@a5c-ai/genty-platform 5.1.1-staging.0007199a1cb2

package/dist/orchestration/registry.js

@@ -0,0 +1,148 @@
+"use strict";
+/**
+ * Provider registry for orchestration abstractions.
+ *
+ * Each provider type is stored in a named map. Callers can register
+ * multiple implementations and retrieve them by name. When no name is
+ * supplied, the first registered provider is returned.
+ *
+ * If no provider has been registered for a requested type, the getter
+ * throws immediately -- there are no fallbacks.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOrchestrationRegistry = createOrchestrationRegistry;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const crypto = __importStar(require("node:crypto"));
+const defaultOrchestrationProvider_1 = require("./defaultOrchestrationProvider");
+function createDefaultFilesystemJournal() {
+    return {
+        async loadEvents(runDir) {
+            const journalDir = path.join(runDir, "journal");
+            let files;
+            try {
+                files = await fs.promises.readdir(journalDir);
+            }
+            catch {
+                return [];
+            }
+            const jsonFiles = files.filter(f => f.endsWith(".json")).sort();
+            const events = [];
+            for (const file of jsonFiles) {
+                const content = await fs.promises.readFile(path.join(journalDir, file), "utf8");
+                const parsed = JSON.parse(content);
+                events.push({ type: parsed.type, timestamp: parsed.recordedAt || parsed.timestamp, data: parsed.data });
+            }
+            return events;
+        },
+        async appendEvent(runDir, event) {
+            const journalDir = path.join(runDir, "journal");
+            await fs.promises.mkdir(journalDir, { recursive: true });
+            const existing = await fs.promises.readdir(journalDir).catch(() => []);
+            const nextSeq = existing.filter(f => f.endsWith(".json")).length + 1;
+            const seqStr = nextSeq.toString().padStart(6, "0");
+            const ulid = crypto.randomUUID().replace(/-/g, "").slice(0, 26).toUpperCase();
+            await fs.promises.writeFile(path.join(journalDir, `${seqStr}.${ulid}.json`), JSON.stringify({ type: event.type, recordedAt: event.timestamp, data: event.data, checksum: crypto.createHash("sha256").update(event.type).digest("hex") }, null, 2));
+        },
+    };
+}
+// ── Implementation ──────────────────────────────────────────────────────
+/**
+ * Typed helper that manages a single provider-type map and exposes
+ * register / get semantics with insertion-order first-wins.
+ */
+class ProviderMap {
+    providers = new Map();
+    label;
+    constructor(label) {
+        this.label = label;
+    }
+    register(name, provider) {
+        this.providers.set(name, provider);
+    }
+    get(name) {
+        if (name !== undefined) {
+            const p = this.providers.get(name);
+            if (!p) {
+                throw new Error(`No ${this.label} provider registered with name "${name}". ` +
+                    `Registered: [${[...this.providers.keys()].join(", ")}]`);
+            }
+            return p;
+        }
+        // Return the first registered provider.
+        const first = this.providers.values().next();
+        if (first.done) {
+            throw new Error(`No ${this.label} provider registered. ` +
+                `Call registry.register${capitalize(this.label)}() before accessing it.`);
+        }
+        return first.value;
+    }
+    names() {
+        return [...this.providers.keys()];
+    }
+}
+function capitalize(s) {
+    return s.charAt(0).toUpperCase() + s.slice(1);
+}
+/** Create a new orchestration registry with a default filesystem journal. */
+function createOrchestrationRegistry() {
+    const orchestration = new ProviderMap("orchestration");
+    const journal = new ProviderMap("journal");
+    // Register defaults so API functions and the genty runtime work without
+    // explicit provider registration (CLI tools, tests, standalone scripts).
+    // The plugin's register.ts can still override these with named providers.
+    journal.register("fs", createDefaultFilesystemJournal());
+    orchestration.register("babysitter", (0, defaultOrchestrationProvider_1.createDefaultOrchestrationProvider)());
+    const governance = new ProviderMap("governance");
+    const agentDiscovery = new ProviderMap("agentDiscovery");
+    const session = new ProviderMap("session");
+    const processDefinition = new ProviderMap("processDefinition");
+    return {
+        registerOrchestration: (n, p) => orchestration.register(n, p),
+        registerJournal: (n, p) => journal.register(n, p),
+        registerGovernance: (n, p) => governance.register(n, p),
+        registerAgentDiscovery: (n, p) => agentDiscovery.register(n, p),
+        registerSession: (n, p) => session.register(n, p),
+        registerProcessDefinition: (n, p) => processDefinition.register(n, p),
+        getOrchestration: (n) => orchestration.get(n),
+        getJournal: (n) => journal.get(n),
+        getGovernance: (n) => governance.get(n),
+        getAgentDiscovery: (n) => agentDiscovery.get(n),
+        getSession: (n) => session.get(n),
+        getProcessDefinition: (n) => processDefinition.get(n),
+        listProviders: () => orchestration.names(),
+    };
+}

