open-multi-agent-kit 0.95.0 → 0.95.2

package/dist/core/mcp/tools.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Adapt an MCP tool into a harness `ToolDefinition`.
+ *
+ * Two things make this small:
+ * - `validateToolArguments` already accepts a plain JSON Schema, so an MCP
+ *   `inputSchema` is passed straight through instead of being re-modelled in
+ *   TypeBox.
+ * - MCP content blocks are already text/image, which is exactly what the
+ *   harness renders.
+ *
+ * Naming: tools are exposed as `<server>__<tool>` so two servers can ship a
+ * `search` without colliding, and so a model can tell where a tool came from.
+ */
+import type { ImageContent, TextContent } from "omk-ai";
+import type { TSchema } from "typebox";
+import type { ToolDefinition } from "../extensions/types.ts";
+import type { McpClient, McpContentBlock, McpToolSchema } from "./client.ts";
+/** Tool-name separator between the server label and the server's own tool name. */
+export declare const MCP_TOOL_NAME_SEPARATOR = "__";
+/** Providers reject long tool names; this is the common ceiling. */
+export declare const MAX_TOOL_NAME_LENGTH = 64;
+export interface McpToolDetails {
+    readonly server: string;
+    readonly tool: string;
+    readonly isError: boolean;
+    readonly structuredContent?: unknown;
+}
+/** Reduce an arbitrary label to the character set providers accept for tool names. */
+export declare function sanitizeToolNameSegment(segment: string): string;
+/**
+ * Build the exposed tool name. Over-long names keep the server prefix and
+ * truncate the tool segment, because the prefix is what disambiguates.
+ */
+export declare function buildMcpToolName(serverName: string, toolName: string): string;
+/** Map MCP content blocks onto the harness content union, dropping unrenderable kinds. */
+export declare function mapMcpContent(blocks: readonly McpContentBlock[]): (TextContent | ImageContent)[];
+export interface CreateMcpToolDefinitionOptions {
+    /** Per-call deadline. Falls back to the client's default. */
+    readonly callTimeoutMs?: number;
+}
+/**
+ * Wrap one MCP tool. The returned definition executes in `parallel` mode: MCP
+ * tools declare no filesystem claims, so the DAG scheduler cannot prove a
+ * conflict and must not serialize them by default.
+ */
+export declare function createMcpToolDefinition(serverName: string, client: McpClient, tool: McpToolSchema, options?: CreateMcpToolDefinitionOptions): ToolDefinition<TSchema, McpToolDetails>;
+//# sourceMappingURL=tools.d.ts.map

package/dist/core/mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE7E,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAKvC,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ7E;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,CAsBhG;AAED,MAAM,WAAW,8BAA8B;IAC9C,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,aAAa,EACnB,OAAO,GAAE,8BAAmC,GAC1C,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAiCzC","sourcesContent":["/**\n * Adapt an MCP tool into a harness `ToolDefinition`.\n *\n * Two things make this small:\n * - `validateToolArguments` already accepts a plain JSON Schema, so an MCP\n *   `inputSchema` is passed straight through instead of being re-modelled in\n *   TypeBox.\n * - MCP content blocks are already text/image, which is exactly what the\n *   harness renders.\n *\n * Naming: tools are exposed as `<server>__<tool>` so two servers can ship a\n * `search` without colliding, and so a model can tell where a tool came from.\n */\n\nimport type { ImageContent, TextContent } from \"omk-ai\";\nimport type { TSchema } from \"typebox\";\nimport type { AgentToolResult, ToolDefinition } from \"../extensions/types.ts\";\nimport type { McpClient, McpContentBlock, McpToolSchema } from \"./client.ts\";\n\n/** Tool-name separator between the server label and the server's own tool name. */\nexport const MCP_TOOL_NAME_SEPARATOR = \"__\";\n/** Providers reject long tool names; this is the common ceiling. */\nexport const MAX_TOOL_NAME_LENGTH = 64;\n\n/** Empty-object schema used when a server omits `inputSchema`. */\nconst EMPTY_OBJECT_SCHEMA = { type: \"object\", properties: {} } as const;\n\nexport interface McpToolDetails {\n\treadonly server: string;\n\treadonly tool: string;\n\treadonly isError: boolean;\n\treadonly structuredContent?: unknown;\n}\n\n/** Reduce an arbitrary label to the character set providers accept for tool names. */\nexport function sanitizeToolNameSegment(segment: string): string {\n\treturn segment.replace(/[^a-zA-Z0-9_-]/gu, \"_\").replace(/_{2,}/gu, \"_\");\n}\n\n/**\n * Build the exposed tool name. Over-long names keep the server prefix and\n * truncate the tool segment, because the prefix is what disambiguates.\n */\nexport function buildMcpToolName(serverName: string, toolName: string): string {\n\tconst server = sanitizeToolNameSegment(serverName);\n\tconst tool = sanitizeToolNameSegment(toolName);\n\tconst full = `${server}${MCP_TOOL_NAME_SEPARATOR}${tool}`;\n\tif (full.length <= MAX_TOOL_NAME_LENGTH) return full;\n\tconst room = MAX_TOOL_NAME_LENGTH - server.length - MCP_TOOL_NAME_SEPARATOR.length;\n\tif (room <= 0) return full.slice(0, MAX_TOOL_NAME_LENGTH);\n\treturn `${server}${MCP_TOOL_NAME_SEPARATOR}${tool.slice(0, room)}`;\n}\n\n/** Map MCP content blocks onto the harness content union, dropping unrenderable kinds. */\nexport function mapMcpContent(blocks: readonly McpContentBlock[]): (TextContent | ImageContent)[] {\n\tconst out: (TextContent | ImageContent)[] = [];\n\tfor (const block of blocks) {\n\t\tif (block.type === \"text\" && typeof block.text === \"string\") {\n\t\t\tout.push({ type: \"text\", text: block.text });\n\t\t\tcontinue;\n\t\t}\n\t\tif (block.type === \"image\" && typeof block.data === \"string\" && typeof block.mimeType === \"string\") {\n\t\t\tout.push({ type: \"image\", data: block.data, mimeType: block.mimeType });\n\t\t\tcontinue;\n\t\t}\n\t\tif (block.type === \"resource\" && typeof block.resource === \"object\" && block.resource !== null) {\n\t\t\tconst resource = block.resource as Record<string, unknown>;\n\t\t\tif (typeof resource.text === \"string\") {\n\t\t\t\tout.push({ type: \"text\", text: resource.text });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\t// Unknown block kinds are summarized rather than dropped silently.\n\t\tout.push({ type: \"text\", text: `[unsupported MCP content block: ${String(block.type)}]` });\n\t}\n\treturn out;\n}\n\nexport interface CreateMcpToolDefinitionOptions {\n\t/** Per-call deadline. Falls back to the client's default. */\n\treadonly callTimeoutMs?: number;\n}\n\n/**\n * Wrap one MCP tool. The returned definition executes in `parallel` mode: MCP\n * tools declare no filesystem claims, so the DAG scheduler cannot prove a\n * conflict and must not serialize them by default.\n */\nexport function createMcpToolDefinition(\n\tserverName: string,\n\tclient: McpClient,\n\ttool: McpToolSchema,\n\toptions: CreateMcpToolDefinitionOptions = {},\n): ToolDefinition<TSchema, McpToolDetails> {\n\tconst exposedName = buildMcpToolName(serverName, tool.name);\n\tconst parameters = (tool.inputSchema ?? EMPTY_OBJECT_SCHEMA) as unknown as TSchema;\n\n\treturn {\n\t\tname: exposedName,\n\t\tlabel: tool.title ?? tool.name,\n\t\tdescription: tool.description ?? `MCP tool \"${tool.name}\" from server \"${serverName}\".`,\n\t\tparameters,\n\t\texecutionMode: \"parallel\",\n\t\tasync execute(_toolCallId, params): Promise<AgentToolResult<McpToolDetails>> {\n\t\t\ttry {\n\t\t\t\tconst result = await client.callTool(tool.name, params, options.callTimeoutMs);\n\t\t\t\tconst content = mapMcpContent(result.content);\n\t\t\t\treturn {\n\t\t\t\t\tcontent: content.length > 0 ? content : [{ type: \"text\", text: \"(no content)\" }],\n\t\t\t\t\tdetails: {\n\t\t\t\t\t\tserver: serverName,\n\t\t\t\t\t\ttool: tool.name,\n\t\t\t\t\t\tisError: result.isError,\n\t\t\t\t\t\tstructuredContent: result.structuredContent,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\t// A dead or hung server degrades this one tool call, not the turn.\n\t\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\t\treturn {\n\t\t\t\t\tcontent: [{ type: \"text\", text: message }],\n\t\t\t\t\tdetails: { server: serverName, tool: tool.name, isError: true },\n\t\t\t\t};\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/core/mcp/tools.js

@@ -0,0 +1,102 @@
+/**
+ * Adapt an MCP tool into a harness `ToolDefinition`.
