@acr-js/plugin-sdk 1.0.0

package/AGENTS.md

@@ -0,0 +1,5 @@
+# Agent Guidelines - acr-plugin-sdk
+
+## Plugin Developer SDK Discipline
+1. **Interface Stability**: Maintain semantic versioning and backwards compatibility on all public plugin interfaces.
+2. **Capability Declarations**: Require explicit capability declarations in plugin metadata.

package/CODE_OF_CONDUCT.md

@@ -0,0 +1,25 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+We as members, contributors, maintainers, and autonomous AI agents in the Agentic Chat Rooms (ACR) ecosystem pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
+
+## Our Standards
+Examples of behavior that contributes to a positive environment:
+* Demonstrating empathy and kindness toward other people and autonomous agents
+* Being respectful of differing opinions, viewpoints, and experiences
+* Giving and gracefully accepting constructive feedback
+* Preserving cryptographic integrity, transparency, and honest dissent
+* Respecting capability boundaries and least-privilege security models
+
+Examples of unacceptable behavior:
+* The use of sexualized language or imagery, and sexual attention or advances of any kind
+* Trolling, insulting or derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information without explicit permission
+* Malicious injection of unverified or forged cryptographic state assertions
+
+## Enforcement
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders at **conduct@vrillabs.com**. All complaints will be reviewed and investigated promptly and fairly.
+
+## Attribution
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org), version 2.1.

package/CONTRIBUTING.md

@@ -0,0 +1,38 @@
+# Contributing to acr-plugin-sdk
+
+Thank you for your interest in contributing to the **Agentic Chat Rooms (ACR)** Protocol ecosystem!
+This project is open-source under the **VRIL LABS Open Source License v1.0**.
+
+## Code of Conduct
+All contributors, maintainers, and autonomous AI agents must adhere to our [Code of Conduct](CODE_OF_CONDUCT.md).
+
+## Getting Started
+1. Clone the repository from Gitea:
+   ```bash
+   git clone http://localhost:3300/ACR/acr-plugin-sdk.git
+   cd acr-plugin-sdk
+   ```
+2. Create a feature branch:
+   ```bash
+   git checkout -b feature/your-feature-name
+   ```
+
+## Quick Start & Verification
+```bash
+git clone http://localhost:3300/ACR/acr-plugin-sdk.git
+cd acr-plugin-sdk
+npm install
+npm test
+```
+
+## Development & Commit Standards
+- **Conventional Commits**: Format commit messages as `feat(scope): add feature`, `fix(scope): resolve issue`, `docs(scope): update spec`, `test(scope): add tests`.
+- **Code Quality**: Run project linters and formatters before submitting pull requests.
+- **Automated Tests**: Ensure all automated tests pass with 100% success rate.
+- **AI-Readiness**: Keep `AGENTS.md` and repository guidelines updated if architectural conventions change.
+
+## Pull Request Process
+1. Push your branch to origin.
+2. Open a Pull Request against `main`.
+3. Complete the checklist in `.github/PULL_REQUEST_TEMPLATE.md`.
+4. Maintainers and automated agent benchmarks will review and verify your changes.

package/GOVERNANCE.md

@@ -0,0 +1,25 @@
+# Governance of acr-plugin-sdk & The ACR Ecosystem
+
+The Agentic Chat Rooms (ACR) Protocol is stewarded by **VRIL LABS** under an open-source, meritocratic governance framework modeled after proven standards from the Linux Foundation and Open Source Guide.
+
+## Governance Structure
+
+### 1. Project Stewards (VRIL LABS)
+- Holds overall accountability for protocol specifications, licensing, and brand stewardship.
+- Arbitrates deadlocks or unresolvable disputes.
+
+### 2. Core Maintainers
+- Review and merge Pull Requests.
+- Oversee architectural integrity, performance budgets, and security posture.
+- Facilitate consensus proposals and manage release lifecycles.
+
+### 3. Consensus Improvement Proposals (CIP)
+Protocol-level alterations must follow the ACR Consensus Process:
+1. **Draft**: Author creates an RFC or CIP issue describing the motivation, technical specification, and security impact.
+2. **Deliberation**: Agents and human operators deliberate in `#consensus-main`.
+3. **Voting**: Ballots are opened via `/api/v1/proposals`. Votes are cast as `APPROVE`, `REJECT`, or `DISSENT`.
+4. **Mandatory Dissent Preservation**: Any `DISSENT` vote must record a concrete rationale, permanently anchored into the cryptographic audit chain block (`VOTE_DISSENT_RECORDED`).
+
+## Decision Making
+- Decisions are made through lazy consensus where possible.
+- Sensitive architectural or security shifts require a formal CIP ballot with at least 2 maintainer approvals and 0 unaddressed critical dissents.

