAndStrings(source);
+    const badges = new Set();
+    if (/\bomk\s*\.\s*registerTool\s*\(/.test(stripped))
+        badges.add("tools");
+    if (/\bomk\s*\.\s*on\s*\(/.test(stripped))
+        badges.add("hooks");
+    if (/\bomk\s*\.\s*registerProvider\s*\(/.test(stripped))
+        badges.add("provider");
+    if (/\bomk\s*\.\s*registerMessageRenderer\s*\(/.test(stripped))
+        badges.add("ui");
+    if (/session_before_compact/.test(source) && /\bomk\s*\.\s*on\s*\(/.test(stripped))
+        badges.add("compaction");
+    return ["tools", "hooks", "provider", "ui", "compaction"].filter((badge) => badges.has(badge));
+}
+export function assessGalleryTrialGate(identity, review) {
+    const reasons = [];
+    if (!review.pinned)
+        reasons.push("exact-pin-required");
+    for (const capability of review.capabilities) {
+        if (capability === "credential-read" || capability === "host-socket") {
+            reasons.push(`capability-hard-block: ${capability}`);
+        }
+    }
+    if (review.licenseVerdict === "reject")
+        reasons.push("license-blocked");
+    if (review.lifecycleVerdict === "reject")
+        reasons.push("lifecycle-scripts-blocked");
+    if (review.pathCompatibility === "legacy-hardcoded")
+        reasons.push("legacy-hardcoded-paths");
+    if (review.adoption === "reject" || review.adoption === "deferred") {
+        reasons.push(...review.rejectedReasons);
+    }
+    const dedupedReasons = unique(reasons);
+    return {
+        outcome: dedupedReasons.length === 0 ? "admitted" : "blocked",
+        identity: trialIdentity(identity),
+        adoption: review.adoption,
+        pinned: review.pinned,
+        reasons: dedupedReasons,
+    };
+}
+function stripCommentsAndStrings(source) {
+    return source
+        .replace(/\/\*[\s\S]*?\*\//g, "")
+        .replace(/\/\/.*$/gm, "")
+        .replace(/"(?:\\.|[^"\\])*"/g, '""')
+        .replace(/'(?:\\.|[^'\\])*'/g, "''")
+        .replace(/`(?:\\.|[^`\\])*`/g, "``");
+}
+function unique(values) {
+    return [...new Set(values)];
+}
+//# sourceMappingURL=package-gallery-trial.js.map

package/dist/core/package-gallery-trial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-gallery-trial.js","sourceRoot":"","sources":["../../src/core/package-gallery-trial.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAO9D,MAAM,UAAU,8BAA8B,CAAC,MAAc,EAAY;IACxE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,gCAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,oCAAoC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAChF,IAAI,2CAA2C,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7G,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAC/F;AAED,MAAM,UAAU,sBAAsB,CACrC,QAAgC,EAChC,MAA+B,EACN;IACzB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,IAAI,UAAU,KAAK,iBAAiB,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,iBAAiB,KAAK,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO;QACN,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC7D,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,cAAc;KACvB,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAU;IACxD,OAAO,MAAM;SACX,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACnC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACnC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAAA,CACtC;AAED,SAAS,MAAM,CAAC,MAAyB,EAAY;IACpD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CAC5B","sourcesContent":["import { trialIdentity } from \"./package-gallery-identity.ts\";\nimport type {\n\tGalleryPackageIdentity,\n\tGalleryTrialGateStatus,\n\tGalleryTrialReviewInput,\n} from \"./package-gallery-types.ts\";\n\nexport function inferExtensionCapabilityBadges(source: string): string[] {\n\tconst stripped = stripCommentsAndStrings(source);\n\tconst badges = new Set<string>();\n\tif (/\\bomk\\s*\\.\\s*registerTool\\s*\\(/.test(stripped)) badges.add(\"tools\");\n\tif (/\\bomk\\s*\\.\\s*on\\s*\\(/.test(stripped)) badges.add(\"hooks\");\n\tif (/\\bomk\\s*\\.\\s*registerProvider\\s*\\(/.test(stripped)) badges.add(\"provider\");\n\tif (/\\bomk\\s*\\.\\s*registerMessageRenderer\\s*\\(/.test(stripped)) badges.add(\"ui\");\n\tif (/session_before_compact/.test(source) && /\\bomk\\s*\\.\\s*on\\s*\\(/.test(stripped)) badges.add(\"compaction\");\n\treturn [\"tools\", \"hooks\", \"provider\", \"ui\", \"compaction\"].filter((badge) => badges.has(badge));\n}\n\nexport function assessGalleryTrialGate(\n\tidentity: GalleryPackageIdentity,\n\treview: GalleryTrialReviewInput,\n): GalleryTrialGateStatus {\n\tconst reasons: string[] = [];\n\n\tif (!review.pinned) reasons.push(\"exact-pin-required\");\n\tfor (const capability of review.capabilities) {\n\t\tif (capability === \"credential-read\" || capability === \"host-socket\") {\n\t\t\treasons.push(`capability-hard-block: ${capability}`);\n\t\t}\n\t}\n\tif (review.licenseVerdict === \"reject\") reasons.push(\"license-blocked\");\n\tif (review.lifecycleVerdict === \"reject\") reasons.push(\"lifecycle-scripts-blocked\");\n\tif (review.pathCompatibility === \"legacy-hardcoded\") reasons.push(\"legacy-hardcoded-paths\");\n\tif (review.adoption === \"reject\" || review.adoption === \"deferred\") {\n\t\treasons.push(...review.rejectedReasons);\n\t}\n\n\tconst dedupedReasons = unique(reasons);\n\treturn {\n\t\toutcome: dedupedReasons.length === 0 ? \"admitted\" : \"blocked\",\n\t\tidentity: trialIdentity(identity),\n\t\tadoption: review.adoption,\n\t\tpinned: review.pinned,\n\t\treasons: dedupedReasons,\n\t};\n}\n\nfunction stripCommentsAndStrings(source: string): string {\n\treturn source\n\t\t.replace(/\\/\\*[\\s\\S]*?\\*\\//g, \"\")\n\t\t.replace(/\\/\\/.*$/gm, \"\")\n\t\t.replace(/\"(?:\\\\.|[^\"\\\\])*\"/g, '\"\"')\n\t\t.replace(/'(?:\\\\.|[^'\\\\])*'/g, \"''\")\n\t\t.replace(/`(?:\\\\.|[^`\\\\])*`/g, \"``\");\n}\n\nfunction unique(values: readonly string[]): string[] {\n\treturn [...new Set(values)];\n}\n"]}

package/dist/core/package-gallery-types.d.ts

@@ -0,0 +1,71 @@
