ws-spec-kit 0.1.0-beta.0

package/dist/storage/workflow-trust.js

@@ -0,0 +1,310 @@
+import { link, mkdir, open, readFile, stat, unlink } from "node:fs/promises";
+import { hostname } from "node:os";
+import path from "node:path";
+import { gitCommonDir } from "./git.js";
+const delay = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds));
+const TRUST_LOCK_STALE_MILLISECONDS = 30_000;
+export class WorkflowTrustStoreError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = "WorkflowTrustStoreError";
+    }
+}
+function journalError(message) {
+    throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_JOURNAL_INVALID", message);
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function hasExactKeys(value, keys) {
+    return Object.keys(value).length === keys.length && Object.keys(value).every((key) => keys.includes(key));
+}
+function isNonEmptyString(value) {
+    return typeof value === "string" && value !== "";
+}
+function isCanonicalIso(value) {
+    if (typeof value !== "string")
+        return false;
+    const milliseconds = Date.parse(value);
+    return Number.isFinite(milliseconds) && new Date(milliseconds).toISOString() === value;
+}
+function parseRequested(value, line) {
+    const keys = ["event", "requestId", "packageRef", "packageDigest", "capabilityDigest", "actor", "channel", "createdAt", "expiresAt"];
+    if (!hasExactKeys(value, keys)
+        || value.event !== "requested"
+        || !isNonEmptyString(value.requestId)
+        || !isNonEmptyString(value.packageRef)
+        || !isNonEmptyString(value.packageDigest)
+        || !isNonEmptyString(value.capabilityDigest)
+        || !isNonEmptyString(value.actor)
+        || value.channel !== "interactive"
+        || !isCanonicalIso(value.createdAt)
+        || !isCanonicalIso(value.expiresAt)
+        || value.createdAt >= value.expiresAt)
+        journalError(`Workflow 信任 journal 第 ${line} 行 requested 事件无效。`);
+    return {
+        event: "requested",
+        requestId: value.requestId,
+        packageRef: value.packageRef,
+        packageDigest: value.packageDigest,
+        capabilityDigest: value.capabilityDigest,
+        actor: value.actor,
+        channel: "interactive",
+        createdAt: value.createdAt,
+        expiresAt: value.expiresAt,
+    };
+}
+function parseDecided(value, line) {
+    const keys = ["event", "requestId", "decision", "actor", "decidedAt"];
+    if (!hasExactKeys(value, keys)
+        || value.event !== "decided"
+        || !isNonEmptyString(value.requestId)
+        || (value.decision !== "trusted" && value.decision !== "rejected")
+        || !isNonEmptyString(value.actor)
+        || !isCanonicalIso(value.decidedAt))
+        journalError(`Workflow 信任 journal 第 ${line} 行 decided 事件无效。`);
+    return { event: "decided", requestId: value.requestId, decision: value.decision, actor: value.actor, decidedAt: value.decidedAt };
+}
+function deriveRecord(request, decision) {
+    return {
+        requestId: request.requestId,
+        packageRef: request.packageRef,
+        packageDigest: request.packageDigest,
+        capabilityDigest: request.capabilityDigest,
+        decision: decision.decision,
+        actor: decision.actor,
+        decidedAt: decision.decidedAt,
+    };
+}
+async function readJournal(target) {
+    let content;
+    try {
+        content = await readFile(target, "utf8");
+    }
+    catch (caught) {
+        if (caught.code === "ENOENT")
+            return { requests: new Map(), decisions: new Map(), records: [] };
+        throw caught;
+    }
+    if (content !== "" && !content.endsWith("\n"))
+        journalError("Workflow 信任 journal 包含未完成的末尾事件。");
+    const requests = new Map();
+    const decisions = new Map();
+    const records = [];
+    const lines = content === "" ? [] : content.slice(0, -1).split("\n");
+    for (const [index, line] of lines.entries()) {
+        if (line === "")
+            journalError(`Workflow 信任 journal 第 ${index + 1} 行为空。`);
+        let value;
+        try {
+            value = JSON.parse(line);
+        }
+        catch {
+            journalError(`Workflow 信任 journal 第 ${index + 1} 行不是合法 JSON。`);
+        }
+        if (!isRecord(value) || (value.event !== "requested" && value.event !== "decided"))
+            journalError(`Workflow 信任 journal 第 ${index + 1} 行包含未知事件。`);
+        if (value.event === "requested") {
+            const request = parseRequested(value, index + 1);
+            if (requests.has(request.requestId))
+                journalError(`Workflow 信任 requestId ${request.requestId} 重复。`);
+            requests.set(request.requestId, request);
+            continue;
+        }
+        const decision = parseDecided(value, index + 1);
+        const request = requests.get(decision.requestId);
+        if (request === undefined)
+            journalError(`Workflow 信任决定 ${decision.requestId} 缺少 requested 事件。`);
+        if (decision.actor !== request.actor)
+            journalError(`Workflow 信任决定 ${decision.requestId} 的 actor 不匹配。`);
+        if (decision.decidedAt < request.createdAt || decision.decidedAt >= request.expiresAt)
+            journalError(`Workflow 信任决定 ${decision.requestId} 不在有效时间内。`);
+        const existing = decisions.get(decision.requestId);
+        if (existing !== undefined) {