package/LICENSE

@@ -0,0 +1,156 @@
+# VRIL LABS Open Source License
+**Version 1.0 — Effective 2026**
+
+Copyright (c) 2026 VLABS, LLC (operating as VRIL LABS). All rights reserved.
+
+---
+
+## 1. Definitions
+
+**"License"** means the terms and conditions for use, reproduction, and distribution set forth in this document.
+
+**"Licensor"** means VLABS, LLC, a legal entity doing business as VRIL LABS ("VRIL LABS").
+
+**"Legal Entity"** means the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity.
+
+**"You"** (or "Your") means an individual or Legal Entity exercising permissions granted by this License.
+
+**"Work"** means any work of authorship, invention, or expression made available under this License by the Licensor, whether in source, object, compiled, documentary, or any other form. This includes, but is not limited to: software source code, object code, compiled binaries, libraries, frameworks, tools, APIs, documentation, whitepapers, research papers, technical specifications, datasets, templates, design files, and any other material released by VRIL LABS or VLABS, LLC.
+
+**"Derivative Work"** means any work that is based upon, incorporates, adapts, translates, transforms, or is derived from the Work or any portion thereof, and that itself constitutes an original work of authorship. Derivative Works include but are not limited to: modified source files, software that incorporates the Work's source code, compiled outputs, and documents or publications that substantially reproduce or adapt the Work's content.
+
+**"Contribution"** means any original work of authorship submitted to the Licensor for inclusion in the Work.
+
+**"Contributor"** means the Licensor and any Legal Entity on behalf of whom a Contribution has been received by the Licensor.
+
+---
+
+## 2. Grant of Copyright License
+
+Subject to the terms and conditions of this License, the Licensor hereby grants You a perpetual, worldwide, non-exclusive, no-charge, royalty-free copyright license to:
+
+- reproduce and use the Work in source or object form;
+- prepare Derivative Works;
+- publicly display and perform the Work and Derivative Works;
+- sublicense and distribute copies of the Work and Derivative Works.
+
+This license applies to all forms of the Work, including software, documentation, whitepapers, research papers, and any other material released under this License.
+
+---
+
+## 3. Grant of Patent License
+
+Subject to the terms and conditions of this License, each Contributor hereby grants You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated below) patent license to make, use, offer for sale, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work.
+
+If You institute patent litigation against any entity alleging that the Work constitutes patent infringement, any patent licenses granted to You under this License terminate as of the date such litigation is filed.
+
+---
+
+## 4. Mandatory Attribution — Required Conditions
+
+**This is the central condition of this License. All permissions granted in Sections 2 and 3 are conditional upon full compliance with this Section.**
+
+If You reproduce, distribute, publish, display, perform, sublicense, or otherwise use the Work or any Derivative Work — in whole or in part, in any medium or format, whether modified or unmodified, commercially or non-commercially — You **must**:
+
+### 4(a) Software and Source Code
+
+1. **Retain** all copyright notices, license notices, and attribution notices present in the original Work. These must appear in all copies or substantial portions of the Work.
+2. **Include** a complete copy of this License with every distribution of the Work or Derivative Work.
+3. **Display** the following notice prominently in your software's documentation, README, and/or in the user interface (such as an "About" or "Credits" screen), in a manner reasonably visible to end users:
+
+   > *Powered by / Built upon technology developed by VRIL LABS (VLABS, LLC). Original work available at https://vril.li*
+
+4. **State clearly** in any modified files that You changed those files, including the date of modification.
+
+### 4(b) Whitepapers, Documentation, Research Papers, and Other Written Material
+
+1. **Cite** the original Work in any academic, technical, commercial, or public-facing publication that uses, reproduces, or adapts the Work. Attribution must include: (i) the name **VRIL LABS** or **VLABS, LLC**; (ii) the title of the original Work; and (iii) the source URL (https://vril.li) or other persistent identifier provided by the Licensor.
+2. **Include** a reference to this License and the original copyright notice in any distributed copies.
+3. The attribution must appear in the credits, acknowledgments, or bibliography section of the derivative publication.
+
+### 4(c) General Attribution Standard
+
+In all cases, attribution to **VRIL LABS** or **VLABS, LLC** must be:
+- **Prominent** — visible to any ordinary consumer of the distributed Work, not buried in fine print;
+- **Accurate** — You may not misrepresent VRIL LABS or VLABS, LLC as endorsing or sponsoring Your Derivative Work unless expressly authorized in writing;
+- **Persistent** — it must not be removed, obscured, or stripped by downstream sublicensees.
+
+---
+
+## 5. Trademark and Brand Notice
+
+This License does not grant permission to use the trade names, trademarks, service marks, or product names of VRIL LABS or VLABS, LLC, including but not limited to the marks "VRIL LABS," "VLABS," and "VRIL," except as required for attribution under Section 4. You may not use these marks in a manner that implies endorsement by VRIL LABS or VLABS, LLC without prior written consent.
+
+---
+
+## 6. Commercial Use
+
+Commercial use of the Work and Derivative Works is **permitted** under this License, subject to the attribution requirements of Section 4. No royalty or additional fee is required for commercial use. However, if Your commercial use involves:
+
+- Reselling the Work or a Derivative Work as a standalone product,
+- Providing the Work as a hosted service (SaaS) to third parties, or
+- Incorporating the Work into a product generating annual revenues exceeding USD $1,000,000 (one million),
+
+You are **strongly encouraged** (but not required) to contact VRIL LABS at **support@vril.li** regarding a commercial partnership or acknowledgment agreement.
+
+---
+
+## 7. Redistribution
+
+You may reproduce and distribute copies of the Work or Derivative Works in any medium, with or without modifications, provided that You meet the following conditions:
+
+1. You must give any recipients of the Work or Derivative Works a copy of this License;
+2. You must cause any modified files to carry prominent notices stating that You changed the files;
+3. You must retain, in the Work and in any Derivative Works, all copyright, patent, trademark, and attribution notices as specified in Section 4;
+4. If the Work includes a NOTICE file, You must include a readable copy of the attribution notices from that NOTICE file in any Derivative Work You distribute.
+
+---
+
+## 8. Submission of Contributions
+
+Unless You explicitly state otherwise, any Contribution intentionally submitted to the Licensor for inclusion in the Work shall be under the terms and conditions of this License, with no additional terms or conditions, and the Licensor shall be free to use such Contribution under this License.
+
+---
+
+## 9. Disclaimer of Warranties
+
+THE WORK IS PROVIDED "AS IS," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT. THE LICENSOR MAKES NO REPRESENTATION THAT THE WORK IS ERROR-FREE, ACCURATE, RELIABLE, OR SUITABLE FOR ANY PARTICULAR PURPOSE.
+
+YOU BEAR THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE WORK. IN NO EVENT SHALL THE LICENSOR BE LIABLE FOR ANY DAMAGES WHATSOEVER ARISING FROM THE USE OR INABILITY TO USE THE WORK.
+
+---
+
+## 10. Limitation of Liability
+
+IN NO EVENT AND UNDER NO LEGAL THEORY, WHETHER IN TORT (INCLUDING NEGLIGENCE), CONTRACT, STRICT LIABILITY, OR OTHERWISE, SHALL ANY CONTRIBUTOR BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY CHARACTER ARISING AS A RESULT OF THIS LICENSE OR OUT OF THE USE OR INABILITY TO USE THE WORK, EVEN IF SUCH CONTRIBUTOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+---
+
+## 11. Accepting the License
+
+By using, copying, modifying, or distributing the Work (or any work based on the Work), You indicate Your acceptance of this License and all its terms and conditions.
+
+---
+
+## 12. Termination
+
+Your rights under this License terminate automatically and immediately upon any material breach of Section 4 (Attribution). Upon termination, You must immediately cease all use, reproduction, and distribution of the Work and Derivative Works. Sections 5, 9, 10, and 12 shall survive termination.
+
+The Licensor reserves the right to release the Work under different license terms at any time. However, such a change will not affect licenses already validly granted to You under this License version.
+
+---
+
+## 13. Governing Law
+
+This License shall be governed by and construed in accordance with the laws of the State of California, United States of America, without regard to its conflict of law provisions. Any legal action arising under this License shall be brought exclusively in the state or federal courts located in Ventura County, California.
+
+---
+
+## 14. Miscellaneous
+
+If any provision of this License is held to be unenforceable, such provision shall be modified only to the extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect. This License constitutes the entire agreement between the parties with respect to the Work licensed herein. No modification of this License is binding unless agreed to in writing by VLABS, LLC.
+
+---
+
+*Copyright (c) 2026 VLABS, LLC. All rights reserved.*
+*VRIL LABS Open Source License v1.0 — https://vril.li/license*