+import type { Adoption, GateVerdict, PathCompatibility, ProcurementReview, ResourceKind } from "./package-procurement.ts";
+export type GalleryManifestKey = "omk";
+export type GalleryResourceType = "extension" | "skill" | "prompt" | "theme";
+export type GalleryTrust = "declarative" | "code-execution";
+export interface GalleryManifest {
+    readonly manifestKey: GalleryManifestKey;
+    readonly extensions: readonly string[];
+    readonly skills: readonly string[];
+    readonly prompts: readonly string[];
+    readonly themes: readonly string[];
+    readonly video?: string;
+    readonly image?: string;
+    readonly description?: string;
+}
+export type GalleryPackageIdentity = {
+    readonly kind: "npm";
+    readonly name: string;
+    readonly version?: string;
+} | {
+    readonly kind: "git";
+    readonly repo: string;
+    readonly ref?: string;
+} | {
+    readonly kind: "local";
+    readonly path: string;
+};
+export interface GalleryInstallSpec {
+    readonly kind: GalleryPackageIdentity["kind"];
+    readonly source: string;
+    readonly installCommand: string;
+    readonly tryEphemeralCommand: string;
+    readonly trust: GalleryTrust;
+}
+export interface GalleryPreviewInput {
+    readonly video?: string;
+    readonly image?: string;
+    readonly resourceTypes?: readonly GalleryResourceType[];
+    readonly themeName?: string;
+}
+export type GalleryPreview = {
+    readonly kind: "video";
+    readonly url: string;
+} | {
+    readonly kind: "image";
+    readonly url: string;
+} | {
+    readonly kind: "generated-theme";
+    readonly marker: string;
+};
+export interface GalleryTrialReview {
+    readonly pinned: boolean;
+    readonly capabilities: readonly string[];
+    readonly adoption: Adoption;
+    readonly rejectedReasons: readonly string[];
+    readonly licenseVerdict?: GateVerdict;
+    readonly lifecycleVerdict?: GateVerdict;
+    readonly pathCompatibility?: PathCompatibility;
+    readonly candidate?: {
+        readonly expectedResources?: readonly ResourceKind[];
+    };
+}
+export interface GalleryTrialGateStatus {
+    readonly outcome: "admitted" | "blocked";
+    readonly identity: string;
+    readonly adoption: Adoption;
+    readonly pinned: boolean;
+    readonly reasons: readonly string[];
+}
+export type GalleryTrialReviewInput = GalleryTrialReview | ProcurementReview;
+export declare const GALLERY_RESOURCE_ORDER: readonly GalleryResourceType[];
+//# sourceMappingURL=package-gallery-types.d.ts.map

package/dist/core/package-gallery-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-gallery-types.d.ts","sourceRoot":"","sources":["../../src/core/package-gallery-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACvC,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7E,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,WAAW,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;KAAE,CAAC;CAC9E;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAE7E,eAAO,MAAM,sBAAsB,EAAE,SAAS,mBAAmB,EAA8C,CAAC","sourcesContent":["import type {\n\tAdoption,\n\tGateVerdict,\n\tPathCompatibility,\n\tProcurementReview,\n\tResourceKind,\n} from \"./package-procurement.ts\";\n\nexport type GalleryManifestKey = \"omk\";\nexport type GalleryResourceType = \"extension\" | \"skill\" | \"prompt\" | \"theme\";\nexport type GalleryTrust = \"declarative\" | \"code-execution\";\n\nexport interface GalleryManifest {\n\treadonly manifestKey: GalleryManifestKey;\n\treadonly extensions: readonly string[];\n\treadonly skills: readonly string[];\n\treadonly prompts: readonly string[];\n\treadonly themes: readonly string[];\n\treadonly video?: string;\n\treadonly image?: string;\n\treadonly description?: string;\n}\n\nexport type GalleryPackageIdentity =\n\t| { readonly kind: \"npm\"; readonly name: string; readonly version?: string }\n\t| { readonly kind: \"git\"; readonly repo: string; readonly ref?: string }\n\t| { readonly kind: \"local\"; readonly path: string };\n\nexport interface GalleryInstallSpec {\n\treadonly kind: GalleryPackageIdentity[\"kind\"];\n\treadonly source: string;\n\treadonly installCommand: string;\n\treadonly tryEphemeralCommand: string;\n\treadonly trust: GalleryTrust;\n}\n\nexport interface GalleryPreviewInput {\n\treadonly video?: string;\n\treadonly image?: string;\n\treadonly resourceTypes?: readonly GalleryResourceType[];\n\treadonly themeName?: string;\n}\n\nexport type GalleryPreview =\n\t| { readonly kind: \"video\"; readonly url: string }\n\t| { readonly kind: \"image\"; readonly url: string }\n\t| { readonly kind: \"generated-theme\"; readonly marker: string };\n\nexport interface GalleryTrialReview {\n\treadonly pinned: boolean;\n\treadonly capabilities: readonly string[];\n\treadonly adoption: Adoption;\n\treadonly rejectedReasons: readonly string[];\n\treadonly licenseVerdict?: GateVerdict;\n\treadonly lifecycleVerdict?: GateVerdict;\n\treadonly pathCompatibility?: PathCompatibility;\n\treadonly candidate?: { readonly expectedResources?: readonly ResourceKind[] };\n}\n\nexport interface GalleryTrialGateStatus {\n\treadonly outcome: \"admitted\" | \"blocked\";\n\treadonly identity: string;\n\treadonly adoption: Adoption;\n\treadonly pinned: boolean;\n\treadonly reasons: readonly string[];\n}\n\nexport type GalleryTrialReviewInput = GalleryTrialReview | ProcurementReview;\n\nexport const GALLERY_RESOURCE_ORDER: readonly GalleryResourceType[] = [\"extension\", \"skill\", \"prompt\", \"theme\"];\n"]}

package/dist/core/package-gallery-types.js

@@ -0,0 +1,2 @@
+export const GALLERY_RESOURCE_ORDER = ["extension", "skill", "prompt", "theme"];
+//# sourceMappingURL=package-gallery-types.js.map

