pi-daddy 0.28.0 → 0.32.0

package/dist/skill-packages.js

@@ -1,295 +0,0 @@
-/**
- * Setup discovers enabled Pi resources in place through its package resolver. Configured packages
- * are never copied into another autoload root. For legacy npm installs unregistered with Pi only,
- * the explicit package.json pi.skills declaration remains a scaffold source (ADR-0074).
- * Names, ceilings and bytes are checked before they can enter the generated shell grant.
- */
-import { readdir, readFile, realpath } from "node:fs/promises";
-import { homedir } from "node:os";
-import { join, resolve, sep } from "node:path";
-import { ceilingForDefinition, parseSkillDefinition } from "./definitions.js";
-import { resolveSkillResources, skillResourceName } from "./skill-resources.js";
-import { WILDCARD } from "./pi-tools.js";
-import { AGENT_WILDCARD, WORKSPACE_WILDCARD } from "./resolve.js";
-import { isSafeCapability } from "./capabilities.js";
-/**
- * May this definition's name be written into a capability id, a shell file and a path?
- *
- * **Measured before it was written, and it was a defect in this module's first version (R-77).** A
- * definition's identity is its directory name, and `init` interpolates that name into three places at once:
- * `agent:<name>` inside a **comma-separated** `PI_GRANTS_GRANT`, a `.pi/grants.env` an operator **sources**,
- * and the path it writes the copy to. An installed package with a directory called `a,tool:bash` produced
- *
- * ```
- * export PI_GRANTS_GRANT="agent:a,tool:bash,tool:delegate,tool:read"
- * ```
- *
- * — `tool:bash` in an operator's grant, declared by nobody. A quote character reaches a file that gets
- * `source`d, and a name of `..` writes outside `.pi/skills/`. One rule closes all three, and it is
- * deliberately a **whitelist**: the safe set here is small and the unsafe set is the rest of Unicode.
- *
- * The first character must be alphanumeric, so `..` and dotfiles are refused along with everything else.
- */
-export function isSafeName(name) {
-    return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(name);
-}
-/**
- * May this DECLARED capability id be written into the generated grant? — R-78.
- *
- * **R-77's other half, and the reason a whitelist beats a blocklist twice.** R-77 was closed on the name
- * channel; the `allowed-tools` *value* travels to the identical interpolation site and was unchecked, so a
- * package declaring
- *
- * ```yaml
- * allowed-tools: Read,ext:x";touch /tmp/pwned;PI_GRANTS_GRANT="
- * ```
- *
- * produced a `.pi/grants.env` that executed arbitrary code the moment the operator ran the `source` line
- * `init` itself prints. Reproduced end to end before this existed. `ceilingForDefinition` passes `ext:`,
- * `skill:` and `agent:` entries through **as written** by design (a translation table would invent or drop
- * grants), which is right for the enforcement path — the catalog refuses what it does not know — and is
- * exactly why the check has to be here, at the boundary that *generates* rather than the one that enforces.
- *
- * The grammar is the one `docs/SPEC.md` documents: `tool:<name>`, `skill:<name>`, `agent:<name>`,
- * `workspace:<id>`, and `ext:<pkg>/<tool>` where `<pkg>` may be npm-scoped. No wildcards — those are refused
- * separately and loudly, because "you tried to grant yourself everything" is a different fact from "that is
- * not a name".
- *
- * `workspace:` was absent until 2026-08-21, so the boundary that GENERATES grants could not emit the one
- * capability ADR-0035's breaking change made mandatory: a package needing to route was reported as declaring
- * something that "is not a name". A namespace has to be added here as well as to the enforcing path, and
- * that is the whole lesson of the review this came out of.
- */
-// Imported as well as re-exported: a bare `export … from` does not bind the name in this module's scope, and
-// `refusalFor` below calls it. Re-exported because this has been the import site since 0.13.0.
-export { isSafeCapability };
-/**
- * The ids that confer authority over a whole namespace. A package declaring one is claiming it, not
- * describing a need — so it is reported as a *wildcard claim* rather than as a malformed name, which is a
- * different sentence to show an operator. `workspace:*` belongs here for the same reason `agent:*` does.
- */
-function wildcardsIn(capabilities) {
-    return capabilities.filter((c) => c === WILDCARD || c === AGENT_WILDCARD || c === WORKSPACE_WILDCARD);
-}
-/**
- * Everything about one declared skill that would make it unsafe to scaffold. `null` when it is fine.
