open-multi-agent-kit 0.80.7 → 0.90.0

package/dist/core/package-composition.js

@@ -1,304 +0,0 @@
-const ALL_RESOURCES = {
-    extensions: true,
-    skills: true,
-    prompts: true,
-    themes: true,
-};
-const SIDE_EFFECT_CAPABILITIES = new Set([
-    "child-process",
-    "network",
-    "filesystem-write",
-    "browser-control",
-    "telemetry",
-]);
-const RESOURCE_PATTERNS = {
-    extensions: ["**/*"],
-    skills: ["**/*"],
-    prompts: ["**/*"],
-    themes: ["**/*"],
-};
-export function createDefaultCompositionPolicy() {
-    return {
-        omkOwnedDomains: ["ontology", "search", "memory", "cache", "compaction", "multi-agent", "session", "scheduler"],
-        surfaceOwnership: [
-            { surface: "theme", ownerPackageIdentity: "npm:pi-tokyo-night" },
-            { surface: "footer", ownerPackageIdentity: "npm:pi-zentui" },
-            { surface: "editor", ownerPackageIdentity: "npm:pi-zentui" },
-            { surface: "header", ownerPackageIdentity: "omk:core" },
-            { surface: "tool-row", ownerPackageIdentity: "npm:pi-claude-style-tools" },
-            { surface: "loadout", ownerPackageIdentity: "npm:pi-loadout" },
-            { surface: "permission", ownerPackageIdentity: "npm:@gotgenes/pi-permission-system" },
-            { surface: "structured-input", ownerPackageIdentity: "npm:@juicesharp/rpiv-ask-user-question" },
-            { surface: "report-preview", ownerPackageIdentity: "npm:pi-markdown-preview" },
-        ],
-        allowedResources: {
-            "npm:pi-tokyo-night": { extensions: false, skills: false, prompts: false, themes: true },
-            "npm:pi-zentui": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-claude-style-tools": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-loadout": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-lens": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:@gotgenes/pi-permission-system": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:@juicesharp/rpiv-ask-user-question": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-markdown-preview": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-langfuse": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-cache-optimizer": { extensions: true, skills: false, prompts: false, themes: false },
-            "npm:pi-sandbox": { extensions: true, skills: false, prompts: false, themes: false },
-        },
-        capabilityToSurfaces: {
-            setFooter: ["footer"],
-            setEditorComponent: ["editor"],
-            setHeader: ["header"],
-            setStatus: ["status"],
-            renderCall: ["tool-row"],
-            renderResult: ["tool-row"],
-            registerMessageRenderer: ["assistant-markdown"],
-            setActiveTools: ["loadout"],
-            permission: ["permission"],
-            askUserQuestion: ["structured-input"],
-            markdownPreview: ["report-preview"],
-        },
-        capabilityToOmkDomains: {
-            context: ["session"],
-            before_provider_request: ["cache", "session"],
-            session_before_compact: ["compaction"],
-            setModel: ["session"],
-            setThinkingLevel: ["session"],
-            memory: ["memory"],
-            cache: ["cache"],
-            ontology: ["ontology"],
-            multiAgent: ["multi-agent"],
-            scheduler: ["scheduler"],
-        },
-    };
-}
-export function checkSingleSurfaceOwner(identity, requestedSurfaces, existingOwners) {
-    const key = packageIdentityKey(identity);
-    const conflicts = [];
-    for (const surface of uniqueSorted(requestedSurfaces)) {
-        const owner = existingOwners.find((rule) => rule.surface === surface);
-        if (!owner)
-            continue;
-        if (owner.ownerPackageIdentity === key || owner.ownerPackageIdentity === identity)
-            continue;
-        conflicts.push({
-            kind: "duplicate-surface-owner",
-            surface,
-            owner: owner.ownerPackageIdentity,
-            reason: `${identity} cannot claim ${surface}; ${owner.ownerPackageIdentity} already owns it`,
-        });
-    }
-    return conflicts;
-}
-export function checkOmkDomainMutation(identity, capabilities, policy) {
-    const conflicts = [];
-    for (const capability of capabilities) {
-        const domains = policy.capabilityToOmkDomains[capability] ?? [];
-        for (const domain of domains) {
-            conflicts.push({
-                kind: "omk-domain-mutation",
-                domain,
-                capability,
-                reason: `${identity} requested ${capability}, which mutates OMK-owned ${domain}`,
-            });
-        }
-    }
-    return conflicts;
-}
-export function checkCapabilitySurfaceMatch(identity, requestedSurfaces, capabilities, policy) {
-    if (capabilities.length === 0)
-        return [];
-    const supported = new Set();
-    for (const capability of capabilities) {
-        for (const surface of policy.capabilityToSurfaces[capability] ?? []) {
-            supported.add(surface);
-        }
-    }
-    return uniqueSorted(requestedSurfaces)
-        .filter((surface) => !supported.has(surface))
-        .map((surface) => ({
-        kind: "capability-surface-mismatch",
-        surface,
-        reason: `${identity} requested ${surface}, but no detected capability supports that surface`,
-    }));
-}
-export function resolveResourceFilter(identity, policy) {
-    const override = policy.allowedResources[identity] ?? policy.allowedResources[packageIdentityKey(identity)] ?? {};
-    return { ...ALL_RESOURCES, ...override };
-}
-export function inferRequestedSurfaces(review, policy) {
-    const surfaces = new Set();
-    for (const resource of review.candidate.expectedResources) {
-        if (resource === "theme")
-            surfaces.add("theme");
-    }
-    for (const capability of review.capabilities) {
-        for (const surface of policy.capabilityToSurfaces[capability] ?? []) {
-            surfaces.add(surface);
-        }
-    }
-    return uniqueSorted([...surfaces]);
-}
-export function composePackage(input, policy) {
-    const requestedSurfaces = uniqueSorted(input.requestedSurfaces ?? inferRequestedSurfaces(input.review, policy));
-    const allowedResources = resolveResourceFilter(input.identity, policy);
-    const conflicts = [
-        ...checkSingleSurfaceOwner(input.identity, requestedSurfaces, policy.surfaceOwnership),
-        ...checkOmkDomainMutation(input.identity, input.review.capabilities, policy),
-        ...checkCapabilitySurfaceMatch(input.identity, requestedSurfaces, input.review.capabilities, policy),
-        ...checkResourceFilter(input.identity, requestedSurfaces, allowedResources),
-    ];
-    const rejectedReasons = [...input.review.rejectedReasons, ...conflicts.map((conflict) => conflict.reason)];
-    const blockingConflict = conflicts.find((conflict) => [
-        "duplicate-surface-owner",
-        "omk-domain-mutation",
-        "unapproved-surface",
-        "capability-surface-mismatch",
-        "resource-filter-blocked",
-    ].includes(conflict.kind));
-    if (!input.review.pinned) {
-        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, [
-            ...rejectedReasons,
-            "missing-exact-pin",
-        ]);
-    }
-    if (input.review.licenseVerdict === "reject" || input.review.lifecycleVerdict === "reject") {
-        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
-    }
-    if (input.review.pathCompatibility === "pi-hardcoded") {
-        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, [
-            ...rejectedReasons,
-            "pi-hardcoded-paths",
-        ]);
-    }
-    if (blockingConflict) {
-        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
-    }
-    if (input.review.adoption === "deferred") {
-        return compositionReview(input.identity, "defer", allowedResources, requestedSurfaces, conflicts, input.review.deferredReason, rejectedReasons);
-    }
-    if (input.review.adoption === "reject") {
-        return compositionReview(input.identity, "reject", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
-    }
-    const canaryReasons = canaryRequiredReasons(input.review.capabilities);
