@a5c-ai/genty-platform 5.1.1-staging.00ceebd28cf2

package/dist/daemon/types.d.ts

@@ -0,0 +1,122 @@
+/**
+ * GAP-REMOTE-001: Daemon Mode — Type definitions.
+ */
+import type { AutomationRule, TimerAutomationRule, WebhookAutomationRule } from "@a5c-ai/comm-adapter";
+export interface DaemonConfig {
+    workspace: string;
+    triggers: TriggerConfig[];
+    maxConcurrentRuns?: number;
+    triggerAdmission?: TriggerAdmissionConfig;
+}
+export interface TriggerRateLimitConfig {
+    maxTriggers: number;
+    windowMs: number;
+}
+export interface TriggerAdmissionConfig {
+    maxPendingRuns?: number;
+    rateLimit?: TriggerRateLimitConfig;
+    dedupeWindowMs?: number;
+}
+export interface FileTriggerConfig {
+    type: "file";
+    pattern: string;
+    processId: string;
+    entrypoint: string;
+    debounceMs?: number;
+}
+export type TriggerConfig = FileTriggerConfig | AutomationRule;
+export interface FileTriggerEvent {
+    type: "file";
+    processId: string;
+    entrypoint: string;
+    inputs?: Record<string, unknown>;
+}
+export interface AutomationTriggerEvent {
+    type: "automation";
+    rule: AutomationRule;
+    inputs?: Record<string, unknown>;
+}
+export type TriggerEvent = FileTriggerEvent | AutomationTriggerEvent;
+export declare function isFileTriggerConfig(trigger: TriggerConfig): trigger is FileTriggerConfig;
+export declare function isTimerAutomationRule(trigger: TriggerConfig): trigger is TimerAutomationRule;
+export declare function isWebhookAutomationRule(trigger: TriggerConfig): trigger is WebhookAutomationRule;
+export declare function isFileTriggerEvent(event: TriggerEvent): event is FileTriggerEvent;
+export declare function isAutomationTriggerEvent(event: TriggerEvent): event is AutomationTriggerEvent;
+export interface LegacyTriggerConfig {
+    type: "file" | "webhook" | "timer";
+    processId: string;
+    entrypoint: string;
+    pattern?: string;
+    port?: number;
+    cron?: string;
+    debounceMs?: number;
+}
+export interface DaemonStartOptions {
+    daemonDir: string;
+    workspace: string;
+    foreground?: boolean;
+    config?: DaemonConfig;
+}
+export interface DaemonStartOutput {
+    pid: number;
+    daemonDir: string;
+    startedAt: string;
+}
+export interface DaemonStopOptions {
+    daemonDir: string;
+    gracePeriodMs?: number;
+}
+export interface DaemonStopOutput {
+    pid: number;
+    stoppedAt: string;
+}
+export interface DaemonStatusOptions {
+    daemonDir: string;
+}
+export interface DaemonStatusOutput {
+    running: boolean;
+    pid?: number;
+    uptime?: number;
+    startedAt?: string;
+    activeTriggers?: number;
+    pendingRuns?: number;
+    deadLetterRuns?: number;
+}
+export interface DaemonWatchdogOptions {
+    daemonDir: string;
+    pollIntervalMs?: number;
+    maxRestarts?: number;
+    signal?: AbortSignal;
+}
+export interface DaemonWatchdogOutput {
+    restarts: number;
+    stoppedAt: string;
+}
+export interface FileWatcherHandle {
+    dispose(): void;
+}
+export interface WebhookListenerOptions {
+    rule: WebhookAutomationRule;
+    onTrigger: TriggerCallback;
+}
+export interface WebhookListenerHandle {
+    close(): Promise<void>;
+    port: number;
+}
+export type TriggerAdmissionStatus = "accepted" | "deferred" | "rejected" | "duplicate";
+export interface TriggerAdmissionResult {
+    status: TriggerAdmissionStatus;
+    reason?: string;
+    retryAfterMs?: number;
+    queueDepth?: number;
+    fingerprint?: string;
+}
+export type TriggerCallback = (trigger: TriggerEvent) => void | TriggerAdmissionResult | Promise<void | TriggerAdmissionResult>;
+export interface DaemonMetadata {
+    workspace: string;
+    startedAt: string;
+    triggers: TriggerConfig[];
+    maxConcurrentRuns: number;
+    pid: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/daemon/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/daemon/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;AAErE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,iBAAiB,CAExF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,mBAAmB,CAE5F;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,qBAAqB,CAEhG;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,gBAAgB,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,sBAAsB,CAE7F;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,IAAI,IAAI,CAAC;CACjB;AAID,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;AAExF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,YAAY,KAClB,IAAI,GAAG,sBAAsB,GAAG,OAAO,CAAC,IAAI,GAAG,sBAAsB,CAAC,CAAC;AAI5E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/daemon/types.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Daemon Mode — Type definitions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isFileTriggerConfig = isFileTriggerConfig;
+exports.isTimerAutomationRule = isTimerAutomationRule;
+exports.isWebhookAutomationRule = isWebhookAutomationRule;
+exports.isFileTriggerEvent = isFileTriggerEvent;
+exports.isAutomationTriggerEvent = isAutomationTriggerEvent;
+function isFileTriggerConfig(trigger) {
+    return "type" in trigger && trigger.type === "file";
+}
+function isTimerAutomationRule(trigger) {
+    return "trigger" in trigger && trigger.trigger.type === "timer";
+}
+function isWebhookAutomationRule(trigger) {
+    return "trigger" in trigger && trigger.trigger.type === "webhook";
+}
+function isFileTriggerEvent(event) {
+    return event.type !== "automation";
+}
+function isAutomationTriggerEvent(event) {
+    return event.type === "automation";
+}