+ *
+ * Two things make this small:
+ * - `validateToolArguments` already accepts a plain JSON Schema, so an MCP
+ *   `inputSchema` is passed straight through instead of being re-modelled in
+ *   TypeBox.
+ * - MCP content blocks are already text/image, which is exactly what the
+ *   harness renders.
+ *
+ * Naming: tools are exposed as `<server>__<tool>` so two servers can ship a
+ * `search` without colliding, and so a model can tell where a tool came from.
+ */
+/** Tool-name separator between the server label and the server's own tool name. */
+export const MCP_TOOL_NAME_SEPARATOR = "__";
+/** Providers reject long tool names; this is the common ceiling. */
+export const MAX_TOOL_NAME_LENGTH = 64;
+/** Empty-object schema used when a server omits `inputSchema`. */
+const EMPTY_OBJECT_SCHEMA = { type: "object", properties: {} };
+/** Reduce an arbitrary label to the character set providers accept for tool names. */
+export function sanitizeToolNameSegment(segment) {
+    return segment.replace(/[^a-zA-Z0-9_-]/gu, "_").replace(/_{2,}/gu, "_");
+}
+/**
+ * Build the exposed tool name. Over-long names keep the server prefix and
+ * truncate the tool segment, because the prefix is what disambiguates.
+ */
+export function buildMcpToolName(serverName, toolName) {
+    const server = sanitizeToolNameSegment(serverName);
+    const tool = sanitizeToolNameSegment(toolName);
+    const full = `${server}${MCP_TOOL_NAME_SEPARATOR}${tool}`;
+    if (full.length <= MAX_TOOL_NAME_LENGTH)
+        return full;
+    const room = MAX_TOOL_NAME_LENGTH - server.length - MCP_TOOL_NAME_SEPARATOR.length;
+    if (room <= 0)
+        return full.slice(0, MAX_TOOL_NAME_LENGTH);
+    return `${server}${MCP_TOOL_NAME_SEPARATOR}${tool.slice(0, room)}`;
+}
+/** Map MCP content blocks onto the harness content union, dropping unrenderable kinds. */
+export function mapMcpContent(blocks) {
+    const out = [];
+    for (const block of blocks) {
+        if (block.type === "text" && typeof block.text === "string") {
+            out.push({ type: "text", text: block.text });
+            continue;
+        }
+        if (block.type === "image" && typeof block.data === "string" && typeof block.mimeType === "string") {
+            out.push({ type: "image", data: block.data, mimeType: block.mimeType });
+            continue;
+        }
+        if (block.type === "resource" && typeof block.resource === "object" && block.resource !== null) {
+            const resource = block.resource;
+            if (typeof resource.text === "string") {
+                out.push({ type: "text", text: resource.text });
+                continue;
+            }
+        }
+        // Unknown block kinds are summarized rather than dropped silently.
+        out.push({ type: "text", text: `[unsupported MCP content block: ${String(block.type)}]` });
+    }
+    return out;
+}
+/**
+ * Wrap one MCP tool. The returned definition executes in `parallel` mode: MCP
+ * tools declare no filesystem claims, so the DAG scheduler cannot prove a
+ * conflict and must not serialize them by default.
+ */
+export function createMcpToolDefinition(serverName, client, tool, options = {}) {
+    const exposedName = buildMcpToolName(serverName, tool.name);
+    const parameters = (tool.inputSchema ?? EMPTY_OBJECT_SCHEMA);
+    return {
+        name: exposedName,
+        label: tool.title ?? tool.name,
+        description: tool.description ?? `MCP tool "${tool.name}" from server "${serverName}".`,
+        parameters,
+        executionMode: "parallel",
+        async execute(_toolCallId, params) {
+            try {
+                const result = await client.callTool(tool.name, params, options.callTimeoutMs);
+                const content = mapMcpContent(result.content);
+                return {
+                    content: content.length > 0 ? content : [{ type: "text", text: "(no content)" }],
+                    details: {
+                        server: serverName,
+                        tool: tool.name,
+                        isError: result.isError,
+                        structuredContent: result.structuredContent,
+                    },
+                };
+            }
+            catch (error) {
+                // A dead or hung server degrades this one tool call, not the turn.
+                const message = error instanceof Error ? error.message : String(error);
+                return {
+                    content: [{ type: "text", text: message }],
+                    details: { server: serverName, tool: tool.name, isError: true },
+                };
+            }
+        },
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/core/mcp/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/core/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,oEAAoE;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,kEAAkE;AAClE,MAAM,mBAAmB,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAW,CAAC;AASxE,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAU;IAChE,OAAO,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAAA,CACxE;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,QAAgB,EAAU;IAC9E,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,uBAAuB,GAAG,IAAI,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,oBAAoB,GAAG,MAAM,CAAC,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACnF,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1D,OAAO,GAAG,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,CACnE;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,MAAkC,EAAkC;IACjG,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxE,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChG,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAmC,CAAC;YAC3D,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChD,SAAS;YACV,CAAC;QACF,CAAC;QACD,mEAAmE;QACnE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC;AAAA,CACX;AAOD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACtC,UAAkB,EAClB,MAAiB,EACjB,IAAmB,EACnB,OAAO,GAAmC,EAAE,EACF;IAC1C,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAuB,CAAC;IAEnF,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;QAC9B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,aAAa,IAAI,CAAC,IAAI,kBAAkB,UAAU,IAAI;QACvF,UAAU;QACV,aAAa,EAAE,UAAU;QACzB,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAA4C;YAC5E,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC/E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9C,OAAO;oBACN,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;oBAChF,OAAO,EAAE;wBACR,MAAM,EAAE,UAAU;wBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;qBAC3C;iBACD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,mEAAmE;gBACnE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO;oBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBAC1C,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;iBAC/D,CAAC;YACH,CAAC;QAAA,CACD;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Adapt an MCP tool into a harness `ToolDefinition`.\n *\n * Two things make this small:\n * - `validateToolArguments` already accepts a plain JSON Schema, so an MCP\n *   `inputSchema` is passed straight through instead of being re-modelled in\n *   TypeBox.\n * - MCP content blocks are already text/image, which is exactly what the\n *   harness renders.\n *\n * Naming: tools are exposed as `<server>__<tool>` so two servers can ship a\n * `search` without colliding, and so a model can tell where a tool came from.