-    if (input.review.risk === "high" && canaryReasons.length === 0) {
-        canaryReasons.push("canary-required: high-risk");
-    }
-    if (canaryReasons.length > 0) {
-        return compositionReview(input.identity, "canary", allowedResources, requestedSurfaces, conflicts, undefined, [
-            ...rejectedReasons,
-            ...canaryReasons,
-        ]);
-    }
-    return compositionReview(input.identity, "admit", allowedResources, requestedSurfaces, conflicts, undefined, rejectedReasons);
-}
-export function composeCandidateBatch(inputs, basePolicy) {
-    const owners = [...basePolicy.surfaceOwnership];
-    const results = [];
-    for (const input of inputs) {
-        const policy = { ...basePolicy, surfaceOwnership: owners };
-        const result = composePackage(input, policy);
-        results.push(result);
-        if (result.verdict === "admit" || result.verdict === "canary") {
-            const ownerKey = packageIdentityKey(result.identity);
-            for (const surface of result.admittedSurfaces) {
-                if (!owners.some((owner) => owner.surface === surface)) {
-                    owners.push({ surface, ownerPackageIdentity: ownerKey });
-                }
-            }
-        }
-    }
-    return results;
-}
-export function toPackageSource(review) {
-    assertPromotable(review);
-    if (isAllResourcesEnabled(review.allowedResources)) {
-        return review.identity;
-    }
-    return {
-        source: review.identity,
-        extensions: review.allowedResources.extensions ? RESOURCE_PATTERNS.extensions : [],
-        skills: review.allowedResources.skills ? RESOURCE_PATTERNS.skills : [],
-        prompts: review.allowedResources.prompts ? RESOURCE_PATTERNS.prompts : [],
-        themes: review.allowedResources.themes ? RESOURCE_PATTERNS.themes : [],
-    };
-}
-export function createPromotionRecord(review, source, options = {}) {
-    assertPromotable(review);
-    return {
-        schemaVersion: "omk.package-composition.promotion.v1",
-        identity: review.identity,
-        source: redactSource(source),
-        scope: "project",
-        allowedResources: review.allowedResources,
-        admittedSurfaces: review.admittedSurfaces,
-        reviewedAt: (options.now ?? new Date()).toISOString(),
-        reviewedBy: options.reviewedBy ?? "root-orchestrator",
-    };
-}
-function checkResourceFilter(identity, requestedSurfaces, filter) {
-    const conflicts = [];
-    for (const surface of requestedSurfaces) {
-        const resource = resourceForSurface(surface);
-        if (filter[resource])
-            continue;
-        conflicts.push({
-            kind: "resource-filter-blocked",
-            surface,
-            reason: `${identity} requested ${surface}, but ${resource} resources are disabled`,
-        });
-    }
-    return conflicts;
-}
-function resourceForSurface(surface) {
-    return surface === "theme" ? "themes" : "extensions";
-}
-function canaryRequiredReasons(capabilities) {
-    const reasons = [];
-    for (const capability of capabilities) {
-        if (SIDE_EFFECT_CAPABILITIES.has(capability)) {
-            reasons.push(`canary-required: ${capability}`);
-        }
-    }
-    return uniqueSorted(reasons);
-}
-function compositionReview(identity, verdict, allowedResources, admittedSurfaces, conflicts, deferredReason, rejectedReasons) {
-    return {
-        identity,
-        verdict,
-        allowedResources,
-        admittedSurfaces: uniqueSorted(admittedSurfaces),
-        conflicts: [...conflicts],
-        ...(deferredReason === undefined ? {} : { deferredReason }),
-        rejectedReasons: uniqueSorted(rejectedReasons),
-    };
-}
-function assertPromotable(review) {
-    if (review.verdict !== "admit") {
-        throw new Error(`Package composition verdict ${review.verdict} cannot be promoted`);
-    }
-}
-function isAllResourcesEnabled(filter) {
-    return filter.extensions && filter.skills && filter.prompts && filter.themes;
-}
-function packageIdentityKey(identity) {
-    if (!identity.startsWith("npm:"))
-        return identity;
-    const spec = identity.slice("npm:".length);
-    const at = spec.lastIndexOf("@");
-    if (at <= 0)
-        return identity;
-    if (spec.startsWith("@")) {
-        const scopedVersionAt = spec.indexOf("@", spec.indexOf("/") + 1);
-        return scopedVersionAt > 0 ? `npm:${spec.slice(0, scopedVersionAt)}` : identity;
-    }
-    return `npm:${spec.slice(0, at)}`;
-}
-function uniqueSorted(values) {
-    return [...new Set(values)].sort();
-}
-function redactSource(source) {
-    return source
-        .replace(/(https?:\/\/)([^\s/@]+@)/gi, "$1<redacted>@")
-        .replace(/([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi, "$1<redacted>");
-}
-//# sourceMappingURL=package-composition.js.map

package/dist/core/package-composition.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-composition.js","sourceRoot":"","sources":["../../src/core/package-composition.ts"],"names":[],"mappings":"AAyFA,MAAM,aAAa,GAA8B;IAChD,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACxC,eAAe;IACf,SAAS;IACT,kBAAkB;IAClB,iBAAiB;IACjB,WAAW;CACX,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAsD;IAC5E,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,MAAM,EAAE,CAAC,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,UAAU,8BAA8B,GAA6B;IAC1E,OAAO;QACN,eAAe,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC;QAC/G,gBAAgB,EAAE;YACjB,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE;YAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,eAAe,EAAE;YAC5D,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,eAAe,EAAE;YAC5D,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,UAAU,EAAE;YACvD,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,2BAA2B,EAAE;YAC1E,EAAE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE;YAC9D,EAAE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,oCAAoC,EAAE;YACrF,EAAE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,wCAAwC,EAAE;YAC/F,EAAE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE;SAC9E;QACD,gBAAgB,EAAE;YACjB,oBAAoB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;YACxF,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACnF,2BAA2B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC/F,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACpF,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACjF,oCAAoC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACxG,wCAAwC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC5G,yBAAyB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC7F,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YACrF,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAC5F,gBAAgB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;SACpF;QACD,oBAAoB,EAAE;YACrB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,kBAAkB,EAAE,CAAC,QAAQ,CAAC;YAC9B,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,UAAU,EAAE,CAAC,UAAU,CAAC;YACxB,YAAY,EAAE,CAAC,UAAU,CAAC;YAC1B,uBAAuB,EAAE,CAAC,oBAAoB,CAAC;YAC/C,cAAc,EAAE,CAAC,SAAS,CAAC;YAC3B,UAAU,EAAE,CAAC,YAAY,CAAC;YAC1B,eAAe,EAAE,CAAC,kBAAkB,CAAC;YACrC,eAAe,EAAE,CAAC,gBAAgB,CAAC;SACnC;QACD,sBAAsB,EAAE;YACvB,OAAO,EAAE,CAAC,SAAS,CAAC;YACpB,uBAAuB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;YAC7C,sBAAsB,EAAE,CAAC,YAAY,CAAC;YACtC,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,gBAAgB,EAAE,CAAC,SAAS,CAAC;YAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClB,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,UAAU,EAAE,CAAC,aAAa,CAAC;YAC3B,SAAS,EAAE,CAAC,WAAW,CAAC;SACxB;KACD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,uBAAuB,CACtC,QAAgB,EAChB,iBAAgD,EAChD,cAA2C,EACnB;IACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,oBAAoB,KAAK,GAAG,IAAI,KAAK,CAAC,oBAAoB,KAAK,QAAQ;YAAE,SAAS;QAC5F,SAAS,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,oBAAoB;YACjC,MAAM,EAAE,GAAG,QAAQ,iBAAiB,OAAO,KAAK,KAAK,CAAC,oBAAoB,kBAAkB;SAC5F,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,sBAAsB,CACrC,QAAgB,EAChB,YAA+B,EAC/B,MAAgC,EACR;IACxB,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAChE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,qBAAqB;gBAC3B,MAAM;gBACN,UAAU;gBACV,MAAM,EAAE,GAAG,QAAQ,cAAc,UAAU,6BAA6B,MAAM,EAAE;aAChF,