+            if (existing.decision !== decision.decision || existing.actor !== decision.actor)
+                throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_DECISION_CONFLICT", "同一 Workflow 信任请求存在冲突决定。");
+            continue;
+        }
+        decisions.set(decision.requestId, decision);
+        records.push(deriveRecord(request, decision));
+    }
+    return { requests, decisions, records };
+}
+async function readTrustLock(lockPath) {
+    try {
+        const content = await readFile(lockPath, "utf8");
+        if (!content.endsWith("\n"))
+            return undefined;
+        const value = JSON.parse(content);
+        if (!isRecord(value)
+            || !hasExactKeys(value, ["version", "ownerToken", "pid", "hostname", "createdAt"])
+            || value.version !== 1
+            || !isNonEmptyString(value.ownerToken)
+            || typeof value.pid !== "number"
+            || !Number.isSafeInteger(value.pid)
+            || value.pid < 1
+            || !isNonEmptyString(value.hostname)
+            || !isCanonicalIso(value.createdAt))
+            return undefined;
+        return value;
+    }
+    catch {
+        return undefined;
+    }
+}
+function processIsAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (caught) {
+        return caught.code !== "ESRCH";
+    }
+}
+export async function workflowTrustPath(root) {
+    return path.join(await gitCommonDir(root), "wsspec", "trust", "workflow-packages.ndjson");
+}
+async function publishTrustLock(lockPath, owner) {
+    const temporaryPath = `${lockPath}.${owner.ownerToken}.tmp`;
+    const handle = await open(temporaryPath, "wx", 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(owner)}\n`, "utf8");
+        await handle.sync();
+        try {
+            await link(temporaryPath, lockPath);
+            return true;
+        }
+        catch (caught) {
+            if (caught.code === "EEXIST")
+                return false;
+            throw caught;
+        }
+    }
+    finally {
+        await handle.close();
+        await unlink(temporaryPath).catch(() => undefined);
+    }
+}
+async function withTrustLock(target, operation) {
+    const lockPath = `${target}.lock`;
+    await mkdir(path.dirname(target), { recursive: true });
+    const deadline = Date.now() + 5_000;
+    const owner = { version: 1, ownerToken: crypto.randomUUID(), pid: process.pid, hostname: hostname(), createdAt: new Date().toISOString() };
+    while (true) {
+        try {
+            if (await publishTrustLock(lockPath, owner))
+                break;
+            const existing = await readTrustLock(lockPath);
+            if (existing?.hostname === hostname() && !processIsAlive(existing.pid)) {
+                const lockStat = await stat(lockPath);
+                if (Date.now() - lockStat.mtimeMs >= TRUST_LOCK_STALE_MILLISECONDS)
+                    throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_STALE_LOCK", "检测到异常退出遗留的 Workflow 信任锁，请先恢复。");
+            }
+        }
+        catch (caught) {
+            if (caught instanceof WorkflowTrustStoreError)
+                throw caught;
+            throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_LOCKED", "Workflow 信任记录当前被其他进程占用。");
+        }
+        if (Date.now() >= deadline)
+            throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_LOCKED", "Workflow 信任记录当前被其他进程占用。");
+        await delay(10);
+    }
+    try {
+        return await operation();
+    }
+    finally {
+        const current = await readTrustLock(lockPath);
+        if (current?.ownerToken === owner.ownerToken)
+            await unlink(lockPath).catch(() => undefined);
+    }
+}
+async function appendJournalEvent(target, event) {
+    const handle = await open(target, "a", 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(event)}\n`, "utf8");
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function readWorkflowTrustRecords(root) {
+    return (await readJournal(await workflowTrustPath(root))).records;
+}
+export async function readWorkflowTrustRequest(root, requestId) {
+    return (await readJournal(await workflowTrustPath(root))).requests.get(requestId);
+}
+async function trustLockFileState(lockPath) {
+    try {
+        const value = await stat(lockPath, { bigint: true });
+        return { dev: value.dev, ino: value.ino, mtimeMs: value.mtimeMs, mtimeNs: value.mtimeNs, size: value.size };
+    }
+    catch (caught) {
+        if (caught.code === "ENOENT")
+            return undefined;
+        throw caught;
+    }
+}
+export async function recoverStaleWorkflowTrustLock(root) {
+    const target = await workflowTrustPath(root);
+    const lockPath = `${target}.lock`;
+    const first = await trustLockFileState(lockPath);
+    if (first === undefined)
+        return false;
+    if (Date.now() - Number(first.mtimeMs) < TRUST_LOCK_STALE_MILLISECONDS)
+        throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_LOCKED", "Workflow 信任锁尚未达到可恢复的 stale 阈值。");
+    const owner = await readTrustLock(lockPath);
+    await delay(10);
+    const second = await trustLockFileState(lockPath);
+    if (second === undefined || first.dev !== second.dev || first.ino !== second.ino || first.mtimeNs !== second.mtimeNs || first.size !== second.size)