\n */\n\nimport type { ImageContent, TextContent } from \"omk-ai\";\nimport type { TSchema } from \"typebox\";\nimport type { AgentToolResult, ToolDefinition } from \"../extensions/types.ts\";\nimport type { McpClient, McpContentBlock, McpToolSchema } from \"./client.ts\";\n\n/** Tool-name separator between the server label and the server's own tool name. */\nexport const MCP_TOOL_NAME_SEPARATOR = \"__\";\n/** Providers reject long tool names; this is the common ceiling. */\nexport const MAX_TOOL_NAME_LENGTH = 64;\n\n/** Empty-object schema used when a server omits `inputSchema`. */\nconst EMPTY_OBJECT_SCHEMA = { type: \"object\", properties: {} } as const;\n\nexport interface McpToolDetails {\n\treadonly server: string;\n\treadonly tool: string;\n\treadonly isError: boolean;\n\treadonly structuredContent?: unknown;\n}\n\n/** Reduce an arbitrary label to the character set providers accept for tool names. */\nexport function sanitizeToolNameSegment(segment: string): string {\n\treturn segment.replace(/[^a-zA-Z0-9_-]/gu, \"_\").replace(/_{2,}/gu, \"_\");\n}\n\n/**\n * Build the exposed tool name. Over-long names keep the server prefix and\n * truncate the tool segment, because the prefix is what disambiguates.\n */\nexport function buildMcpToolName(serverName: string, toolName: string): string {\n\tconst server = sanitizeToolNameSegment(serverName);\n\tconst tool = sanitizeToolNameSegment(toolName);\n\tconst full = `${server}${MCP_TOOL_NAME_SEPARATOR}${tool}`;\n\tif (full.length <= MAX_TOOL_NAME_LENGTH) return full;\n\tconst room = MAX_TOOL_NAME_LENGTH - server.length - MCP_TOOL_NAME_SEPARATOR.length;\n\tif (room <= 0) return full.slice(0, MAX_TOOL_NAME_LENGTH);\n\treturn `${server}${MCP_TOOL_NAME_SEPARATOR}${tool.slice(0, room)}`;\n}\n\n/** Map MCP content blocks onto the harness content union, dropping unrenderable kinds. */\nexport function mapMcpContent(blocks: readonly McpContentBlock[]): (TextContent | ImageContent)[] {\n\tconst out: (TextContent | ImageContent)[] = [];\n\tfor (const block of blocks) {\n\t\tif (block.type === \"text\" && typeof block.text === \"string\") {\n\t\t\tout.push({ type: \"text\", text: block.text });\n\t\t\tcontinue;\n\t\t}\n\t\tif (block.type === \"image\" && typeof block.data === \"string\" && typeof block.mimeType === \"string\") {\n\t\t\tout.push({ type: \"image\", data: block.data, mimeType: block.mimeType });\n\t\t\tcontinue;\n\t\t}\n\t\tif (block.type === \"resource\" && typeof block.resource === \"object\" && block.resource !== null) {\n\t\t\tconst resource = block.resource as Record<string, unknown>;\n\t\t\tif (typeof resource.text === \"string\") {\n\t\t\t\tout.push({ type: \"text\", text: resource.text });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\t// Unknown block kinds are summarized rather than dropped silently.\n\t\tout.push({ type: \"text\", text: `[unsupported MCP content block: ${String(block.type)}]` });\n\t}\n\treturn out;\n}\n\nexport interface CreateMcpToolDefinitionOptions {\n\t/** Per-call deadline. Falls back to the client's default. */\n\treadonly callTimeoutMs?: number;\n}\n\n/**\n * Wrap one MCP tool. The returned definition executes in `parallel` mode: MCP\n * tools declare no filesystem claims, so the DAG scheduler cannot prove a\n * conflict and must not serialize them by default.\n */\nexport function createMcpToolDefinition(\n\tserverName: string,\n\tclient: McpClient,\n\ttool: McpToolSchema,\n\toptions: CreateMcpToolDefinitionOptions = {},\n): ToolDefinition<TSchema, McpToolDetails> {\n\tconst exposedName = buildMcpToolName(serverName, tool.name);\n\tconst parameters = (tool.inputSchema ?? EMPTY_OBJECT_SCHEMA) as unknown as TSchema;\n\n\treturn {\n\t\tname: exposedName,\n\t\tlabel: tool.title ?? tool.name,\n\t\tdescription: tool.description ?? `MCP tool \"${tool.name}\" from server \"${serverName}\".`,\n\t\tparameters,\n\t\texecutionMode: \"parallel\",\n\t\tasync execute(_toolCallId, params): Promise<AgentToolResult<McpToolDetails>> {\n\t\t\ttry {\n\t\t\t\tconst result = await client.callTool(tool.name, params, options.callTimeoutMs);\n\t\t\t\tconst content = mapMcpContent(result.content);\n\t\t\t\treturn {\n\t\t\t\t\tcontent: content.length > 0 ? content : [{ type: \"text\", text: \"(no content)\" }],\n\t\t\t\t\tdetails: {\n\t\t\t\t\t\tserver: serverName,\n\t\t\t\t\t\ttool: tool.name,\n\t\t\t\t\t\tisError: result.isError,\n\t\t\t\t\t\tstructuredContent: result.structuredContent,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\t// A dead or hung server degrades this one tool call, not the turn.\n\t\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\t\treturn {\n\t\t\t\t\tcontent: [{ type: \"text\", text: message }],\n\t\t\t\t\tdetails: { server: serverName, tool: tool.name, isError: true },\n\t\t\t\t};\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/core/package-archive.d.ts

@@ -0,0 +1,3 @@
+/** Extract registry tarball files only. Links and special entries fail closed. */
+export declare function extractNpmPackageTarball(archivePath: string, destination: string): void;
+//# sourceMappingURL=package-archive.d.ts.map

package/dist/core/package-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-archive.d.ts","sourceRoot":"","sources":["../../src/core/package-archive.ts"],"names":[],"mappings":"AA2GA,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAwDvF","sourcesContent":["import {\n\tcloseSync,\n\tconstants,\n\texistsSync,\n\tlstatSync,\n\tmkdirSync,\n\topenSync,\n\treadFileSync,\n\trmSync,\n\twriteFileSync,\n} from \"node:fs\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { gunzipSync } from \"node:zlib\";\n\nconst TAR_BLOCK_BYTES = 512;\nconst MAX_ARCHIVE_BYTES = 64 * 1024 * 1024;\nconst MAX_EXPANDED_BYTES = 256 * 1024 * 1024;\nconst MAX_FILE_BYTES = 64 * 1024 * 1024;\nconst MAX_FILES = 10_000;\n\nfunction text(buffer: Buffer): string {\n\tconst end = buffer.indexOf(0);\n\treturn buffer.subarray(0, end === -1 ? buffer.length : end).toString(\"utf8\");\n}\n\nfunction octal(buffer: Buffer, label: string): number {\n\tconst value = text(buffer).trim();\n\tif (!/^[0-7]+$/u.test(value)) throw new Error(`Invalid tar ${label}`);\n\tconst parsed = Number.parseInt(value, 8);\n\tif (!Number.isSafeInteger(parsed) || parsed < 0) throw new Error(`Invalid tar ${label}`);\n\treturn parsed;\n}\n\nfunction checksum(header: Buffer): void {\n\tconst declared = octal(header.subarray(148, 156), \"checksum\");\n\tlet actual = 0;\n\tfor (let index = 0; index < header.length; index += 1) {\n\t\tactual += index >= 148 && index < 156 ? 0x20 : (header[index] ?? 0);\n\t}\n\tif (actual !== declared) throw new Error(\"Invalid tar checksum\");\n}\n\nfunction parsePax(payload: Buffer): Map<string, string> {\n\tconst fields = new Map<string, string>();\n\tlet offset = 0;\n\twhile (offset < payload.length) {\n\t\tconst space = payload.indexOf(0x20, offset);\n\t\tif (space < 0) throw new Error(\"Invalid tar PAX record\");\n\t\tconst lengthText = payload.subarray(offset, space).toString(\"ascii\");\n\t\tif (!/^\\d+$/u.test(lengthText)) throw new Error(\"Invalid tar PAX record length\");\n\t\tconst length = Number.parseInt(lengthText, 10);\n\t\tif (!Number.isSafeInteger(length) || length <= 0 || offset + length > payload.length) {\n\t\t\tthrow new Error(\"Invalid tar PAX record length\");\n\t\t}\n\t\tconst record = payload.subarray(space + 1, offset + length - 1).toString(\"utf8\");\n\t\tconst equals = record.indexOf(\"=\");\n\t\tif (equals > 0) fields.set(record.slice(0, equals), record.slice(equals + 1));\n\t\toffset += length;\n\t}\n\treturn fields;\n}\n\nfunction safePackagePath(rawPath: string): string[] {\n\tif (!rawPath || rawPath.includes(\"\\0\") || rawPath.includes(\"\\\\\") || rawPath.startsWith(\"/\")) {\n\t\tthrow new Error(\"Npm tarball contains an unsafe path\");\n\t}\n\tconst trimmed = rawPath.endsWith(\"/\") ? rawPath.slice(0, -1) : rawPath;\n\tconst segments = trimmed.split(\"/\");\n\tif (segments[0] !