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,2BAA2B,CAC1C,QAAgB,EAChB,iBAAgD,EAChD,YAA+B,EAC/B,MAAgC,EACR;IACxB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC,iBAAiB,CAAC;SACpC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClB,IAAI,EAAE,6BAAsC;QAC5C,OAAO;QACP,MAAM,EAAE,GAAG,QAAQ,cAAc,OAAO,oDAAoD;KAC5F,CAAC,CAAC,CAAC;AAAA,CACL;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,MAAgC,EAA6B;IACpH,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAClH,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC;AAAA,CACzC;AAED,MAAM,UAAU,sBAAsB,CACrC,MAAyB,EACzB,MAAgC,EACT;IACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC3D,IAAI,QAAQ,KAAK,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;AAAA,CACnC;AAED,MAAM,UAAU,cAAc,CAAC,KAAuB,EAAE,MAAgC,EAAqB;IAC5G,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,CAAC,iBAAiB,IAAI,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChH,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG;QACjB,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACtF,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAC5E,GAAG,2BAA2B,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QACpG,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;KAC3E,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3G,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpD;QACC,yBAAyB;QACzB,qBAAqB;QACrB,oBAAoB;QACpB,6BAA6B;QAC7B,yBAAyB;KACzB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzB,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE;YAC7G,GAAG,eAAe;YAClB,mBAAmB;SACnB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC5F,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,iBAAiB,KAAK,cAAc,EAAE,CAAC;QACvD,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE;YAC7G,GAAG,eAAe;YAClB,oBAAoB;SACpB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACtB,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,KAAK,CAAC,MAAM,CAAC,cAAc,EAC3B,eAAe,CACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,QAAQ,EACR,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,aAAa,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE;YAC7G,GAAG,eAAe;YAClB,GAAG,aAAa;SAChB,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CACvB,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,eAAe,CACf,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAmC,EACnC,UAAoC,EACd;IACtB,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,EAAiB;IACzE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,qBAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACxB,CAAC;IACD,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,QAAQ;QACvB,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;QAClF,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACtE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACzE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACtE,CAAC;AAAA,CACF;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAyB,EACzB,MAAc,EACd,OAAO,GAAgE,EAAE,EAC5C;IAC7B,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO;QACN,aAAa,EAAE,sCAAsC;QACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACrD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB;KACrD,CAAC;AAAA,CACF;AAED,SAAS,mBAAmB,CAC3B,QAAgB,EAChB,iBAAgD,EAChD,MAAiC,EACT;IACxB,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC/B,SAAS,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,yBAAyB;YAC/B,OAAO;YACP,MAAM,EAAE,GAAG,QAAQ,cAAc,OAAO,SAAS,QAAQ,yBAAyB;SAClF,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,kBAAkB,CAAC,OAA2B,EAAmC;IACzF,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAAA,CACrD;AAED,SAAS,qBAAqB,CAAC,YAA+B,EAAY;IACzE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAAA,CAC7B;AAED,SAAS,iBAAiB,CACzB,QAAgB,EAChB,OAA2B,EAC3B,gBAA2C,EAC3C,gBAA+C,EAC/C,SAAyC,EACzC,cAAkC,EAClC,eAAkC,EACd;IACpB,OAAO;QACN,QAAQ;QACR,OAAO;QACP,gBAAgB;QAChB,gBAAgB,EAAE,YAAY,CAAC,gBAAgB,CAAC;QAChD,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;QACzB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,eAAe,EAAE,YAAY,CAAC,eAAe,CAAC;KAC9C,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,MAAyB,EAAQ;IAC1D,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;IACrF,CAAC;AAAA,CACD;AAED,SAAS,qBAAqB,CAAC,MAAiC,EAAW;IAC1E,OAAO,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;AAAA,CAC7E;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAU;IACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,OAAO,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CAClC;AAED,SAAS,YAAY,CAAmB,MAAoB,EAAO;IAClE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CACnC;AAED,SAAS,YAAY,CAAC,MAAc,EAAU;IAC7C,OAAO,MAAM;SACX,OAAO,CAAC,4BAA4B,EAAE,eAAe,CAAC;SACtD,OAAO,CAAC,yDAAyD,EAAE,cAAc,CAAC,CAAC;AAAA,CACrF","sourcesContent":["import type { ProcurementReview } from \"./package-procurement.ts\";\nimport type { PackageSource } from \"./settings-manager.ts\";\n\nexport type CompositionSurface =\n\t| \"theme\"\n\t| \"footer\"\n\t| \"header\"\n\t| \"editor\"\n\t| \"tool-row\"\n\t| \"assistant-markdown\"\n\t| \"status\"\n\t| \"permission\"\n\t| \"structured-input\"\n\t| \"report-preview\"\n\t| \"loadout\";\n\nexport type OmkOwnedDomain =\n\t| \"ontology\"\n\t| \"search\"\n\t| \"memory\"\n\t| \"cache\"\n\t| \"compaction\"\n\t| \"multi-agent\"\n\t| \"session\"\n\t| \"scheduler\";\n\nexport type CompositionVerdict = \"admit\" | \"reject\" | \"defer\" | \"canary\";\n\nexport interface CompositionResourceFilter {\n\textensions: boolean;\n\tskills: boolean;\n\tprompts: boolean;\n\tthemes: boolean;\n}\n\nexport interface SurfaceOwnerRule {\n\tsurface: CompositionSurface;\n\townerPackageIdentity: string;\n}\n\nexport interface PackageCompositionPolicy {\n\treadonly omkOwnedDomains: readonly OmkOwnedDomain[];\n\treadonly surfaceOwnership: readonly SurfaceOwnerRule[];\n\treadonly allowedResources: Readonly<Record<string, Partial<CompositionResourceFilter>>>;\n\treadonly capabilityToSurfaces: Readonly<Record<string, readonly CompositionSurface[]>>;\n\treadonly capabilityToOmkDomains: Readonly<Record<string, readonly OmkOwnedDomain[]>>;\n}\n\nexport interface CompositionInput {\n\tidentity: string;\n\treview: ProcurementReview;\n\trequestedSurfaces?: readonly CompositionSurface[];\n}\n\nexport interface CompositionConflict {\n\tkind:\n\t\t| \"duplicate-surface-owner\"\n\t\t| \"omk-domain-mutation\"\n\t\t| \"unapproved-surface\"\n\t\t| \"capability-surface-mismatch\"\n\t\t| \"resource-filter-blocked\";\n\tsurface?: CompositionSurface;\n\tdomain?: OmkOwnedDomain;\n\towner?: string;\n\tcapability?: string;\n\treason: string;\n}\n\nexport interface CompositionReview {\n\tidentity: string;\n\tverdict: CompositionVerdict;\n\tallowedResources: CompositionResourceFilter;\n\tadmittedSurfaces: CompositionSurface[];\n\tconflicts: CompositionConflict[];\n\tdeferredReason?: string;\n\trejectedReasons: string[];\n}\n\nexport interface CompositionPromotionRecord {\n\tschemaVersion: \"omk.package-composition.promotion.v1\";\n\tidentity: string;\n\tsource: string;\n\tscope: \"project\";\n\tallowedResources: CompositionResourceFilter;\n\tadmittedSurfaces: CompositionSurface[];\n\treviewedAt: string;\n\treviewedBy: \"manual\" | \"root-orchestrator\";\n}\n\nconst ALL_RESOURCES: CompositionResourceFilter = {\n\textensions: true,\n\tskills: true,\n\tprompts: true,\n\tthemes: true,\n};\n\nconst SIDE_EFFECT_CAPABILITIES = new Set([\n\t\"child-process\",\n\t\"network\",\n\t\"filesystem-write\",\n\t\"browser-control\",\n\t\"telemetry\",\n]);\n\nconst RESOURCE_PATTERNS: Record<keyof CompositionResourceFilter, string[]> = {\n\textensions: [\"**/*\"],\n\tskills: [\"**/*\"],\n\tprompts: [\"**/*\"],\n\tthemes: [\"**/*\"],\n};\n\nexport function createDefaultCompositionPolicy(): PackageCompositionPolicy {\n\treturn {\n\t\tomkOwnedDomains: [\"ontology\", \"search\", \"memory\", \"cache\", \"compaction\", \"multi-agent\", \"session\", \"scheduler\"],\n\t\tsurfaceOwnership: [\n\t\t\t{ surface: \"theme\", ownerPackageIdentity: \"npm:pi-tokyo-night\" },\n\t\t\t{ surface: \"footer\", ownerPackageIdentity: \"npm:pi-zentui\" },\n\t\t\t{ surface: \"editor\", ownerPackageIdentity: \"npm:pi-zentui\" },\n\t\t\t{ surface: \"header\", ownerPackageIdentity: \"omk:core\" },\n\t\t\t{ surface: \"tool-row\", ownerPackageIdentity: \"npm:pi-claude-style-tools\" },\n\t\t\t{ surface: \"loadout\", ownerPackageIdentity: \"npm:pi-loadout\" },\n\t\t\t{ surface: \"permission\", ownerPackageIdentity: \"npm:@gotgenes/pi-permission-system\" },\n\t\t\t{ surface: \"structured-input\", ownerPackageIdentity: \"npm:@juicesharp/rpiv-ask-user-question\" },\n\t\t\t{ surface: \"report-preview\", ownerPackageIdentity: \"npm:pi-markdown-preview\" },\n\t\t],\n\t\tallowedResources: {\n\t\t\t\"npm:pi-tokyo-night\": { extensions: false, skills: false, prompts: false, themes: true },\n\t\t\t\"npm:pi-zentui\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-claude-style-tools\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-loadout\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-lens\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:@gotgenes/pi-permission-system\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:@juicesharp/rpiv-ask-user-question\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-markdown-preview\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-langfuse\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-cache-optimizer\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t\t\"npm:pi-sandbox\": { extensions: true, skills: false, prompts: false, themes: false },\n\t\t},\n\t\tcapabilityToSurfaces: {\n\t\t\tsetFooter: [\"footer\"],\n\t\t\tsetEditorComponent: [\"editor\"],\n\t\t\tsetHeader: [\"header\"],\n\t\t\tsetStatus: [\"status\"],\n\t\t\trenderCall: [\"tool-row\"],\n\t\t\trenderResult: [\"tool-row\"],\n\t\t\tregisterMessageRenderer: [\"assistant-markdown\"],\n\t\t\tsetActiveTools: [\"loadout\"],\n\t\t\tpermission: [\"permission\"],\n\t\t\taskUserQuestion: [\"structured-input\"],\n\t\t\tmarkdownPreview: [\"report-preview\"],\n\t\t},\n\t\tcapabilityToOmkDomains: {\n\t\t\tcontext: [\"session\"],\n\t\t\tbefore_provider_request: [\"cache\", \"session\"],\n\t\t\tsession_before_compact: [\"compaction\"],\n\t\t\tsetModel: [\"session\"],\n\t\t\tsetThinkingLevel: [\"session\"],\n\t\t\tmemory: [\"memory\"],\n\t\t\tcache: [\"cache\"],\n\t\t\tontology: [\"ontology\"],\n\t\t\tmultiAgent: [\"multi-agent\"],\n\t\t\tscheduler: [\"scheduler\"],\n\t\t},\n\t};\n}\n\nexport function checkSingleSurfaceOwner(\n\tidentity: string,\n\trequestedSurfaces: readonly CompositionSurface[],\n\texistingOwners: readonly SurfaceOwnerRule[],\n): CompositionConflict[] {\n\tconst key = packageIdentityKey(identity);\n\tconst conflicts: CompositionConflict[] = [];\n\tfor (const surface of uniqueSorted(requestedSurfaces)) {\n\t\tconst owner = existingOwners.find((rule) => rule.surface === surface);\n\t\tif (!owner) continue;\n\t\tif (owner.ownerPackageIdentity === key || owner.ownerPackageIdentity === identity) continue;\n\t\tconflicts.push({\n\t\t\tkind: \"duplicate-surface-owner\",\n\t\t\tsurface,\n\t\t\towner: owner.ownerPackageIdentity,\n\t\t\treason: `${identity} cannot claim ${surface}; ${owner.ownerPackageIdentity} already owns it`,\n\t\t});\n\t}\n\treturn conflicts;\n}\n\nexport function checkOmkDomainMutation(\n\tidentity: string,\n\tcapabilities: readonly string[],\n\tpolicy: PackageCompositionPolicy,\n): CompositionConflict[] {\n\tconst conflicts: CompositionConflict[] = [];\n\tfor (const capability of capabilities) {\n\t\tconst domains = policy.capabilityToOmkDomains[capability] ?? [];\n\t\tfor (const domain of domains) {\n\t\t\tconflicts.push({\n\t\t\t\tkind: \"omk-domain-mutation\",\n\t\t\t\tdomain,\n\t\t\t\tcapability,\n\t\t\t\treason: `${identity} requested ${capability}, which mutates OMK-owned ${domain}`,\n\t\t\t});\n\t\t}\n\t}\n\treturn conflicts;\n}\n\nexport function checkCapabilitySurfaceMatch(\n\tidentity: string,\n\trequestedSurfaces: readonly CompositionSurface[],\n\tcapabilities: readonly string[],\n\tpolicy: PackageCompositionPolicy,\n): CompositionConflict[] {\n\tif (capabilities.length === 0) return [];\n\tconst supported = new Set<CompositionSurface>();\n\tfor (const capability of capabilities) {\n\t\tfor (const surface of policy.capabilityToSurfaces[capability] ?? []) {\n\t\t\tsupported.add(surface);\n\t\t}\n\t}\n\n\treturn uniqueSorted(requestedSurfaces)\n\t\t.filter((surface) => !supported.has(surface))\n\t\t.map((surface) => ({\n\t\t\tkind: \"capability-surface-mismatch\" as const,\n\t\t\tsurface,\n\t\t\treason: `${identity} requested ${surface}, but no detected capability supports that surface`,\n\t\t}));\n}\n\nexport function resolveResourceFilter(identity: string, policy: PackageCompositionPolicy): CompositionResourceFilter {\n\tconst override = policy.allowedResources[identity] ?? policy.allowedResources[packageIdentityKey(identity)] ?? {};\n\treturn { ...ALL_RESOURCES, ...override };\n}\n\nexport function inferRequestedSurfaces(\n\treview: ProcurementReview,\n\tpolicy: PackageCompositionPolicy,\n): CompositionSurface[] {\n\tconst surfaces = new Set<CompositionSurface>();\n\tfor (const resource of review.candidate.expectedResources) {\n\t\tif (resource === \"theme\") surfaces.add(\"theme\");\n\t}\n\tfor (const capability of review.capabilities) {\n\t\tfor (const surface of policy.capabilityToSurfaces[capability] ?? []) {\n\t\t\tsurfaces.add(surface);\n\t\t}\n\t}\n\treturn uniqueSorted([...surfaces]);\n}\n\nexport function composePackage(input: CompositionInput, policy: PackageCompositionPolicy): CompositionReview {\n\tconst requestedSurfaces = uniqueSorted(input.requestedSurfaces ?? inferRequestedSurfaces(input.review, policy));\n\tconst allowedResources = resolveResourceFilter(input.identity, policy);\n\tconst conflicts = [\n\t\t...checkSingleSurfaceOwner(input.identity, requestedSurfaces, policy.surfaceOwnership),\n\t\t...checkOmkDomainMutation(input.identity, input.review.capabilities, policy),\n\t\t...checkCapabilitySurfaceMatch(input.identity, requestedSurfaces, input.review.capabilities, policy),\n\t\t...checkResourceFilter(input.identity, requestedSurfaces, allowedResources),\n\t];\n\n\tconst rejectedReasons = [...input.review.rejectedReasons, ...conflicts.map((conflict) => conflict.reason)];\n\tconst blockingConflict = conflicts.find((conflict) =>\n\t\t[\n\t\t\t\"duplicate-surface-owner\",\n\t\t\t\"omk-domain-mutation\",\n\t\t\t\"unapproved-surface\",\n\t\t\t\"capability-surface-mismatch\",\n\t\t\t\"resource-filter-blocked\",\n\t\t].includes(conflict.kind),\n\t);\n\n\tif (!input.review.pinned) {\n\t\treturn compositionReview(input.identity, \"reject\", allowedResources, requestedSurfaces, conflicts, undefined, [\n\t\t\t...rejectedReasons,\n\t\t\t\"missing-exact-pin\",\n\t\t]);\n\t}\n\tif (input.review.licenseVerdict === \"reject\" || input.review.lifecycleVerdict === \"reject\") {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"reject\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tundefined,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\tif (input.review.pathCompatibility === \"pi-hardcoded\") {\n\t\treturn compositionReview(input.identity, \"reject\", allowedResources, requestedSurfaces, conflicts, undefined, [\n\t\t\t...rejectedReasons,\n\t\t\t\"pi-hardcoded-paths\",\n\t\t]);\n\t}\n\tif (blockingConflict) {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"reject\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tundefined,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\tif (input.review.adoption === \"deferred\") {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"defer\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tinput.review.deferredReason,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\tif (input.review.adoption === \"reject\") {\n\t\treturn compositionReview(\n\t\t\tinput.identity,\n\t\t\t\"reject\",\n\t\t\tallowedResources,\n\t\t\trequestedSurfaces,\n\t\t\tconflicts,\n\t\t\tundefined,\n\t\t\trejectedReasons,\n\t\t);\n\t}\n\n\tconst canaryReasons = canaryRequiredReasons(input.review.capabilities);\n\tif (input.review.risk === \"high\" && canaryReasons.length === 0) {\n\t\tcanaryReasons.push(\"canary-required: high-risk\");\n\t}\n\tif (canaryReasons.length > 0) {\n\t\treturn compositionReview(input.identity, \"canary\", allowedResources, requestedSurfaces, conflicts, undefined, [\n\t\t\t...rejectedReasons,\n\t\t\t...canaryReasons,\n\t\t]);\n\t}\n\n\treturn compositionReview(\n\t\tinput.identity,\n\t\t\"admit\",\n\t\tallowedResources,\n\t\trequestedSurfaces,\n\t\tconflicts,\n\t\tundefined,\n\t\trejectedReasons,\n\t);\n}\n\nexport function