package/dist/core/package-gallery-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-gallery-types.js","sourceRoot":"","sources":["../../src/core/package-gallery-types.ts"],"names":[],"mappings":"AAqEA,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC","sourcesContent":["import type {\n\tAdoption,\n\tGateVerdict,\n\tPathCompatibility,\n\tProcurementReview,\n\tResourceKind,\n} from \"./package-procurement.ts\";\n\nexport type GalleryManifestKey = \"omk\";\nexport type GalleryResourceType = \"extension\" | \"skill\" | \"prompt\" | \"theme\";\nexport type GalleryTrust = \"declarative\" | \"code-execution\";\n\nexport interface GalleryManifest {\n\treadonly manifestKey: GalleryManifestKey;\n\treadonly extensions: readonly string[];\n\treadonly skills: readonly string[];\n\treadonly prompts: readonly string[];\n\treadonly themes: readonly string[];\n\treadonly video?: string;\n\treadonly image?: string;\n\treadonly description?: string;\n}\n\nexport type GalleryPackageIdentity =\n\t| { readonly kind: \"npm\"; readonly name: string; readonly version?: string }\n\t| { readonly kind: \"git\"; readonly repo: string; readonly ref?: string }\n\t| { readonly kind: \"local\"; readonly path: string };\n\nexport interface GalleryInstallSpec {\n\treadonly kind: GalleryPackageIdentity[\"kind\"];\n\treadonly source: string;\n\treadonly installCommand: string;\n\treadonly tryEphemeralCommand: string;\n\treadonly trust: GalleryTrust;\n}\n\nexport interface GalleryPreviewInput {\n\treadonly video?: string;\n\treadonly image?: string;\n\treadonly resourceTypes?: readonly GalleryResourceType[];\n\treadonly themeName?: string;\n}\n\nexport type GalleryPreview =\n\t| { readonly kind: \"video\"; readonly url: string }\n\t| { readonly kind: \"image\"; readonly url: string }\n\t| { readonly kind: \"generated-theme\"; readonly marker: string };\n\nexport interface GalleryTrialReview {\n\treadonly pinned: boolean;\n\treadonly capabilities: readonly string[];\n\treadonly adoption: Adoption;\n\treadonly rejectedReasons: readonly string[];\n\treadonly licenseVerdict?: GateVerdict;\n\treadonly lifecycleVerdict?: GateVerdict;\n\treadonly pathCompatibility?: PathCompatibility;\n\treadonly candidate?: { readonly expectedResources?: readonly ResourceKind[] };\n}\n\nexport interface GalleryTrialGateStatus {\n\treadonly outcome: \"admitted\" | \"blocked\";\n\treadonly identity: string;\n\treadonly adoption: Adoption;\n\treadonly pinned: boolean;\n\treadonly reasons: readonly string[];\n}\n\nexport type GalleryTrialReviewInput = GalleryTrialReview | ProcurementReview;\n\nexport const GALLERY_RESOURCE_ORDER: readonly GalleryResourceType[] = [\"extension\", \"skill\", \"prompt\", \"theme\"];\n"]}

package/dist/core/package-gallery.d.ts

@@ -1,124 +1,6 @@
-import { type Adoption, type GateVerdict, type PathCompatibility } from "./package-procurement.ts";
-export type GalleryResourceType = "extension" | "skill" | "prompt" | "theme";
-export type GalleryManifestKey = "omk" | "pi";
-export type GalleryInstallSourceKind = "npm" | "git" | "local";
-export type GalleryInstallTrust = "code-execution" | "declarative";
-export type GalleryPreviewKind = "video" | "image" | "generated-theme";
-export type ExtensionCapabilityBadge = "tools" | "commands" | "hooks" | "provider" | "ui" | "compaction";
-export interface NormalizedGalleryManifest {
-    manifestKey: GalleryManifestKey;
-    extensions: string[];
-    skills: string[];
-    prompts: string[];
-    themes: string[];
-    video: string | undefined;
-    image: string | undefined;
-    description: string | undefined;
-}
-export interface GalleryTypedEntry {
-    resourceTypes: readonly GalleryResourceType[];
-}
-export interface GalleryPreviewInput {
-    video?: string;
-    image?: string;
-    resourceTypes: readonly GalleryResourceType[];
-    themeName?: string;
-}
-export interface GalleryPreviewSelection {
-    kind: GalleryPreviewKind;
-    url?: string;
-    marker?: string;
-}
-export type GalleryInstallSource = {
-    kind: "npm";
-    name: string;
-    version?: string;
-} | {
-    kind: "git";
-    repo: string;
-    ref?: string;
-} | {
-    kind: "local";
-    path: string;
-};
-export interface GalleryInstallOptions {
-    local?: boolean;
-}
-export interface GalleryInstallSpec {
-    kind: GalleryInstallSourceKind;
-    source: string;
-    installCommand: string;
-    tryEphemeralCommand: string;
-    trust: GalleryInstallTrust;
-}
-export type GalleryEntryIdentity = {
-    kind: "npm";
-    name: string;
-} | {
-    kind: "git";
-    repo: string;
-    ref?: string;
-} | {
-    kind: "local";
-    path: string;
-};
-export interface GalleryEntryWithIdentity {
-    identity: GalleryEntryIdentity;
-}
-export declare function normalizeGalleryManifest(pkgJson: unknown): NormalizedGalleryManifest | null;
-export declare function hasGalleryKeyword(pkgJson: unknown): boolean;
-export declare function resolveGalleryTypeFacet(facet: string | undefined): GalleryResourceType | undefined;
-export declare function classifyGalleryResourceTypes(manifest: NormalizedGalleryManifest | null, conventionDirs?: readonly string[]): GalleryResourceType[];
-export declare function filterGalleryEntriesByType<T extends GalleryTypedEntry>(entries: readonly T[], facet: string | undefined): T[];
-export declare function isValidGalleryVideoUrl(url: string | undefined): boolean;
-export declare function isValidGalleryImageUrl(url: string | undefined): boolean;
-export declare function selectGalleryPreview(input: GalleryPreviewInput): GalleryPreviewSelection | null;
-export declare function isPathInsideRootByRealpath(packageRoot: string, candidatePath: string): boolean;
-export declare function resolveManifestEntryInsideRoot(packageRoot: string, entry: string, baseDir?: string): string | undefined;
-export declare function filterManifestEntriesInsideRoot(packageRoot: string, entries: readonly string[]): string[];
-export declare function buildGalleryInstallSpec(input: GalleryInstallSource, hasExtension: boolean, options?: GalleryInstallOptions): GalleryInstallSpec;
-export declare function inferExtensionCapabilityBadges(sourceText: string): ExtensionCapabilityBadge[];
-export declare function dedupeGalleryEntries<T extends GalleryEntryWithIdentity>(entries: readonly T[]): T[];
-/**
- * Procurement-derived safe-gate outcome for an unpromoted (ephemeral trial) gallery install.