== \"package\") throw new Error(\"Npm tarball entries must stay under package/\");\n\tconst relativeSegments = segments.slice(1);\n\tif (relativeSegments.some((segment) => !segment || segment === \".\" || segment === \"..\")) {\n\t\tthrow new Error(\"Npm tarball contains an unsafe path\");\n\t}\n\treturn relativeSegments;\n}\n\nfunction assertInside(root: string, path: string): void {\n\tconst fromRoot = relative(root, path);\n\tif (!fromRoot || fromRoot === \"..\" || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot)) {\n\t\tthrow new Error(\"Npm tarball contains an unsafe path\");\n\t}\n}\n\nfunction ensureDirectory(root: string, segments: string[]): string {\n\tlet current = root;\n\tfor (const segment of segments) {\n\t\tcurrent = join(current, segment);\n\t\tif (!existsSync(current)) mkdirSync(current, { mode: 0o700 });\n\t\tconst stats = lstatSync(current);\n\t\tif (!stats.isDirectory() || stats.isSymbolicLink()) throw new Error(\"Npm tarball path is not a safe directory\");\n\t}\n\treturn current;\n}\n\nfunction writeExclusiveFile(path: string, content: Buffer): void {\n\tconst descriptor = openSync(\n\t\tpath,\n\t\tconstants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0),\n\t\t0o600,\n\t);\n\ttry {\n\t\twriteFileSync(descriptor, content);\n\t} finally {\n\t\tcloseSync(descriptor);\n\t}\n}\n\n/** Extract registry tarball files only. Links and special entries fail closed. */\nexport function extractNpmPackageTarball(archivePath: string, destination: string): void {\n\tif (existsSync(destination)) throw new Error(\"Npm package extraction destination already exists\");\n\tconst archive = readFileSync(archivePath);\n\tif (archive.length > MAX_ARCHIVE_BYTES) throw new Error(\"Npm package archive exceeds the size limit\");\n\tconst root = resolve(destination);\n\tlet expanded: Buffer;\n\ttry {\n\t\texpanded = gunzipSync(archive, { maxOutputLength: MAX_EXPANDED_BYTES });\n\t} catch {\n\t\tthrow new Error(\"Npm package archive is not a bounded gzip stream\");\n\t}\n\tmkdirSync(root, { recursive: true, mode: 0o700 });\n\tlet offset = 0;\n\tlet files = 0;\n\tlet nextPath: string | undefined;\n\ttry {\n\t\twhile (offset + TAR_BLOCK_BYTES <= expanded.length) {\n\t\t\tconst header = expanded.subarray(offset, offset + TAR_BLOCK_BYTES);\n\t\t\toffset += TAR_BLOCK_BYTES;\n\t\t\tif (header.every((byte) => byte === 0)) break;\n\t\t\tchecksum(header);\n\t\t\tconst size = octal(header.subarray(124, 136), \"entry size\");\n\t\t\tif (size > MAX_FILE_BYTES || offset + size > expanded.length)\n\t\t\t\tthrow new Error(\"Npm tarball entry exceeds the size limit\");\n\t\t\tconst payload = expanded.subarray(offset, offset + size);\n\t\t\toffset += Math.ceil(size / TAR_BLOCK_BYTES) * TAR_BLOCK_BYTES;\n\t\t\tconst type = String.fromCharCode(header[156] ?? 0);\n\t\t\tconst headerPath = [text(header.subarray(345, 500)), text(header.subarray(0, 100))].filter(Boolean).join(\"/\");\n\t\t\tif (type === \"x\") {\n\t\t\t\tnextPath = parsePax(payload).get(\"path\") ?? nextPath;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (type === \"g\") continue;\n\t\t\tif (type === \"L\") {\n\t\t\t\tnextPath = text(payload).replace(/\\n$/u, \"\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst segments = safePackagePath(nextPath ?? headerPath);\n\t\t\tnextPath = undefined;\n\t\t\tif (segments.length === 0) continue;\n\t\t\tconst path = resolve(root, ...segments);\n\t\t\tassertInside(root, path);\n\t\t\tif (type === \"5\") {\n\t\t\t\tensureDirectory(root, segments);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (type !== \"0\" && type !== \"\\0\") throw new Error(`Npm tarball contains unsupported entry type ${type}`);\n\t\t\tfiles += 1;\n\t\t\tif (files > MAX_FILES) throw new Error(\"Npm package contains too many files\");\n\t\t\tensureDirectory(root, segments.slice(0, -1));\n\t\t\twriteExclusiveFile(path, payload);\n\t\t}\n\t} catch (error) {\n\t\trmSync(root, { recursive: true, force: true });\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/core/package-archive.js

@@ -0,0 +1,161 @@
+import { closeSync, constants, existsSync, lstatSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync, } from "node:fs";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { gunzipSync } from "node:zlib";
+const TAR_BLOCK_BYTES = 512;
+const MAX_ARCHIVE_BYTES = 64 * 1024 * 1024;
+const MAX_EXPANDED_BYTES = 256 * 1024 * 1024;
+const MAX_FILE_BYTES = 64 * 1024 * 1024;
+const MAX_FILES = 10_000;
+function text(buffer) {
+    const end = buffer.indexOf(0);
+    return buffer.subarray(0, end === -1 ? buffer.length : end).toString("utf8");
+}
+function octal(buffer, label) {
+    const value = text(buffer).trim();
+    if (!/^[0-7]+$/u.test(value))
+        throw new Error(`Invalid tar ${label}`);
+    const parsed = Number.parseInt(value, 8);
+    if (!Number.isSafeInteger(parsed) || parsed < 0)
+        throw new Error(`Invalid tar ${label}`);
+    return parsed;
+}
+function checksum(header) {
+    const declared = octal(header.subarray(148, 156), "checksum");
+    let actual = 0;
+    for (let index = 0; index < header.length; index += 1) {
+        actual += index >= 148 && index < 156 ? 0x20 : (header[index] ?? 0);
+    }
+    if (actual !== declared)
+        throw new Error("Invalid tar checksum");
+}
+function parsePax(payload) {
+    const fields = new Map();
+    let offset = 0;
+    while (offset < payload.length) {
+        const space = payload.indexOf(0x20, offset);
+        if (space < 0)
+            throw new Error("Invalid tar PAX record");
+        const lengthText = payload.subarray(offset, space).toString("ascii");
+        if (!/^\d+$/u.test(lengthText))
+            throw new Error("Invalid tar PAX record length");
+        const length = Number.parseInt(lengthText, 10);
+        if (!Number.isSafeInteger(length) || length <= 0 || offset + length > payload.length) {
+            throw new Error("Invalid tar PAX record length");
+        }
+        const record = payload.subarray(space + 1, offset + length - 1).toString("utf8");
+        const equals = record.indexOf("=");
+        if (equals > 0)
+            fields.set(record.slice(0, equals), record.slice(equals + 1));
+        offset += length;
+    }
+    return fields;
+}
+function safePackagePath(rawPath) {
+    if (!rawPath || rawPath.includes("\0") || rawPath.includes("\\") || rawPath.startsWith("/")) {
+        throw new Error("Npm tarball contains an unsafe path");
+    }
+    const trimmed = rawPath.endsWith("/") ? rawPath.slice(0, -1) : rawPath;
+    const segments = trimmed.split("/");
+    if (segments[0] !== "package")
+        throw new Error("Npm tarball entries must stay under package/");
+    const relativeSegments = segments.slice(1);
+    if (relativeSegments.some((segment) => !segment || segment === "." || segment === "..")) {
+        throw new Error("Npm tarball contains an unsafe path");
+    }
+    return relativeSegments;
+}
+function assertInside(root, path) {
+    const fromRoot = relative(root, path);
+    if (!fromRoot || fromRoot === ".." || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot)) {
+        throw new Error("Npm tarball contains an unsafe path");