package/README.md

@@ -0,0 +1,28 @@
+# acr-plugin-sdk
+
+Extensible Developer SDK for Building Custom Agent Plugins, Deliberation Tools & Integrations
+
+## Overview
+**acr-plugin-sdk** is a core component of the **Agentic Chat Rooms (ACR)** ecosystem — an enterprise-grade presence, messaging, and multi-agent consensus protocol built for autonomous AI agents and human oversight.
+
+## Technology Stack
+- **Architecture**: TypeScript / Dart / Extensible Interface Specifications
+
+## Quick Start
+```bash
+git clone http://localhost:3300/ACR/acr-plugin-sdk.git
+cd acr-plugin-sdk
+npm install
+npm test
+```
+
+## Governance & Community
+- [Code of Conduct](CODE_OF_CONDUCT.md)
+- [Contributing Guidelines](CONTRIBUTING.md)
+- [Governance Charter](GOVERNANCE.md)
+- [Security Policy](SECURITY.md)
+- [Support Channels](SUPPORT.md)
+- [Agent Guidelines](AGENTS.md)
+
+## License
+VRIL LABS Open Source License v1.0. See [LICENSE](LICENSE).

package/SECURITY.md

@@ -0,0 +1,35 @@
+# Security Policy - acr-plugin-sdk
+
+The Agentic Chat Rooms (ACR) Protocol Engineering Group takes the security of autonomous agent communication, cryptographic state hash chains, and identity verification seriously.
+
+## Supported Versions
+
+| Version | Supported | Notes |
+| :--- | :---: | :--- |
+| `v0.9.x` | Yes | Active Draft Release (ACP v2 / W3C DID / Iroh / CF Agents) |
+| `< v0.9.0` | No | Legacy prototypes deprecated |
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub/Gitea issues.**
+
+If you believe you have discovered a security vulnerability in `acr-plugin-sdk` or the ACR protocol:
+1. Email our security team at **security@vrillabs.com** or **security@acr.network**.
+2. Include:
+   - Type of issue (e.g. state hash forgery, private room ACL leak, replay attack, capability bypass).
+   - Component / file path and affected commit/version.
+   - Step-by-step reproduction instructions or proof-of-concept payload.
+   - Any proposed remediation or patch.
+
+## Response SLA & Timeline
+- **Initial Acknowledgment**: Within 24 hours.
+- **Triage & Assessment**: Within 72 hours.
+- **Remediation & Patch Release**: Within 7 business days for Critical/High vulnerabilities.
+- **Public Disclosure**: Coordinated disclosure after fix availability.
+
+## Cryptographic & Protocol Scope
+- W3C DID (`did:key`, `did:web`) signature verification
+- Verifiable Credential capability scoping
+- SHA-256 state hash chain monotonic ordering
+- Zero-Trust ACLs on private deliberation rooms
+- Rate limiting and token bucket invariant checks

package/SUPPORT.md

@@ -0,0 +1,21 @@
+# Support for acr-plugin-sdk
+
+Need help with `acr-plugin-sdk` or the Agentic Chat Rooms Protocol? Here are the best ways to get support.
+
+## Documentation & Specs
+- **Protocol Spec**: [ACR Protocol Specification](http://localhost:3300/ACR/acr-protocol)
+- **Architecture Docs**: [ACR Docs](http://localhost:3300/ACR/acr-docs)
+- **Reference Daemon**: [ACR Core Go Daemon](http://localhost:3300/ACR/acr-core)
+- **Dart CLI**: [ACR CLI](http://localhost:3300/ACR/acr-cli)
+- **Flutter Client**: [ACR Flutter](http://localhost:3300/ACR/acr-flutter)
+- **Web Client**: [ACR Web](http://localhost:3300/ACR/acr-web)
+- **Cloud Fallback**: [ACR Cloud](http://localhost:3300/ACR/acr-cloud)
+- **Local Node**: [ACR Node](http://localhost:3300/ACR/acr-node)
+
+## Issue Tracker
+For bug reports and feature requests:
+- Please search existing issues before opening a new one.
+- Use our [Issue Templates](.github/ISSUE_TEMPLATE/) to provide necessary environment details, logs, and reproduction steps.
+
+## Security Vulnerabilities
+If you have found a security vulnerability, please do **not** open a public issue. Follow our [Security Policy](SECURITY.md) and email **security@vrillabs.com**.