+        throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_LOCKED", "Workflow 信任锁在恢复期间已经变化。");
+    if (owner?.hostname === hostname() && processIsAlive(owner.pid))
+        throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_LOCKED", "Workflow 信任锁的本机所有者仍然存活，不能抢占。");
+    try {
+        await unlink(lockPath);
+    }
+    catch {
+        throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_LOCKED", "Workflow 信任锁在恢复期间已经变化。");
+    }
+    return true;
+}
+export async function createWorkflowTrustRequest(root, request) {
+    const target = await workflowTrustPath(root);
+    await withTrustLock(target, async () => {
+        const state = await readJournal(target);
+        const existing = state.requests.get(request.requestId);
+        if (existing !== undefined) {
+            if (JSON.stringify(existing) === JSON.stringify(request))
+                return;
+            throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_REQUEST_INVALID", "Workflow 信任 requestId 已绑定其他请求。");
+        }
+        parseRequested(request, state.requests.size + state.decisions.size + 1);
+        await appendJournalEvent(target, request);
+    });
+}
+export async function decideWorkflowTrustRequest(root, input) {
+    const target = await workflowTrustPath(root);
+    return withTrustLock(target, async () => {
+        const state = await readJournal(target);
+        const request = state.requests.get(input.requestId);
+        if (request === undefined || request.packageRef !== input.packageRef || request.packageDigest !== input.packageDigest || request.capabilityDigest !== input.capabilityDigest)
+            throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_REQUEST_INVALID", "Workflow Package 信任请求不存在或已变化。");
+        if (request.actor !== input.actor)
+            throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_ACTOR_INVALID", "Workflow Package 信任决定 actor 与请求不匹配。");
+        const existing = state.decisions.get(input.requestId);
+        if (existing !== undefined) {
+            if (existing.decision !== input.decision)
+                throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_DECISION_CONFLICT", "同一 Workflow 信任请求不能记录冲突决定。");
+            return deriveRecord(request, existing);
+        }
+        if (!isCanonicalIso(input.decidedAt) || input.decidedAt < request.createdAt || input.decidedAt >= request.expiresAt || request.expiresAt <= new Date().toISOString())
+            throw new WorkflowTrustStoreError("WSSPEC_WORKFLOW_TRUST_REQUEST_INVALID", "Workflow Package 信任请求已过期或时间无效。");
+        const decision = { event: "decided", requestId: input.requestId, decision: input.decision, actor: input.actor, decidedAt: input.decidedAt };
+        await appendJournalEvent(target, decision);
+        return deriveRecord(request, decision);
+    });
+}
+//# sourceMappingURL=workflow-trust.js.map

package/dist/storage/workflow-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-trust.js","sourceRoot":"","sources":["../../src/storage/workflow-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1G,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAE7C,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,IAAwB,EAAE,OAAe;QAAI,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAA1E,SAAI,GAAJ,IAAI,CAAoB;QAAmD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IAAC,CAAC;CACzI;AA8BD,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,EAAE,OAAO,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,IAAY;IAClE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;IAC9I,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC;WACzB,KAAK,CAAC,KAAK,KAAK,WAAW;WAC3B,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;WAClC,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;WACnC,CAAC,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;WACtC,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC;WACzC,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;WAC9B,KAAK,CAAC,OAAO,KAAK,aAAa;WAC/B,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;WAChC,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;WAChC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;QAAE,YAAY,CAAC,yBAAyB,IAAI,oBAAoB,CAAC,CAAC;IACzG,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAU,CAAC;IAC/E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC;WACzB,KAAK,CAAC,KAAK,KAAK,SAAS;WACzB,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;WAClC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC;WAC/D,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;WAC9B,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,YAAY,CAAC,yBAAyB,IAAI,kBAAkB,CAAC,CAAC;IACrG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AACpI,CAAC;AAED,SAAS,YAAY,CAAC,OAAoC,EAAE,QAAmC;IAC7F,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACjD,OAAO,MAAM,EAAE,CAAC;QACd,IAAK,MAAgC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3H,MAAM,MAAM,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,YAAY,CAAC,iCAAiC,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,IAAI,KAAK,EAAE;YAAE,YAAY,CAAC,yBAAyB,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACjC,MAAM,CAAC;YAAC,YAAY,CAAC,yBAAyB,KAAK,GAAG,CAAC,cAAc,CAAC,CAAC;QAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;YAAE,YAAY,CAAC,yBAAyB,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