+    }
+}
+function ensureDirectory(root, segments) {
+    let current = root;
+    for (const segment of segments) {
+        current = join(current, segment);
+        if (!existsSync(current))
+            mkdirSync(current, { mode: 0o700 });
+        const stats = lstatSync(current);
+        if (!stats.isDirectory() || stats.isSymbolicLink())
+            throw new Error("Npm tarball path is not a safe directory");
+    }
+    return current;
+}
+function writeExclusiveFile(path, content) {
+    const descriptor = openSync(path, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0), 0o600);
+    try {
+        writeFileSync(descriptor, content);
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
+/** Extract registry tarball files only. Links and special entries fail closed. */
+export function extractNpmPackageTarball(archivePath, destination) {
+    if (existsSync(destination))
+        throw new Error("Npm package extraction destination already exists");
+    const archive = readFileSync(archivePath);
+    if (archive.length > MAX_ARCHIVE_BYTES)
+        throw new Error("Npm package archive exceeds the size limit");
+    const root = resolve(destination);
+    let expanded;
+    try {
+        expanded = gunzipSync(archive, { maxOutputLength: MAX_EXPANDED_BYTES });
+    }
+    catch {
+        throw new Error("Npm package archive is not a bounded gzip stream");
+    }
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    let offset = 0;
+    let files = 0;
+    let nextPath;
+    try {
+        while (offset + TAR_BLOCK_BYTES <= expanded.length) {
+            const header = expanded.subarray(offset, offset + TAR_BLOCK_BYTES);
+            offset += TAR_BLOCK_BYTES;
+            if (header.every((byte) => byte === 0))
+                break;
+            checksum(header);
+            const size = octal(header.subarray(124, 136), "entry size");
+            if (size > MAX_FILE_BYTES || offset + size > expanded.length)
+                throw new Error("Npm tarball entry exceeds the size limit");
+            const payload = expanded.subarray(offset, offset + size);
+            offset += Math.ceil(size / TAR_BLOCK_BYTES) * TAR_BLOCK_BYTES;
+            const type = String.fromCharCode(header[156] ?? 0);
+            const headerPath = [text(header.subarray(345, 500)), text(header.subarray(0, 100))].filter(Boolean).join("/");
+            if (type === "x") {
+                nextPath = parsePax(payload).get("path") ?? nextPath;
+                continue;
+            }
+            if (type === "g")
+                continue;
+            if (type === "L") {
+                nextPath = text(payload).replace(/\n$/u, "");
+                continue;
+            }
+            const segments = safePackagePath(nextPath ?? headerPath);
+            nextPath = undefined;
+            if (segments.length === 0)
+                continue;
+            const path = resolve(root, ...segments);
+            assertInside(root, path);
+            if (type === "5") {
+                ensureDirectory(root, segments);
+                continue;
+            }
+            if (type !== "0" && type !== "\0")
+                throw new Error(`Npm tarball contains unsupported entry type ${type}`);
+            files += 1;
+            if (files > MAX_FILES)
+                throw new Error("Npm package contains too many files");
+            ensureDirectory(root, segments.slice(0, -1));
+            writeExclusiveFile(path, payload);
+        }
+    }
+    catch (error) {
+        rmSync(root, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=package-archive.js.map

package/dist/core/package-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-archive.js","sourceRoot":"","sources":["../../src/core/package-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,SAAS,IAAI,CAAC,MAAc,EAAU;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,CAC7E;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,KAAa,EAAU;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,QAAQ,CAAC,MAAc,EAAQ;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAAA,CACjE;AAED,SAAS,QAAQ,CAAC,OAAe,EAAuB;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,eAAe,CAAC,OAAe,EAAY;IACnD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC/F,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,gBAAgB,CAAC;AAAA,CACxB;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY,EAAQ;IACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;AAAA,CACD;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,QAAkB,EAAU;IAClE,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAe,EAAQ;IAChE,MAAM,UAAU,GAAG,QAAQ,CAC1B,IAAI,EACJ,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EACvF,KAAK,CACL,CAAC;IACF,IAAI,CAAC;QACJ,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;AAAA,CACD;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,WAAmB,EAAQ;IACxF,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACrE,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,MAAM,GAAG,eAAe,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC;YACnE,MAAM,IAAI,eAAe,CAAC;YAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;gBAAE,MAAM;YAC9C,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;YAC5D,IAAI,IAAI,GAAG,cAAc,IAAI,MAAM,GAAG,IAAI,GAAG,QAAQ,CAAC,MAAM;gBAC3D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,GAAG,eAAe,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9G,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAClB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;gBACrD,SAAS;YACV,CAAC;YACD,IAAI,IAAI,KAAK,GAAG;gBAAE,SAAS;YAC3B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAClB,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7C,SAAS;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;YACzD,QAAQ,GAAG,SAAS,CAAC;YACrB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;YACxC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAClB,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChC,SAAS;YACV,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;YAC1G,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC9E,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD","sourcesContent":["import {\n\tcloseSync,\n\tconstants,\n\texistsSync,\n\tlstatSync,\n\tmkdirSync,\n\topenSync,\n\treadFileSync,\n\trmSync,\n\twriteFileSync,\n} from \"node:fs\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { gunzipSync } from \"node:zlib\";\n\nconst TAR_BLOCK_BYTES = 512;\nconst MAX_ARCHIVE_BYTES = 64 * 1024 * 1024;\nconst MAX_EXPANDED_BYTES = 256 * 1024 * 1024;\nconst MAX_FILE_BYTES = 64 * 1024 * 1024;\nconst MAX_FILES = 10_000;\n\nfunction text(buffer: Buffer): string {\n\tconst end = buffer.indexOf(0);\n\treturn buffer.subarray(0, end === -1 ? buffer.length : end).toString(\"utf8\");\n}\n\nfunction octal(buffer: Buffer, label: string): number {\n\tconst value = text(buffer).trim();\n\tif (!/^[0-7]+$/u.test(value)) throw new Error(`Invalid tar ${label}`);\n\tconst parsed = Number.parseInt(value, 8);\n\tif (!Number.isSafeInteger(parsed) || parsed < 0) throw new Error(`Invalid tar ${label}`);\n\treturn parsed;\n}\n\nfunction checksum(header: Buffer): void {\n\tconst declared = octal(header.subarray(148, 156), \"checksum\");\n\tlet actual = 0;\n\tfor (let index = 0; index < header.length; index += 1) {\n\t\tactual += index >= 148 && index < 156 ? 0x20 : (header[index] ?? 0);\n\t}\n\tif (actual !