package/dist/plugins/ccCompatibility.d.ts

@@ -0,0 +1,79 @@
+/**
+ * CC Plugin Compatibility Layer (GAP-ECO-001).
+ *
+ * Translates Claude Code plugin manifests into genty extension format,
+ * enabling CC plugins to run inside the genty agent platform.
+ */
+export interface CcSkill {
+    name: string;
+    description?: string;
+    trigger?: string;
+}
+export interface CcHook {
+    event: string;
+    handler: string;
+    priority?: number;
+}
+export interface CcCommand {
+    name: string;
+    description?: string;
+    handler: string;
+}
+export interface CcMcpServer {
+    name: string;
+    transport: 'stdio' | 'sse' | 'http';
+    command?: string;
+    url?: string;
+}
+export interface CcPluginManifest {
+    name: string;
+    version: string;
+    skills?: CcSkill[];
+    hooks?: CcHook[];
+    commands?: CcCommand[];
+    mcpServers?: CcMcpServer[];
+}
+export interface GentyExtensionCommand {
+    id: string;
+    label: string;
+    description?: string;
+    source: 'cc-skill' | 'cc-command';
+}
+export interface GentyExtensionEvent {
+    id: string;
+    ccEvent: string;
+    priority: number;
+    handler: string;
+}
+export interface GentyMcpConfig {
+    name: string;
+    transport: string;
+    endpoint: string;
+}
+export interface GentyExtension {
+    id: string;
+    version: string;
+    commands: GentyExtensionCommand[];
+    events: GentyExtensionEvent[];
+    mcpConfigs: GentyMcpConfig[];
+}
+export interface CompatibilityReport {
+    compatible: boolean;
+    warnings: string[];
+    unsupportedFeatures: string[];
+}
+export declare class CcCompatibilityLayer {
+    /**
+     * Load a CC plugin manifest from a JSON file path.
+     */
+    loadCcPlugin(manifestPath: string): CcPluginManifest;
+    /**
+     * Translate a CC plugin manifest into a genty extension descriptor.
+     */
+    translateToGentyExtension(manifest: CcPluginManifest): GentyExtension;
+    /**
+     * Validate a CC plugin manifest and return a compatibility report.
+     */
+    validateCompatibility(manifest: CcPluginManifest): CompatibilityReport;
+}
+//# sourceMappingURL=ccCompatibility.d.ts.map

package/dist/plugins/ccCompatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ccCompatibility.d.ts","sourceRoot":"","sources":["../../src/plugins/ccCompatibility.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;CAC5B;AAMD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,UAAU,EAAE,cAAc,EAAE,CAAC;CAC9B;AAMD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAwBD,qBAAa,oBAAoB;IAC/B;;OAEG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB;IASpD;;OAEG;IACH,yBAAyB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,cAAc;IA6DrE;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB;CAiDvE"}