package/dist/daemon/webhookListener.d.ts

@@ -0,0 +1,6 @@
+/**
+ * GAP-REMOTE-001: Webhook Listener — HTTP trigger endpoint.
+ */
+import type { WebhookListenerOptions, WebhookListenerHandle } from "./types";
+export declare function createWebhookListener(options: WebhookListenerOptions): Promise<WebhookListenerHandle>;
+//# sourceMappingURL=webhookListener.d.ts.map

package/dist/daemon/webhookListener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookListener.d.ts","sourceRoot":"","sources":["../../src/daemon/webhookListener.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAA0B,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAIrG,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CAiFhC"}

package/dist/daemon/webhookListener.js

@@ -0,0 +1,132 @@
+"use strict";
+/**
+ * GAP-REMOTE-001: Webhook Listener — HTTP trigger endpoint.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookListener = createWebhookListener;
+const http = __importStar(require("node:http"));
+const MAX_BODY_BYTES = 1024 * 1024; // 1 MiB
+async function createWebhookListener(options) {
+    const { rule, onTrigger } = options;
+    const port = rule.trigger.port;
+    const path = rule.trigger.path ?? "/trigger";
+    const method = rule.trigger.method ?? "POST";
+    const authToken = rule.trigger.auth?.type === "bearer" ? rule.trigger.auth.token : undefined;
+    const server = http.createServer((req, res) => {
+        if (req.method !== method || req.url !== path) {
+            res.writeHead(404, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "Not found" }));
+            return;
+        }
+        // Auth check
+        if (authToken) {
+            const authHeader = req.headers.authorization;
+            if (!authHeader || authHeader !== `Bearer ${authToken}`) {
+                res.writeHead(401, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Unauthorized" }));
+                return;
+            }
+        }
+        let body = "";
+        let bodySize = 0;
+        req.on("data", (chunk) => {
+            bodySize += chunk.length;
+            if (bodySize > MAX_BODY_BYTES) {
+                res.writeHead(413, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Payload too large" }));
+                req.destroy();
+                return;
+            }
+            body += chunk.toString();
+        });
+        req.on("end", () => {
+            try {
+                const payload = JSON.parse(body);
+                const inputs = typeof payload.inputs === "object" && payload.inputs !== null && !Array.isArray(payload.inputs)
+                    ? payload.inputs
+                    : undefined;
+                void Promise.resolve(onTrigger({
+                    type: "automation",
+                    rule,
+                    inputs,
+                })).then((admission) => {
+                    const result = normalizeAdmissionResult(admission);
+                    res.writeHead(statusForAdmission(result), {
+                        "Content-Type": "application/json",
+                        ...(result.retryAfterMs ? { "Retry-After": String(Math.ceil(result.retryAfterMs / 1000)) } : {}),
+                    });
+                    res.end(JSON.stringify({ ok: result.status === "accepted" || result.status === "deferred", ...result }));
+                }, () => {
+                    res.writeHead(500, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ error: "Trigger callback failed" }));
+                });
+            }
+            catch {
+                res.writeHead(400, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "Invalid JSON body" }));
+            }
+        });
+    });
+    return new Promise((resolve, reject) => {
+        server.on("error", reject);
+        server.listen(port, () => {
+            const addr = server.address();
+            const actualPort = typeof addr === "object" && addr ? addr.port : port;
+            resolve({
+                port: actualPort,
+                async close() {
+                    return new Promise((res, rej) => {
+                        server.close((err) => (err ? rej(err) : res()));
+                    });
+                },
+            });
+        });
+    });
+}
+function normalizeAdmissionResult(admission) {
+    return admission ?? { status: "accepted" };
+}
+function statusForAdmission(admission) {
+    if (admission.status === "accepted")
+        return 200;
+    if (admission.status === "deferred" || admission.status === "duplicate")
+        return 202;
+    if (admission.reason === "rate-limit")
+        return 429;
+    if (admission.reason === "queue-full")
+        return 503;
+    return 409;
+}