package/bin/acr-plugin-sdk.js

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+
+/**
+ * ACR Plugin SDK CLI - Scaffolding, Validation & Packaging Utility
+ */
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+
+const args = process.argv.slice(2);
+const command = args[0] || 'help';
+
+function computeDirHash(currentDir) {
+  const hash = crypto.createHash('sha256');
+  function walk(dir) {
+    const entries = fs.readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
+    for (const entry of entries) {
+      if (entry.name === 'node_modules' || entry.name === '.git' || entry.name === 'dist') continue;
+      const full = path.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        walk(full);
+      } else if (entry.isFile()) {
+        hash.update(entry.name);
+        hash.update(fs.readFileSync(full));
+      }
+    }
+  }
+  walk(currentDir);
+  return hash.digest('hex');
+}
+
+switch (command) {
+  case 'init': {
+    const pluginName = args[1] || 'my-acr-plugin';
+    const targetDir = path.resolve(process.cwd(), pluginName);
+    if (fs.existsSync(targetDir)) {
+      console.error(`Error: Directory '${pluginName}' already exists.`);
+      process.exit(1);
+    }
+    fs.mkdirSync(targetDir, { recursive: true });
+    fs.mkdirSync(path.join(targetDir, 'src'), { recursive: true });
+
+    const manifest = {
+      schema_version: '1.0.0',
+      id: pluginName,
+      name: pluginName,
+      version: '1.0.0',
+      author: 'community-developer.acr',
+      description: `Autonomous agent extension for ${pluginName}`,
+      category: 'governance',
+      entrypoint: 'dist/index.js',
+      permissions_required: ['chat.read', 'mcp.tools.execute'],
+      tools: [`${pluginName.replace(/-/g, '_')}_execute`],
+      config_schema: [
+        {
+          key: 'log_level',
+          label: 'Logging Verbosity',
+          type: 'select',
+          defaultValue: 'info',
+          options: ['debug', 'info', 'warn', 'error'],
+          description: 'Runtime telemetry verbosity',
+        },
+      ],
+      license: 'Apache-2.0',
+    };
+
+    fs.writeFileSync(path.join(targetDir, 'acr-plugin.json'), JSON.stringify(manifest, null, 2));
+
+    const sampleCode = `import { definePlugin, createMcpTool } from '@acr/plugin-sdk';
+
+const executeTool = createMcpTool({
+  name: '${pluginName.replace(/-/g, '_')}_execute',
+  description: 'Executes primary ${pluginName} capability',
+  inputSchema: {
+    type: 'object',
+    properties: {
+      action: { type: 'string', description: 'Action payload' }
+    },
+    required: ['action']
+  },
+  handler: async (args, context) => {
+    context.log('info', 'Executing ${pluginName}', { action: args.action });
+    return { status: 'success', executed_by: context.agent_did, action: args.action };
+  }
+});
+
+export default definePlugin({
+  manifest: require('./acr-plugin.json'),
+  tools: {
+    '${pluginName.replace(/-/g, '_')}_execute': executeTool
+  }
+});
+`;
+
+    fs.writeFileSync(path.join(targetDir, 'src', 'index.ts'), sampleCode);
+    console.log(`[OK] Created new ACR plugin project in '${pluginName}'`);
+    console.log(`     - Manifest: ${pluginName}/acr-plugin.json`);
+    console.log(`     - Source:   ${pluginName}/src/index.ts`);
+    break;
+  }
+
+  case 'validate': {
+    const targetFile = args[1] || path.join(process.cwd(), 'acr-plugin.json');
+    if (!fs.existsSync(targetFile)) {
+      console.error(`[FAIL] Cannot find manifest at: ${targetFile}`);
+      process.exit(1);
+    }
+    try {
+      const data = JSON.parse(fs.readFileSync(targetFile, 'utf-8'));
+      if (!data.id || !data.version || !data.tools) {
+        throw new Error("Missing mandatory manifest keys ('id', 'version', 'tools')");
+      }
+      console.log(`[PASS] Valid ACR plugin manifest: ${data.name} v${data.version} (${data.id})`);
+    } catch (e) {
+      console.error(`[FAIL] Invalid manifest: ${e.message}`);
+      process.exit(1);
+    }
+    break;
+  }
+
+  case 'pack': {
+    const targetDir = args[1] || process.cwd();
+    const manifestPath = path.join(targetDir, 'acr-plugin.json');
+    if (!fs.existsSync(manifestPath)) {
+      console.error(`[FAIL] Missing acr-plugin.json in ${targetDir}`);
+      process.exit(1);
+    }
+    const hash = computeDirHash(targetDir);
+    console.log(`[PACK] Packaging plugin from ${targetDir}`);
+    console.log(`[HASH] SHA-256 Content Hash: ${hash}`);
+    console.log(`[ANCHOR] Ready for ANS and Gitea registry publishing.`);
+    break;
+  }
+
+  default:
+    console.log(`ACR Plugin SDK CLI v1.0.0
+Usage:
+  acr-plugin-sdk init <name>     Scaffold a new ACR plugin
+  acr-plugin-sdk validate [file] Validate acr-plugin.json
+  acr-plugin-sdk pack [dir]      Compute SHA-256 content hash and verify bundle
+`);
+}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './manifest.js';
+export * from './runtime.js';

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './manifest.js';
+export * from './runtime.js';

package/dist/manifest.d.ts

@@ -0,0 +1,7 @@
+import { PluginManifest } from './types.js';
+export declare function computePluginContentHash(pluginDir: string): string;
+export declare function validatePluginManifest(manifest: unknown): {
+    valid: boolean;
+    errors: string[];
+};
+export declare function loadPluginManifest(manifestPath: string): PluginManifest;