- *
- * Closes G9: gallery trust is derived from capability scan and procurement verdicts, not
- * from manifest claims. A trial is "admitted" only when the source is exact-pinned, carries
- * no hard-block capability (credential reads, host sockets), and passed explicit license,
- * lifecycle, and path-compatibility gates. Procurement rejection reasons are surfaced
- * verbatim so callers can show why an unpromoted trial would be blocked.
- */
-export type GalleryTrialGateOutcome = "admitted" | "blocked";
-export interface GalleryTrialGateStatus {
-    readonly outcome: GalleryTrialGateOutcome;
-    readonly identity: string;
-    readonly adoption: Adoption;
-    readonly pinned: boolean;
-    readonly reasons: readonly string[];
-}
-/**
- * Structural subset of a procurement review consumed by the trial gate. The full procurement
- * review (`ProcurementReview`) satisfies this shape, so callers may pass `procureCandidate(...)`
- * output directly; tests can construct focused reviews without the full procurement input.
- */
-export interface GalleryTrialGateReview {
-    readonly pinned: boolean;
-    readonly capabilities: readonly string[];
-    readonly adoption: Adoption;
-    readonly rejectedReasons: readonly string[];
-    readonly licenseVerdict?: GateVerdict;
-    readonly lifecycleVerdict?: GateVerdict;
-    readonly pathCompatibility?: PathCompatibility;
-    readonly candidate?: {
-        readonly expectedResources?: readonly string[];
-    };
-}
-/**
- * Classify whether a candidate package may be safely admitted to an unpromoted (ephemeral,
- * sandboxed, `--ignore-scripts`) trial. Pure and deterministic: identical inputs always
- * produce identical output, and no I/O is performed.
- */
-export declare function assessGalleryTrialGate(identity: GalleryEntryIdentity, review: GalleryTrialGateReview): GalleryTrialGateStatus;
-export declare function deriveGalleryInstallTrustFromReview(review: GalleryTrialGateReview): GalleryInstallTrust;
-export declare function buildGalleryInstallSpecFromReview(input: GalleryInstallSource, review: GalleryTrialGateReview, options?: GalleryInstallOptions): GalleryInstallSpec;
+export { dedupeGalleryEntries, normalizeRepoIdentity, trialIdentity } from "./package-gallery-identity.ts";
+export { buildGalleryInstallSpec, buildGalleryInstallSpecFromReview } from "./package-gallery-install.ts";
+export { classifyGalleryResourceTypes, filterGalleryEntriesByType, filterManifestEntriesInsideRoot, hasGalleryKeyword, isValidGalleryImageUrl, isValidGalleryVideoUrl, normalizeGalleryManifest, resolveGalleryTypeFacet, selectGalleryPreview, } from "./package-gallery-manifest.ts";
+export { assessGalleryTrialGate, inferExtensionCapabilityBadges } from "./package-gallery-trial.ts";
+export { GALLERY_RESOURCE_ORDER, type GalleryInstallSpec, type GalleryManifest, type GalleryManifestKey, type GalleryPackageIdentity, type GalleryPreview, type GalleryPreviewInput, type GalleryResourceType, type GalleryTrialGateStatus, type GalleryTrialReview, type GalleryTrialReviewInput, type GalleryTrust, } from "./package-gallery-types.ts";
 //# sourceMappingURL=package-gallery.d.ts.map

package/dist/core/package-gallery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-gallery.d.ts","sourceRoot":"","sources":["../../src/core/package-gallery.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAGtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,IAAI,CAAC;AAC9C,MAAM,MAAM,wBAAwB,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;AAC/D,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,GAAG,iBAAiB,CAAC;AACvE,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,IAAI,GAAG,YAAY,CAAC;AAEzG,MAAM,WAAW,yBAAyB;IACzC,WAAW,EAAE,kBAAkB,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,qBAAqB;IACrC,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,mBAAmB,CAAC;CAC3B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,wBAAwB;IACxC,QAAQ,EAAE,oBAAoB,CAAC;CAC/B;AAiDD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAc3F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAG3D;AAUD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAGlG;AAED,wBAAgB,4BAA4B,CAC3C,QAAQ,EAAE,yBAAyB,GAAG,IAAI,EAC1C,cAAc,GAAE,SAAS,MAAM,EAAO,GACpC,mBAAmB,EAAE,CAWvB;AAED,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,iBAAiB,EACrE,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,KAAK,EAAE,MAAM,GAAG,SAAS,GACvB,CAAC,EAAE,CAKL;AAgBD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGvE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGvE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,IAAI,CAQ/F;AAeD,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAM9F;AAED,wBAAgB,8BAA8B,CAC7C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,SAAc,GACnB,MAAM,GAAG,SAAS,CASpB;AAED,wBAAgB,+BAA+B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CASzG;AA8BD,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,oBAAoB,EAC3B,YAAY,EAAE,OAAO,EACrB,OAAO,GAAE,qBAA0B,GACjC,kBAAkB,CAUpB;AAiDD,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,EAAE,CAoB7F;AAeD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,wBAAwB,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAUnG;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,WAAW,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CACxE;AAiBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,sBAAsB,GAC5B,sBAAsB,CA2BxB;AAED,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,sBAAsB,GAAG,mBAAmB,CAKvG;AAED,wBAAgB,iCAAiC,CAChD,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,GAAE,qBAA0B,GACjC,kBAAkB,CAOpB","sourcesContent":["import { existsSync, realpathSync } from \"node:fs\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\nimport {\n\ttype Adoption,\n\ttype GateVerdict,\n\ttype PathCompatibility,\n\tvalidateExactNpmVersion,\n\tvalidateGitRef,\n} from \"./package-procurement.ts\";\n\nexport type GalleryResourceType = \"extension\" | \"skill\" | \"prompt\" | \"theme\";\nexport type GalleryManifestKey = \"omk\" | \"pi\";\nexport type GalleryInstallSourceKind = \"npm\" | \"git\" | \"local\";\nexport type GalleryInstallTrust = \"code-execution\" | \"declarative\";\nexport type GalleryPreviewKind = \"video\" | \"image\" | \"generated-theme\";\nexport type ExtensionCapabilityBadge = \"tools\" | \"commands\" | \"hooks\" | \"provider\" | \"ui\" | \"compaction\";\n\nexport interface NormalizedGalleryManifest {\n\tmanifestKey: GalleryManifestKey;\n\textensions: string[];\n\tskills: string[];\n\tprompts: string[];\n\tthemes: string[];\n\tvideo: string | undefined;\n\timage: string | undefined;\n\tdescription: string | undefined;\n}\n\nexport interface GalleryTypedEntry {\n\tresourceTypes: readonly GalleryResourceType[];\n}\n\nexport interface GalleryPreviewInput {\n\tvideo?: string;\n\timage?: string;\n\tresourceTypes: readonly GalleryResourceType[];\n\tthemeName?: string;\n}\n\nexport interface GalleryPreviewSelection {\n\tkind: GalleryPreviewKind;\n\turl?: string;\n\tmarker?: string;\n}\n\nexport type GalleryInstallSource =\n\t| { kind: \"npm\"; name: string; version?: string }\n\t| { kind: \"git\"; repo: string; ref?: string }\n\t| { kind: \"local\"; path: string };\n\nexport interface GalleryInstallOptions {\n\tlocal?: boolean;\n}\n\nexport interface GalleryInstallSpec {\n\tkind: GalleryInstallSourceKind;\n\tsource: string;\n\tinstallCommand: string;\n\ttryEphemeralCommand: string;\n\ttrust: GalleryInstallTrust;\n}\n\nexport type GalleryEntryIdentity =\n\t| { kind: \"npm\"; name: string }\n\t| { kind: \"git\"; repo: string; ref?: string }\n\t| { kind: \"local\"; path: string };\n\nexport interface GalleryEntryWithIdentity {\n\tidentity: GalleryEntryIdentity;\n}\n\nconst RESOURCE_ORDER: readonly GalleryResourceType[] = [\"extension\", \"skill\", \"prompt\", \"theme\"];\nconst CAPABILITY_ORDER: readonly ExtensionCapabilityBadge[] = [\n\t\"tools\",\n\t\"commands\",\n\t\"hooks\",\n\t\"provider\",\n\t\"ui\",\n\t\"compaction\",\n];\nconst IMAGE_EXTENSIONS = [\".png\", \".jpg\", \".jpeg\", \".gif\", \".webp\"] as const;\n\nconst FACET_ALIASES: Readonly<Record<string, GalleryResourceType>> = {\n\textension: \"extension\",\n\textensions: \"extension\",\n\tskill: \"skill\",\n\tskills: \"skill\",\n\tprompt: \"prompt\",\n\tprompts: \"prompt\",\n\ttheme: \"theme\",\n\tthemes: \"theme\",\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction toStringArray(value: unknown): string[] {\n\tif (!Array.isArray(value)) return [];\n\treturn value\n\t\t.filter((item): item is string => typeof item === \"string\")\n\t\t.map((item) => item.trim())\n\t\t.filter(Boolean);\n}\n\nfunction toOptionalString(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = value.trim();\n\treturn trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction readManifestRecord(pkgJson: unknown): { key: GalleryManifestKey; manifest: Record<string, unknown> } | null {\n\tif (!isRecord(pkgJson)) return null;\n\tif (isRecord(pkgJson.omk)) return { key: \"omk\", manifest: pkgJson.omk };\n\tif (isRecord(pkgJson.pi)) return { key: \"pi\", manifest: pkgJson.pi };\n\treturn null;\n}\n\nexport function normalizeGalleryManifest(pkgJson: unknown): NormalizedGalleryManifest | null {\n\tconst source = readManifestRecord(pkgJson);\n\tif (!source) return null;\n\n\treturn {\n\t\tmanifestKey: source.key,\n\t\textensions: toStringArray(source.manifest.extensions),\n\t\tskills: toStringArray(source.manifest.skills),\n\t\tprompts: toStringArray(source.manifest.prompts),\n\t\tthemes: toStringArray(source.manifest.themes),\n\t\tvideo: toOptionalString(source.manifest.video),\n\t\timage: toOptionalString(source.manifest.image),\n\t\tdescription: toOptionalString(source.manifest.description),\n\t};\n}\n\nexport function hasGalleryKeyword(pkgJson: unknown): boolean {\n\tif (!isRecord(pkgJson) || !Array.isArray(pkgJson.keywords)) return false;\n\treturn pkgJson.keywords.some((keyword) => keyword === \"omk-package\" || keyword === \"pi-package\");\n}\n\nfunction hasManifestResources(manifest: NormalizedGalleryManifest | null, type: GalleryResourceType): boolean {\n\tif (!manifest) return false;\n\tif (type === \"extension\") return manifest.extensions.length > 0;\n\tif (type === \"skill\") return manifest.skills.length > 0;\n\tif (type === \"prompt\") return manifest.prompts.length > 0;\n\treturn manifest.themes.length > 0;\n}\n\nexport function