package/dist/extensions/discovery.d.ts

@@ -0,0 +1,15 @@
+import { ExtensionRegistry } from '@a5c-ai/genty-core/extensions';
+import type { GentyExtension, ExtensionManifest } from '@a5c-ai/genty-core/extensions';
+export interface DiscoveredExtension {
+    manifest: ExtensionManifest;
+    path: string;
+    mainPath: string;
+}
+export declare function getDiscoveryDir(): string;
+export declare function discoverExtensions(dir?: string): DiscoveredExtension[];
+export declare function loadExtensionModule(mainPath: string): Promise<GentyExtension | undefined>;
+export declare function activateDiscoveredExtensions(registry: ExtensionRegistry, dir?: string): Promise<{
+    activated: string[];
+    failed: string[];
+}>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/extensions/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/extensions/discovery.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAIvF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAiBtE;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAW/F;AAED,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoBpD"}

package/dist/extensions/discovery.js

@@ -0,0 +1,119 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDiscoveryDir = getDiscoveryDir;
+exports.discoverExtensions = discoverExtensions;
+exports.loadExtensionModule = loadExtensionModule;
+exports.activateDiscoveredExtensions = activateDiscoveredExtensions;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+const EXTENSIONS_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), '.genty', 'extensions');
+function getDiscoveryDir() {
+    return EXTENSIONS_DIR;
+}
+function discoverExtensions(dir) {
+    const searchDir = dir ?? EXTENSIONS_DIR;
+    if (!(0, node_fs_1.existsSync)(searchDir))
+        return [];
+    const results = [];
+    for (const entry of (0, node_fs_1.readdirSync)(searchDir, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const extDir = (0, node_path_1.join)(searchDir, entry.name);
+        const manifest = loadManifestSafe(extDir);
+        if (!manifest)
+            continue;
+        const mainPath = (0, node_path_1.join)(extDir, manifest.main);
+        if (!(0, node_fs_1.existsSync)(mainPath))
+            continue;
+        results.push({ manifest, path: extDir, mainPath });
+    }
+    return results;
+}
+async function loadExtensionModule(mainPath) {
+    try {
+        const mod = await Promise.resolve(`${mainPath}`).then(s => __importStar(require(s)));
+        const ext = mod.default ?? mod;
+        if (typeof ext.activate === 'function' && typeof ext.name === 'string') {
+            return ext;
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function activateDiscoveredExtensions(registry, dir) {
+    const discovered = discoverExtensions(dir);
+    const activated = [];
+    const failed = [];
+    for (const ext of discovered) {
+        try {
+            const module = await loadExtensionModule(ext.mainPath);
+            if (!module) {
+                failed.push(ext.manifest.name);
+                continue;
+            }
+            await registry.activate(module);
+            activated.push(ext.manifest.name);
+        }
+        catch {
+            failed.push(ext.manifest.name);
+        }
+    }
+    return { activated, failed };
+}
+function loadManifestSafe(dir) {
+    const manifestPath = (0, node_path_1.join)(dir, 'package.json');
+    if (!(0, node_fs_1.existsSync)(manifestPath))
+        return undefined;
+    try {
+        const pkg = JSON.parse((0, node_fs_1.readFileSync)(manifestPath, 'utf8'));
+        if (!pkg.name || !pkg.version)
+            return undefined;
+        return {
+            name: pkg.name,
+            version: pkg.version,
+            description: pkg.description,
+            main: pkg.main ?? 'index.js',
+            engines: pkg.engines,
+            permissions: pkg.genty?.permissions,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/extensions/installer.d.ts