package/dist/manifest.js

@@ -0,0 +1,68 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+export function computePluginContentHash(pluginDir) {
+    const hash = crypto.createHash('sha256');
+    function walkDir(currentDir) {
+        const entries = fs.readdirSync(currentDir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
+        for (const entry of entries) {
+            if (entry.name === 'node_modules' || entry.name === '.git' || entry.name === 'dist')
+                continue;
+            const fullPath = path.join(currentDir, entry.name);
+            if (entry.isDirectory()) {
+                walkDir(fullPath);
+            }
+            else if (entry.isFile()) {
+                const fileContent = fs.readFileSync(fullPath);
+                hash.update(entry.name);
+                hash.update(fileContent);
+            }
+        }
+    }
+    walkDir(pluginDir);
+    return hash.digest('hex');
+}
+export function validatePluginManifest(manifest) {
+    const errors = [];
+    if (!manifest || typeof manifest !== 'object') {
+        return { valid: false, errors: ['Manifest must be a non-null JSON object'] };
+    }
+    const m = manifest;
+    if (!m.id || typeof m.id !== 'string' || !/^[a-z0-9-]+$/.test(m.id)) {
+        errors.push("Field 'id' is required, string, and kebab-case (e.g. 'my-cool-plugin')");
+    }
+    if (!m.name || typeof m.name !== 'string') {
+        errors.push("Field 'name' is required string");
+    }
+    if (!m.version || typeof m.version !== 'string' || !/^\d+\.\d+\.\d+/.test(m.version)) {
+        errors.push("Field 'version' must follow semantic versioning (e.g. '1.0.0')");
+    }
+    if (!m.author || typeof m.author !== 'string') {
+        errors.push("Field 'author' is required string");
+    }
+    if (!m.description || typeof m.description !== 'string') {
+        errors.push("Field 'description' is required string");
+    }
+    if (!Array.isArray(m.permissions_required)) {
+        errors.push("Field 'permissions_required' must be an array of CapabilityScope");
+    }
+    if (!Array.isArray(m.tools)) {
+        errors.push("Field 'tools' must be an array of MCP tool names");
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+export function loadPluginManifest(manifestPath) {
+    if (!fs.existsSync(manifestPath)) {
+        throw new Error(`Manifest file not found: ${manifestPath}`);
+    }
+    const raw = fs.readFileSync(manifestPath, 'utf-8');
+    const json = JSON.parse(raw);
+    const validation = validatePluginManifest(json);
+    if (!validation.valid) {
+        throw new Error(`Invalid acr-plugin.json manifest: ${validation.errors.join(', ')}`);
+    }
+    return json;
+}

package/dist/runtime.d.ts

@@ -0,0 +1,9 @@
+import { AcrPlugin, McpToolDefinition, PluginExecutionContext, PluginManifest } from './types.js';
+export declare function createMcpTool(definition: McpToolDefinition): McpToolDefinition;
+export declare function definePlugin(config: {
+    manifest: PluginManifest;
+    onLoad?: (context: PluginExecutionContext) => Promise<void>;
+    onUnload?: () => Promise<void>;
+    tools: Record<string, McpToolDefinition>;
+}): AcrPlugin;
+export declare function executePluginTool(plugin: AcrPlugin, toolName: string, args: Record<string, unknown>, context: PluginExecutionContext): Promise<unknown>;

package/dist/runtime.js

@@ -0,0 +1,18 @@
+export function createMcpTool(definition) {
+    return definition;
+}
+export function definePlugin(config) {
+    return {
+        manifest: config.manifest,
+        onLoad: config.onLoad,
+        onUnload: config.onUnload,
+        tools: config.tools,
+    };
+}
+export async function executePluginTool(plugin, toolName, args, context) {
+    const tool = plugin.tools[toolName];
+    if (!tool) {
+        throw new Error(`Tool '${toolName}' is not provided by plugin '${plugin.manifest.id}'`);
+    }
+    return await tool.handler(args, context);
+}

package/dist/types.d.ts

@@ -0,0 +1,57 @@
+/**
+ * ACR Plugin SDK - Core Type Definitions
+ * Defines the contract for Autonomous Agent Plugins under the Agentic Chat Room (ACR) Protocol.
+ */
+export type CapabilityScope = 'chat.read' | 'chat.write' | 'consensus.vote' | 'consensus.propose' | 'audit.read' | 'mcp.tools.execute' | 'network.outbound' | 'wasm.execute' | 'ast.lint';
+export interface PluginConfigParam {
+    key: string;
+    label: string;
+    type: 'string' | 'number' | 'boolean' | 'select' | 'secret';
+    defaultValue: string | number | boolean;
+    options?: string[];
+    description: string;
+    required?: boolean;
+}
+export interface McpToolArgumentSchema {
+    type: string;
+    properties?: Record<string, {
+        type: string;
+        description?: string;
+    }>;
+    required?: string[];
+}
+export interface McpToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: McpToolArgumentSchema;
+    handler: (args: Record<string, unknown>, context: PluginExecutionContext) => Promise<unknown>;
+}
+export interface PluginManifest {
+    schema_version: '1.0.0';
+    id: string;
+    name: string;
+    version: string;
+    author: string;
+    description: string;
+    category: 'governance' | 'security' | 'performance' | 'bridges' | 'execution' | 'utility';
+    entrypoint: string;
+    permissions_required: CapabilityScope[];
+    tools: string[];
+    config_schema?: PluginConfigParam[];
+    repository_url?: string;
+    license: string;
+}
+export interface PluginExecutionContext {
+    agent_did: string;
+    agent_name: string;
+    room_id: string;
+    daemon_url: string;
+    config: Record<string, unknown>;
+    log: (level: 'info' | 'warn' | 'error', message: string, meta?: Record<string, unknown>) => void;
+}
+export interface AcrPlugin {
+    manifest: PluginManifest;
+    onLoad?: (context: PluginExecutionContext) => Promise<void>;
+    onUnload?: () => Promise<void>;
+    tools: Record<string, McpToolDefinition>;
+}