- *
- * Ordered so the operator is told the most actionable thing: a wildcard is a deliberate claim, an unsafe id
- * is probably a typo or an attack, and a bad name is neither.
- */
-function refusalFor(skill) {
-    const name = skill.definition.name;
-    if (!isSafeName(name))
-        return { subject: name, reason: "unsafe-name", detail: [name] };
-    const ceiling = ceilingForDefinition(skill.definition);
-    const wildcards = wildcardsIn(ceiling.capabilities);
-    if (wildcards.length > 0)
-        return { subject: name, reason: "wildcard", detail: wildcards };
-    const unsafe = ceiling.capabilities.filter((c) => !isSafeCapability(c));
-    if (unsafe.length > 0)
-        return { subject: name, reason: "unsafe-capability", detail: unsafe };
-    return null;
-}
-/** One `pi.skills` entry: a directory holding `SKILL.md`, or a `.md` file — the same two shapes pi allows. */
-async function readSkill(packageDir, entry) {
-    const target = resolve(packageDir, entry);
-    // A manifest is data from another package, so an entry escaping its own directory is refused rather than
-    // followed. **`realpath`, not a lexical prefix test** (R-80): `resolve()` normalises `..` and knows
-    // nothing about symlinks, so a packaged symlink walked straight past the first version of this check and
-    // a definition from outside the package was copied in, with its `allowed-tools` landing in the operator's
-    // grant. Measured. This is the same lesson as the `realpathSync` fix in `cli.ts`, which was found by the
-    // smoke test one day earlier and not applied here.
-    const realPackageDir = await realpath(packageDir).catch(() => packageDir);
-    for (const path of [join(target, "SKILL.md"), ...(target.endsWith(".md") ? [target] : [])]) {
-        let bytes;
-        try {
-            bytes = await readFile(path);
-        }
-        catch {
-            continue;
-        }
-        const realPath = await realpath(path).catch(() => path);
-        if (!realPath.startsWith(realPackageDir + sep))
-            return null;
-        // "The file verbatim … nothing is lost in a round trip" is a claim this module makes, so bytes that
-        // cannot survive the round trip are refused rather than silently replaced. A latin-1 `0xE9` used to come
-        // back as U+FFFD, changing the file's length and its digest, with no warning.
-        const text = bytes.toString("utf8");
-        if (!Buffer.from(text, "utf8").equals(bytes))
-            return "not-utf8";
-        const definition = parseSkillDefinition(path, text);
-        return definition ? { definition, text, path } : null;
-    }
-    return null;
-}
-/** Read one installed package, if it declares skills. `null` means "not a skill package", not an error. */
-export async function readSkillPackage(packageDir) {
-    let manifest;
-    try {
-        manifest = JSON.parse(await readFile(join(packageDir, "package.json"), "utf8"));
-    }
-    catch {
-        return null;
-    }
-    const declared = manifest.pi?.skills;
-    if (!Array.isArray(declared) || declared.length === 0)
-        return null;
-    const skills = [];
-    const unreadable = [];
-    const refused = [];
-    for (const entry of declared) {
-        if (typeof entry !== "string")
-            continue;
-        const skill = await readSkill(packageDir, entry);
-        if (skill === null) {
-            unreadable.push(entry);
-        }
-        else if (skill === "not-utf8") {
-            refused.push({ subject: entry, reason: "not-utf8", detail: [] });
-        }
-        else {
-            const refusal = refusalFor(skill);
-            if (refusal)
-                refused.push(refusal);
-            else
-                skills.push(skill);
-        }
-    }
-    return {
-        name: manifest.name ?? packageDir.split(sep).pop() ?? "(unnamed)",
-        version: manifest.version ?? "(no version)",
-        unreadable,
-        refused,
-        skills,
-    };
-}
-/**
- * Every installed package under `<cwd>/node_modules` that declares `pi.skills`, sorted by name.
- *
- * Top level and one scope deep, which is what npm's layout has. Nothing recurses into a dependency's own
- * `node_modules`: a transitive skill package is not something an operator asked to install definitions
- * from, and scaffolding one into their project would be a surprise wearing a helpful face.
- */
-/**
- * Every place a pi package can be installed, most specific first (R-75).
- *
- * **Two roots, because pi has two install paths and only one of them is `npm install`.** `pi install
- * npm:principal-pi-skills` — the documented, pi-native way, and the only one that registers the package so
- * pi will auto-load its extension — puts it in `$PI_CODING_AGENT_DIR/npm/node_modules`, and leaves the
- * project without a `node_modules` at all. Searching only `<cwd>/node_modules` therefore found **nothing**
- * for an operator who followed pi's own instructions, and said "install principal-pi-skills" to somebody
- * who just had.