== declared) throw new Error(\"Invalid tar checksum\");\n}\n\nfunction parsePax(payload: Buffer): Map<string, string> {\n\tconst fields = new Map<string, string>();\n\tlet offset = 0;\n\twhile (offset < payload.length) {\n\t\tconst space = payload.indexOf(0x20, offset);\n\t\tif (space < 0) throw new Error(\"Invalid tar PAX record\");\n\t\tconst lengthText = payload.subarray(offset, space).toString(\"ascii\");\n\t\tif (!/^\\d+$/u.test(lengthText)) throw new Error(\"Invalid tar PAX record length\");\n\t\tconst length = Number.parseInt(lengthText, 10);\n\t\tif (!Number.isSafeInteger(length) || length <= 0 || offset + length > payload.length) {\n\t\t\tthrow new Error(\"Invalid tar PAX record length\");\n\t\t}\n\t\tconst record = payload.subarray(space + 1, offset + length - 1).toString(\"utf8\");\n\t\tconst equals = record.indexOf(\"=\");\n\t\tif (equals > 0) fields.set(record.slice(0, equals), record.slice(equals + 1));\n\t\toffset += length;\n\t}\n\treturn fields;\n}\n\nfunction safePackagePath(rawPath: string): string[] {\n\tif (!rawPath || rawPath.includes(\"\\0\") || rawPath.includes(\"\\\\\") || rawPath.startsWith(\"/\")) {\n\t\tthrow new Error(\"Npm tarball contains an unsafe path\");\n\t}\n\tconst trimmed = rawPath.endsWith(\"/\") ? rawPath.slice(0, -1) : rawPath;\n\tconst segments = trimmed.split(\"/\");\n\tif (segments[0] !== \"package\") throw new Error(\"Npm tarball entries must stay under package/\");\n\tconst relativeSegments = segments.slice(1);\n\tif (relativeSegments.some((segment) => !segment || segment === \".\" || segment === \"..\")) {\n\t\tthrow new Error(\"Npm tarball contains an unsafe path\");\n\t}\n\treturn relativeSegments;\n}\n\nfunction assertInside(root: string, path: string): void {\n\tconst fromRoot = relative(root, path);\n\tif (!fromRoot || fromRoot === \"..\" || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot)) {\n\t\tthrow new Error(\"Npm tarball contains an unsafe path\");\n\t}\n}\n\nfunction ensureDirectory(root: string, segments: string[]): string {\n\tlet current = root;\n\tfor (const segment of segments) {\n\t\tcurrent = join(current, segment);\n\t\tif (!existsSync(current)) mkdirSync(current, { mode: 0o700 });\n\t\tconst stats = lstatSync(current);\n\t\tif (!stats.isDirectory() || stats.isSymbolicLink()) throw new Error(\"Npm tarball path is not a safe directory\");\n\t}\n\treturn current;\n}\n\nfunction writeExclusiveFile(path: string, content: Buffer): void {\n\tconst descriptor = openSync(\n\t\tpath,\n\t\tconstants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0),\n\t\t0o600,\n\t);\n\ttry {\n\t\twriteFileSync(descriptor, content);\n\t} finally {\n\t\tcloseSync(descriptor);\n\t}\n}\n\n/** Extract registry tarball files only. Links and special entries fail closed. */\nexport function extractNpmPackageTarball(archivePath: string, destination: string): void {\n\tif (existsSync(destination)) throw new Error(\"Npm package extraction destination already exists\");\n\tconst archive = readFileSync(archivePath);\n\tif (archive.length > MAX_ARCHIVE_BYTES) throw new Error(\"Npm package archive exceeds the size limit\");\n\tconst root = resolve(destination);\n\tlet expanded: Buffer;\n\ttry {\n\t\texpanded = gunzipSync(archive, { maxOutputLength: MAX_EXPANDED_BYTES });\n\t} catch {\n\t\tthrow new Error(\"Npm package archive is not a bounded gzip stream\");\n\t}\n\tmkdirSync(root, { recursive: true, mode: 0o700 });\n\tlet offset = 0;\n\tlet files = 0;\n\tlet nextPath: string | undefined;\n\ttry {\n\t\twhile (offset + TAR_BLOCK_BYTES <= expanded.length) {\n\t\t\tconst header = expanded.subarray(offset, offset + TAR_BLOCK_BYTES);\n\t\t\toffset += TAR_BLOCK_BYTES;\n\t\t\tif (header.every((byte) => byte === 0)) break;\n\t\t\tchecksum(header);\n\t\t\tconst size = octal(header.subarray(124, 136), \"entry size\");\n\t\t\tif (size > MAX_FILE_BYTES || offset + size > expanded.length)\n\t\t\t\tthrow new Error(\"Npm tarball entry exceeds the size limit\");\n\t\t\tconst payload = expanded.subarray(offset, offset + size);\n\t\t\toffset += Math.ceil(size / TAR_BLOCK_BYTES) * TAR_BLOCK_BYTES;\n\t\t\tconst type = String.fromCharCode(header[156] ?? 0);\n\t\t\tconst headerPath = [text(header.subarray(345, 500)), text(header.subarray(0, 100))].filter(Boolean).join(\"/\");\n\t\t\tif (type === \"x\") {\n\t\t\t\tnextPath = parsePax(payload).get(\"path\") ?? nextPath;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (type === \"g\") continue;\n\t\t\tif (type === \"L\") {\n\t\t\t\tnextPath = text(payload).replace(/\\n$/u, \"\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst segments = safePackagePath(nextPath ?? headerPath);\n\t\t\tnextPath = undefined;\n\t\t\tif (segments.length === 0) continue;\n\t\t\tconst path = resolve(root, ...segments);\n\t\t\tassertInside(root, path);\n\t\t\tif (type === \"5\") {\n\t\t\t\tensureDirectory(root, segments);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (type !== \"0\" && type !== \"\\0\") throw new Error(`Npm tarball contains unsupported entry type ${type}`);\n\t\t\tfiles += 1;\n\t\t\tif (files > MAX_FILES) throw new Error(\"Npm package contains too many files\");\n\t\t\tensureDirectory(root, segments.slice(0, -1));\n\t\t\twriteExclusiveFile(path, payload);\n\t\t}\n\t} catch (error) {\n\t\trmSync(root, { recursive: true, force: true });\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/core/package-doctor-source-scan.d.ts

@@ -0,0 +1,13 @@
+export declare const PACKAGE_DOCTOR_SUPPORTED_EVENTS: Set<string>;
+export interface ScannedPackageSource {
+    file: string;
+    text: string;
+}
+export declare function scanPackageExtensionSources(root: string, extensions: string[]): {
+    sources: ScannedPackageSource[];
+    skipped: string[];
+};
+export declare function importedSpecifiers(text: string): string[];
+export declare function subscribedEvents(text: string): string[];
+export declare function sourceFilesMatching(sources: ScannedPackageSource[], predicate: (text: string) => boolean): string[];
+//# sourceMappingURL=package-doctor-source-scan.d.ts.map

package/dist/core/package-doctor-source-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-doctor-source-scan.d.ts","sourceRoot":"","sources":["../../src/core/package-doctor-source-scan.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,+BAA+B,aA8B1C,CAAC;AAEH,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb;AASD,wBAAgB,2BAA2B,CAC1C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAAE,GAClB;IAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA4CxD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAYzD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMvD;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,EAAE,CAMnH","sourcesContent":["import { closeSync, constants, fstatSync, openSync, readSync, realpathSync, statSync } from \"node:fs\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\n\nconst MAX_EXTENSION_FILES = 256;\nconst MAX_EXTENSION_BYTES = 1_048_576;\n\nexport const PACKAGE_DOCTOR_SUPPORTED_EVENTS = new Set([\n\t\"resources_discover\",\n\t\"session_start\",\n\t\"session_before_switch\",\n\t\"session_before_fork\",\n\t\"session_before_compact\",\n\t\"session_compact\",\n\t\"session_shutdown\",\n\t\"session_before_tree\",\n\t\"session_tree\",\n\t\"context\",\n\t\"before_provider_request\",\n\t\"after_provider_response\",\n\t\"before_agent_start\",\n\t\"agent_start\",\n\t\"agent_end\",\n\t\"turn_start\",\n\t\"turn_end\",\n\t\"message_start\",\n\t\"message_update\",\n\t\"message_end\",\n\t\"tool_execution_start\",\n\t\"tool_execution_update\",\n\t\"tool_execution_end\",\n\t\"model_select\",\n\t\"thinking_level_select\",\n\t\"tool_call\",\n\t\"tool_result\",\n\t\"user_bash\",\n\t\"input\",\n]);\n\nexport interface ScannedPackageSource {\n\tfile: string;\n\ttext: string;\n}\n\nfunction packageRelativePath(root: string, path: string): string | null {\n\tconst candidate = relative(root, resolve(path));\n\tif (!candidate || candidate === \".