composeCandidateBatch(\n\tinputs: readonly CompositionInput[],\n\tbasePolicy: PackageCompositionPolicy,\n): CompositionReview[] {\n\tconst owners = [...basePolicy.surfaceOwnership];\n\tconst results: CompositionReview[] = [];\n\tfor (const input of inputs) {\n\t\tconst policy = { ...basePolicy, surfaceOwnership: owners };\n\t\tconst result = composePackage(input, policy);\n\t\tresults.push(result);\n\t\tif (result.verdict === \"admit\" || result.verdict === \"canary\") {\n\t\t\tconst ownerKey = packageIdentityKey(result.identity);\n\t\t\tfor (const surface of result.admittedSurfaces) {\n\t\t\t\tif (!owners.some((owner) => owner.surface === surface)) {\n\t\t\t\t\towners.push({ surface, ownerPackageIdentity: ownerKey });\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn results;\n}\n\nexport function toPackageSource(review: CompositionReview): PackageSource {\n\tassertPromotable(review);\n\tif (isAllResourcesEnabled(review.allowedResources)) {\n\t\treturn review.identity;\n\t}\n\treturn {\n\t\tsource: review.identity,\n\t\textensions: review.allowedResources.extensions ? RESOURCE_PATTERNS.extensions : [],\n\t\tskills: review.allowedResources.skills ? RESOURCE_PATTERNS.skills : [],\n\t\tprompts: review.allowedResources.prompts ? RESOURCE_PATTERNS.prompts : [],\n\t\tthemes: review.allowedResources.themes ? RESOURCE_PATTERNS.themes : [],\n\t};\n}\n\nexport function createPromotionRecord(\n\treview: CompositionReview,\n\tsource: string,\n\toptions: { reviewedBy?: \"manual\" | \"root-orchestrator\"; now?: Date } = {},\n): CompositionPromotionRecord {\n\tassertPromotable(review);\n\treturn {\n\t\tschemaVersion: \"omk.package-composition.promotion.v1\",\n\t\tidentity: review.identity,\n\t\tsource: redactSource(source),\n\t\tscope: \"project\",\n\t\tallowedResources: review.allowedResources,\n\t\tadmittedSurfaces: review.admittedSurfaces,\n\t\treviewedAt: (options.now ?? new Date()).toISOString(),\n\t\treviewedBy: options.reviewedBy ?? \"root-orchestrator\",\n\t};\n}\n\nfunction checkResourceFilter(\n\tidentity: string,\n\trequestedSurfaces: readonly CompositionSurface[],\n\tfilter: CompositionResourceFilter,\n): CompositionConflict[] {\n\tconst conflicts: CompositionConflict[] = [];\n\tfor (const surface of requestedSurfaces) {\n\t\tconst resource = resourceForSurface(surface);\n\t\tif (filter[resource]) continue;\n\t\tconflicts.push({\n\t\t\tkind: \"resource-filter-blocked\",\n\t\t\tsurface,\n\t\t\treason: `${identity} requested ${surface}, but ${resource} resources are disabled`,\n\t\t});\n\t}\n\treturn conflicts;\n}\n\nfunction resourceForSurface(surface: CompositionSurface): keyof CompositionResourceFilter {\n\treturn surface === \"theme\" ? \"themes\" : \"extensions\";\n}\n\nfunction canaryRequiredReasons(capabilities: readonly string[]): string[] {\n\tconst reasons: string[] = [];\n\tfor (const capability of capabilities) {\n\t\tif (SIDE_EFFECT_CAPABILITIES.has(capability)) {\n\t\t\treasons.push(`canary-required: ${capability}`);\n\t\t}\n\t}\n\treturn uniqueSorted(reasons);\n}\n\nfunction compositionReview(\n\tidentity: string,\n\tverdict: CompositionVerdict,\n\tallowedResources: CompositionResourceFilter,\n\tadmittedSurfaces: readonly CompositionSurface[],\n\tconflicts: readonly CompositionConflict[],\n\tdeferredReason: string | undefined,\n\trejectedReasons: readonly string[],\n): CompositionReview {\n\treturn {\n\t\tidentity,\n\t\tverdict,\n\t\tallowedResources,\n\t\tadmittedSurfaces: uniqueSorted(admittedSurfaces),\n\t\tconflicts: [...conflicts],\n\t\t...(deferredReason === undefined ? {} : { deferredReason }),\n\t\trejectedReasons: uniqueSorted(rejectedReasons),\n\t};\n}\n\nfunction assertPromotable(review: CompositionReview): void {\n\tif (review.verdict !== \"admit\") {\n\t\tthrow new Error(`Package composition verdict ${review.verdict} cannot be promoted`);\n\t}\n}\n\nfunction isAllResourcesEnabled(filter: CompositionResourceFilter): boolean {\n\treturn filter.extensions && filter.skills && filter.prompts && filter.themes;\n}\n\nfunction packageIdentityKey(identity: string): string {\n\tif (!identity.startsWith(\"npm:\")) return identity;\n\tconst spec = identity.slice(\"npm:\".length);\n\tconst at = spec.lastIndexOf(\"@\");\n\tif (at <= 0) return identity;\n\tif (spec.startsWith(\"@\")) {\n\t\tconst scopedVersionAt = spec.indexOf(\"@\", spec.indexOf(\"/\") + 1);\n\t\treturn scopedVersionAt > 0 ? `npm:${spec.slice(0, scopedVersionAt)}` : identity;\n\t}\n\treturn `npm:${spec.slice(0, at)}`;\n}\n\nfunction uniqueSorted<T extends string>(values: readonly T[]): T[] {\n\treturn [...new Set(values)].sort();\n}\n\nfunction redactSource(source: string): string {\n\treturn source\n\t\t.replace(/(https?:\\/\\/)([^\\s/@]+@)/gi, \"$1<redacted>@\")\n\t\t.replace(/([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi, \"$1<redacted>\");\n}\n"]}

package/dist/core/package-trial-runtime.d.ts

@@ -1,75 +0,0 @@
-/**
- * Package-manager-facing trial runtime adapter.
- *
- * Narrow, pure adapter around `package-trial-sandbox.ts`. It takes a trial install
- * request, validates it through the existing `planPackageTrialInstall` gate, and
- * shapes the result into the three artifacts a package-manager executor needs:
- *
- *   - executor instructions: the exact (possibly OS-sandbox-wrapped) argv/cwd/env
- *     to spawn, so the runtime never re-derives the command;
- *   - cleanup plan: the ephemeral install root to remove after the trial;
- *   - audit record: deterministic, secret-free metadata describing the trial.
- *
- * This module performs no I/O: it does not install, spawn, clone, read, write, or
- * mutate any filesystem/network state. It only transforms validated inputs into a
- * declarative plan consumed by the package-manager executor.
- */
-import { type PackageTrialInstallInput, type TrialInstallKind, type TrialPackageManagerName } from "./package-trial-sandbox.ts";
-import type { NetworkMode, SandboxMode } from "./sandbox/policy.ts";
-/** Exact spawn instruction for the package-manager executor. */
-export interface TrialExecutorInstruction {
-    /** argv[0] to spawn: the OS-sandbox wrapper when wrapped, otherwise the tool. */
-    readonly command: string;
-    /** Remaining argv to pass to the command. */
-    readonly args: readonly string[];
-    /** Working directory for the spawn. */
-    readonly cwd: string;
-    /** Filtered environment for the spawn (carries spawn-time values, never audited). */
-    readonly env: Readonly<Record<string, string>>;
-    /** True when the argv is wrapped by an OS sandbox backend. */
-    readonly wrapped: boolean;
-    /** Lifecycle scripts are always ignored for trial installs. */
-    readonly lifecycleScripts: "ignored";
-}
-/** Declarative cleanup metadata for the ephemeral trial install. */
-export interface TrialCleanupPlan {
-    /** The trial install root that should be torn down. */
-    readonly installRoot: string;
-    /** Paths to remove after the trial completes (currently the install root). */
-    readonly removePaths: readonly string[];
-    readonly recursive: true;
-    readonly force: true;
-    readonly reason: "ephemeral-trial";
-}
-/** Deterministic, secret-free audit record for the trial. */
-export interface TrialAuditRecord {
-    readonly kind: TrialInstallKind;
-    readonly packageManagerName: TrialPackageManagerName;
-    readonly source: string;
-    readonly installRoot: string;
-    /** Logical tool command (npm/pnpm/bun/git), not the sandbox wrapper. */
-    readonly command: string;
-    /** Logical (unwrapped) args for the tool command. */
-    readonly args: readonly string[];
-    readonly lifecycleScripts: "ignored";
-    readonly sandboxMode: SandboxMode;
-    readonly sandboxWrapped: boolean;
-    readonly sandboxRule: string;
-    readonly networkMode: NetworkMode;
-}
-export type TrialRuntimePlan = {
-    readonly ok: false;
-    readonly reason: string;
-} | {
-    readonly ok: true;
-    readonly executor: TrialExecutorInstruction;
-    readonly cleanup: TrialCleanupPlan;
-    readonly audit: TrialAuditRecord;
-};
-/**
- * Validate a trial install request and shape it into executor/cleanup/audit
- * artifacts. Pure and deterministic: identical inputs always produce identical
- * output, and no side effects are performed.