- *
- * Measured, in a fresh `PI_CODING_AGENT_DIR` with an empty project: `pi install` populates the agent root
- * and creates no project root.
- *
- * Project first when both exist, because a package pinned in the repository is the one the team agreed on.
- */
-export function skillPackageRoots(cwd) {
-    const agentDir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent");
-    return [join(cwd, "node_modules"), join(agentDir, "npm", "node_modules")];
-}
-export async function discoverSkillPackages(cwd) {
-    const resolved = await resolveSkillResources(cwd);
-    const packages = [];
-    const seenSkills = new Set();
-    const runtimeNames = new Set(resolved.skills.map(s => skillResourceName(s.path)));
-    const configuredRoots = new Set(resolved.configured.flatMap(p => p.installedPath ? [resolve(p.installedPath)] : []));
-    const configuredNames = new Set(resolved.configured.flatMap(p => {
-        if (!p.source.startsWith("npm:"))
-            return [];
-        const spec = p.source.slice(4);
-        const versionAt = spec.indexOf("@", 1);
-        return [versionAt < 0 ? spec : spec.slice(0, versionAt)];
-    }));
-    for (const root of configuredRoots) {
-        try {
-            configuredNames.add(JSON.parse(await readFile(join(root, "package.json"), "utf8")).name);
-        }
-        catch { /* absent */ }
-    }
-    for (const resource of resolved.skills) {
-        const bytes = await readFile(resource.path).catch(() => null);
-        if (bytes === null)
-            continue;
-        const text = bytes.toString("utf8");
-        const resourceName = skillResourceName(resource.path);
-        if (seenSkills.has(resourceName))
-            continue;
-        seenSkills.add(resourceName);
-        let name = resource.metadata.source;
-        let version = "local";
-        if (resource.metadata.origin === "package" && resource.metadata.baseDir) {
-            try {
-                const manifest = JSON.parse(await readFile(join(resource.metadata.baseDir, "package.json"), "utf8"));
-                name = manifest.name ?? name;
-                version = manifest.version ?? version;
-            }
-            catch { /* the resource can be used without optional display metadata */ }
-        }
-        else
-            name = `${resource.metadata.scope} skills`;
-        let pkg = packages.find(p => p.name === name && p.version === version);
-        if (!pkg) {
-            pkg = { name, version, skills: [], refused: [], unreadable: [] };
-            packages.push(pkg);
-        }
-        if (!Buffer.from(text, "utf8").equals(bytes)) {
-            pkg.refused.push({ subject: resourceName, reason: "not-utf8", detail: [] });
-            continue;
-        }
-        const definition = parseSkillDefinition(resource.path, text);
-        if (!definition)
-            continue;
-        const skill = { definition, text, path: resource.path, referenced: true };
-        const refusal = refusalFor(skill);
-        if (refusal)
-            pkg.refused.push(refusal);
-        else
-            pkg.skills.push(skill);
-    }
-    // Compatibility for npm installs that were never registered with Pi. Runtime discovery never scans
-    // node_modules. A configured package (including one disabled by a filter) must not re-enter here.
-    const dirs = [];
-    for (const root of skillPackageRoots(cwd))
-        await collectFrom(root, dirs);
-    const seenNames = new Set(packages.map(p => p.name));
-    for (const dir of dirs) {
-        if (configuredRoots.has(resolve(dir)))
-            continue;
-        const found = await readSkillPackage(dir);
-        if (!found || configuredNames.has(found.name) || seenNames.has(found.name))
-            continue;
-        seenNames.add(found.name);
-        found.skills = found.skills.filter(skill => !runtimeNames.has(skill.definition.name));
-        packages.push(found);
-    }
-    return packages;
-}
-/** Append every package directory under one `node_modules`, scoped packages included. */
-async function collectFrom(root, dirs) {
-    let entries;
-    try {
-        entries = await readdir(root);
-    }
-    catch {
-        return; // a root that does not exist is a normal state, not a failure
-    }
-    for (const entry of entries.sort()) {
-        if (entry.startsWith("."))