@@ -0,0 +1,14 @@
+import type { ExtensionManifest, ExtensionSource } from '@a5c-ai/genty-core/extensions';
+export interface InstalledExtension {
+    manifest: ExtensionManifest;
+    source: ExtensionSource;
+    installPath: string;
+    installedAt: string;
+}
+export declare function getExtensionsDir(): string;
+export declare function ensureExtensionsDir(): string;
+export declare function installFromNpm(packageName: string, version?: string): InstalledExtension;
+export declare function installFromGit(url: string, ref?: string): InstalledExtension;
+export declare function installFromLocal(localPath: string): InstalledExtension;
+export declare function listInstalled(): InstalledExtension[];
+//# sourceMappingURL=installer.d.ts.map

package/dist/extensions/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/extensions/installer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAExF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAexF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAmB5E;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAQtE;AAED,wBAAgB,aAAa,IAAI,kBAAkB,EAAE,CAuBpD"}

package/dist/extensions/installer.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getExtensionsDir = getExtensionsDir;
+exports.ensureExtensionsDir = ensureExtensionsDir;
+exports.installFromNpm = installFromNpm;
+exports.installFromGit = installFromGit;
+exports.installFromLocal = installFromLocal;
+exports.listInstalled = listInstalled;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+const EXTENSIONS_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), '.genty', 'extensions');
+function getExtensionsDir() {
+    return EXTENSIONS_DIR;
+}
+function ensureExtensionsDir() {
+    if (!(0, node_fs_1.existsSync)(EXTENSIONS_DIR))
+        (0, node_fs_1.mkdirSync)(EXTENSIONS_DIR, { recursive: true });
+    return EXTENSIONS_DIR;
+}
+function installFromNpm(packageName, version) {
+    const dir = ensureExtensionsDir();
+    const spec = version ? `${packageName}@${version}` : packageName;
+    const installDir = (0, node_path_1.join)(dir, packageName.replace(/\//g, '-').replace(/^@/, ''));
+    (0, node_fs_1.mkdirSync)(installDir, { recursive: true });
+    (0, node_child_process_1.execSync)(`npm install --prefix "${installDir}" "${spec}" --no-save`, { stdio: 'pipe' });
+    const manifest = loadManifest((0, node_path_1.join)(installDir, 'node_modules', packageName));
+    return {
+        manifest,
+        source: { type: 'npm', packageName, version },
+        installPath: (0, node_path_1.join)(installDir, 'node_modules', packageName),
+        installedAt: new Date().toISOString(),
+    };
+}
+function installFromGit(url, ref) {
+    const dir = ensureExtensionsDir();
+    const repoName = url.split('/').pop()?.replace('.git', '') ?? 'unknown';
+    const installDir = (0, node_path_1.join)(dir, repoName);
+    const refArg = ref ? `--branch "${ref}"` : '';
+    (0, node_child_process_1.execSync)(`git clone --depth 1 ${refArg} "${url}" "${installDir}"`, { stdio: 'pipe' });
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(installDir, 'package.json'))) {
+        (0, node_child_process_1.execSync)(`npm install --prefix "${installDir}"`, { stdio: 'pipe' });
+    }
+    const manifest = loadManifest(installDir);
+    return {
+        manifest,
+        source: { type: 'git', url, ref },
+        installPath: installDir,
+        installedAt: new Date().toISOString(),
+    };
+}
+function installFromLocal(localPath) {
+    const manifest = loadManifest(localPath);
+    return {
+        manifest,
+        source: { type: 'local', path: localPath },
+        installPath: localPath,
+        installedAt: new Date().toISOString(),
+    };
+}
+function listInstalled() {
+    const dir = getExtensionsDir();
+    if (!(0, node_fs_1.existsSync)(dir))
+        return [];
+    const entries = [];
+    for (const entry of (0, node_fs_1.readdirSync)(dir, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const extDir = (0, node_path_1.join)(dir, entry.name);
+        try {
+            const manifest = loadManifest(extDir);
+            entries.push({
+                manifest,
+                source: { type: 'local', path: extDir },
+                installPath: extDir,
+                installedAt: '',
+            });
+        }
+        catch {
+            // Skip invalid extensions
+        }
+    }
+    return entries;
+}
+function loadManifest(dir) {
+    const manifestPath = (0, node_path_1.join)(dir, 'package.json');
+    if (!(0, node_fs_1.existsSync)(manifestPath)) {
+        throw new Error(`No package.json found at ${dir}`);
+    }
+    const pkg = JSON.parse((0, node_fs_1.readFileSync)(manifestPath, 'utf8'));
+    return {
+        name: pkg.name,
+        version: pkg.version,
+        description: pkg.description,
+        main: pkg.main ?? 'index.js',
+        engines: pkg.engines,
+        permissions: pkg.genty?.permissions,
+    };
+}

