@adea-ai/plugins 2.0.33 → 2.0.35

package/README.md

@@ -3,8 +3,10 @@
 The marketplace toolkit for AI agent plugin catalogs, published as one package.
 Parse marketplace sources, verify provenance against pinned Git trees, merge
 into a canonical catalog, compile provenance-checked static artifacts, and
-materialize per-harness installation plans — byte-for-byte reproducible from the
-same inputs.
+produce per-harness installation plans. The package does not install plugin
+files into a runtime or execute upstream content. Its materialization functions
+return in-memory package bytes or structured plans; they do not write to a
+harness or start an MCP server or command.
 
 ## Install
 
@@ -19,7 +21,7 @@ bun add @adea-ai/plugins
 | `@adea-ai/plugins`                       | Catalog compilation, artifacts, integrity, and last-known-good publication.             |
 | `@adea-ai/plugins/schema`                | Zod-backed versioned contracts and runtime parsing.                                     |
 | `@adea-ai/plugins/sources`               | OpenAI, Cursor, and Claude marketplace dialects, ref normalization, path and URL gates. |
-| `@adea-ai/plugins/harness`               | Capability-negotiated v2 installation plans and MCP launch descriptors.                 |
+| `@adea-ai/plugins/harness`               | Capability-negotiated v2 plans and MCP launch descriptors; no process launch.           |
 | `@adea-ai/plugins/publication`           | Where a published catalog lives, and the URLs that address it.                          |
 | `@adea-ai/plugins/portable-catalog`      | Offline synchronization and verification against a source lock.                         |
 | `@adea-ai/plugins/agent-plugins`         | Canonical package compilation.                                                          |
@@ -33,22 +35,23 @@ in lockstep; the subpaths above keep each surface addressable on its own.
 
 ## What's inside
 
-- **Catalog compilation** — merge parsed marketplace sources into one
+- **Catalog compilation:** merge parsed marketplace sources into one
   canonical, policy-checked catalog.
-- **Integrity verification** — sha256 content digests, SHA-pinned Git trees,
+- **Integrity verification:** sha256 content digests, SHA-pinned Git trees,
   and `verifyArtifacts` for published artifact sets.
-- **Publication artifacts** — `catalog.v1.json`, `catalog-summary.v1.json`,
+- **Publication artifacts:** `catalog.v1.json`, `catalog-summary.v1.json`,
   `categories.v1.json`, `compatibility.v1.json`, `sources.lock.json`, and
   `integrity.json` with deterministic serialization.
-- **Policy enforcement** — repository protocol/host allowlists and source
+- **Policy enforcement:** repository protocol/host allowlists and source
   trust classification.
-- **Harness materialization** — v2 installation plans keyed by stable instance
-  data, plus MCP launch and connect descriptors.
+- **Harness planning:** v2 installation plans keyed by stable instance data,
+  plus MCP launch and connect descriptors. These describe proposed file and
+  binding operations; they do not authorize or perform an installation.
 
 ## The catalog is not in this package
 
 A catalog snapshot is roughly 38 MB and changes whenever an upstream
-marketplace moves — several times a day. Shipping it inside a semver package
+marketplace moves, several times a day. Shipping it inside a semver package
 would force a toolkit release on every data change and churn every consumer's
 lockfile, so the catalog is published to the content-addressed `catalog-assets`
 branch instead. `@adea-ai/plugins` addresses those URLs; it does not embed
@@ -66,8 +69,8 @@ import { catalogSnapshotBaseUrl } from '@adea-ai/plugins/publication'
 - Same inputs, same bytes: compilation is deterministic and offline-safe.
 - Every artifact carries provenance; `sources.lock.json` pins the exact Git
   trees and digests a catalog was built from.
-- The compiler is a metadata boundary — it never installs or executes
-  upstream plugins, hooks, MCP servers, or binaries.
+- The compiler is a metadata and planning boundary. It never installs or
+  executes upstream plugins, hooks, MCP servers, lifecycle scripts, or binaries.
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adea-ai/plugins",
-  "version": "2.0.33",
+  "version": "2.0.35",
   "description": "Deterministic compiler for AI agent plugin marketplaces: schemas, source parsing, provenance verification, per-harness materialization, and provenance-checked static artifacts.",
   "keywords": [
     "agents",