package/dist/plugins/ccCompatibility.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * CC Plugin Compatibility Layer (GAP-ECO-001).
+ *
+ * Translates Claude Code plugin manifests into genty extension format,
+ * enabling CC plugins to run inside the genty agent platform.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CcCompatibilityLayer = void 0;
+const node_fs_1 = require("node:fs");
+// ---------------------------------------------------------------------------
+// Supported CC hook events that have genty equivalents
+// ---------------------------------------------------------------------------
+const SUPPORTED_HOOK_EVENTS = new Set([
+    'PreToolUse',
+    'PostToolUse',
+    'Stop',
+    'SubagentStop',
+    'SessionStart',
+    'SessionEnd',
+    'UserPromptSubmit',
+    'PreCompact',
+    'Notification',
+]);
+const SUPPORTED_MCP_TRANSPORTS = new Set(['stdio', 'sse', 'http']);
+// ---------------------------------------------------------------------------
+// CcCompatibilityLayer
+// ---------------------------------------------------------------------------
+class CcCompatibilityLayer {
+    /**
+     * Load a CC plugin manifest from a JSON file path.
+     */
+    loadCcPlugin(manifestPath) {
+        const raw = (0, node_fs_1.readFileSync)(manifestPath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed.name || !parsed.version) {
+            throw new Error('Invalid CC plugin manifest: missing "name" or "version"');
+        }
+        return parsed;
+    }
+    /**
+     * Translate a CC plugin manifest into a genty extension descriptor.
+     */
+    translateToGentyExtension(manifest) {
+        const commands = [];
+        const events = [];
+        const mcpConfigs = [];
+        // Skills → commands
+        if (manifest.skills) {
+            for (const skill of manifest.skills) {
+                commands.push({
+                    id: `cc-skill:${manifest.name}:${skill.name}`,
+                    label: skill.name,
+                    description: skill.description,
+                    source: 'cc-skill',
+                });
+            }
+        }
+        // Commands → commands
+        if (manifest.commands) {
+            for (const cmd of manifest.commands) {
+                commands.push({
+                    id: `cc-cmd:${manifest.name}:${cmd.name}`,
+                    label: cmd.name,
+                    description: cmd.description,
+                    source: 'cc-command',
+                });
+            }
+        }
+        // Hooks → events
+        if (manifest.hooks) {
+            for (const hook of manifest.hooks) {
+                events.push({
+                    id: `cc-hook:${manifest.name}:${hook.event}`,
+                    ccEvent: hook.event,
+                    priority: hook.priority ?? 0,
+                    handler: hook.handler,
+                });
+            }
+        }
+        // MCP servers → MCP configs
+        if (manifest.mcpServers) {
+            for (const server of manifest.mcpServers) {
+                mcpConfigs.push({
+                    name: server.name,
+                    transport: server.transport,
+                    endpoint: server.url ?? server.command ?? '',
+                });
+            }
+        }
+        return {
+            id: manifest.name,
+            version: manifest.version,
+            commands,
+            events,
+            mcpConfigs,
+        };
+    }
+    /**
+     * Validate a CC plugin manifest and return a compatibility report.
+     */
+    validateCompatibility(manifest) {
+        const warnings = [];
+        const unsupportedFeatures = [];
+        // Check hooks for unsupported events
+        if (manifest.hooks) {
+            for (const hook of manifest.hooks) {
+                if (!SUPPORTED_HOOK_EVENTS.has(hook.event)) {
+                    unsupportedFeatures.push(`Hook event "${hook.event}" is not supported`);
+                }
+            }
+        }
+        // Check MCP server transports
+        if (manifest.mcpServers) {
+            for (const server of manifest.mcpServers) {
+                if (!SUPPORTED_MCP_TRANSPORTS.has(server.transport)) {
+                    unsupportedFeatures.push(`MCP transport "${server.transport}" for server "${server.name}" is not supported`);
+                }
+                if (server.transport === 'stdio' && !server.command) {
+                    warnings.push(`MCP server "${server.name}" uses stdio transport but has no command specified`);
+                }
+                if ((server.transport === 'sse' || server.transport === 'http') && !server.url) {
+                    warnings.push(`MCP server "${server.name}" uses ${server.transport} transport but has no url specified`);
+                }
+            }
+        }
+        // Skills without triggers
+        if (manifest.skills) {
+            for (const skill of manifest.skills) {
+                if (!skill.trigger && !skill.description) {
+                    warnings.push(`Skill "${skill.name}" has no trigger or description — it may not be discoverable`);
+                }
+            }
+        }
+        const compatible = unsupportedFeatures.length === 0;
+        return { compatible, warnings, unsupportedFeatures };
+    }
+}
+exports.CcCompatibilityLayer = CcCompatibilityLayer;