\") return candidate || \".\";\n\tif (candidate === \"..\" || candidate.startsWith(`..${sep}`) || isAbsolute(candidate)) return null;\n\treturn candidate.replace(/\\\\/gu, \"/\");\n}\n\nexport function scanPackageExtensionSources(\n\troot: string,\n\textensions: string[],\n): { sources: ScannedPackageSource[]; skipped: string[] } {\n\tconst sources: ScannedPackageSource[] = [];\n\tconst skipped: string[] = [];\n\tconst realRoot = realpathSync(root);\n\tfor (const path of [...new Set(extensions)].slice(0, MAX_EXTENSION_FILES)) {\n\t\tconst file = packageRelativePath(root, path);\n\t\tif (file === null) {\n\t\t\tskipped.push(\"<outside-package>\");\n\t\t\tcontinue;\n\t\t}\n\t\tlet fd: number | undefined;\n\t\ttry {\n\t\t\tconst realPath = realpathSync(path);\n\t\t\tif (packageRelativePath(realRoot, realPath) === null) {\n\t\t\t\tskipped.push(\"<outside-package>\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst expected = statSync(realPath);\n\t\t\tfd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));\n\t\t\tconst opened = fstatSync(fd);\n\t\t\tif (!opened.isFile() || opened.dev !== expected.dev || opened.ino !== expected.ino) {\n\t\t\t\tskipped.push(file);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst buffer = Buffer.alloc(MAX_EXTENSION_BYTES + 1);\n\t\t\tlet offset = 0;\n\t\t\twhile (offset < buffer.length) {\n\t\t\t\tconst read = readSync(fd, buffer, offset, buffer.length - offset, offset);\n\t\t\t\tif (read === 0) break;\n\t\t\t\toffset += read;\n\t\t\t}\n\t\t\tif (offset > MAX_EXTENSION_BYTES) {\n\t\t\t\tskipped.push(file);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tsources.push({ file, text: buffer.subarray(0, offset).toString(\"utf8\") });\n\t\t} catch {\n\t\t\tskipped.push(file);\n\t\t} finally {\n\t\t\tif (fd !== undefined) closeSync(fd);\n\t\t}\n\t}\n\tif (extensions.length > MAX_EXTENSION_FILES) skipped.push(\"<file-limit>\");\n\treturn { sources, skipped };\n}\n\nexport function importedSpecifiers(text: string): string[] {\n\tconst specifiers = new Set<string>();\n\tconst patterns = [\n\t\t/\\b(?:import|export)\\s+(?:[^\"']+?\\s+from\\s+)?[\"']([^\"']+)[\"']/gu,\n\t\t/\\b(?:import|require)\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/gu,\n\t];\n\tfor (const pattern of patterns) {\n\t\tfor (const match of text.matchAll(pattern)) {\n\t\t\tif (match[1]) specifiers.add(match[1]);\n\t\t}\n\t}\n\treturn [...specifiers];\n}\n\nexport function subscribedEvents(text: string): string[] {\n\tconst events: string[] = [];\n\tfor (const match of text.matchAll(/\\b(?:api|omk|pi)\\.on\\(\\s*[\"']([^\"']+)[\"']/gu)) {\n\t\tif (match[1] !== undefined) events.push(match[1]);\n\t}\n\treturn events;\n}\n\nexport function sourceFilesMatching(sources: ScannedPackageSource[], predicate: (text: string) => boolean): string[] {\n\tconst files: string[] = [];\n\tfor (const source of sources) {\n\t\tif (predicate(source.text)) files.push(source.file);\n\t}\n\treturn files;\n}\n"]}

package/dist/core/package-doctor-source-scan.js

@@ -0,0 +1,124 @@
+import { closeSync, constants, fstatSync, openSync, readSync, realpathSync, statSync } from "node:fs";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+const MAX_EXTENSION_FILES = 256;
+const MAX_EXTENSION_BYTES = 1_048_576;
+export const PACKAGE_DOCTOR_SUPPORTED_EVENTS = new Set([
+    "resources_discover",
+    "session_start",
+    "session_before_switch",
+    "session_before_fork",
+    "session_before_compact",
+    "session_compact",
+    "session_shutdown",
+    "session_before_tree",
+    "session_tree",
+    "context",
+    "before_provider_request",
+    "after_provider_response",
+    "before_agent_start",
+    "agent_start",
+    "agent_end",
+    "turn_start",
+    "turn_end",
+    "message_start",
+    "message_update",
+    "message_end",
+    "tool_execution_start",
+    "tool_execution_update",
+    "tool_execution_end",
+    "model_select",
+    "thinking_level_select",
+    "tool_call",
+    "tool_result",
+    "user_bash",
+    "input",
+]);
+function packageRelativePath(root, path) {
+    const candidate = relative(root, resolve(path));
+    if (!candidate || candidate === ".")
+        return candidate || ".";
+    if (candidate === ".." || candidate.startsWith(`..${sep}`) || isAbsolute(candidate))
+        return null;
+    return candidate.replace(/\\/gu, "/");
+}
+export function scanPackageExtensionSources(root, extensions) {
+    const sources = [];
+    const skipped = [];
+    const realRoot = realpathSync(root);
+    for (const path of [...new Set(extensions)].slice(0, MAX_EXTENSION_FILES)) {
+        const file = packageRelativePath(root, path);
+        if (file === null) {
+            skipped.push("<outside-package>");
+            continue;
+        }
+        let fd;
+        try {
+            const realPath = realpathSync(path);
+            if (packageRelativePath(realRoot, realPath) === null) {
+                skipped.push("<outside-package>");
+                continue;
+            }
+            const expected = statSync(realPath);
+            fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            const opened = fstatSync(fd);
+            if (!opened.isFile() || opened.dev !== expected.dev || opened.ino !== expected.ino) {
+                skipped.push(file);
+                continue;
+            }
+            const buffer = Buffer.alloc(MAX_EXTENSION_BYTES + 1);
+            let offset = 0;
+            while (offset < buffer.length) {
+                const read = readSync(fd, buffer, offset, buffer.length - offset, offset);
+                if (read === 0)
+                    break;
+                offset += read;
+            }
+            if (offset > MAX_EXTENSION_BYTES) {
+                skipped.push(file);
+                continue;
+            }
+            sources.push({ file, text: buffer.subarray(0, offset).toString("utf8") });
+        }
+        catch {
+            skipped.push(file);
+        }
+        finally {
+            if (fd !== undefined)
+                closeSync(fd);
+        }
+    }
+    if (extensions.length > MAX_EXTENSION_FILES)
+        skipped.push("<file-limit>");
+    return { sources, skipped };
+}
+export function importedSpecifiers(text) {
+    const specifiers = new Set();
+    const patterns = [
+        /\b(?:import|export)\s+(?:[^"']+?\s+from\s+)?["']([^"']+)["']/gu,
+        /\b(?:import|require)\s*\(\s*["']([^"']+)["']\s*\)/gu,
+    ];
+    for (const pattern of patterns) {
+        for (const match of text.matchAll(pattern)) {
+            if (match[1])
+                specifiers.add(match[1]);
+        }
+    }
+    return [...specifiers];
+}
+export function subscribedEvents(text) {
+    const events = [];
+    for (const match of text.matchAll(/\b(?:api|omk|pi)\.on\(\s*["']([^"']+)["']/gu)) {
+        if (match[1] !== undefined)
+            events.push(match[1]);
+    }
+    return events;
+}
+export function sourceFilesMatching(sources, predicate) {
+    const files = [];
+    for (const source of sources) {
+        if (predicate(source.text))
+            files.push(source.file);
+    }
+    return files;
+}
+//# sourceMappingURL=package-doctor-source-scan.js.map