-            continue; // .bin, .package-lock.json
-        if (entry.startsWith("@")) {
-            try {
-                for (const scoped of (await readdir(join(root, entry))).sort())
-                    dirs.push(join(root, entry, scoped));
-            }
-            catch {
-                continue;
-            }
-        }
-        else {
-            dirs.push(join(root, entry));
-        }
-    }
-}
-//# sourceMappingURL=skill-packages.js.map

package/dist/skill-packages.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-packages.js","sourceRoot":"","sources":["../src/skill-packages.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAwB,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAmB,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAwCrD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,6GAA6G;AAC7G,+FAA+F;AAC/F,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B;;;;GAIG;AACH,SAAS,WAAW,CAAC,YAA0B;IAC7C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;AACxG,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAsB;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAEvF,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAE1F,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,KAAa;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1C,yGAAyG;IACzG,oGAAoG;IACpG,yGAAyG;IACzG,0GAA0G;IAC1G,yGAAyG;IACzG,mDAAmD;IACnD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5D,oGAAoG;QACpG,yGAAyG;QACzG,8EAA8E;QAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QAEhE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,IAAI,QAAwE,CAAC;IAC7E,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;gBAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,WAAW;QACjE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,cAAc;QAC3C,UAAU;QACV,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACtE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC;YAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1H,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QAC3C,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACrG,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;gBAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC,CAAC,gEAAgE,CAAC,CAAC;QAC9E,CAAC;;YAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;QAClD,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;YAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,mGAAmG;IACnG,kGAAkG;IAClG,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACrF,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAElB,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAc;IACrD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,8DAA8D;IACxE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,2BAA2B;QAChE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACvG,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/skill-resources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-resources.d.ts","sourceRoot":"","sources":["../src/skill-resources.ts"],"names":[],"mappings":"AAKA,UAAU,cAAc;IACtB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAAE,CAAC;IAC5H,UAAU,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAItD;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA+BhF"}

package/dist/skill-resources.js

@@ -1,52 +0,0 @@
-/** Read Pi's configured resource surface without locks, installs, extension execution or model calls. */
-import { readFileSync, statSync } from "node:fs";
-import { join } from "node:path";
-import { DefaultPackageManager, getAgentDir, SettingsManager } from "@earendil-works/pi-coding-agent";
-export function skillResourceName(path) {
-    const parts = path.split(/[\\/]/);
-    const file = parts.at(-1) ?? "";
-    return file.toLowerCase() === "skill.md" ? parts.at(-2) ?? "" : file.replace(/\.md$/i, "");
-}
-export async function resolveSkillResources(cwd) {
-    const agentDir = getAgentDir();
-    const settingsManager = SettingsManager.fromStorage({
-        withLock(scope, read) {
-            const path = scope === "global" ? join(agentDir, "settings.json") : join(cwd, ".pi", "settings.json");
-            let text;
-            try {
-                text = readFileSync(path, "utf8");
-            }
-            catch (error) {
-                if (error.code !== "ENOENT")
-                    throw error;
-            }
-            // This storage is intentionally read-only: no lock files or migrated settings are persisted.
-            read(text);
-        },
-    });
-    const errors = settingsManager.drainErrors();
-    if (errors.length)
-        throw new Error(`Cannot discover skills: ${errors.map(e => `${e.scope} settings: ${e.error.message}`).join("; ")}`);
-    const manager = new DefaultPackageManager({ cwd, agentDir, settingsManager });
-    const resolved = await manager.resolve(async () => "skip");
-    // Pi has already applied package identity, scope, manifest and settings filters and precedence.
-    const seen = new Set();
-    const skills = resolved.skills.filter(resource => resource.enabled).flatMap(resource => {
-        try {
-            const path = statSync(resource.path).isDirectory() ? join(resource.path, "SKILL.md") : resource.path;
-            return statSync(path).isFile() ? [{ ...resource, path }] : [];
-        }
-        catch {
-            return [];
-        }
-    }).filter(resource => {
-        // Reserve identity before parsing: a malformed local override cannot reveal a wider package ceiling.