package/dist/plugins/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Plugin sandboxing module for L6 Agent-Platform.
+ *
+ * Provides permission-gated plugin loading, runtime sandbox enforcement,
+ * and semver compatibility checking.
+ */
+export type { PluginPermission, PluginManifest, PluginStatus, PluginInstance, PluginSandboxConfig, } from './types';
+export { PluginSandbox } from './sandbox';
+export { PluginLoader } from './loader';
+export { PluginVersionChecker, type VersionCheckResult } from './version-check';
+export { checkForUpdate, shouldAutoUpdate, parseVersion, type PluginVersion, type UpdateAction, type UpdateCheckResult, } from './versioning';
+export { validatePlugin, diagnosePlugin, formatDiagnostics, type ValidationResult, type DiagnosticEntry, } from './validation';
+export { PluginManager, type PluginInfo, type TrustLevel, } from './management';
+export { MarketplaceClient, MarketplaceInstaller, type MarketplaceEntry, type MarketplaceSearchResult, type MarketplaceCategoryList, type FetchFn, } from './marketplace';
+export { CcCompatibilityLayer, type CcPluginManifest, type CcSkill, type CcHook, type CcCommand, type CcMcpServer, type GentyExtension, type GentyExtensionCommand, type GentyExtensionEvent, type GentyMcpConfig, type CompatibilityReport, } from './ccCompatibility';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxC,OAAO,EAAE,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGhF,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,aAAa,EACb,KAAK,UAAU,EACf,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,OAAO,GACb,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,OAAO,EACZ,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC"}

package/dist/plugins/index.js

@@ -0,0 +1,38 @@
+"use strict";
+/**
+ * Plugin sandboxing module for L6 Agent-Platform.
+ *
+ * Provides permission-gated plugin loading, runtime sandbox enforcement,
+ * and semver compatibility checking.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CcCompatibilityLayer = exports.MarketplaceInstaller = exports.MarketplaceClient = exports.PluginManager = exports.formatDiagnostics = exports.diagnosePlugin = exports.validatePlugin = exports.parseVersion = exports.shouldAutoUpdate = exports.checkForUpdate = exports.PluginVersionChecker = exports.PluginLoader = exports.PluginSandbox = void 0;
+// Sandbox
+var sandbox_1 = require("./sandbox");
+Object.defineProperty(exports, "PluginSandbox", { enumerable: true, get: function () { return sandbox_1.PluginSandbox; } });
+// Loader
+var loader_1 = require("./loader");
+Object.defineProperty(exports, "PluginLoader", { enumerable: true, get: function () { return loader_1.PluginLoader; } });
+// Version checker
+var version_check_1 = require("./version-check");
+Object.defineProperty(exports, "PluginVersionChecker", { enumerable: true, get: function () { return version_check_1.PluginVersionChecker; } });
+// Versioning (ECO-004)
+var versioning_1 = require("./versioning");
+Object.defineProperty(exports, "checkForUpdate", { enumerable: true, get: function () { return versioning_1.checkForUpdate; } });
+Object.defineProperty(exports, "shouldAutoUpdate", { enumerable: true, get: function () { return versioning_1.shouldAutoUpdate; } });
+Object.defineProperty(exports, "parseVersion", { enumerable: true, get: function () { return versioning_1.parseVersion; } });
+// Validation (ECO-005)
+var validation_1 = require("./validation");
+Object.defineProperty(exports, "validatePlugin", { enumerable: true, get: function () { return validation_1.validatePlugin; } });
+Object.defineProperty(exports, "diagnosePlugin", { enumerable: true, get: function () { return validation_1.diagnosePlugin; } });
+Object.defineProperty(exports, "formatDiagnostics", { enumerable: true, get: function () { return validation_1.formatDiagnostics; } });
+// Management (GAP-USER-017)
+var management_1 = require("./management");
+Object.defineProperty(exports, "PluginManager", { enumerable: true, get: function () { return management_1.PluginManager; } });
+// Marketplace protocol (GAP-ECO-002)
+var marketplace_1 = require("./marketplace");
+Object.defineProperty(exports, "MarketplaceClient", { enumerable: true, get: function () { return marketplace_1.MarketplaceClient; } });
+Object.defineProperty(exports, "MarketplaceInstaller", { enumerable: true, get: function () { return marketplace_1.MarketplaceInstaller; } });
+// CC Plugin Compatibility (GAP-ECO-001)
+var ccCompatibility_1 = require("./ccCompatibility");
+Object.defineProperty(exports, "CcCompatibilityLayer", { enumerable: true, get: function () { return ccCompatibility_1.CcCompatibilityLayer; } });