- */
-export declare function createTrialRuntimePlan(input: PackageTrialInstallInput): TrialRuntimePlan;
-//# sourceMappingURL=package-trial-runtime.d.ts.map

package/dist/core/package-trial-runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-trial-runtime.d.ts","sourceRoot":"","sources":["../../src/core/package-trial-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACN,KAAK,wBAAwB,EAE7B,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEpE,gEAAgE;AAChE,MAAM,WAAW,wBAAwB;IACxC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,uCAAuC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC;CACrC;AAED,oEAAoE;AACpE,MAAM,WAAW,gBAAgB;IAChC,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACnC;AAED,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CAClC;AAED,MAAM,MAAM,gBAAgB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAChC,CAAC;AAeL;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,wBAAwB,GAAG,gBAAgB,CA4CxF","sourcesContent":["/**\n * Package-manager-facing trial runtime adapter.\n *\n * Narrow, pure adapter around `package-trial-sandbox.ts`. It takes a trial install\n * request, validates it through the existing `planPackageTrialInstall` gate, and\n * shapes the result into the three artifacts a package-manager executor needs:\n *\n *   - executor instructions: the exact (possibly OS-sandbox-wrapped) argv/cwd/env\n *     to spawn, so the runtime never re-derives the command;\n *   - cleanup plan: the ephemeral install root to remove after the trial;\n *   - audit record: deterministic, secret-free metadata describing the trial.\n *\n * This module performs no I/O: it does not install, spawn, clone, read, write, or\n * mutate any filesystem/network state. It only transforms validated inputs into a\n * declarative plan consumed by the package-manager executor.\n */\n\nimport {\n\ttype PackageTrialInstallInput,\n\tplanPackageTrialInstall,\n\ttype TrialInstallKind,\n\ttype TrialPackageManagerName,\n} from \"./package-trial-sandbox.ts\";\nimport type { NetworkMode, SandboxMode } from \"./sandbox/policy.ts\";\n\n/** Exact spawn instruction for the package-manager executor. */\nexport interface TrialExecutorInstruction {\n\t/** argv[0] to spawn: the OS-sandbox wrapper when wrapped, otherwise the tool. */\n\treadonly command: string;\n\t/** Remaining argv to pass to the command. */\n\treadonly args: readonly string[];\n\t/** Working directory for the spawn. */\n\treadonly cwd: string;\n\t/** Filtered environment for the spawn (carries spawn-time values, never audited). */\n\treadonly env: Readonly<Record<string, string>>;\n\t/** True when the argv is wrapped by an OS sandbox backend. */\n\treadonly wrapped: boolean;\n\t/** Lifecycle scripts are always ignored for trial installs. */\n\treadonly lifecycleScripts: \"ignored\";\n}\n\n/** Declarative cleanup metadata for the ephemeral trial install. */\nexport interface TrialCleanupPlan {\n\t/** The trial install root that should be torn down. */\n\treadonly installRoot: string;\n\t/** Paths to remove after the trial completes (currently the install root). */\n\treadonly removePaths: readonly string[];\n\treadonly recursive: true;\n\treadonly force: true;\n\treadonly reason: \"ephemeral-trial\";\n}\n\n/** Deterministic, secret-free audit record for the trial. */\nexport interface TrialAuditRecord {\n\treadonly kind: TrialInstallKind;\n\treadonly packageManagerName: TrialPackageManagerName;\n\treadonly source: string;\n\treadonly installRoot: string;\n\t/** Logical tool command (npm/pnpm/bun/git), not the sandbox wrapper. */\n\treadonly command: string;\n\t/** Logical (unwrapped) args for the tool command. */\n\treadonly args: readonly string[];\n\treadonly lifecycleScripts: \"ignored\";\n\treadonly sandboxMode: SandboxMode;\n\treadonly sandboxWrapped: boolean;\n\treadonly sandboxRule: string;\n\treadonly networkMode: NetworkMode;\n}\n\nexport type TrialRuntimePlan =\n\t| { readonly ok: false; readonly reason: string }\n\t| {\n\t\t\treadonly ok: true;\n\t\t\treadonly executor: TrialExecutorInstruction;\n\t\t\treadonly cleanup: TrialCleanupPlan;\n\t\t\treadonly audit: TrialAuditRecord;\n\t  };\n\nconst SOURCE_CREDENTIAL_PATTERN = /(https?:\\/\\/)([^\\s/@]+@)/gi;\nconst SOURCE_TOKEN_QUERY_PATTERN = /([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi;\n\nfunction redactTrialSource(source: string): string {\n\treturn source\n\t\t.replace(SOURCE_CREDENTIAL_PATTERN, \"$1<redacted>@\")\n\t\t.replace(SOURCE_TOKEN_QUERY_PATTERN, \"$1<redacted>\");\n}\n\nfunction redactTrialArgs(args: readonly string[]): string[] {\n\treturn args.map((arg) => redactTrialSource(arg));\n}\n\n/**\n * Validate a trial install request and shape it into executor/cleanup/audit\n * artifacts. Pure and deterministic: identical inputs always produce identical\n * output, and no side effects are performed.\n */\nexport function createTrialRuntimePlan(input: PackageTrialInstallInput): TrialRuntimePlan {\n\tconst plan = planPackageTrialInstall(input);\n\tif (!plan.ok) {\n\t\treturn { ok: false, reason: plan.reason };\n\t}\n\n\tconst sandbox = plan.sandbox;\n\tif (!sandbox.allowed) {\n\t\t// Defensive: planPackageTrialInstall only returns ok when the sandbox is allowed.\n\t\treturn { ok: false, reason: `[${sandbox.rule}] ${sandbox.reason}` };\n\t}\n\n\tconst executor: TrialExecutorInstruction = {\n\t\tcommand: sandbox.argv[0],\n\t\targs: sandbox.argv.slice(1),\n\t\tcwd: sandbox.cwd,\n\t\tenv: sandbox.env,\n\t\twrapped: sandbox.wrapped,\n\t\tlifecycleScripts: plan.lifecycleScripts,\n\t};\n\n\tconst cleanup: TrialCleanupPlan = {\n\t\tinstallRoot: input.installRoot,\n\t\tremovePaths: [input.installRoot],\n\t\trecursive: true,\n\t\tforce: true,\n\t\treason: \"ephemeral-trial\",\n\t};\n\n\tconst audit: TrialAuditRecord = {\n\t\tkind: plan.kind,\n\t\tpackageManagerName: input.packageManagerName,\n\t\tsource: redactTrialSource(input.source),\n\t\tinstallRoot: input.installRoot,\n\t\tcommand: plan.command,\n\t\targs: redactTrialArgs(plan.args),\n\t\tlifecycleScripts: plan.lifecycleScripts,\n\t\tsandboxMode: input.policy.mode,\n\t\tsandboxWrapped: sandbox.wrapped,\n\t\tsandboxRule: sandbox.rule,\n\t\tnetworkMode: input.policy.network.mode,\n\t};\n\n\treturn { ok: true, executor, cleanup, audit };\n}\n"]}

package/dist/core/package-trial-runtime.js

@@ -1,73 +0,0 @@
-/**
- * Package-manager-facing trial runtime adapter.
- *
- * Narrow, pure adapter around `package-trial-sandbox.ts`. It takes a trial install
- * request, validates it through the existing `planPackageTrialInstall` gate, and
- * shapes the result into the three artifacts a package-manager executor needs:
- *
- *   - executor instructions: the exact (possibly OS-sandbox-wrapped) argv/cwd/env
- *     to spawn, so the runtime never re-derives the command;
- *   - cleanup plan: the ephemeral install root to remove after the trial;
- *   - audit record: deterministic, secret-free metadata describing the trial.
- *
- * This module performs no I/O: it does not install, spawn, clone, read, write, or
- * mutate any filesystem/network state. It only transforms validated inputs into a
- * declarative plan consumed by the package-manager executor.
- */
-import { planPackageTrialInstall, } from "./package-trial-sandbox.js";
-const SOURCE_CREDENTIAL_PATTERN = /(https?:\/\/)([^\s/@]+@)/gi;
-const SOURCE_TOKEN_QUERY_PATTERN = /([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi;
-function redactTrialSource(source) {
-    return source
-        .replace(SOURCE_CREDENTIAL_PATTERN, "$1<redacted>@")
-        .replace(SOURCE_TOKEN_QUERY_PATTERN, "$1<redacted>");
-}
-function redactTrialArgs(args) {
-    return args.map((arg) => redactTrialSource(arg));
-}
-/**
- * Validate a trial install request and shape it into executor/cleanup/audit
- * artifacts. Pure and deterministic: identical inputs always produce identical
- * output, and no side effects are performed.
- */
-export function createTrialRuntimePlan(input) {
-    const plan = planPackageTrialInstall(input);
-    if (!plan.ok) {
-        return { ok: false, reason: plan.reason };
-    }
-    const sandbox = plan.sandbox;
-    if (!sandbox.allowed) {
-        // Defensive: planPackageTrialInstall only returns ok when the sandbox is allowed.