-        const name = skillResourceName(resource.path);
-        if (seen.has(name))
-            return false;
-        seen.add(name);
-        return true;
-    });
-    return { skills, configured: manager.listConfiguredPackages() };
-}
-//# sourceMappingURL=skill-resources.js.map

package/dist/skill-resources.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-resources.js","sourceRoot":"","sources":["../src/skill-resources.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAOtG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,eAAe,GAAG,eAAe,CAAC,WAAW,CAAC;QAClD,QAAQ,CAAC,KAAK,EAAE,IAAI;YAClB,MAAM,IAAI,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;YACtG,IAAI,IAAwB,CAAC;YAC7B,IAAI,CAAC;gBAAC,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAC1C,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;YACtF,6FAA6F;YAC7F,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,CAAC;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvI,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3D,gGAAgG;IAChG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QACrF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrG,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACxB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACnB,qGAAqG;QACrG,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;AAClE,CAAC"}

package/dist/spawn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../src/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEnE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kFAAkF;IAClF,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3B,uDAAuD;IACvD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;OAGG;IACH,gBAAgB,EAAE,UAAU,EAAE,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CA8D1D"}

package/dist/spawn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../src/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAmB,MAAM,cAAc,CAAC;AA8CnE;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;;QAC5D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE/B,iGAAiG;IACjG,iEAAiE;IACjE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAE7B,gGAAgG;IAChG,iFAAiF;IACjF,mGAAmG;IACnG,4FAA4F;IAC5F,EAAE;IACF,+FAA+F;IAC/F,iGAAiG;IACjG,qGAAqG;IACrG,8FAA8F;IAC9F,4CAA4C;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,gBAAgB,GAAiB,EAAE,CAAC;IAC1C,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACvB,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEtD,qGAAqG;IACrG,oGAAoG;IACpG,qGAAqG;IACrG,+FAA+F;IAC/F,mGAAmG;IACnG,sFAAsF;IACtF,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAEzD,qGAAqG;IACrG,qGAAqG;IACrG,mGAAmG;IACnG,oGAAoG;IACpG,yDAAyD;IACzD,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAEnC,mGAAmG;IACnG,iGAAiG;IACjG,gGAAgG;IAChG,4FAA4F;IAC5F,IAAI,KAAK,CAAC,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAEhF,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;;QACpD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE7B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,IAAI,MAAM,EAAE,CAAC;AACtB,CAAC"}

package/dist/vendor/adoption.d.ts

@@ -1,129 +0,0 @@
-export interface AdoptionInput {
-    hypothesisDigest: string;
-    experimentDigest: string;
-    candidateDigest: string;
-    scopeDigest: string;
-    assessmentPolicyDigest: string;
-    rollbackCandidateDigest: string;
-    activationBoundary: "next-orders";
-    expiresAt: number;
-}
-export interface AdoptionBinding extends AdoptionInput {
-    version: "adoption-binding-v1";
-    id: string;
-}
-export interface AdoptionAuthority {
-    id: string;
-    adoptions: readonly string[];
-    rollbacks: readonly string[];
-}
-export interface AdoptionFacts {
-    experimentDigest: string;
-    candidateDigest: string;
-    scopeDigest: string;
-    assessmentPolicyDigest: string;
-    eligible: boolean;
-}
-export declare function buildAdoptionBinding(input: AdoptionInput): AdoptionBinding;
-/** Independent host declarations and independently verified eligible facts are required again at use. */
-export declare function authorizeAdoption(binding: AdoptionBinding, authority: AdoptionAuthority | null, facts: AdoptionFacts, now: number): Readonly<{
-    id: string;
-    version: "adoption-receipt-v1";
-    bindingId: string;
-    authorityId: string;
-    hypothesisDigest: string;
-    experimentDigest: string;
-    candidateDigest: string;
-    scopeDigest: string;
-    assessmentPolicyDigest: string;
-    rollbackCandidateDigest: string;
-    activationBoundary: "next-orders";
-    grantExpansion: false;
-    expiresAt: number;
-}>;
-export type AdoptionReceipt = ReturnType<typeof authorizeAdoption>;
-export declare function validateAdoptionReceipt(receipt: AdoptionReceipt, binding: AdoptionBinding, authority: AdoptionAuthority | null, facts: AdoptionFacts, now: number): void;
-export interface ProductionObservation {
-    id: string;
-    adoptionId: string;
-    candidateDigest: string;