;QAChJ,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;gBAAE,YAAY,CAAC,yBAAyB,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC;YACpG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,YAAY,CAAC,iBAAiB,QAAQ,CAAC,SAAS,mBAAmB,CAAC,CAAC;QAChG,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAAE,YAAY,CAAC,iBAAiB,QAAQ,CAAC,SAAS,eAAe,CAAC,CAAC;QACvG,IAAI,QAAQ,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,iBAAiB,QAAQ,CAAC,SAAS,WAAW,CAAC,CAAC;QACpJ,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;gBAAE,MAAM,IAAI,uBAAuB,CAAC,yCAAyC,EAAE,yBAAyB,CAAC,CAAC;YAC1L,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;eACf,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;eAC/E,KAAK,CAAC,OAAO,KAAK,CAAC;eACnB,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;eACnC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;eAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;eAChC,KAAK,CAAC,GAAG,GAAG,CAAC;eACb,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;eACjC,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,KAAkC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC1C,OAAO,MAAM,EAAE,CAAC;QAAC,OAAQ,MAAgC,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAqB;IACrE,MAAM,aAAa,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAK,MAAgC,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtE,MAAM,MAAM,CAAC;QACf,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAI,MAAc,EAAE,SAA2B;IACzE,MAAM,QAAQ,GAAG,GAAG,MAAM,OAAO,CAAC;IAClC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACpC,MAAM,KAAK,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC3J,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,MAAM,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAAE,MAAM;YACnD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,IAAI,6BAA6B;oBAAE,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,EAAE,+BAA+B,CAAC,CAAC;YAC7K,CAAC;QACH,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,MAAM,YAAY,uBAAuB;gBAAE,MAAM,MAAM,CAAC;YAC5D,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;QACzH,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,MAAM,SAAS,EAAE,CAAC;IAAC,CAAC;YACzB,CAAC;QACP,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU;YAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,KAA8D;IAC9G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAClF,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY;IACzD,OAAO,CAAC,MAAM,WAAW,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,SAAiB;IAC5E,OAAO,CAAC,MAAM,WAAW,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACpF,CAAC;AAID,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9G,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,IAAK,MAAgC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC1E,MAAM,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAY;IAC9D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,MAAM,OAAO,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,6BAA6B;QAAE,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC;IAC5K,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,EAAE,wBAAwB,CAAC,CAAC;IAChP,IAAI,KAAK,EAAE,QAAQ,KAAK,QAAQ,EAAE,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,CAAC;IACnK,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC/B,MAAM,CAAC;QAAC,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,EAAE,wBAAwB,CAAC,CAAC;IAAC,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY,EAAE,OAAoC;IACjG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO;YACjE,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,EAAE,gCAAgC,CAAC,CAAC;QAC/G,CAAC;QACD,cAAc,CAAC,OAA6C,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC9G,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY,EAAE,KAAsC;IACnG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB;YAAE,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,EAAE,+BAA+B,CAAC,CAAC;QAC1R,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,qCAAqC,EAAE,qCAAqC,CAAC,CAAC;QACnJ,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,uBAAuB,CAAC,yCAAyC,EAAE,2BAA2B,CAAC,CAAC;YACpJ,OAAO,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,EAAE,gCAAgC,CAAC,CAAC;QACnR,MAAM,QAAQ,GAA8B,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACvK,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/workflow-package/loader.d.ts

@@ -0,0 +1,12 @@
+import type { WorkflowPackage } from "./types.js";
+export interface LoadWorkflowPackageInput {
+    root: string;
+    ref: string;
+}
+interface BuiltinProvenance {
+    ref: string;
+    snapshot: string;
+}
+export declare function builtinWorkflowPackageProvenance(pkg: WorkflowPackage): Promise<BuiltinProvenance | undefined>;
+export declare function loadWorkflowPackage(input: LoadWorkflowPackageInput): Promise<WorkflowPackage>;
+export {};

package/dist/workflow-package/loader.js

@@ -0,0 +1,249 @@
+import { lstat, readFile, readdir, stat } from "node:fs/promises";
+import path from "node:path";
+import { parse } from "yaml";
+import { sha256 } from "../domain/digests.js";
+import { builtinResourcesRoot, loadBuiltinCatalog } from "../resources/catalog.js";
+import { lockWorkflowPackage, workflowPackageContentDigest } from "./lock.js";
+import { assertContainedPath } from "./path-boundary.js";
+import { WorkflowPackageError } from "./types.js";