-        return { ok: false, reason: `[${sandbox.rule}] ${sandbox.reason}` };
-    }
-    const executor = {
-        command: sandbox.argv[0],
-        args: sandbox.argv.slice(1),
-        cwd: sandbox.cwd,
-        env: sandbox.env,
-        wrapped: sandbox.wrapped,
-        lifecycleScripts: plan.lifecycleScripts,
-    };
-    const cleanup = {
-        installRoot: input.installRoot,
-        removePaths: [input.installRoot],
-        recursive: true,
-        force: true,
-        reason: "ephemeral-trial",
-    };
-    const audit = {
-        kind: plan.kind,
-        packageManagerName: input.packageManagerName,
-        source: redactTrialSource(input.source),
-        installRoot: input.installRoot,
-        command: plan.command,
-        args: redactTrialArgs(plan.args),
-        lifecycleScripts: plan.lifecycleScripts,
-        sandboxMode: input.policy.mode,
-        sandboxWrapped: sandbox.wrapped,
-        sandboxRule: sandbox.rule,
-        networkMode: input.policy.network.mode,
-    };
-    return { ok: true, executor, cleanup, audit };
-}
-//# sourceMappingURL=package-trial-runtime.js.map

package/dist/core/package-trial-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-trial-runtime.js","sourceRoot":"","sources":["../../src/core/package-trial-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAEN,uBAAuB,GAGvB,MAAM,4BAA4B,CAAC;AAwDpC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAC/D,MAAM,0BAA0B,GAAG,yDAAyD,CAAC;AAE7F,SAAS,iBAAiB,CAAC,MAAc,EAAU;IAClD,OAAO,MAAM;SACX,OAAO,CAAC,yBAAyB,EAAE,eAAe,CAAC;SACnD,OAAO,CAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC;AAAA,CACtD;AAED,SAAS,eAAe,CAAC,IAAuB,EAAY;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,CACjD;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA+B,EAAoB;IACzF,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtB,kFAAkF;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAA6B;QAC1C,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACvC,CAAC;IAEF,MAAM,OAAO,GAAqB;QACjC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,iBAAiB;KACzB,CAAC;IAEF,MAAM,KAAK,GAAqB;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;QAC9B,cAAc,EAAE,OAAO,CAAC,OAAO;QAC/B,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI;KACtC,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,CAC9C","sourcesContent":["/**\n * Package-manager-facing trial runtime adapter.\n *\n * Narrow, pure adapter around `package-trial-sandbox.ts`. It takes a trial install\n * request, validates it through the existing `planPackageTrialInstall` gate, and\n * shapes the result into the three artifacts a package-manager executor needs:\n *\n *   - executor instructions: the exact (possibly OS-sandbox-wrapped) argv/cwd/env\n *     to spawn, so the runtime never re-derives the command;\n *   - cleanup plan: the ephemeral install root to remove after the trial;\n *   - audit record: deterministic, secret-free metadata describing the trial.\n *\n * This module performs no I/O: it does not install, spawn, clone, read, write, or\n * mutate any filesystem/network state. It only transforms validated inputs into a\n * declarative plan consumed by the package-manager executor.\n */\n\nimport {\n\ttype PackageTrialInstallInput,\n\tplanPackageTrialInstall,\n\ttype TrialInstallKind,\n\ttype TrialPackageManagerName,\n} from \"./package-trial-sandbox.ts\";\nimport type { NetworkMode, SandboxMode } from \"./sandbox/policy.ts\";\n\n/** Exact spawn instruction for the package-manager executor. */\nexport interface TrialExecutorInstruction {\n\t/** argv[0] to spawn: the OS-sandbox wrapper when wrapped, otherwise the tool. */\n\treadonly command: string;\n\t/** Remaining argv to pass to the command. */\n\treadonly args: readonly string[];\n\t/** Working directory for the spawn. */\n\treadonly cwd: string;\n\t/** Filtered environment for the spawn (carries spawn-time values, never audited). */\n\treadonly env: Readonly<Record<string, string>>;\n\t/** True when the argv is wrapped by an OS sandbox backend. */\n\treadonly wrapped: boolean;\n\t/** Lifecycle scripts are always ignored for trial installs. */\n\treadonly lifecycleScripts: \"ignored\";\n}\n\n/** Declarative cleanup metadata for the ephemeral trial install. */\nexport interface TrialCleanupPlan {\n\t/** The trial install root that should be torn down. */\n\treadonly installRoot: string;\n\t/** Paths to remove after the trial completes (currently the install root). */\n\treadonly removePaths: readonly string[];\n\treadonly recursive: true;\n\treadonly force: true;\n\treadonly reason: \"ephemeral-trial\";\n}\n\n/** Deterministic, secret-free audit record for the trial. */\nexport interface TrialAuditRecord {\n\treadonly kind: TrialInstallKind;\n\treadonly packageManagerName: TrialPackageManagerName;\n\treadonly source: string;\n\treadonly installRoot: string;\n\t/** Logical tool command (npm/pnpm/bun/git), not the sandbox wrapper. */\n\treadonly command: string;\n\t/** Logical (unwrapped) args for the tool command. */\n\treadonly args: readonly string[];\n\treadonly lifecycleScripts: \"ignored\";\n\treadonly sandboxMode: SandboxMode;\n\treadonly sandboxWrapped: boolean;\n\treadonly sandboxRule: string;\n\treadonly networkMode: NetworkMode;\n}\n\nexport type TrialRuntimePlan =\n\t| { readonly ok: false; readonly reason: string }\n\t| {\n\t\t\treadonly ok: true;\n\t\t\treadonly executor: TrialExecutorInstruction;\n\t\t\treadonly cleanup: TrialCleanupPlan;\n\t\t\treadonly audit: TrialAuditRecord;\n\t  };\n\nconst SOURCE_CREDENTIAL_PATTERN = /(https?:\\/\\/)([^\\s/@]+@)/gi;\nconst SOURCE_TOKEN_QUERY_PATTERN = /([?&](?:access_token|auth|key|password|token)=)[^&#]+/gi;\n\nfunction redactTrialSource(source: string): string {\n\treturn source\n\t\t.replace(SOURCE_CREDENTIAL_PATTERN, \"$1<redacted>@\")\n\t\t.replace(SOURCE_TOKEN_QUERY_PATTERN, \"$1<redacted>\");\n}\n\nfunction redactTrialArgs(args: readonly string[]): string[] {\n\treturn args.map((arg) => redactTrialSource(arg));\n}\n\n/**\n * Validate a trial install request and shape it into executor/cleanup/audit\n * artifacts. Pure and deterministic: identical inputs always produce identical\n * output, and no side effects are performed.\n */\nexport function createTrialRuntimePlan(input: PackageTrialInstallInput): TrialRuntimePlan {\n\tconst plan = planPackageTrialInstall(input);\n\tif (!plan.ok) {\n\t\treturn { ok: false, reason: plan.reason };\n\t}\n\n\tconst sandbox = plan.sandbox;\n\tif (!sandbox.allowed) {\n\t\t// Defensive: planPackageTrialInstall only returns ok when the sandbox is allowed.\n\t\treturn { ok: false, reason: `[${sandbox.rule}] ${sandbox.reason}` };\n\t}\n\n\tconst executor: TrialExecutorInstruction = {\n\t\tcommand: sandbox.argv[0],\n\t\targs: sandbox.argv.slice(1),\n\t\tcwd: sandbox.cwd,\n\t\tenv: sandbox.env,\n\t\twrapped: sandbox.wrapped,\n\t\tlifecycleScripts: plan.lifecycleScripts,\n\t};\n\n\tconst cleanup: TrialCleanupPlan = {\n\t\tinstallRoot: input.installRoot,\n\t\tremovePaths: [input.installRoot],\n\t\trecursive: true,\n\t\tforce: true,\n\t\treason: \"ephemeral-trial\",\n\t};\n\n\tconst audit: TrialAuditRecord = {\n\t\tkind: plan.kind,\n\t\tpackageManagerName: input.packageManagerName,\n\t\tsource: redactTrialSource(input.source),\n\t\tinstallRoot: input.installRoot,\n\t\tcommand: plan.command,\n\t\targs: redactTrialArgs(plan.args),\n\t\tlifecycleScripts: plan.lifecycleScripts,\n\t\tsandboxMode: input.policy.mode,\n\t\tsandboxWrapped: sandbox.wrapped,\n\t\tsandboxRule: sandbox.rule,\n\t\tnetworkMode: input.policy.network.mode,\n\t};\n\n\treturn { ok: true, executor, cleanup, audit };\n}\n"]}