-    scopeDigest: string;
-    originalRequirementDigest: string;
-    currentRequirementDigest: string;
-    /** Only an independent host may supply confirmed outcomes; observer/model claims are not confirmation. */
-    outcome: "confirmed-defect" | "success" | "unknown";
-    acceptanceDigest: string | null;
-    acceptedArtifactDigest: string | null;
-    observedArtifactDigest: string;
-    evidence: string[];
-}
-export declare function classifyProductionObservation(adoption: AdoptionReceipt, input: ProductionObservation): Readonly<{
-    state: "unknown" | "escape" | "success" | "out-of-scope" | "changed-requirements" | "changed-artifact" | "caught-defect";
-    adoptionId: string;
-    hypothesisDigest: string;
-    experimentDigest: string;
-    observationId: string;
-    acceptanceDigest: string | null;
-    acceptedArtifactDigest: string | null;
-    observedArtifactDigest: string;
-    automaticRollback: false;
-}>;
-export interface RollbackRequest {
-    version: "rollback-request-v1";
-    id: string;
-    adoptionId: string;
-    scopeDigest: string;
-    restoreCandidateDigest: string;
-    reason: "operator-request" | "confirmed-escape";
-    evidence: readonly string[];
-    expiresAt: number;
-}
-export declare function buildRollbackRequest(adoption: AdoptionReceipt, reason: RollbackRequest["reason"], evidence: string[], expiresAt?: number): RollbackRequest;
-/** This validates a recorded choice, not an automatic rollback action or a caller-created authority flag. */
-export declare function authorizeRollback(adoption: AdoptionReceipt, request: RollbackRequest, authority: AdoptionAuthority | null, now: number, current: {
-    adoptionId: string;
-    candidateDigest: string;
-    scopeDigest: string;
-}): Readonly<{
-    requestId: string;
-    adoptionId: string;
-    restoreCandidateDigest: string;
-    scopeDigest: string;
-    grantExpansion: false;
-    application: "not-performed";
-}>;
-export interface LeanOutcome {
-    population: string;
-    complete: boolean;
-    accepted: boolean | null;
-    repairAttempts: number | null;
-    escape: "confirmed" | "none-observed" | "unknown";
-    requirementsChanged: boolean;
-    decisionWaitMs: number | null;
-    questions: number | null;
-}
-export declare function summarizeLeanOutcomes(population: string, rows: readonly LeanOutcome[]): {
-    population: string;
-    firstPassAccepted: number;
-    firstPassDenominator: number;
-    incomplete: number;
-    confirmedEscapes: number;
-    changedRequirements: number;
-    recovery: {
-        known: number;
-        observed: number;
-        total: number;
-    };
-    decisionWait: {
-        known: number;
-        observed: number;
-        total: number;
-    };
-    questions: {
-        known: number;
-        observed: number;
-        total: number;
-    };
-    universalScore: null;
-};
-//# sourceMappingURL=adoption.d.ts.map

package/dist/vendor/adoption.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"adoption.d.ts","sourceRoot":"","sources":["../../src/vendor/adoption.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IACjI,uBAAuB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CACvF;AACD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IAAG,OAAO,EAAE,qBAAqB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE;AACrG,MAAM,WAAW,iBAAiB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AAC7G,MAAM,WAAW,aAAa;IAAG,gBAAgB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAC5J,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,CAM1E;AASD,yGAAyG;AACzG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,GAAG,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM;;;;;;;;;;;;;;GAWjI;AACD,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACnE,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,GAAG,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGxK;AASD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAC7E,yBAAyB,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAC;IACpE,0GAA0G;IAC1G,OAAO,EAAE,kBAAkB,GAAG,SAAS,GAAG,SAAS,CAAC;IACpD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IACvG,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AACD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB;;;;;;;;;;GAYpG;AACD,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,qBAAqB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACzP,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,SAAqB,GAAG,eAAe,CAKtK;AACD,6GAA6G;AAC7G,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,EACrI,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;;;;;;;GAO9E;AACD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/F,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1I;AACD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;EASrF"}

package/dist/vendor/adoption.js

@@ -1,102 +0,0 @@
-import { createHash } from "node:crypto";
-const SHA = /^[a-f0-9]{64}$/;