+import { parseProfileV1, parseWorkflowV1 } from "./workflow-v1.js";
+const builtinProvenance = new WeakMap();
+function normalizedPackageSnapshot(pkg) {
+    return JSON.stringify({
+        ref: pkg.ref,
+        root: pkg.root,
+        manifest: pkg.manifest,
+        workflow: pkg.workflow,
+        profiles: [...pkg.profiles.entries()].sort(([left], [right]) => left.localeCompare(right)),
+        packageSkills: [...pkg.packageSkills.entries()].sort(([left], [right]) => left.localeCompare(right)),
+        files: [...pkg.files].sort((left, right) => left.path.localeCompare(right.path)),
+        contentDigest: pkg.contentDigest,
+    });
+}
+export async function builtinWorkflowPackageProvenance(pkg) {
+    const provenance = builtinProvenance.get(pkg);
+    if (provenance === undefined || provenance.ref !== pkg.ref || !pkg.ref.startsWith("builtin://"))
+        return undefined;
+    const canonical = await loadWorkflowPackage({ root: pkg.root, ref: provenance.ref });
+    const currentSnapshot = normalizedPackageSnapshot(pkg);
+    const canonicalSnapshot = normalizedPackageSnapshot(canonical);
+    if (currentSnapshot !== provenance.snapshot || currentSnapshot !== canonicalSnapshot)
+        return undefined;
+    return provenance;
+}
+function error(code, message) { throw new WorkflowPackageError(code, message); }
+function normalizeRef(ref) {
+    const match = /^(builtin|project):\/\/workflows\/([^/]+)$/.exec(ref);
+    if (!match || match[2] === undefined || !/^[a-z0-9][a-z0-9-]*$/.test(match[2]))
+        error("WSSPEC_WORKFLOW_PACKAGE_PATH_INVALID", "Workflow Package 引用必须是受支持来源下的单层逻辑名称。");
+    return { source: match[1], id: match[2] };
+}
+async function assertContained(root, target) {
+    await assertContainedPath(root, target, {
+        invalid: "WSSPEC_WORKFLOW_PACKAGE_PATH_INVALID",
+        escape: "WSSPEC_WORKFLOW_PACKAGE_PATH_ESCAPE",
+    }, "Workflow Package 路径");
+}
+async function readYaml(filename, missingCode, label) {
+    try {
+        return parse(await readFile(filename, "utf8"));
+    }
+    catch (caught) {
+        if (caught.code === "ENOENT")
+            error(missingCode, `Workflow Package 缺少 ${label}。`);
+        throw caught;
+    }
+}
+function record(value, code, label, allowed) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        error(code, `${label} 必须是对象。`);
+    const result = value;
+    if (Object.keys(result).some((key) => !allowed.includes(key)))
+        error(code, `${label} 包含不支持字段。`);
+    return result;
+}
+function string(value, code, label) {
+    if (typeof value !== "string" || value === "")
+        error(code, `${label} 必须是非空字符串。`);
+    return value;
+}
+function names(value, code, label) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || !/^[a-z0-9][a-z0-9-]*$/.test(item)))
+        error(code, `${label} 必须是逻辑名称数组。`);
+    return [...new Set(value)].sort();
+}
+function strings(value, code, label) {
+    if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || item === ""))
+        error(code, `${label} 必须是非空字符串数组。`);
+    return [...value];
+}
+async function collectTreeFiles(root, relativeDirectory, optionalRoot) {
+    const directory = path.join(root, relativeDirectory);
+    try {
+        await assertContained(root, directory);
+    }
+    catch (caught) {
+        if (optionalRoot && caught.code === "ENOENT")
+            return [];
+        throw caught;
+    }
+    const entries = await readdir(directory, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        const relative = path.posix.join(relativeDirectory, entry.name);
+        const absolute = path.join(root, relative);
+        await assertContained(root, absolute);
+        const target = await stat(absolute);
+        if (target.isDirectory())
+            files.push(...await collectTreeFiles(root, relative, false));
+        else {
+            const source = await lstat(absolute);
+            if (source.isFile() || source.isSymbolicLink())
+                files.push(relative);
+        }
+    }
+    return files;
+}
+async function collectFile(root, relative, missingCode = "WSSPEC_WORKFLOW_PACKAGE_FILE_MISSING") {
+    const absolute = path.join(root, relative);
+    try {
+        await assertContained(root, absolute);
+    }
+    catch (caught) {
+        if (caught.code === "ENOENT")
+            error(missingCode, `Workflow Package 缺少 ${relative}。`);
+        throw caught;
+    }
+    if (!(await stat(absolute)).isFile())
+        error("WSSPEC_WORKFLOW_PACKAGE_FILE_INVALID", `Package 文件 ${relative} 不是普通文件。`);
+    return { path: relative.split(path.sep).join("/"), digest: sha256(await readFile(absolute)) };
+}
+function parseManifest(value) {
+    const code = "WSSPEC_WORKFLOW_PACKAGE_MANIFEST_INVALID";
+    const source = record(value, code, "manifest.yaml", ["version", "id", "description", "entry", "profiles", "skills", "capabilities", "externalSideEffects", "connectors"]);
+    if (source.version !== 1)
+        error("WSSPEC_WORKFLOW_PACKAGE_VERSION_UNSUPPORTED", "只支持 Workflow Package Manifest v1。");
+    if (string(source.entry, code, "Manifest entry") !== "workflow.yaml")
+        error("WSSPEC_WORKFLOW_PACKAGE_PATH_INVALID", "Manifest entry 必须为 workflow.yaml。");
+    const description = source.description === undefined ? undefined : string(source.description, code, "Manifest description");