package/dist/governance/authority.d.ts

@@ -0,0 +1,68 @@
+/**
+ * GAP-SEC: Authority Chain system.
+ *
+ * Models delegation chains from human principals through agent principals,
+ * with monotonically narrowing scope at each hop.
+ */
+import type { MandateScope } from './mandate';
+/** A principal (human or agent) in the authority chain. */
+export interface AuthorityPrincipal {
+    kind: 'human' | 'agent';
+    id: string;
+    displayName: string;
+}
+/** A single grant of authority from one principal to another. */
+export interface AuthorityGrant {
+    from: AuthorityPrincipal;
+    to: AuthorityPrincipal;
+    scope: MandateScope;
+    grantedAt: string;
+    revokedAt?: string;
+    expiresAt?: string;
+}
+/** A link in the authority chain (wrapping a grant). */
+export interface AuthorityChainLink {
+    grant: AuthorityGrant;
+    index: number;
+}
+/** A full authority chain from root to leaf. */
+export interface AuthorityChain {
+    grants: AuthorityGrant[];
+    rootPrincipal: AuthorityPrincipal;
+    effectiveScope: MandateScope;
+}
+/** Result of chain validation. */
+export interface AuthorityChainValidationResult {
+    valid: boolean;
+    reason?: string;
+}
+/** Result of tracing authority to a human root. */
+export interface AuthorityTrace {
+    humanPrincipal: AuthorityPrincipal;
+    hopCount: number;
+    principalPath: string[];
+}
+/**
+ * Create an authority chain from an ordered list of grants.
+ * Computes the effective scope as the intersection of all grant scopes.
+ */
+export declare function createAuthorityChain(grants: AuthorityGrant[]): AuthorityChain;
+/**
+ * Validate an authority chain. Checks:
+ * 1. Root must be a human principal.
+ * 2. No revoked links.
+ * 3. No expired links.
+ * 4. Scopes monotonically narrow (no expansion).
+ */
+export declare function validateAuthorityChain(chain: AuthorityChain): AuthorityChainValidationResult;
+/**
+ * Attenuate (intersect) two scopes. The result is never wider than either input.
+ * Pure function.
+ */
+export declare function attenuateScope(parent: MandateScope, child: MandateScope): MandateScope;
+/**
+ * Trace authority back to the human root, returning the human principal,
+ * hop count, and full principal path.
+ */
+export declare function traceAuthorityToHuman(chain: AuthorityChain): AuthorityTrace;
+//# sourceMappingURL=authority.d.ts.map

package/dist/governance/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/governance/authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAM9C,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,kBAAkB,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,aAAa,EAAE,kBAAkB,CAAC;IAClC,cAAc,EAAE,YAAY,CAAC;CAC9B;AAED,kCAAkC;AAClC,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,kBAAkB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,cAAc,CAkB7E;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,8BAA8B,CAiC5F;AA2BD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAqBtF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAW3E"}