-const text = (x) => typeof x === "string" && x.length > 0 && x.length <= 512 && !/[\u0000-\u001f\u007f]/.test(x);
-const closed = (value, names) => {
-    if (!value || ![Object.prototype, null].includes(Object.getPrototypeOf(value)))
-        return false;
-    const fields = Object.getOwnPropertyDescriptors(value);
-    return Reflect.ownKeys(fields).length === names.length && Reflect.ownKeys(fields).every(key => typeof key === "string" && names.includes(key) && fields[key].enumerable && Object.hasOwn(fields[key], "value"));
-};
-const hash = (value) => createHash("sha256").update(JSON.stringify(Object.keys(value).sort().map(k => [k, value[k]]))).digest("hex");
-export function buildAdoptionBinding(input) {
-    if (!input || !closed(input, ["hypothesisDigest", "experimentDigest", "candidateDigest", "scopeDigest", "assessmentPolicyDigest", "rollbackCandidateDigest", "activationBoundary", "expiresAt"])
-        || ![input.hypothesisDigest, input.experimentDigest, input.candidateDigest, input.scopeDigest, input.assessmentPolicyDigest, input.rollbackCandidateDigest].every(s => typeof s === "string" && SHA.test(s))
-        || input.activationBoundary !== "next-orders" || !Number.isSafeInteger(input.expiresAt) || input.expiresAt < 0)
-        throw new Error("invalid scoped adoption binding");
-    const body = { version: "adoption-binding-v1", ...input };
-    return Object.freeze({ ...body, id: hash(body) });
-}
-function bindingValid(binding) {
-    const { version, id, ...input } = binding;
-    if (version !== "adoption-binding-v1" || buildAdoptionBinding(input).id !== id)
-        throw new Error("adoption binding changed");
-}
-function authorityValid(authority) {
-    return !!authority && text(authority.id) && Array.isArray(authority.adoptions) && Array.isArray(authority.rollbacks)
-        && authority.adoptions.length <= 256 && authority.rollbacks.length <= 256 && [...authority.adoptions, ...authority.rollbacks].every(id => typeof id === "string" && SHA.test(id));
-}
-/** Independent host declarations and independently verified eligible facts are required again at use. */
-export function authorizeAdoption(binding, authority, facts, now) {
-    bindingValid(binding);
-    if (!authorityValid(authority) || !authority.adoptions.includes(binding.id))
-        throw new Error("independent adoption authority required");
-    if (!Number.isSafeInteger(now) || now < 0 || now >= binding.expiresAt || !facts || !closed(facts, ["experimentDigest", "candidateDigest", "scopeDigest", "assessmentPolicyDigest", "eligible"]) || facts.eligible !== true
-        || facts.experimentDigest !== binding.experimentDigest || facts.candidateDigest !== binding.candidateDigest
-        || facts.scopeDigest !== binding.scopeDigest || facts.assessmentPolicyDigest !== binding.assessmentPolicyDigest)
-        throw new Error("adoption expired, ineligible or outside verified scope");
-    const body = { version: "adoption-receipt-v1", bindingId: binding.id, authorityId: authority.id, hypothesisDigest: binding.hypothesisDigest,
-        experimentDigest: binding.experimentDigest, candidateDigest: binding.candidateDigest, scopeDigest: binding.scopeDigest,
-        assessmentPolicyDigest: binding.assessmentPolicyDigest, rollbackCandidateDigest: binding.rollbackCandidateDigest,
-        activationBoundary: "next-orders", grantExpansion: false, expiresAt: binding.expiresAt };
-    return Object.freeze({ ...body, id: hash(body) });
-}
-export function validateAdoptionReceipt(receipt, binding, authority, facts, now) {
-    if (authorizeAdoption(binding, authority, facts, now).id !== receipt.id)
-        throw new Error("adoption receipt does not match current independent authority/facts");
-    receiptValid(receipt);
-}
-function receiptValid(receipt) {
-    const { id, ...body } = receipt;
-    if (!closed(receipt, ["version", "bindingId", "authorityId", "hypothesisDigest", "experimentDigest", "candidateDigest", "scopeDigest", "assessmentPolicyDigest", "rollbackCandidateDigest", "activationBoundary", "grantExpansion", "expiresAt", "id"])
-        || body.version !== "adoption-receipt-v1" || !text(body.authorityId) || body.activationBoundary !== "next-orders" || body.grantExpansion !== false || hash(body) !== id)
-        throw new Error("adoption receipt changed");
-    const binding = buildAdoptionBinding({ hypothesisDigest: body.hypothesisDigest, experimentDigest: body.experimentDigest, candidateDigest: body.candidateDigest,
-        scopeDigest: body.scopeDigest, assessmentPolicyDigest: body.assessmentPolicyDigest, rollbackCandidateDigest: body.rollbackCandidateDigest, activationBoundary: body.activationBoundary, expiresAt: body.expiresAt });
-    if (binding.id !== body.bindingId)
-        throw new Error("adoption receipt binding mismatch");
-}
-export function classifyProductionObservation(adoption, input) {
-    receiptValid(adoption);