+    return { version: 1, id: string(source.id, code, "Manifest id"), ...(description === undefined ? {} : { description }), entry: "workflow.yaml", profiles: names(source.profiles, code, "Manifest profiles"), skills: names(source.skills, code, "Manifest skills"), capabilities: names(source.capabilities, code, "Manifest capabilities"), externalSideEffects: names(source.externalSideEffects, code, "Manifest externalSideEffects"), connectors: names(source.connectors, code, "Manifest connectors") };
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === "object") {
+        if (value instanceof Map) {
+            for (const [key, item] of value) {
+                deepFreeze(key);
+                deepFreeze(item);
+            }
+            Object.defineProperties(value, { set: { value: () => { throw new TypeError("不可修改内置 Workflow Package 快照。"); } }, delete: { value: () => { throw new TypeError("不可修改内置 Workflow Package 快照。"); } }, clear: { value: () => { throw new TypeError("不可修改内置 Workflow Package 快照。"); } } });
+        }
+        else
+            for (const item of Object.values(value))
+                deepFreeze(item);
+        Object.freeze(value);
+    }
+    return value;
+}
+function parseFile(value) {
+    const source = record(value, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock files 项", ["path", "digest"]);
+    return { path: string(source.path, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock files.path"), digest: string(source.digest, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock files.digest") };
+}
+function parseLockSkill(value) {
+    const source = record(value, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock packageSkills 项", ["ref", "digest"]);
+    return { ref: string(source.ref, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock packageSkills.ref"), digest: string(source.digest, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock packageSkills.digest") };
+}
+async function validateExistingLock(root, expected) {
+    const filename = path.join(root, "workflow.lock");
+    let value;
+    try {
+        value = await readYaml(filename, "WSSPEC_WORKFLOW_PACKAGE_LOCK_MISSING", "workflow.lock");
+    }
+    catch (caught) {
+        if (caught.code === "WSSPEC_WORKFLOW_PACKAGE_LOCK_MISSING")
+            return;
+        throw caught;
+    }
+    const source = record(value, "WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock", ["version", "contentDigest", "files", "packageSkills"]);
+    if (source.version !== 1 || typeof source.contentDigest !== "string" || !Array.isArray(source.files) || !Array.isArray(source.packageSkills))
+        error("WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock 包含不支持或无效字段。");
+    const lock = { version: 1, contentDigest: source.contentDigest, files: source.files.map(parseFile), packageSkills: source.packageSkills.map(parseLockSkill) };
+    if (JSON.stringify(lock) !== JSON.stringify(expected))
+        error("WSSPEC_WORKFLOW_PACKAGE_LOCK_INVALID", "workflow.lock 与当前 Package 内容不一致。");
+}
+function validatePackageSkillReferences(workflow, packageSkills) {
+    const visit = (steps) => {
+        for (const step of steps) {
+            for (const binding of step.skills ?? [])
+                if (binding.ref.startsWith("package://skills/") && !packageSkills.has(binding.ref))
+                    error("WSSPEC_WORKFLOW_PACKAGE_SKILL_UNDECLARED", "Workflow 引用了 Manifest 未声明的 Package Skill。");
+            visit(step.steps ?? []);
+        }
+    };
+    visit(workflow.steps);
+}
+export async function loadWorkflowPackage(input) {
+    const parsedRef = normalizeRef(input.ref);
+    const sourceRoot = parsedRef.source === "builtin" ? builtinResourcesRoot() : path.resolve(input.root);
+    if (parsedRef.source === "builtin" && !(await loadBuiltinCatalog()).workflows.some((workflow) => workflow.workflow.id === parsedRef.id))
+        error("WSSPEC_WORKFLOW_PACKAGE_NOT_FOUND", "内置 Workflow Package 不存在。");
+    let packagesRoot;
+    if (parsedRef.source === "builtin") {
+        packagesRoot = path.join(sourceRoot, "workflows");
+        await assertContained(sourceRoot, packagesRoot);
+    }
+    else {
+        const projectConfigurationRoot = path.join(sourceRoot, ".wsspec");
+        await assertContained(sourceRoot, projectConfigurationRoot);
+        packagesRoot = path.join(projectConfigurationRoot, "workflows");
+        await assertContained(projectConfigurationRoot, packagesRoot);
+    }
+    const packageRoot = path.resolve(packagesRoot, parsedRef.id);
+    await assertContained(packagesRoot, packageRoot);
+    const manifest = parseManifest(await readYaml(path.join(packageRoot, "manifest.yaml"), "WSSPEC_WORKFLOW_PACKAGE_MANIFEST_MISSING", "manifest.yaml"));
+    const workflow = parseWorkflowV1(await readYaml(path.join(packageRoot, manifest.entry), "WSSPEC_WORKFLOW_PACKAGE_WORKFLOW_MISSING", manifest.entry));
+    if (manifest.id !== workflow.workflow.id)
+        error("WSSPEC_WORKFLOW_PACKAGE_MANIFEST_INVALID", "Manifest 与 Workflow 的 id 必须一致。");
+    const profiles = new Map();
+    for (const id of manifest.profiles) {
+        const profile = parseProfileV1(await readYaml(path.join(packageRoot, "profiles", `${id}.yaml`), "WSSPEC_WORKFLOW_PACKAGE_PROFILE_MISSING", `profiles/${id}.yaml`));