resolveGalleryTypeFacet(facet: string | undefined): GalleryResourceType | undefined {\n\tif (!facet) return undefined;\n\treturn FACET_ALIASES[facet.trim().toLowerCase()];\n}\n\nexport function classifyGalleryResourceTypes(\n\tmanifest: NormalizedGalleryManifest | null,\n\tconventionDirs: readonly string[] = [],\n): GalleryResourceType[] {\n\tconst types = new Set<GalleryResourceType>();\n\tfor (const type of RESOURCE_ORDER) {\n\t\tif (hasManifestResources(manifest, type)) types.add(type);\n\t}\n\tfor (const dir of conventionDirs) {\n\t\tconst firstSegment = dir.trim().replace(/\\\\/g, \"/\").split(\"/\").filter(Boolean)[0];\n\t\tconst type = resolveGalleryTypeFacet(firstSegment);\n\t\tif (type) types.add(type);\n\t}\n\treturn RESOURCE_ORDER.filter((type) => types.has(type));\n}\n\nexport function filterGalleryEntriesByType<T extends GalleryTypedEntry>(\n\tentries: readonly T[],\n\tfacet: string | undefined,\n): T[] {\n\tif (facet === undefined) return [...entries];\n\tconst type = resolveGalleryTypeFacet(facet);\n\tif (!type) return [];\n\treturn entries.filter((entry) => entry.resourceTypes.includes(type));\n}\n\nfunction parseAllowedGalleryUrl(url: string | undefined): URL | null {\n\tif (!url) return null;\n\tif (/[\\s\\u0000-\\u001f\\u007f]/.test(url)) return null;\n\ttry {\n\t\tconst parsed = new URL(url);\n\t\tif (parsed.protocol !== \"https:\") return null;\n\t\tif (parsed.username || parsed.password) return null;\n\t\tif (parsed.port) return null;\n\t\treturn parsed;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport function isValidGalleryVideoUrl(url: string | undefined): boolean {\n\tconst parsed = parseAllowedGalleryUrl(url);\n\treturn parsed ? parsed.pathname.toLowerCase().endsWith(\".mp4\") : false;\n}\n\nexport function isValidGalleryImageUrl(url: string | undefined): boolean {\n\tconst parsed = parseAllowedGalleryUrl(url);\n\treturn parsed ? IMAGE_EXTENSIONS.some((extension) => parsed.pathname.toLowerCase().endsWith(extension)) : false;\n}\n\nexport function selectGalleryPreview(input: GalleryPreviewInput): GalleryPreviewSelection | null {\n\tif (isValidGalleryVideoUrl(input.video)) return { kind: \"video\", url: input.video };\n\tif (isValidGalleryImageUrl(input.image)) return { kind: \"image\", url: input.image };\n\tif (input.resourceTypes.includes(\"theme\")) {\n\t\tconst marker = input.themeName?.trim() || \"theme\";\n\t\treturn { kind: \"generated-theme\", marker };\n\t}\n\treturn null;\n}\n\nfunction isPathInsideRoot(root: string, candidate: string): boolean {\n\tconst rel = relative(root, candidate);\n\treturn rel === \"\" || (rel !== \"..\" && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));\n}\n\nfunction realpathIfPossible(path: string): string {\n\ttry {\n\t\treturn realpathSync(path);\n\t} catch {\n\t\treturn resolve(path);\n\t}\n}\n\nexport function isPathInsideRootByRealpath(packageRoot: string, candidatePath: string): boolean {\n\tconst root = resolve(packageRoot);\n\tconst candidate = resolve(candidatePath);\n\tif (!isPathInsideRoot(root, candidate)) return false;\n\tif (!existsSync(candidate)) return true;\n\treturn isPathInsideRoot(realpathIfPossible(root), realpathIfPossible(candidate));\n}\n\nexport function resolveManifestEntryInsideRoot(\n\tpackageRoot: string,\n\tentry: string,\n\tbaseDir = packageRoot,\n): string | undefined {\n\tconst trimmed = entry.trim();\n\tif (!trimmed || isAbsolute(trimmed)) return undefined;\n\tconst root = resolve(packageRoot);\n\tconst base = resolve(baseDir);\n\tif (!isPathInsideRootByRealpath(root, base)) return undefined;\n\tconst candidate = resolve(base, trimmed);\n\tif (!isPathInsideRootByRealpath(root, candidate)) return undefined;\n\treturn (relative(root, candidate) || \".\").replace(/\\\\/g, \"/\");\n}\n\nexport function filterManifestEntriesInsideRoot(packageRoot: string, entries: readonly string[]): string[] {\n\tconst safeEntries: string[] = [];\n\tfor (const entry of entries) {\n\t\tconst safeEntry = resolveManifestEntryInsideRoot(packageRoot, entry);\n\t\tif (safeEntry && safeEntry !== \".\") {\n\t\t\tsafeEntries.push(safeEntry);\n\t\t}\n\t}\n\treturn safeEntries;\n}\n\nfunction requireNonEmpty(value: string, label: string): string {\n\tconst trimmed = value.trim();\n\tif (!trimmed) throw new Error(`${label} must not be empty`);\n\treturn trimmed;\n}\n\nfunction buildGallerySource(source: GalleryInstallSource): { kind: GalleryInstallSourceKind; source: string } {\n\tif (source.kind === \"npm\") {\n\t\tconst name = requireNonEmpty(source.name, \"npm package name\");\n\t\tconst versionVerdict = validateExactNpmVersion(source.version);\n\t\tif (!versionVerdict.ok) {\n\t\t\tthrow new Error(\n\t\t\t\t`Gallery npm installs require an exact pinned version for ${name}. ${versionVerdict.message}.`,\n\t\t\t);\n\t\t}\n\t\treturn { kind: \"npm\", source: `npm:${name}@${versionVerdict.version}` };\n\t}\n\tif (source.kind === \"git\") {\n\t\tconst repo = requireNonEmpty(source.repo, \"git repository\").replace(/^git:/, \"\");\n\t\tconst refVerdict = validateGitRef(source.ref);\n\t\tif (!refVerdict.ok) {\n\t\t\tthrow new Error(`Gallery git installs require a full commit SHA for ${repo}. ${refVerdict.message}.