package/dist/plugins/loader.d.ts

@@ -0,0 +1,37 @@
+/**
+ * PluginLoader — lifecycle manager for plugin instances.
+ *
+ * Tracks loaded plugins, validates manifests on load, and manages
+ * status transitions (loading -> loaded | error, unloading, reloading).
+ */
+import type { PluginManifest, PluginInstance } from './types';
+export declare class PluginLoader {
+    private plugins;
+    /**
+     * Load a plugin from its manifest.
+     *
+     * Validates required fields and permissions before transitioning the
+     * instance to `loaded`. If validation fails the instance is stored with
+     * status `error` and the error message is attached.
+     */
+    load(manifest: PluginManifest): PluginInstance;
+    /**
+     * Unload a plugin by id.
+     *
+     * Sets status to `unloaded`. Returns `true` if the plugin existed,
+     * `false` otherwise.
+     */
+    unload(pluginId: string): boolean;
+    /**
+     * Reload a plugin by re-loading from the existing manifest.
+     * Returns the new instance, or `undefined` if the plugin was not found.
+     */
+    reload(pluginId: string): PluginInstance | undefined;
+    /** Return all tracked plugin instances. */
+    list(): PluginInstance[];
+    /** Get a single plugin instance by id. */
+    get(pluginId: string): PluginInstance | undefined;
+    /** Check whether a plugin is currently loaded (status === 'loaded'). */
+    isLoaded(pluginId: string): boolean;
+}
+//# sourceMappingURL=loader.d.ts.map

package/dist/plugins/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugins/loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAoB,MAAM,SAAS,CAAC;AAahF,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAqC;IAMpD;;;;;;OAMG;IACH,IAAI,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc;IAqC9C;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUjC;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAYpD,2CAA2C;IAC3C,IAAI,IAAI,cAAc,EAAE;IAIxB,0CAA0C;IAC1C,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIjD,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAGpC"}