+        if (profile.profile.id !== id || profile.profile.workflow !== workflow.workflow.id)
+            error("WSSPEC_WORKFLOW_PACKAGE_PROFILE_INVALID", "Profile 必须绑定当前 Workflow。");
+        profiles.set(id, profile);
+    }
+    const packageSkills = new Map();
+    const allFiles = new Map();
+    const add = (file) => allFiles.set(file.path, file);
+    add(await collectFile(packageRoot, "manifest.yaml", "WSSPEC_WORKFLOW_PACKAGE_MANIFEST_MISSING"));
+    add(await collectFile(packageRoot, manifest.entry, "WSSPEC_WORKFLOW_PACKAGE_WORKFLOW_MISSING"));
+    for (const id of profiles.keys())
+        add(await collectFile(packageRoot, path.posix.join("profiles", `${id}.yaml`), "WSSPEC_WORKFLOW_PACKAGE_PROFILE_MISSING"));
+    for (const id of manifest.skills) {
+        const skillDirectory = path.posix.join("skills", id);
+        const skillFiles = new Map();
+        for (const relative of await collectTreeFiles(packageRoot, skillDirectory, true)) {
+            const file = await collectFile(packageRoot, relative);
+            skillFiles.set(file.path, file);
+        }
+        const entrypoint = path.posix.join(skillDirectory, "SKILL.md");
+        const entryFile = await collectFile(packageRoot, entrypoint, "WSSPEC_WORKFLOW_PACKAGE_SKILL_MISSING");
+        skillFiles.set(entryFile.path, entryFile);
+        for (const file of skillFiles.values())
+            add(file);
+        packageSkills.set(`package://skills/${id}`, { entrypoint: path.join(packageRoot, entrypoint), digest: workflowPackageContentDigest([...skillFiles.values()]) });
+    }
+    validatePackageSkillReferences(workflow, packageSkills);
+    for (const directory of ["schemas", "templates"])
+        for (const relative of await collectTreeFiles(packageRoot, directory, true))
+            add(await collectFile(packageRoot, relative));
+    const files = [...allFiles.values()].sort((left, right) => left.path.localeCompare(right.path));
+    const pkg = { ref: input.ref, root: packageRoot, manifest, workflow, profiles, packageSkills, files, contentDigest: workflowPackageContentDigest(files) };
+    await validateExistingLock(packageRoot, lockWorkflowPackage(pkg));
+    if (parsedRef.source === "builtin") {
+        builtinProvenance.set(pkg, { ref: pkg.ref, snapshot: normalizedPackageSnapshot(pkg) });
+        return deepFreeze(pkg);
+    }
+    return pkg;
+}
+//# sourceMappingURL=loader.js.map

package/dist/workflow-package/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/workflow-package/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAKnE,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAsC,CAAC;AAE5E,SAAS,yBAAyB,CAAC,GAAoB;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1F,aAAa,EAAE,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACpG,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,GAAoB;IACzE,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAClH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,eAAe,KAAK,UAAU,CAAC,QAAQ,IAAI,eAAe,KAAK,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,KAAK,CAAC,IAAwB,EAAE,OAAe,IAAW,MAAM,IAAI,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAEnH,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,4CAA4C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,sCAAsC,EAAE,sCAAsC,CAAC,CAAC;IACtK,OAAO,EAAE,MAAM,EAAE,KAAM,CAAC,CAAC,CAA2B,EAAE,EAAE,EAAE,KAAM,CAAC,CAAC,CAAE,EAAE,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IACzD,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE;QACtC,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,qCAAqC;KAC9C,EAAE,qBAAqB,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB,EAAE,WAA+B,EAAE,KAAa;IACtF,IAAI,CAAC;QAAC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IACvD,OAAO,MAAM,EAAE,CAAC;QACd,IAAK,MAAgC,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,WAAW,EAAE,uBAAuB,KAAK,GAAG,CAAC,CAAC;QAC7G,MAAM,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAwB,EAAE,KAAa,EAAE,OAA0B;IACjG,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAwB,EAAE,KAAa;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAwB,EAAE,KAAa;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IACtJ,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAwB,EAAE,KAAa;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC;QAAE,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAChI,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,iBAAyB,EAAE,YAAqB;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACrD,IAAI,CAAC;QAAC,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAC/C,OAAO,MAAM,EAAE,CAAC;QAAC,IAAI,YAAY,IAAK,MAAgC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC;IAAC,CAAC;IACpH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;aAClF,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,cAAkC,sCAAsC;IACjI,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QAAC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC9C,OAAO,MAAM,EAAE,CAAC;QACd,IAAK,MAAgC,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,WAAW,EAAE,uBAAuB,QAAQ,GAAG,CAAC,CAAC;QAChH,MAAM,MAAM,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,sCAAsC,EAAE,cAAc,QAAQ,UAAU,CAAC,CAAC;IACtH,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,0CAAmD,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