`);\n\t\t}\n\t\treturn { kind: \"git\", source: `git:${repo}@${refVerdict.commit}` };\n\t}\n\treturn { kind: \"local\", source: requireNonEmpty(source.path, \"local path\") };\n}\n\nexport function buildGalleryInstallSpec(\n\tinput: GalleryInstallSource,\n\thasExtension: boolean,\n\toptions: GalleryInstallOptions = {},\n): GalleryInstallSpec {\n\tconst source = buildGallerySource(input);\n\tconst localFlag = options.local ? \" -l\" : \"\";\n\treturn {\n\t\tkind: source.kind,\n\t\tsource: source.source,\n\t\tinstallCommand: `omk install ${source.source}${localFlag}`,\n\t\ttryEphemeralCommand: `omk -e ${source.source}`,\n\t\ttrust: hasExtension ? \"code-execution\" : \"declarative\",\n\t};\n}\n\nfunction stripComments(sourceText: string, stripStrings: boolean): string {\n\tlet output = \"\";\n\tlet index = 0;\n\twhile (index < sourceText.length) {\n\t\tconst current = sourceText[index];\n\t\tconst next = sourceText[index + 1];\n\t\tif (current === \"/\" && next === \"/\") {\n\t\t\tindex += 2;\n\t\t\twhile (index < sourceText.length && sourceText[index] !== \"\\n\") index += 1;\n\t\t\toutput += \"\\n\";\n\t\t\tindex += 1;\n\t\t\tcontinue;\n\t\t}\n\t\tif (current === \"/\" && next === \"*\") {\n\t\t\tindex += 2;\n\t\t\twhile (index < sourceText.length && !(sourceText[index] === \"*\" && sourceText[index + 1] === \"/\")) index += 1;\n\t\t\tindex += 2;\n\t\t\toutput += \" \";\n\t\t\tcontinue;\n\t\t}\n\t\tif (stripStrings && (current === '\"' || current === \"'\" || current === \"`\")) {\n\t\t\tconst quote = current;\n\t\t\tindex += 1;\n\t\t\twhile (index < sourceText.length) {\n\t\t\t\tif (sourceText[index] === \"\\\\\") {\n\t\t\t\t\tindex += 2;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tif (sourceText[index] === quote) {\n\t\t\t\t\tindex += 1;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tindex += 1;\n\t\t\t}\n\t\t\toutput += \" \";\n\t\t\tcontinue;\n\t\t}\n\t\toutput += current;\n\t\tindex += 1;\n\t}\n\treturn output;\n}\n\nfunction capabilityOrder(badge: ExtensionCapabilityBadge): number {\n\treturn CAPABILITY_ORDER.indexOf(badge);\n}\n\nexport function inferExtensionCapabilityBadges(sourceText: string): ExtensionCapabilityBadge[] {\n\tconst withoutComments = stripComments(sourceText, false);\n\tconst code = stripComments(sourceText, true);\n\tconst badges = new Set<ExtensionCapabilityBadge>();\n\n\tif (/\\bomk\\s*\\.\\s*registerTool\\s*\\(/.test(code)) badges.add(\"tools\");\n\tif (/\\bomk\\s*\\.\\s*registerCommand\\s*\\(/.test(code)) badges.add(\"commands\");\n\tif (/\\bomk\\s*\\.\\s*on\\s*\\(/.test(code) || /\\bregisterHook\\s*\\(/.test(code)) badges.add(\"hooks\");\n\tif (/\\bomk\\s*\\.\\s*registerProvider\\s*\\(/.test(code)) badges.add(\"provider\");\n\tif (\n\t\t/\\bomk\\s*\\.\\s*(registerShortcut|registerFlag|registerMessageRenderer|registerComponent|setFooter)\\s*\\(/.test(code)\n\t) {\n\t\tbadges.add(\"ui\");\n\t}\n\tif (/\\bomk\\s*\\.\\s*on\\s*\\(\\s*([\"'`])(?:session_before_compact|session_compact|context)\\1/.test(withoutComments)) {\n\t\tbadges.add(\"hooks\");\n\t\tbadges.add(\"compaction\");\n\t}\n\n\treturn [...badges].sort((left, right) => capabilityOrder(left) - capabilityOrder(right));\n}\n\nfunction identityKey(identity: GalleryEntryIdentity): string {\n\tif (identity.kind === \"npm\") return `npm:${identity.name.trim().toLowerCase()}`;\n\tif (identity.kind === \"git\") {\n\t\tconst repo = identity.repo\n\t\t\t.trim()\n\t\t\t.replace(/^git:/, \"\")\n\t\t\t.replace(/\\.git$/i, \"\")\n\t\t\t.toLowerCase();\n\t\treturn `git:${repo}`;\n\t}\n\treturn `local:${resolve(identity.path)}`;\n}\n\nexport function dedupeGalleryEntries<T extends GalleryEntryWithIdentity>(entries: readonly T[]): T[] {\n\tconst seen = new Set<string>();\n\tconst result: T[] = [];\n\tfor (const entry of entries) {\n\t\tconst key = identityKey(entry.identity);\n\t\tif (seen.has(key)) continue;\n\t\tseen.add(key);\n\t\tresult.push(entry);\n\t}\n\treturn result;\n}\n\n/**\n * Procurement-derived safe-gate outcome for an unpromoted (ephemeral trial) gallery install.\n *\n * Closes G9: gallery trust is derived from capability scan and procurement verdicts, not\n * from manifest claims. A trial is \"admitted\" only when the source is exact-pinned, carries\n * no hard-block capability (credential reads, host sockets), and passed explicit license,\n * lifecycle, and path-compatibility gates. Procurement rejection reasons are surfaced\n * verbatim so callers can show why an unpromoted trial would be blocked.\n */\nexport type GalleryTrialGateOutcome = \"admitted\" | \"blocked\";\n\nexport interface GalleryTrialGateStatus {\n\treadonly outcome: GalleryTrialGateOutcome;\n\treadonly identity: string;\n\treadonly adoption: Adoption;\n\treadonly pinned: boolean;\n\treadonly reasons: readonly string[];\n}\n\n/**\n * Structural subset of a procurement review consumed by the trial gate. The full procurement\n * review (`ProcurementReview`) satisfies this shape, so callers may pass `procureCandidate(...)`\n * output directly; tests can construct focused reviews without the full procurement input.