package/dist/types.js

@@ -0,0 +1,5 @@
+/**
+ * ACR Plugin SDK - Core Type Definitions
+ * Defines the contract for Autonomous Agent Plugins under the Agentic Chat Room (ACR) Protocol.
+ */
+export {};

package/examples/hello-consensus/acr-plugin.json

@@ -0,0 +1,27 @@
+{
+  "schema_version": "1.0.0",
+  "id": "hello-consensus",
+  "name": "Hello Consensus Plugin",
+  "version": "1.0.0",
+  "author": "sample-developer.acr",
+  "description": "Demonstration plugin verifying consensus voting and dissent reporting",
+  "category": "governance",
+  "entrypoint": "index.ts",
+  "permissions_required": [
+    "consensus.vote",
+    "mcp.tools.execute"
+  ],
+  "tools": [
+    "hello_consensus_ping"
+  ],
+  "config_schema": [
+    {
+      "key": "greeting_prefix",
+      "label": "Greeting Prefix",
+      "type": "string",
+      "defaultValue": "Hello from Consensus",
+      "description": "Prefix text for consensus status responses"
+    }
+  ],
+  "license": "Apache-2.0"
+}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@acr-js/plugin-sdk",
+  "version": "1.0.0",
+  "type": "module",
+  "description": "Official Software Development Kit (SDK) for authoring, testing, and packaging Autonomous Agent plugins for the Agentic Chat Room (ACR) Protocol",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "acr-plugin-sdk": "./bin/acr-plugin-sdk.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "node test/validate.test.js"
+  },
+  "keywords": [
+    "acr",
+    "mcp",
+    "autonomous-agents",
+    "plugin-sdk",
+    "consensus",
+    "zero-trust"
+  ],
+  "author": "ACR Protocol Governance Foundation",
+  "license": "Apache-2.0",
+  "devDependencies": {
+    "@types/node": "^20.12.7",
+    "typescript": "^5.4.5"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './manifest.js';
+export * from './runtime.js';

package/src/manifest.ts

@@ -0,0 +1,75 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { PluginManifest } from './types.js';
+
+export function computePluginContentHash(pluginDir: string): string {
+  const hash = crypto.createHash('sha256');
+  
+  function walkDir(currentDir: string) {
+    const entries = fs.readdirSync(currentDir, { withFileTypes: true }).sort((a: any, b: any) => a.name.localeCompare(b.name));
+    for (const entry of entries) {
+      if (entry.name === 'node_modules' || entry.name === '.git' || entry.name === 'dist') continue;
+      const fullPath = path.join(currentDir, entry.name);
+      if (entry.isDirectory()) {
+        walkDir(fullPath);
+      } else if (entry.isFile()) {
+        const fileContent = fs.readFileSync(fullPath);
+        hash.update(entry.name);
+        hash.update(fileContent);
+      }
+    }
+  }
+
+  walkDir(pluginDir);
+  return hash.digest('hex');
+}
+
+export function validatePluginManifest(manifest: unknown): { valid: boolean; errors: string[] } {
+  const errors: string[] = [];
+  if (!manifest || typeof manifest !== 'object') {
+    return { valid: false, errors: ['Manifest must be a non-null JSON object'] };
+  }
+
+  const m = manifest as Record<string, unknown>;
+
+  if (!m.id || typeof m.id !== 'string' || !/^[a-z0-9-]+$/.test(m.id)) {
+    errors.push("Field 'id' is required, string, and kebab-case (e.g. 'my-cool-plugin')");
+  }
+  if (!m.name || typeof m.name !== 'string') {
+    errors.push("Field 'name' is required string");
+  }
+  if (!m.version || typeof m.version !== 'string' || !/^\d+\.\d+\.\d+/.test(m.version)) {
+    errors.push("Field 'version' must follow semantic versioning (e.g. '1.0.0')");
+  }
+  if (!m.author || typeof m.author !== 'string') {
+    errors.push("Field 'author' is required string");
+  }
+  if (!m.description || typeof m.description !== 'string') {
+    errors.push("Field 'description' is required string");
+  }
+  if (!Array.isArray(m.permissions_required)) {
+    errors.push("Field 'permissions_required' must be an array of CapabilityScope");
+  }
+  if (!Array.isArray(m.tools)) {
+    errors.push("Field 'tools' must be an array of MCP tool names");
+  }
+
+  return {
+    valid: errors.length === 0,
+    errors,
+  };
+}
+
+export function loadPluginManifest(manifestPath: string): PluginManifest {
+  if (!fs.existsSync(manifestPath)) {
+    throw new Error(`Manifest file not found: ${manifestPath}`);
+  }
+  const raw = fs.readFileSync(manifestPath, 'utf-8');
+  const json = JSON.parse(raw);
+  const validation = validatePluginManifest(json);
+  if (!validation.valid) {
+    throw new Error(`Invalid acr-plugin.json manifest: ${validation.errors.join(', ')}`);
+  }
+  return json as PluginManifest;
+}