package/dist/core/package-doctor-source-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-doctor-source-scan.js","sourceRoot":"","sources":["../../src/core/package-doctor-source-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAEtC,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IACtD,oBAAoB;IACpB,eAAe;IACf,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;IACrB,cAAc;IACd,SAAS;IACT,yBAAyB;IACzB,yBAAyB;IACzB,oBAAoB;IACpB,aAAa;IACb,WAAW;IACX,YAAY;IACZ,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,cAAc;IACd,uBAAuB;IACvB,WAAW;IACX,aAAa;IACb,WAAW;IACX,OAAO;CACP,CAAC,CAAC;AAOH,SAAS,mBAAmB,CAAC,IAAY,EAAE,IAAY,EAAiB;IACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,SAAS,IAAI,GAAG,CAAC;IAC7D,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAAA,CACtC;AAED,MAAM,UAAU,2BAA2B,CAC1C,IAAY,EACZ,UAAoB,EACqC;IACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClC,SAAS;QACV,CAAC;QACD,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBAClC,SAAS;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACpF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;YACrD,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1E,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM;gBACtB,MAAM,IAAI,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;gBAAS,CAAC;YACV,IAAI,EAAE,KAAK,SAAS;gBAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,CAC5B;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAY;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,QAAQ,GAAG;QAChB,gEAAgE;QAChE,qDAAqD;KACrD,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,CAAC,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AAAA,CACvB;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAY;IACxD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QAClF,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA+B,EAAE,SAAoC,EAAY;IACpH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb","sourcesContent":["import { closeSync, constants, fstatSync, openSync, readSync, realpathSync, statSync } from \"node:fs\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\n\nconst MAX_EXTENSION_FILES = 256;\nconst MAX_EXTENSION_BYTES = 1_048_576;\n\nexport const PACKAGE_DOCTOR_SUPPORTED_EVENTS = new Set([\n\t\"resources_discover\",\n\t\"session_start\",\n\t\"session_before_switch\",\n\t\"session_before_fork\",\n\t\"session_before_compact\",\n\t\"session_compact\",\n\t\"session_shutdown\",\n\t\"session_before_tree\",\n\t\"session_tree\",\n\t\"context\",\n\t\"before_provider_request\",\n\t\"after_provider_response\",\n\t\"before_agent_start\",\n\t\"agent_start\",\n\t\"agent_end\",\n\t\"turn_start\",\n\t\"turn_end\",\n\t\"message_start\",\n\t\"message_update\",\n\t\"message_end\",\n\t\"tool_execution_start\",\n\t\"tool_execution_update\",\n\t\"tool_execution_end\",\n\t\"model_select\",\n\t\"thinking_level_select\",\n\t\"tool_call\",\n\t\"tool_result\",\n\t\"user_bash\",\n\t\"input\",\n]);\n\nexport interface ScannedPackageSource {\n\tfile: string;\n\ttext: string;\n}\n\nfunction packageRelativePath(root: string, path: string): string | null {\n\tconst candidate = relative(root, resolve(path));\n\tif (!candidate || candidate === \".\") return candidate || \".\";\n\tif (candidate === \"..\" || candidate.startsWith(`..${sep}`) || isAbsolute(candidate)) return null;\n\treturn candidate.replace(/\\\\/gu, \"/\");\n}\n\nexport function scanPackageExtensionSources(\n\troot: string,\n\textensions: string[],\n): { sources: ScannedPackageSource[]; skipped: string[] } {\n\tconst sources: ScannedPackageSource[] = [];\n\tconst skipped: string[] = [];\n\tconst realRoot = realpathSync(root);\n\tfor (const path of [...new Set(extensions)].slice(0, MAX_EXTENSION_FILES)) {\n\t\tconst file = packageRelativePath(root, path);\n\t\tif (file === null) {\n\t\t\tskipped.push(\"<outside-package>\");\n\t\t\tcontinue;\n\t\t}\n\t\tlet fd: number | undefined;\n\t\ttry {\n\t\t\tconst realPath = realpathSync(path);\n\t\t\tif (packageRelativePath(realRoot, realPath) === null) {\n\t\t\t\tskipped.push(\"<outside-package>\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst expected = statSync(realPath);\n\t\t\tfd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));\n\t\t\tconst opened = fstatSync(fd);\n\t\t\tif (!opened.isFile() || opened.dev !== expected.dev || opened.ino !== expected.ino) {\n\t\t\t\tskipped.push(file);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst buffer = Buffer.alloc(MAX_EXTENSION_BYTES + 1);\n\t\t\tlet offset = 0;\n\t\t\twhile (offset < buffer.length) {\n\t\t\t\tconst read = readSync(fd, buffer, offset, buffer.length - offset, offset);\n\t\t\t\tif (read === 0) break;\n\t\t\t\toffset += read;\n\t\t\t}\n\t\t\tif (offset > MAX_EXTENSION_BYTES) {\n\t\t\t\tskipped.push(file);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tsources.push({ file, text: buffer.subarray(0, offset).toString(\"utf8\") });\n\t\t} catch {\n\t\t\tskipped.push(file);\n\t\t} finally {\n\t\t\tif (fd !== undefined) closeSync(fd);\n\t\t}\n\t}\n\tif (extensions.length > MAX_EXTENSION_FILES) skipped.push(\"<file-limit>\");\n\treturn { sources, skipped };\n}\n\nexport function importedSpecifiers(text: string): string[] {\n\tconst specifiers = new Set<string>();\n\tconst patterns = [\n\t\t/\\b(?:import|export)\\s+(?:[^\"']+?\\s+from\\s+)?[\"']([^\"']+)[\"']/gu,\n\t\t/\\b(?:import|require)\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/gu,\n\t];\n\tfor (const pattern of patterns) {\n\t\tfor (const match of text.matchAll(pattern)) {\n\t\t\tif (match[1]) specifiers.add(match[1]);\n\t\t}\n\t}\n\treturn [...specifiers];\n}\n\nexport function subscribedEvents(text: string): string[] {\n\tconst events: string[] = [];\n\tfor (const match of text.matchAll(/\\b(?:api|omk|pi)\\.on\\(\\s*[\"']([^\"']+)[\"']/gu)) {\n\t\tif (match[1] !== undefined) events.push(match[1]);\n\t}\n\treturn events;\n}\n\nexport function sourceFilesMatching(sources: ScannedPackageSource[], predicate: (text: string) => boolean): string[] {\n\tconst files: string[] = [];\n\tfor (const source of sources) {\n\t\tif (predicate(source.text)) files.push(source.file);\n\t}\n\treturn files;\n}\n"]}

package/dist/core/package-doctor.d.ts

@@ -0,0 +1,41 @@
+import { type PackageManifestKey } from "./package-manifest.ts";
+export interface PackageDoctorResources {
+    extensions: string[];
+    skills: string[];
+    prompts: string[];
+    themes: string[];
+}
+export interface PackageDoctorInput {
+    source: string;
+    packageRoot: string;
+    resources: PackageDoctorResources;
+}
+export interface PackageDoctorCheck {
+    id: "manifest" | "resources" | "runtime-imports" | "storage-paths" | "lifecycle-events" | "headless-ui" | "resume-awareness" | "scan-coverage";
+    status: "pass" | "warning" | "error";
+    message: string;
+    files?: string[];
+}
+export interface PackageDoctorResult {
+    schemaVersion: 1;
+    source: string;
+    package: {
+        name?: string;
+        version?: string;
+    };
+    manifest: {
+        selected: PackageManifestKey | "convention";
+        shadowedPi: boolean;
+        diagnostics: Array<{
+            path: string;
+            message: string;
+        }>;
+    };
+    resources: Record<keyof PackageDoctorResources, number>;
+    inspectedFiles: string[];
+    checks: PackageDoctorCheck[];
+    compatible: boolean;
+}
+/** Static-only compatibility inspection. Extension modules are never imported or executed. */
+export declare function inspectPackageCompatibility(input: PackageDoctorInput): PackageDoctorResult;
+//# sourceMappingURL=package-doctor.d.ts.map