package/dist/plugins/loader.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * PluginLoader — lifecycle manager for plugin instances.
+ *
+ * Tracks loaded plugins, validates manifests on load, and manages
+ * status transitions (loading -> loaded | error, unloading, reloading).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PluginLoader = void 0;
+/** Set of all valid permission strings used for manifest validation. */
+const VALID_PERMISSIONS = new Set([
+    'fs:read',
+    'fs:write',
+    'net:outbound',
+    'process:spawn',
+    'env:read',
+    'mcp:connect',
+    'shell:execute',
+]);
+class PluginLoader {
+    plugins = new Map();
+    // ---------------------------------------------------------------------------
+    // Load / Unload / Reload
+    // ---------------------------------------------------------------------------
+    /**
+     * Load a plugin from its manifest.
+     *
+     * Validates required fields and permissions before transitioning the
+     * instance to `loaded`. If validation fails the instance is stored with
+     * status `error` and the error message is attached.
+     */
+    load(manifest) {
+        // Validate required fields
+        const issues = [];
+        if (!manifest.id)
+            issues.push('missing id');
+        if (!manifest.name)
+            issues.push('missing name');
+        if (!manifest.version)
+            issues.push('missing version');
+        if (!manifest.entrypoint)
+            issues.push('missing entrypoint');
+        if (!Array.isArray(manifest.permissions)) {
+            issues.push('permissions must be an array');
+        }
+        else {
+            for (const perm of manifest.permissions) {
+                if (!VALID_PERMISSIONS.has(perm)) {
+                    issues.push(`unknown permission: ${perm}`);
+                }
+            }
+        }
+        if (issues.length > 0) {
+            const instance = {
+                manifest,
+                status: 'error',
+                error: `Manifest validation failed: ${issues.join('; ')}`,
+            };
+            this.plugins.set(manifest.id, instance);
+            return instance;
+        }
+        const instance = {
+            manifest,
+            status: 'loaded',
+            loadedAt: Date.now(),
+        };
+        this.plugins.set(manifest.id, instance);
+        return instance;
+    }
+    /**
+     * Unload a plugin by id.
+     *
+     * Sets status to `unloaded`. Returns `true` if the plugin existed,
+     * `false` otherwise.
+     */
+    unload(pluginId) {
+        const instance = this.plugins.get(pluginId);
+        if (!instance)
+            return false;
+        instance.status = 'unloaded';
+        instance.loadedAt = undefined;
+        instance.error = undefined;
+        return true;
+    }
+    /**
+     * Reload a plugin by re-loading from the existing manifest.
+     * Returns the new instance, or `undefined` if the plugin was not found.
+     */
+    reload(pluginId) {
+        const existing = this.plugins.get(pluginId);
+        if (!existing)
+            return undefined;
+        this.unload(pluginId);
+        return this.load(existing.manifest);
+    }
+    // ---------------------------------------------------------------------------
+    // Queries
+    // ---------------------------------------------------------------------------
+    /** Return all tracked plugin instances. */
+    list() {
+        return [...this.plugins.values()];
+    }
+    /** Get a single plugin instance by id. */
+    get(pluginId) {
+        return this.plugins.get(pluginId);
+    }
+    /** Check whether a plugin is currently loaded (status === 'loaded'). */
+    isLoaded(pluginId) {
+        return this.plugins.get(pluginId)?.status === 'loaded';
+    }
+}
+exports.PluginLoader = PluginLoader;

package/dist/plugins/management.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Plugin management — install, uninstall, enable, disable, and list plugins
+ * with persistent state stored in a configurable directory (GAP-USER-017).
+ */
+export type TrustLevel = 'untrusted' | 'community' | 'verified' | 'official';
+export interface PluginInfo {
+    id: string;
+    name: string;
+    version: string;
+    trustLevel: TrustLevel;
+    installed: boolean;
+    enabled: boolean;
+}
+export declare class PluginManager {
+    private readonly stateDir;
+    private readonly statePath;
+    constructor(stateDir: string);
+    /** List all known plugins. */
+    list(): PluginInfo[];
+    /** Install a plugin by id. Marks it as installed and enabled. */
+    install(id: string): PluginInfo;
+    /** Uninstall a plugin by id. */
+    uninstall(id: string): void;
+    /** Enable an installed plugin. */
+    enable(id: string): void;
+    /** Disable an installed plugin (keeps it installed). */
+    disable(id: string): void;
+    /** Get info for a single plugin, or undefined if unknown. */
+    getInfo(id: string): PluginInfo | undefined;
+    private readState;
+    private writeState;
+}
+//# sourceMappingURL=management.d.ts.map

package/dist/plugins/management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management.d.ts","sourceRoot":"","sources":["../../src/plugins/management.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;AAE7E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAYD,qBAAa,aAAa;IAGZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEN,QAAQ,EAAE,MAAM;IAI7C,8BAA8B;IAC9B,IAAI,IAAI,UAAU,EAAE;IAKpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAqB/B,gCAAgC;IAChC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAS3B,kCAAkC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAUxB,wDAAwD;IACxD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAUzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAS3C,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,UAAU;CAMnB"}