package/dist/core/package-trial-sandbox.d.ts

@@ -1,27 +0,0 @@
-import { type SandboxBackendStatus, type SandboxPathResolver, type SandboxPolicy } from "./sandbox/policy.ts";
-import { type SandboxedSpawnRequest } from "./sandbox/spawn.ts";
-export type TrialPackageManagerName = "npm" | "pnpm" | "bun";
-export type TrialInstallKind = "npm" | "git";
-export interface PackageTrialInstallInput {
-    readonly source: string;
-    readonly installRoot: string;
-    readonly packageManagerName: TrialPackageManagerName;
-    readonly packageManagerCommand?: readonly [string, ...string[]];
-    readonly policy: SandboxPolicy;
-    readonly backend: SandboxBackendStatus;
-    readonly resolver?: SandboxPathResolver;
-    readonly env?: NodeJS.ProcessEnv;
-}
-export type PackageTrialInstallPlan = {
-    readonly ok: false;
-    readonly reason: string;
-} | {
-    readonly ok: true;
-    readonly kind: TrialInstallKind;
-    readonly command: string;
-    readonly args: readonly string[];
-    readonly lifecycleScripts: "ignored";
-    readonly sandbox: SandboxedSpawnRequest;
-};
-export declare function planPackageTrialInstall(input: PackageTrialInstallInput): PackageTrialInstallPlan;
-//# sourceMappingURL=package-trial-sandbox.d.ts.map

package/dist/core/package-trial-sandbox.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-trial-sandbox.d.ts","sourceRoot":"","sources":["../../src/core/package-trial-sandbox.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA8B,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE5F,MAAM,MAAM,uBAAuB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE7C,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IACrD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC;AAED,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACvC,CAAC;AAoFL,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,wBAAwB,GAAG,uBAAuB,CAyChG","sourcesContent":["import { validateExactNpmVersion, validateGitRef, validateNpmPackageName } from \"./package-procurement.ts\";\nimport { resolveSandboxPath } from \"./sandbox/path-resolver.ts\";\nimport {\n\tdecidePathAccess,\n\ttype SandboxBackendStatus,\n\ttype SandboxPathResolver,\n\ttype SandboxPolicy,\n} from \"./sandbox/policy.ts\";\nimport { buildSandboxedSpawnRequest, type SandboxedSpawnRequest } from \"./sandbox/spawn.ts\";\n\nexport type TrialPackageManagerName = \"npm\" | \"pnpm\" | \"bun\";\nexport type TrialInstallKind = \"npm\" | \"git\";\n\nexport interface PackageTrialInstallInput {\n\treadonly source: string;\n\treadonly installRoot: string;\n\treadonly packageManagerName: TrialPackageManagerName;\n\treadonly packageManagerCommand?: readonly [string, ...string[]];\n\treadonly policy: SandboxPolicy;\n\treadonly backend: SandboxBackendStatus;\n\treadonly resolver?: SandboxPathResolver;\n\treadonly env?: NodeJS.ProcessEnv;\n}\n\nexport type PackageTrialInstallPlan =\n\t| { readonly ok: false; readonly reason: string }\n\t| {\n\t\t\treadonly ok: true;\n\t\t\treadonly kind: TrialInstallKind;\n\t\t\treadonly command: string;\n\t\t\treadonly args: readonly string[];\n\t\t\treadonly lifecycleScripts: \"ignored\";\n\t\t\treadonly sandbox: SandboxedSpawnRequest;\n\t  };\n\ninterface ParsedNpmTrialSource {\n\treadonly kind: \"npm\";\n\treadonly spec: string;\n\treadonly name: string;\n\treadonly version: string;\n}\n\ninterface ParsedGitTrialSource {\n\treadonly kind: \"git\";\n\treadonly repo: string;\n\treadonly ref: string;\n\treadonly commit: string;\n}\n\ntype ParsedTrialSource = ParsedNpmTrialSource | ParsedGitTrialSource;\n\nfunction parseNpmTrialSource(source: string): ParsedNpmTrialSource | string {\n\tconst spec = source.slice(\"npm:\".length).trim();\n\tconst versionSeparator = spec.lastIndexOf(\"@\");\n\tif (versionSeparator <= 0) return \"npm trial source requires an exact version\";\n\tconst name = spec.slice(0, versionSeparator);\n\tconst version = spec.slice(versionSeparator + 1);\n\tconst nameVerdict = validateNpmPackageName(name);\n\tif (!nameVerdict.ok) return nameVerdict.message;\n\tconst versionVerdict = validateExactNpmVersion(version);\n\tif (!versionVerdict.ok) return versionVerdict.message;\n\treturn { kind: \"npm\", spec, name: nameVerdict.name, version: versionVerdict.version };\n}\n\nfunction parseGitTrialSource(source: string): ParsedGitTrialSource | string {\n\tconst value = source.slice(\"git:\".length).trim();\n\tconst hashIndex = value.lastIndexOf(\"#\");\n\tif (hashIndex <= 0 || hashIndex === value.length - 1) {\n\t\treturn \"git trial source requires a full commit ref after #\";\n\t}\n\tconst repo = value.slice(0, hashIndex);\n\tconst ref = value.slice(hashIndex + 1);\n\tconst refVerdict = validateGitRef(ref);\n\tif (!refVerdict.ok) return refVerdict.message;\n\treturn { kind: \"git\", repo, ref: refVerdict.ref, commit: refVerdict.commit };\n}\n\nfunction parseTrialSource(source: string): ParsedTrialSource | string {\n\tif (source.startsWith(\"npm:\")) return parseNpmTrialSource(source);\n\tif (source.startsWith(\"git:\")) return parseGitTrialSource(source);\n\treturn \"trial source must start with npm: or git:\";\n}\n\nfunction npmTrialArgs(manager: TrialPackageManagerName, spec: string, installRoot: string): string[] {\n\tif (manager === \"bun\") {\n\t\treturn [\"install\", spec, \"--cwd\", installRoot, \"--omit=peer\", \"--ignore-scripts\"];\n\t}\n\tif (manager === \"pnpm\") {\n\t\treturn [\n\t\t\t\"install\",\n\t\t\tspec,\n\t\t\t\"--prefix\",\n\t\t\tinstallRoot,\n\t\t\t\"--config.auto-install-peers=false\",\n\t\t\t\"--config.strict-peer-dependencies=false\",\n\t\t\t\"--config.strict-dep-builds=false\",\n\t\t\t\"--ignore-scripts\",\n\t\t];\n\t}\n\treturn [\"install\", spec, \"--prefix\", installRoot, \"--legacy-peer-deps\", \"--ignore-scripts\"];\n}\n\nfunction buildCommand(\n\tparsed: ParsedNpmTrialSource,\n\tmanager: TrialPackageManagerName,\n\tinstallRoot: string,\n): {\n\tcommand: string;\n\targs: string[];\n} {\n\treturn { command: manager, args: npmTrialArgs(manager, parsed.spec, installRoot) };\n}\n\nfunction resolveForTrialPolicy(input: PackageTrialInstallInput): SandboxPathResolver {\n\treturn input.resolver ?? ((requestPath) => resolveSandboxPath(input.policy.filesystem.root, requestPath));\n}\n\nexport function planPackageTrialInstall(input: PackageTrialInstallInput): PackageTrialInstallPlan {\n\tconst parsed = parseTrialSource(input.source);\n\tif (typeof parsed === \"string\") {\n\t\treturn { ok: false, reason: parsed };\n\t}\n\n\tif (parsed.kind === \"git\") {\n\t\treturn {\n\t\t\tok: false,\n\t\t\treason: \"temporary git trial installs require a shell-free multi-step executor before clone/checkout can run\",\n\t\t};\n\t}\n\n\tconst resolver = resolveForTrialPolicy(input);\n\tconst writeDecision = decidePathAccess(input.policy, { kind: \"write\", path: input.installRoot }, resolver);\n\tif (!writeDecision.allowed) {\n\t\treturn { ok: false, reason: `[${writeDecision.rule}] ${writeDecision.reason}` };\n\t}\n\n\tconst { command, args } = buildCommand(parsed, input.packageManagerName, input.installRoot);\n\tconst packageManagerArgv = input.packageManagerCommand ?? [command];\n\tconst sandbox = buildSandboxedSpawnRequest({\n\t\targv: [...packageManagerArgv, ...args],\n\t\tcwd: input.installRoot,\n\t\tenv: input.env ?? {},\n\t\tpolicy: input.policy,\n\t\tbackend: input.backend,\n\t\tresolver,\n\t});\n\tif (!sandbox.allowed) {\n\t\treturn { ok: false, reason: `[${sandbox.rule}] ${sandbox.reason}` };\n\t}\n\n\treturn {\n\t\tok: true,\n\t\tkind: parsed.kind,\n\t\tcommand,\n\t\targs,\n\t\tlifecycleScripts: \"ignored\",\n\t\tsandbox,\n\t};\n}\n"]}