-    if (!input || !text(input.id) || input.evidence.length > 256 || input.evidence.some(h => !SHA.test(h))
-        || ![input.originalRequirementDigest, input.currentRequirementDigest, input.candidateDigest, input.scopeDigest, input.observedArtifactDigest].every(h => typeof h === "string" && SHA.test(h))
-        || ![input.acceptanceDigest, input.acceptedArtifactDigest].every(h => h === null || (typeof h === "string" && SHA.test(h)))
-        || (input.acceptanceDigest === null) !== (input.acceptedArtifactDigest === null)
-        || !["confirmed-defect", "success", "unknown"].includes(input.outcome))
-        throw new Error("invalid production observation");
-    const state = input.adoptionId !== adoption.id || input.candidateDigest !== adoption.candidateDigest || input.scopeDigest !== adoption.scopeDigest ? "out-of-scope"
-        : input.originalRequirementDigest !== input.currentRequirementDigest ? "changed-requirements"
-            : input.acceptedArtifactDigest !== null && input.acceptedArtifactDigest !== input.observedArtifactDigest ? "changed-artifact"
-                : input.outcome === "confirmed-defect" && input.evidence.length ? input.acceptanceDigest === null ? "caught-defect" : "escape" : input.outcome === "success" ? "success" : "unknown";
-    return Object.freeze({ state, adoptionId: adoption.id, hypothesisDigest: adoption.hypothesisDigest, experimentDigest: adoption.experimentDigest, observationId: input.id, acceptanceDigest: input.acceptanceDigest, acceptedArtifactDigest: input.acceptedArtifactDigest, observedArtifactDigest: input.observedArtifactDigest, automaticRollback: false });
-}
-export function buildRollbackRequest(adoption, reason, evidence, expiresAt = adoption.expiresAt) {
-    receiptValid(adoption);
-    if (!Number.isSafeInteger(expiresAt) || expiresAt < 0 || !["operator-request", "confirmed-escape"].includes(reason) || !evidence.length || evidence.length > 256 || evidence.some(h => !SHA.test(h)))
-        throw new Error("invalid rollback request");
-    const body = { version: "rollback-request-v1", adoptionId: adoption.id, scopeDigest: adoption.scopeDigest, restoreCandidateDigest: adoption.rollbackCandidateDigest, reason, expiresAt, evidence: Object.freeze([...new Set(evidence)].sort()) };
-    return Object.freeze({ ...body, id: hash(body) });
-}
-/** This validates a recorded choice, not an automatic rollback action or a caller-created authority flag. */
-export function authorizeRollback(adoption, request, authority, now, current) {
-    receiptValid(adoption);
-    const { id, ...body } = request;
-    if (!authorityValid(authority) || authority.id !== adoption.authorityId || !authority.rollbacks.includes(id))
-        throw new Error("independent rollback authority required");
-    if (hash(body) !== id || request.version !== "rollback-request-v1" || request.adoptionId !== adoption.id || request.scopeDigest !== adoption.scopeDigest
-        || request.restoreCandidateDigest !== adoption.rollbackCandidateDigest || !Number.isSafeInteger(now) || now < 0 || !Number.isSafeInteger(request.expiresAt) || now >= request.expiresAt
-        || !current || current.adoptionId !== adoption.id || current.candidateDigest !== adoption.candidateDigest || current.scopeDigest !== adoption.scopeDigest)
-        throw new Error("rollback binding changed or expired");
-    return Object.freeze({ requestId: id, adoptionId: adoption.id, restoreCandidateDigest: request.restoreCandidateDigest, scopeDigest: adoption.scopeDigest, grantExpansion: false, application: "not-performed" });
-}
-export function summarizeLeanOutcomes(population, rows) {
-    if (!text(population) || rows.length > 10000 || rows.some(r => r.population !== population || typeof r.complete !== "boolean" || typeof r.requirementsChanged !== "boolean"
-        || ![true, false, null].includes(r.accepted) || !["confirmed", "none-observed", "unknown"].includes(r.escape)
-        || [r.repairAttempts, r.decisionWaitMs, r.questions].some(n => n !== null && (!Number.isSafeInteger(n) || n < 0))))
-        throw new Error("invalid or incomparable lean population");
-    const complete = rows.filter(r => r.complete && r.accepted !== null && r.repairAttempts !== null);
-    const observed = (field) => ({ known: rows.reduce((n, r) => n + (r[field] ?? 0), 0), observed: rows.filter(r => r[field] !== null).length, total: rows.length });
-    return { population, firstPassAccepted: complete.filter(r => r.accepted && r.repairAttempts === 0).length, firstPassDenominator: complete.length,
-        incomplete: rows.length - complete.length, confirmedEscapes: rows.filter(r => r.escape === "confirmed" && !r.requirementsChanged).length,
-        changedRequirements: rows.filter(r => r.requirementsChanged).length, recovery: observed("repairAttempts"), decisionWait: observed("decisionWaitMs"), questions: observed("questions"), universalScore: null };
-}
-//# sourceMappingURL=adoption.js.map