1K,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,KAAK,CAAC,6CAA6C,EAAE,mCAAmC,CAAC,CAAC;IACpH,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,eAAe;QAAE,KAAK,CAAC,sCAAsC,EAAE,mCAAmC,CAAC,CAAC;IACzJ,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAC5H,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,uBAAuB,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,EAAE,8BAA8B,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC;AACjf,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;YAAC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;;YACtX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sCAAsC,EAAE,uBAAuB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClH,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sCAAsC,EAAE,0BAA0B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sCAAsC,EAAE,4BAA4B,CAAC,EAAE,CAAC;AAChN,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sCAAsC,EAAE,+BAA+B,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,sCAAsC,EAAE,iCAAiC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sCAAsC,EAAE,oCAAoC,CAAC,EAAE,CAAC;AAC7N,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,QAA6B;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;IAClG,OAAO,MAAM,EAAE,CAAC;QAAC,IAAK,MAA+B,CAAC,IAAI,KAAK,sCAAsC;YAAE,OAAO;QAAC,MAAM,MAAM,CAAC;IAAC,CAAC;IAC9H,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,sCAAsC,EAAE,eAAe,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9I,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,KAAK,CAAC,sCAAsC,EAAE,2BAA2B,CAAC,CAAC;IACzN,MAAM,IAAI,GAAwB,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IACnL,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,sCAAsC,EAAE,kCAAkC,CAAC,CAAC;AAC3I,CAAC;AAED,SAAS,8BAA8B,CAAC,QAA4B,EAAE,aAAkE;IACtI,MAAM,KAAK,GAAG,CAAC,KAAqB,EAAQ,EAAE;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;gBAAE,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,KAAK,CAAC,0CAA0C,EAAE,2CAA2C,CAAC,CAAC;YAC5N,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACvE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtG,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;QAAE,KAAK,CAAC,mCAAmC,EAAE,0BAA0B,CAAC,CAAC;IAChN,IAAI,YAAoB,CAAC;IACzB,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,eAAe,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;QAC5D,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAChE,MAAM,eAAe,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7D,MAAM,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,0CAA0C,EAAE,eAAe,CAAC,CAAC,CAAC;IACrJ,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,0CAA0C,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrJ,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,0CAA0C,EAAE,gCAAgC,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,yCAAyC,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACnK,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,KAAK,CAAC,yCAAyC,EAAE,0BAA0B,CAAC,CAAC;QACjK,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkD,CAAC;IAChF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,IAAyB,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzE,GAAG,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,eAAe,EAAE,0CAA0C,CAAC,CAAC,CAAC;IACjG,GAAG,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC,CAAC;IAChG,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,yCAAyC,CAAC,CAAC,CAAC;IAC5J,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;QAC1D,KAAK,MAAM,QAAQ,IAAI,MAAM,gBAAgB,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACtD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,UAAU,EAAE,uCAAuC,CAAC,CAAC;QACtG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClK,CAAC;IACD,8BAA8B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxD,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QAAE,KAAK,MAAM,QAAQ,IAAI,MAAM,gBAAgB,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC;YAAE,GAAG,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7K,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAoB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3K,MAAM,oBAAoB,CAAC,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IACvJ,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/workflow-package/lock.d.ts

@@ -0,0 +1,6 @@
+import type { WorkflowPackage, WorkflowPackageLock } from "./types.js";
+export declare function lockWorkflowPackage(pkg: WorkflowPackage): WorkflowPackageLock;
+export declare function workflowPackageContentDigest(files: Array<{
+    path: string;
+    digest: string;
+}>): string;

package/dist/workflow-package/lock.js

@@ -0,0 +1,12 @@
+import { sha256 } from "../domain/digests.js";
+export function lockWorkflowPackage(pkg) {
+    const files = [...pkg.files].sort((left, right) => left.path.localeCompare(right.path));
+    const packageSkills = [...pkg.packageSkills.entries()]
+        .map(([ref, skill]) => ({ ref, digest: skill.digest }))
+        .sort((left, right) => left.ref.localeCompare(right.ref));
+    return { version: 1, contentDigest: pkg.contentDigest, files, packageSkills };
+}
+export function workflowPackageContentDigest(files) {
+    return sha256(`${JSON.stringify({ version: 1, files: [...files].sort((left, right) => left.path.localeCompare(right.path)) })}\n`);
+}
+//# sourceMappingURL=lock.js.map