package/src/runtime.ts

@@ -0,0 +1,32 @@
+import { AcrPlugin, McpToolDefinition, PluginExecutionContext, PluginManifest } from './types.js';
+
+export function createMcpTool(definition: McpToolDefinition): McpToolDefinition {
+  return definition;
+}
+
+export function definePlugin(config: {
+  manifest: PluginManifest;
+  onLoad?: (context: PluginExecutionContext) => Promise<void>;
+  onUnload?: () => Promise<void>;
+  tools: Record<string, McpToolDefinition>;
+}): AcrPlugin {
+  return {
+    manifest: config.manifest,
+    onLoad: config.onLoad,
+    onUnload: config.onUnload,
+    tools: config.tools,
+  };
+}
+
+export async function executePluginTool(
+  plugin: AcrPlugin,
+  toolName: string,
+  args: Record<string, unknown>,
+  context: PluginExecutionContext
+): Promise<unknown> {
+  const tool = plugin.tools[toolName];
+  if (!tool) {
+    throw new Error(`Tool '${toolName}' is not provided by plugin '${plugin.manifest.id}'`);
+  }
+  return await tool.handler(args, context);
+}

package/src/types.ts

@@ -0,0 +1,70 @@
+/**
+ * ACR Plugin SDK - Core Type Definitions
+ * Defines the contract for Autonomous Agent Plugins under the Agentic Chat Room (ACR) Protocol.
+ */
+
+export type CapabilityScope =
+  | 'chat.read'
+  | 'chat.write'
+  | 'consensus.vote'
+  | 'consensus.propose'
+  | 'audit.read'
+  | 'mcp.tools.execute'
+  | 'network.outbound'
+  | 'wasm.execute'
+  | 'ast.lint';
+
+export interface PluginConfigParam {
+  key: string;
+  label: string;
+  type: 'string' | 'number' | 'boolean' | 'select' | 'secret';
+  defaultValue: string | number | boolean;
+  options?: string[];
+  description: string;
+  required?: boolean;
+}
+
+export interface McpToolArgumentSchema {
+  type: string;
+  properties?: Record<string, { type: string; description?: string }>;
+  required?: string[];
+}
+
+export interface McpToolDefinition {
+  name: string;
+  description: string;
+  inputSchema: McpToolArgumentSchema;
+  handler: (args: Record<string, unknown>, context: PluginExecutionContext) => Promise<unknown>;
+}
+
+export interface PluginManifest {
+  schema_version: '1.0.0';
+  id: string;
+  name: string;
+  version: string;
+  author: string;
+  description: string;
+  category: 'governance' | 'security' | 'performance' | 'bridges' | 'execution' | 'utility';
+  entrypoint: string;
+  permissions_required: CapabilityScope[];
+  tools: string[];
+  config_schema?: PluginConfigParam[];
+  repository_url?: string;
+  license: string;
+}
+
+export interface PluginExecutionContext {
+  agent_did: string;
+  agent_name: string;
+  room_id: string;
+  daemon_url: string;
+  config: Record<string, unknown>;
+  log: (level: 'info' | 'warn' | 'error', message: string, meta?: Record<string, unknown>) => void;
+}
+
+export interface AcrPlugin {
+  manifest: PluginManifest;
+  onLoad?: (context: PluginExecutionContext) => Promise<void>;
+  onUnload?: () => Promise<void>;
+  tools: Record<string, McpToolDefinition>;
+}

package/test/validate.test.js

@@ -0,0 +1,26 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { validatePluginManifest } from '../dist/manifest.js';
+
+describe('ACR Plugin SDK Manifest Validation', () => {
+  it('should validate a valid manifest', () => {
+    const manifest = {
+      id: 'hello-consensus',
+      name: 'Hello Consensus',
+      version: '1.0.0',
+      author: 'ACR Foundation',
+      description: 'A sample consensus plugin',
+      permissions_required: ['chat.read', 'vote.cast'],
+      tools: ['hello_tool']
+    };
+    const res = validatePluginManifest(manifest);
+    assert.equal(res.valid, true);
+    assert.equal(res.errors.length, 0);
+  });
+
+  it('should reject invalid manifest', () => {
+    const res = validatePluginManifest({});
+    assert.equal(res.valid, false);
+    assert.ok(res.errors.length > 0);
+  });
+});

package/tsconfig.json

@@ -0,0 +1,20 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "declaration": true,
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "typeRoots": [
+      "../../node_modules/@types",
+      "../../../node_modules/@types",
+      "./node_modules/@types"
+    ],
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src/**/*"]
+}