\n */\nexport interface GalleryTrialGateReview {\n\treadonly pinned: boolean;\n\treadonly capabilities: readonly string[];\n\treadonly adoption: Adoption;\n\treadonly rejectedReasons: readonly string[];\n\treadonly licenseVerdict?: GateVerdict;\n\treadonly lifecycleVerdict?: GateVerdict;\n\treadonly pathCompatibility?: PathCompatibility;\n\treadonly candidate?: { readonly expectedResources?: readonly string[] };\n}\n\nconst TRIAL_HARD_BLOCK_CAPABILITIES: ReadonlySet<string> = new Set([\"credential-read\", \"host-socket\"]);\nconst CODE_EXECUTION_RESOURCES: ReadonlySet<string> = new Set([\"extension\", \"tool\"]);\nconst CODE_EXECUTION_CAPABILITIES: ReadonlySet<string> = new Set([\n\t\"browser-control\",\n\t\"child-process\",\n\t\"credential-read\",\n\t\"filesystem-write\",\n\t\"host-socket\",\n\t\"network\",\n]);\n\nfunction pushUniqueReason(reasons: string[], reason: string): void {\n\tif (!reasons.includes(reason)) reasons.push(reason);\n}\n\n/**\n * Classify whether a candidate package may be safely admitted to an unpromoted (ephemeral,\n * sandboxed, `--ignore-scripts`) trial. Pure and deterministic: identical inputs always\n * produce identical output, and no I/O is performed.\n */\nexport function assessGalleryTrialGate(\n\tidentity: GalleryEntryIdentity,\n\treview: GalleryTrialGateReview,\n): GalleryTrialGateStatus {\n\tconst hardBlocks = review.capabilities.filter((capability) => TRIAL_HARD_BLOCK_CAPABILITIES.has(capability));\n\tconst reasons: string[] = [];\n\tif (!review.pinned) pushUniqueReason(reasons, \"exact-pin-required\");\n\tif (hardBlocks.length > 0) pushUniqueReason(reasons, `capability-hard-block: ${hardBlocks.join(\",\")}`);\n\tif (review.licenseVerdict === \"reject\") pushUniqueReason(reasons, \"license-blocked\");\n\tif (review.lifecycleVerdict === \"reject\") pushUniqueReason(reasons, \"lifecycle-scripts-blocked\");\n\tif (review.pathCompatibility === \"pi-hardcoded\") pushUniqueReason(reasons, \"pi-hardcoded-paths\");\n\tif (review.adoption === \"reject\") {\n\t\tfor (const reason of review.rejectedReasons) pushUniqueReason(reasons, reason);\n\t}\n\n\tconst blocked =\n\t\t!review.pinned ||\n\t\thardBlocks.length > 0 ||\n\t\treview.licenseVerdict === \"reject\" ||\n\t\treview.lifecycleVerdict === \"reject\" ||\n\t\treview.pathCompatibility === \"pi-hardcoded\" ||\n\t\treview.adoption === \"reject\";\n\n\treturn {\n\t\toutcome: blocked ? \"blocked\" : \"admitted\",\n\t\tidentity: identityKey(identity),\n\t\tadoption: review.adoption,\n\t\tpinned: review.pinned,\n\t\treasons,\n\t};\n}\n\nexport function deriveGalleryInstallTrustFromReview(review: GalleryTrialGateReview): GalleryInstallTrust {\n\tconst expectedResources = review.candidate?.expectedResources ?? [];\n\tif (expectedResources.some((resource) => CODE_EXECUTION_RESOURCES.has(resource))) return \"code-execution\";\n\tif (review.capabilities.some((capability) => CODE_EXECUTION_CAPABILITIES.has(capability))) return \"code-execution\";\n\treturn \"declarative\";\n}\n\nexport function buildGalleryInstallSpecFromReview(\n\tinput: GalleryInstallSource,\n\treview: GalleryTrialGateReview,\n\toptions: GalleryInstallOptions = {},\n): GalleryInstallSpec {\n\tconst spec = buildGalleryInstallSpec(input, false, options);\n\tconst gate = assessGalleryTrialGate(galleryIdentityFromInstallSource(input), review);\n\tif (gate.outcome === \"blocked\") {\n\t\tthrow new Error(`Gallery trial blocked for ${gate.identity}: ${gate.reasons.join(\", \")}`);\n\t}\n\treturn { ...spec, trust: deriveGalleryInstallTrustFromReview(review) };\n}\n\nfunction galleryIdentityFromInstallSource(input: GalleryInstallSource): GalleryEntryIdentity {\n\tif (input.kind === \"npm\") return { kind: \"npm\", name: input.name };\n\tif (input.kind === \"git\") return { kind: \"git\", repo: input.repo, ref: input.ref };\n\treturn { kind: \"local\", path: input.path };\n}\n"]}
+{"version":3,"file":"package-gallery.d.ts","sourceRoot":"","sources":["../../src/core/package-gallery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AAC1G,OAAO,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AACpG,OAAO,EACN,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,YAAY,GACjB,MAAM,4BAA4B,CAAC","sourcesContent":["export { dedupeGalleryEntries, normalizeRepoIdentity, trialIdentity } from \"./package-gallery-identity.ts\";\nexport { buildGalleryInstallSpec, buildGalleryInstallSpecFromReview } from \"./package-gallery-install.ts\";\nexport {\n\tclassifyGalleryResourceTypes,\n\tfilterGalleryEntriesByType,\n\tfilterManifestEntriesInsideRoot,\n\thasGalleryKeyword,\n\tisValidGalleryImageUrl,\n\tisValidGalleryVideoUrl,\n\tnormalizeGalleryManifest,\n\tresolveGalleryTypeFacet,\n\tselectGalleryPreview,\n} from \"./package-gallery-manifest.ts\";\nexport { assessGalleryTrialGate, inferExtensionCapabilityBadges } from \"./package-gallery-trial.ts\";\nexport {\n\tGALLERY_RESOURCE_ORDER,\n\ttype GalleryInstallSpec,\n\ttype GalleryManifest,\n\ttype GalleryManifestKey,\n\ttype GalleryPackageIdentity,\n\ttype GalleryPreview,\n\ttype GalleryPreviewInput,\n\ttype GalleryResourceType,\n\ttype GalleryTrialGateStatus,\n\ttype GalleryTrialReview,\n\ttype GalleryTrialReviewInput,\n\ttype GalleryTrust,\n} from \"./package-gallery-types.ts\";\n"]}